Analysis

  • max time kernel
    56s
  • max time network
    36s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    17-04-2023 09:11

General

  • Target

    coreldraw_graphics_suite_2020v22.0.0.412/CorelDRAW 2020 Portable.exe

  • Size

    1230.3MB

  • MD5

    d20fe6aedcdde559c0bb9ee47434bf2e

  • SHA1

    38c6f84934a4b5aeb658475babdd0d8e2389ff67

  • SHA256

    4eea1a4d3c8a4c846a5010bacdc85cfc1ddac4030b58d4c0190cc91e6537e1c0

  • SHA512

    63f4e82043352c9af3efd8e987ad6b7583f5fb38263a0d0042b98620ad18e7275f01fe97997923e1bc6f4c91f5aec0dfa652230bb2a183f3f5b184d9f59a5f8c

  • SSDEEP

    12582912:8Ltn0JtwBuJYqN49D8O0u7eWOEUGdj1C+EpH41PH:m0J6gJrN49D8QeWOLGdpZdP

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 3 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • matchs PE files 64 IoCs

    Portable executable.

  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of UnmapMainImage 4 IoCs
  • Suspicious use of WriteProcessMemory 12 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\CorelDRAW 2020 Portable.exe
    "C:\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\CorelDRAW 2020 Portable.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:1376
    • C:\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\stubexe\0x6CA77DC97AB615B7\PsiService_2.exe
      "C:\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\stubexe\0x6CA77DC97AB615B7\PsiService_2.exe" /864A627C-C6B2-464A-AA13-25D62F282BD8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious use of UnmapMainImage
      PID:560
    • C:\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\stubexe\0x5A6C9B8D9B3ECC55\CorelDRW.exe
      "C:\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\stubexe\0x5A6C9B8D9B3ECC55\CorelDRW.exe" /864A627C-C6B2-464A-AA13-25D62F282BD8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of UnmapMainImage
      PID:632

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\SPOON\CACHE\0xD87EE3D2F833C7C1\sxs\Capture.exe\Capture.exe.manifest.__tmp__

    Filesize

    1KB

    MD5

    a42890c199533dfb776efb9c8b29490d

    SHA1

    d1b4f9e34c4fbacb9e84b615c98dd566d683dc3a

    SHA256

    95a84ffbc4cc8dad3800143c275226d219afe323f5dc4a674368fdd3a7f25087

    SHA512

    0c96d03ef04e890488a4f9c7882d750d0d59fd4b1fb3b8aa85112b40606ff0a36a0e6a545135859463291a0197eb279788c6f4e1fdace98dbe15e06195b55049

  • C:\Users\Admin\AppData\Local\Temp\SPOON\CACHE\0xD87EE3D2F833C7C1\sxs\Manifests\PSIKey-33001.dll_0xff533839c7a1f79c3c4922d911b75bb5.2.manifest.__tmp__

    Filesize

    396B

    MD5

    f93e0fb6283b5abbbb7335a0559b37e4

    SHA1

    ead4c3eea9397488519c11743cb80fc252324d20

    SHA256

    0d3c45d19e5e23832b3a633ccf8628dffe8a5dd9a7cd80bc9fbf4d8993f45374

    SHA512

    fa235dcfdfe3968b7c1a15e3fab6d164ad10f232e6e628881a02ba4f580c7f94e0465ee271e72ec00212b13ccabfe7888ae10b4cc1e061f33aa8fa5fccb372c5

  • C:\Users\Admin\AppData\Local\Temp\SPOON\CACHE\0xD87EE3D2F833C7C1\sxs\PropSchemaReg.exe\PropSchemaReg.exe.manifest.__tmp__

    Filesize

    407B

    MD5

    cd31072c8dcaac72719f9f6ab6e3a113

    SHA1

    e8e792a7350fef3135f3da4c4caddf9a0f972dc6

    SHA256

    9d55f3e57c4f1d1343ef0120fc7a083de97313dd54e59431189d93dbbd58962b

    SHA512

    233af3fe5cd05e3c14576b905e82a6a8f8e148c63e8a58c383936d0a9bd8de4bb03b79339109b55d393fff810fea5898d132e0bbdbb7b59c67946b26ebbc4415

  • C:\Users\Admin\AppData\Local\Temp\SPOON\CACHE\0xD87EE3D2F833C7C1\sxs\icuio59.dll\icuio59.dll.manifest.__tmp__

    Filesize

    379B

    MD5

    73102579f0cc3777bdd0ba96bab8d6f4

    SHA1

    08512e731aed9cdfeebf2e8fdc24a35ea23e3477

    SHA256

    03c937a5aba7fd7eab8ae959606ea4598e474da06b7ec63701255e7325a9e435

    SHA512

    e3928e509d852ae8f62b6378f984013345ddff9f5073e77323703acf20ca44bebff1753f09e7343cd948559bcafe766edce38e767efc5e7e7a5fd42c37be2e13

  • C:\Users\Admin\AppData\Local\Temp\SPOON\CACHE\0xD87EE3D2F833C7C1\sxs\manifests\CorelDRW.exe_0xF06B2813736F567B3B925B4CB3318AD0.1.manifest

    Filesize

    1KB

    MD5

    a42890c199533dfb776efb9c8b29490d

    SHA1

    d1b4f9e34c4fbacb9e84b615c98dd566d683dc3a

    SHA256

    95a84ffbc4cc8dad3800143c275226d219afe323f5dc4a674368fdd3a7f25087

    SHA512

    0c96d03ef04e890488a4f9c7882d750d0d59fd4b1fb3b8aa85112b40606ff0a36a0e6a545135859463291a0197eb279788c6f4e1fdace98dbe15e06195b55049

  • C:\Users\Admin\AppData\Local\Temp\SPOON\CACHE\0xD87EE3D2F833C7C1\sxs\manifests\PsiService_2.exe_0x16783D49B6931414BAD1B2368ADD9656.1.manifest

    Filesize

    396B

    MD5

    f93e0fb6283b5abbbb7335a0559b37e4

    SHA1

    ead4c3eea9397488519c11743cb80fc252324d20

    SHA256

    0d3c45d19e5e23832b3a633ccf8628dffe8a5dd9a7cd80bc9fbf4d8993f45374

    SHA512

    fa235dcfdfe3968b7c1a15e3fab6d164ad10f232e6e628881a02ba4f580c7f94e0465ee271e72ec00212b13ccabfe7888ae10b4cc1e061f33aa8fa5fccb372c5

  • C:\Users\Admin\AppData\Local\Temp\SPOON\CACHE\0xD87EE3D2F833C7C1\sxs\manifests\Qt5Core.dll_0xB969447CF5845A7E079A48942F78B419.2.manifest

    Filesize

    379B

    MD5

    73102579f0cc3777bdd0ba96bab8d6f4

    SHA1

    08512e731aed9cdfeebf2e8fdc24a35ea23e3477

    SHA256

    03c937a5aba7fd7eab8ae959606ea4598e474da06b7ec63701255e7325a9e435

    SHA512

    e3928e509d852ae8f62b6378f984013345ddff9f5073e77323703acf20ca44bebff1753f09e7343cd948559bcafe766edce38e767efc5e7e7a5fd42c37be2e13

  • C:\Users\Admin\AppData\Local\Temp\SPOON\CACHE\0xD87EE3D2F833C7C1\sxs\manifests\Qt5Gui.dll_0xB2998A759AE6400E917E5E875C4926A6.2.manifest

    Filesize

    379B

    MD5

    73102579f0cc3777bdd0ba96bab8d6f4

    SHA1

    08512e731aed9cdfeebf2e8fdc24a35ea23e3477

    SHA256

    03c937a5aba7fd7eab8ae959606ea4598e474da06b7ec63701255e7325a9e435

    SHA512

    e3928e509d852ae8f62b6378f984013345ddff9f5073e77323703acf20ca44bebff1753f09e7343cd948559bcafe766edce38e767efc5e7e7a5fd42c37be2e13

  • C:\Users\Admin\AppData\Local\Temp\SPOON\CACHE\0xD87EE3D2F833C7C1\sxs\manifests\Qt5Widgets.dll_0x0B2A79BC2D4EC25E58F849E001887728.2.manifest

    Filesize

    379B

    MD5

    73102579f0cc3777bdd0ba96bab8d6f4

    SHA1

    08512e731aed9cdfeebf2e8fdc24a35ea23e3477

    SHA256

    03c937a5aba7fd7eab8ae959606ea4598e474da06b7ec63701255e7325a9e435

    SHA512

    e3928e509d852ae8f62b6378f984013345ddff9f5073e77323703acf20ca44bebff1753f09e7343cd948559bcafe766edce38e767efc5e7e7a5fd42c37be2e13

  • C:\Users\Admin\AppData\Local\Temp\SPOON\CACHE\0xD87EE3D2F833C7C1\sxs\manifests\icuin59.dll_0x27DA9F9A5D85B81A2BD186ACCB170675.2.manifest

    Filesize

    379B

    MD5

    73102579f0cc3777bdd0ba96bab8d6f4

    SHA1

    08512e731aed9cdfeebf2e8fdc24a35ea23e3477

    SHA256

    03c937a5aba7fd7eab8ae959606ea4598e474da06b7ec63701255e7325a9e435

    SHA512

    e3928e509d852ae8f62b6378f984013345ddff9f5073e77323703acf20ca44bebff1753f09e7343cd948559bcafe766edce38e767efc5e7e7a5fd42c37be2e13

  • C:\Users\Admin\AppData\Local\Temp\SPOON\CACHE\0xD87EE3D2F833C7C1\sxs\manifests\icuio59.dll_0x2D80B9DC2301886483E236EF3CAE2D64.2.manifest

    Filesize

    379B

    MD5

    73102579f0cc3777bdd0ba96bab8d6f4

    SHA1

    08512e731aed9cdfeebf2e8fdc24a35ea23e3477

    SHA256

    03c937a5aba7fd7eab8ae959606ea4598e474da06b7ec63701255e7325a9e435

    SHA512

    e3928e509d852ae8f62b6378f984013345ddff9f5073e77323703acf20ca44bebff1753f09e7343cd948559bcafe766edce38e767efc5e7e7a5fd42c37be2e13

  • C:\Users\Admin\AppData\Local\Temp\SPOON\CACHE\0xD87EE3D2F833C7C1\sxs\manifests\icuuc59.dll_0x4C6E8602230C49A9BB2B6AA0DB866942.2.manifest

    Filesize

    379B

    MD5

    73102579f0cc3777bdd0ba96bab8d6f4

    SHA1

    08512e731aed9cdfeebf2e8fdc24a35ea23e3477

    SHA256

    03c937a5aba7fd7eab8ae959606ea4598e474da06b7ec63701255e7325a9e435

    SHA512

    e3928e509d852ae8f62b6378f984013345ddff9f5073e77323703acf20ca44bebff1753f09e7343cd948559bcafe766edce38e767efc5e7e7a5fd42c37be2e13

  • C:\Users\Admin\AppData\Local\Temp\SPOON\CACHE\0xD87EE3D2F833C7C1\sxs\omnitracking.dll\omnitracking.dll.manifest.__tmp__

    Filesize

    631B

    MD5

    441c070b9ff2044c15dc36cc07200b9a

    SHA1

    b7d85dff06380d788f2c6027b9278a2bd0707267

    SHA256

    ce419f9c607ce24f86f531ea057d08439588b5b5a130837635665c2bcc71f941

    SHA512

    333d05a640b5dcb3c138448dbbaef9d8015e4afc57493d0f27b77659262a85a9a444eadce9e24cc6b5ec7b72476644f03e1ef7173f7fe1a1a0c727f82a16aa3e

  • C:\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\meta\@PROGRAMFILESCOMMONX86@\Protexis\License Service\PsiService_2.exe.__meta__

    Filesize

    32B

    MD5

    4be180f1128a17323724a4c1de9a1d22

    SHA1

    ea603ab10deaf6f6869b0ed7d0a6ef5c094d7285

    SHA256

    ba45879385ae3a3a7fa9aeeb74123d138ee259b9e94c6d93eff637089184ec7f

    SHA512

    35f997c44ab19a8120794cbd9f06e809660a6fe8e8bfd0ce9e1ca256476365e01351b7d4ba5f8977a828ffcd2cf1ad8992e5b315c352ce338762627f93290b29

  • C:\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\meta\@PROGRAMFILESCOMMONX86@\Protexis\License Service\PsiService_2.exe.__meta__

    Filesize

    32B

    MD5

    4be180f1128a17323724a4c1de9a1d22

    SHA1

    ea603ab10deaf6f6869b0ed7d0a6ef5c094d7285

    SHA256

    ba45879385ae3a3a7fa9aeeb74123d138ee259b9e94c6d93eff637089184ec7f

    SHA512

    35f997c44ab19a8120794cbd9f06e809660a6fe8e8bfd0ce9e1ca256476365e01351b7d4ba5f8977a828ffcd2cf1ad8992e5b315c352ce338762627f93290b29

  • C:\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILESCOMMONX86@\Protexis\License Service\PsiService_2.exe

    Filesize

    270KB

    MD5

    16783d49b6931414bad1b2368add9656

    SHA1

    8f52ca93479a1c38ee0539393890548baeb2bbf2

    SHA256

    596f28b0f1dbc8ac3a43fe00a890af088ca837da3bb227411fd76c4d27bf27e9

    SHA512

    3dd8820623a5449c66639134f12ee63f46c94cda9ff655dcdb0354db4ab59c5bfbfc4c86cc6e6d28229deae31410458ea232efbc3697dd4b6b531d0dfd79909d

  • C:\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILESCOMMONX86@\Protexis\License Service\PsiService_2.exe

    Filesize

    270KB

    MD5

    16783d49b6931414bad1b2368add9656

    SHA1

    8f52ca93479a1c38ee0539393890548baeb2bbf2

    SHA256

    596f28b0f1dbc8ac3a43fe00a890af088ca837da3bb227411fd76c4d27bf27e9

    SHA512

    3dd8820623a5449c66639134f12ee63f46c94cda9ff655dcdb0354db4ab59c5bfbfc4c86cc6e6d28229deae31410458ea232efbc3697dd4b6b531d0dfd79909d

  • C:\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\stubexe\0x5A6C9B8D9B3ECC55\CorelDRW.exe

    Filesize

    31KB

    MD5

    998ca8e37d51fb437dfe845ab3e80c8b

    SHA1

    846fbc2367a4a446dc9978c9b92fd3c242e7bae6

    SHA256

    3e4359ce1fefc1087992bca05e49e5ecd04296841b5bf6e6c242d087b4078baa

    SHA512

    25cf76860b5cbc4edc51f87ee1727528a72ed7890cf006b82299caeccbc955ae0183d4e7b1e941bb4e9c54b2335e3ac0e97d5fde719c0eed2115e81f3e47f2ac

  • C:\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\stubexe\0x6CA77DC97AB615B7\PsiService_2.exe

    Filesize

    28KB

    MD5

    8262714f213af221e99362c47439ff26

    SHA1

    3b80c450b27b7f52c7f0f10ba98b250285ce20a1

    SHA256

    37c6320694610f194b5c7f16d8806ecfa7c50d724eab0ca304cea3358affe9e7

    SHA512

    45fc4cb36797e95fc4d2bf79525d33a2d68241dc7b62b6fc78670e2f5cdada3b51b67acc792128c715f10290a6dba436fd3dc6ac326f74ce9a02188050a08506

  • C:\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\xsandbox.bin

    Filesize

    16B

    MD5

    ec3d19e8e9b05d025cb56c2a98ead8e7

    SHA1

    748532edeb86496c8efe5e2327501d89ec1f13df

    SHA256

    edb7be3ef6098a1e24d0c72bbc6f968dea773951a0dd07b63bad6d9009ae3bf4

    SHA512

    175fb8432472b6795bb5db0eba61bc7b57331720825df5b048f3086815ba844df4f7e83e42ff9e8fe5ab01700675a774cb916677953d6e0088ffbf1fa2775349

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CDRCRV.dll

    Filesize

    1.1MB

    MD5

    c8310288e05a9477dc7e63e5e1fbbd01

    SHA1

    3be544336598e90476ba5f97944d270fb152ed3b

    SHA256

    e6dcf4f6aaea99006e9788d7a461e00748a42d39b7f3c717d758635744d1ad78

    SHA512

    a374c16229a3c83cceefd4ade006606d54cfc1e1989b7c8eca10f92f51207b03ccf6b2349347b645674395f5ab1de3bfa56ab611b715cd4a86f552e7cbcda311

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CRLCTL.dll

    Filesize

    952KB

    MD5

    c5b683997917869dd5d2a47d64a09de7

    SHA1

    0fe0a0b3402c45b18c2459237f873a52ade54551

    SHA256

    6f7f57e320beb316dc10e353589c448a5d0dfaa91663e3f5301c5228ad97cf5b

    SHA512

    40dfd340613f0724ac7022b7796d2426c054ab52bb1d980c42d2086af3eba2cf735901ffc5221afb00fd4ef2e200874b166c84e73e14220a878a5dfd188c53f9

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CRLFRMWK.dll

    Filesize

    8.4MB

    MD5

    f041a83aff38466f0fc059a414ebde42

    SHA1

    75abe8888a12a4040e3f430c59e370d1c5e96510

    SHA256

    50500a61879bed04a4453abf2f6c67ce041b096ccf9240d672c24d1df99320dd

    SHA512

    d1b9f4e89a1f7b02182cecc8db5e7662227c7d75cc24a4fe03451ba98de377e976f0c0a1fc41dfbde619cc6afa7beaee65dc8c7e77715bf9b9bdee2ea88ee9b9

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CRLUTL.dll

    Filesize

    769KB

    MD5

    f702f5a4c52d21af533e291406536d58

    SHA1

    93a3aa1fe828cfea2eac0cbae54a6be34cf4a0e1

    SHA256

    49528e4dc534dc8af71fb62c32a66c0d58251fb91540ad318e83b28b67f115f8

    SHA512

    f56c4486122e1dbda09e783839544efd164db04215c01c4d682ec063507536e3fba69b23bea3883d5825ea34a471421afbfa6845675b446ec541d6aca8c7cf14

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CRLWEB.dll

    Filesize

    118KB

    MD5

    2da1bccd12209fa199952350ecc655c5

    SHA1

    9148e1bd50d4c127fe4f8bd05e3c63d50d5a2906

    SHA256

    4c581ee4ea08efdba966b3f2427dd99ac955b6988e7dd34333d464aabb5361ce

    SHA512

    fa96c65473369a4da27570a24e88853db6811cd3f378d90d5bffecd0f611806fada8ac9f2391f3201e984ebb1e3f173f30b780fb45593c81d9fabf489cb93695

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CdrContainer.dll

    Filesize

    847KB

    MD5

    0a07601081f76c95fa36d52dac9e7f94

    SHA1

    f6329549d0d4999aa9501405f27698ce3bc09a46

    SHA256

    eb25aad1f624993aa651a183ba355eb560e52c6524333df8a169a45f2b343a2d

    SHA512

    be78b3052a58630adaa00cec5285ced69c9ace8a40984cd2e97306997b537015bfeba935156fa7827f18060ae709749d22bc21451aa27f7f9a76dadf6af9ac70

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CdrCpr.dll

    Filesize

    404KB

    MD5

    54c24bed6b6822ecc3899a6e7cc39e65

    SHA1

    5c3f3cb51e2a1b68dcc2764d22f90c61bb8743fd

    SHA256

    6d586966540c6efea094caf007253993f902bf0f4d3181aa99dd3769a0378abd

    SHA512

    12a920638f89f133458ef4a5ba561d2b79be477917e595df42da98cb4ec5c2f79650dda6c73d3d55ceadaf9991356d3e8b34c575fdb339f62a5f67854b78dcd3

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CorelDRW.exe

    Filesize

    360KB

    MD5

    f06b2813736f567b3b925b4cb3318ad0

    SHA1

    283f921935ebc6e17161b2b2fe4add6e3214bc1b

    SHA256

    43e414415f3e13dc866c48f8db66f0a4fd296eded59de4a66d4d4959490f6406

    SHA512

    5e174d2059da5d179aafbba159c08e4bf62fd6cab5fd3812b9cd6c495334ce3ad683b3dadc5dc8e0080b0b753eb17d3a13ba2d1f80c6f0fd8e2d2c75e5619860

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\Crl2D.dll

    Filesize

    3.9MB

    MD5

    a2868e4522f5b37c426e9fcd7b104695

    SHA1

    5afe3eaa489301c916a77ee2dcf95bca9b4df077

    SHA256

    a84c03761be530119b4a064dfe11d862c2b8e66fa36a4fddc65ed52c5e28d4a4

    SHA512

    4219d1b961eac21fd682b9917c6bffefa8b61ea79a26f6fe9d67f802e6c59603dad3aa092a9dce114971e519a79bce71bb3bf76c6a8113f03140bab99300ec67

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlBoxInfo.dll

    Filesize

    18KB

    MD5

    c216cffadab01ca505186408e17dfb52

    SHA1

    9dee44031f7c6b77653bfc097a30fc06a282c955

    SHA256

    a1c4b963b6427bc75230a7e710aaa056ab18ef458432094096207be7c4c97234

    SHA512

    98830e83957223244ea92c98425bf5afc96357ee6fa98ea7125b9861d0dec59a116d1795d89f684c97d8156857a0b6997906b9f454728780bfb6e068d61ce3dd

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlCQL.dll

    Filesize

    296KB

    MD5

    19ac50b139edf79b10e8f190efb36003

    SHA1

    8a16a417992949b785607e8603d460747eb2aac9

    SHA256

    e77dad4b231545c6ea78c74eb46db51c2d13aa2d78d4213fcc233635761f9470

    SHA512

    c7d32f1980f86748e1b31d907fe797e3f3aa47d97d0cb112579299663642b3494be8f40a4259051344beb6bfd3a2f02175a09431a4a4c6fa6ba7af81430ce8a2

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlCharacter.dll

    Filesize

    2.7MB

    MD5

    d2a7b56529de4ade86a3b906188d5ba1

    SHA1

    21fb987fc07a8d1c0738e21f4ce5753bce5f672f

    SHA256

    3ae1e618b27ed6aed07d4af545777a87b91d97ab5f76412bf1cb6d73e11862c1

    SHA512

    fd5637a5bdfcde214db4558016efd52812f5785a689ee83a4ed935838f214ed4b37c9d4745433ade9b91dc4960bf786a2979806ed7b4254afbaf09db5768f97f

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlClip.dll

    Filesize

    98KB

    MD5

    182b5385b3521df7a79799d4878c4f16

    SHA1

    5966eb083b14e4f51de11065e98927240ae3f27e

    SHA256

    1883b815179b22012d5a0880dd54ade1fac5e389c51b7ecd69290f5be1627778

    SHA512

    ed628f723687aa4aefe42269c64a90622f81ccc7e694e25ce64c64d18376e6f52d2b9d6dbba6ed3e08acf551cf327c790cb66881a4c3b40261dacef9aead7fa5

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlComments.dll

    Filesize

    178KB

    MD5

    8c4a3fe5a33c8b84c81e53a7e8b9a419

    SHA1

    ff41e4642f9e3cbe98de110cca5d74339ee48fe2

    SHA256

    262bfbcf437ac94a31658cc8418db8c283cc1b0e4cf831e53e2960c968241ace

    SHA512

    adef76018556d974dc939915a98c67e56f000307ff437bb59ba6ee96222aff1b29e90a6afa2dcca0f6a80e0c290475e84f9863b7deb07c305cb7134d1b9b2da8

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlComponent.dll

    Filesize

    76KB

    MD5

    68957cf90600646ebaf2ef4e3885d236

    SHA1

    a243e6a0c29b7ec896217571da7cd02b4a71525d

    SHA256

    ef55bccdbbbaa488f08ae926bb401a3b999697b1c3ca449f198f64d5b942607a

    SHA512

    6734f366c8246bf545b5cff39c43dd3ee105e1560709aaf8cdcb1748451c3d4dcf5fb570e265b4ea6d21378ca6b9e583cfcf8219821d540da89a7fe1a261cf96

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlConfig.dll

    Filesize

    254KB

    MD5

    3af1c4c0aae64db29231823bb5e72af2

    SHA1

    34a404ce44370f73926ec4c6127161517864ebf1

    SHA256

    3519fe96044820e2143c92fd2bf27ebe5601bd16c9f06eec592ad75787617f1b

    SHA512

    1793f4bec150c4594ab2c4bb8dc4786bc0e3078c4614de9b633823c8e23e318bd684427c4484d3f3ef554522ee3cd2b07c7f43d8f212de872bf7b287f634042d

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlFeatureManagement.dll

    Filesize

    359KB

    MD5

    da1b0e51c775c3e29a26cb2dca738158

    SHA1

    bb7ca89b7aa0a4a71e16b3761331bd2f901fdccd

    SHA256

    de1c08a0863f3f64f7e6c9b3d8ec1792fe42c0d64b828f195b9c79aa980d1c9c

    SHA512

    793c16112221752cee6c4495d45128b5ba0932cf901786aec253705bff7cb5c939a3bb5d44bef12fb548693a6a3a97db2bd0a7813c7293e6948258050c341e88

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlFrmCommon.dll

    Filesize

    3.9MB

    MD5

    a11d8d9ed55a10b45f6b7231c8ff6ff0

    SHA1

    5658dda4086ddcfb20aeeeea7a761c56a5a9df98

    SHA256

    24932d38bc3a26fa73c450b595265dc0164efd74aa7dbdfe5ea1030089e1a107

    SHA512

    d8decc20ec0a8eb0bc015000b8aff850a743f82c6dc0dfe22987488296a281c8a0c55f718035669dca8c6fce1e005ac21bd39fdb41842c525243697e3af10e5f

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlIcons.dll

    Filesize

    161.4MB

    MD5

    04344eb74beb49aa26bf9e4270616cc2

    SHA1

    44a30f66f4e420d5edd2d14c52ba0feb647ae34c

    SHA256

    d65d60c7f15642eb083478b807048971e6f1a12239fa0bc85a75b26a42a2dfef

    SHA512

    36ae801752de620fa285da762bac90eb43943d217176118399b0a80aa0097740c63710757db22009da83452176f34a0038ac150e8ecc924938f383455a783572

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlInternationalization.dll

    Filesize

    44KB

    MD5

    ba0f5e8421fd2cc109e0474d2d18e9ff

    SHA1

    87ff01f89b85b8154b7ed87c59dd1cf42a6a8451

    SHA256

    0fb376853808907b1832925823cc0ff7baaf036ec8416b6a29720189d5573b99

    SHA512

    2ca0c7cb32aef247f4a364a382e02d71bce8e489f37785ea7760ac1e4fe8db9d608e85a18845369bf0e894cf31cee27576b27644f136dde0c8c8e00aa8178424

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlMath.dll

    Filesize

    253KB

    MD5

    863872cc80d11c2aae7327f6dad9a9fa

    SHA1

    ad3468ed627004911c81ee232e1bc931ab8f49db

    SHA256

    4b4de6b4e0b005a1ace2ed557936a5a6a062f714f266c1443fa08dd6cdd90dfe

    SHA512

    dd3ec8b8f190eda82b14ced66e5bd86a625b0ac1784a5aacb303a308c424b314dc182472ea47c3ff5615eed657e36dc1c9d1268d7af5c7ed2121b6513865f18a

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlPlatform.dll

    Filesize

    178KB

    MD5

    acb4f49f017a2386133d263f5614fab4

    SHA1

    546b48794d8912607387d45ce83a9b6b9b6d7c36

    SHA256

    2dd46cce790c0f48cc46925190c1bcf7b7bc31e43d4ba5f11df5c8d5c9fe6ad6

    SHA512

    84a135659683cbf093bced88cd70e92311bc964589f9b92985a31259604f241bee37c26c6d02cdcdc204e7ecc3ce42036f9d9e529b7047aa2ab5f06fe9d1f242

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlPref.dll

    Filesize

    111KB

    MD5

    6aca6895ded8e3edc3ba9f011a8e2859

    SHA1

    be1d77613054f1a94fdb151a6432fd8d7e4cdd97

    SHA256

    f6c94aa698a6c5be8dc0332b704ba3aa984297c289fc58b6447f4c0422411a57

    SHA512

    c37bca9cdeed5e3194ed57fc978627d428276a708d9ebda33f910698b21756755842652fb9c4221f8a336c3f6d1bccbc9fb4d7097a4b7a846e681c0087c55302

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlQt.dll

    Filesize

    4.5MB

    MD5

    c0e74f5eb3d482d0d2c89232bc06989b

    SHA1

    52f1836273590dbb1b1e72ae38e40aef2686c0e9

    SHA256

    76a1027cca8615e8c8fd1ebc3a1decba358db4d96dd4a05fd04647374cbe1357

    SHA512

    a8baac83822fada66ce5435f50bf83c222d0140345bbb2e83516b451ccc014c013cd1bbe70994ec14e894c8522979848dcb7d3cfe3107d6dd331f4962b08c579

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlResources.dll

    Filesize

    1.5MB

    MD5

    178e9512b1defbc234535d48f0f352af

    SHA1

    74ae898885f49b01682e347cac4cb0fc48f37040

    SHA256

    a364f61648d68ed5c8aed5ffce29d286de2a122520eace4577b69537ea6f4d51

    SHA512

    0f2e3ee7f566afa467001ef36e0a19202e5dc01d0f6014c935cef1b9ebee2ea23d058ee2a510b687953ab350ff70050297577a9decf78f3e4afaad1472e3af25

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlSCI.dll

    Filesize

    51KB

    MD5

    b62be39d03f6c40c5d9ab1da6efab800

    SHA1

    6b65445147140ac24a75205ac2f2190130a6f139

    SHA256

    b68952f88f070522ba6979b675718c05189caa1d7e0e87c6682b3c0d4546bb55

    SHA512

    0bf2b67b686c8d0f5e5116e2833c54639c9ca2e47abfadf22d5d292cc37c8048c780c2ed87928141288a7a47c18eb28422ca338e64f70b6b9329c062cc594eea

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlUtf.dll

    Filesize

    64KB

    MD5

    36b5feb982aca8a727d7b4d13c57cb21

    SHA1

    0f417fdc6bb1ec4c283f45583ca4c8844cc7e193

    SHA256

    84ffcf65f9af8d1a028874f6f560334d7cf00de4f531646754ff0b3facf9fdb1

    SHA512

    b81fe43333521dfb88aa5cc5d106e98ce852e8c3501ce7ba3fc57c3dd5b26b9c376007f21dd02d16c4c9042107822b479f0278ffce5e46783625d8e7806348be

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlUtils.dll

    Filesize

    1.7MB

    MD5

    c1a83baf2142696a7227156e2920235c

    SHA1

    8df6b91a48a8d81a57a53359cebcb8d6f793107a

    SHA256

    c2f058c0b466373e25ca45d038cb8b8639667a9280d98f62e39c3133ef60cec0

    SHA512

    a524a2b79298c366405f26bcc47b5a0eb33e0851581f335a2b7560dc355e6211289e9141a414d9973dbfd3457272d934b111e37566df60d48c43cbc9f2712ec1

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlUtlUI.dll

    Filesize

    238KB

    MD5

    cee16eaaf1d55134885a5b776f472520

    SHA1

    a5611ebafce75114345092a5a75fc03459fb64a5

    SHA256

    473e4d35d9e556169ac74956b74b4300ca44ff0111ef7f762977b64ff63bd8ca

    SHA512

    f066b1e9d40e119c0f12cc89d6b7feabd7a45e71cea12631d7cb01cb482aa71bb3d3c1c97c4f46a307dce6cdea5f072b13e9f6c22174239cbac68b8d22d2cf88

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlWin.dll

    Filesize

    4.1MB

    MD5

    ac3306084c49c7e73fcb138e636ac647

    SHA1

    d0ecdda76cfeba197ab9493c8fd401f75989c11f

    SHA256

    aabfa14e1edbce80f8e3ed78cef29a1e08fd6a82a58d226c6b9e6235b71e199d

    SHA512

    43a8120e400aa375d9e950736efb74e110f74b8c611a4a309c0de274c18f21e489724b7d70039869551de7ae61db44806b5e793c6ddf4fc94e22f68f1c2aa0ef

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlXml.dll

    Filesize

    143KB

    MD5

    3d9e6cc98be33856ac60a5cf5ba2225f

    SHA1

    6077c450a92e565ebfeaaeabeffd539d4b30a515

    SHA256

    d8baa16b9ff0ae95ca6fe8cd376231916880b215982714b8aa87c9dbe1d192a7

    SHA512

    c6ee5bdc83a69c33a57aea54821615ba596e8769b75fe7949f09455aaa1f00fbeb6667f96b8ffcaf427080f86af71cff7b249d91de3f3dbd4185a0fea3c52665

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\DataBinding.dll

    Filesize

    106KB

    MD5

    759584fbe788eae7e52bb5843011d1cb

    SHA1

    5a98d05584fa71a346ab217f4ad39483287da806

    SHA256

    32fdd0d5183d1cdc5009f8cf6ac55c9a4294cb56a8b928f7f11751a9d6ec9862

    SHA512

    d22464323c458d1df155d5a1a5d15aa8069b6800db7d467a0db71c934a88f85e445f4e50fe3de7cf288f8292da9e2568b54675c1c2561fb3af3c9a4a828cf0d9

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\LocalizedStrings.dll

    Filesize

    28KB

    MD5

    49c3e16f8d4e9e7c9281a69cdc763bd9

    SHA1

    485da9f2b956dfb899b730a2e27419ca0d1cb3c2

    SHA256

    237ccd671bd9cfff4c858bd38986f573fa4104a6d9066e6280aec231d085e85b

    SHA512

    d03cf0a7422764c1fe0057887b15e3f49583b72e26b39f2d12a016dfc12cbd20fe557a0549dee2973d451f64cb554f875e8477ab86d87a92fb281b054fc4a610

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\Qt5Core.dll

    Filesize

    5.9MB

    MD5

    b969447cf5845a7e079a48942f78b419

    SHA1

    2d2e8dcb4f34b0451e56f7d197e258e35dc9c1e1

    SHA256

    805c67dcb25cfd5afbfe8689c7869dffe00b70d8bc95b6f8b827da514999ded8

    SHA512

    d7911dc755708ae346cbf4d8c36f45b666a55cf7deb6401402a4cbfd789d16891d118b134a58167dad1530dcbdfffc094932005fb062a55b93856945edc9fc3a

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\Qt5Gui.dll

    Filesize

    6.2MB

    MD5

    b2998a759ae6400e917e5e875c4926a6

    SHA1

    d8df42e8649e22e05bc27eaf6afb3627e50faff4

    SHA256

    679ea86bad32bf452112cdf6e0a1e0e85c8cb2cb1b6367c497656e9ea12ab3cc

    SHA512

    28ce2870d07ed3ee7e9ff04c6e9fd95a4460e74193d69c82d86f2993989070f0b2b9095b9c0d2ced44b5d61707b8dcd906d211a87b3c9afdf833a269ae01d0ad

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\Qt5Widgets.dll

    Filesize

    5.3MB

    MD5

    0b2a79bc2d4ec25e58f849e001887728

    SHA1

    4c2272310dd3a225ba74aa62a49da92cca61a713

    SHA256

    7159bbf1f8878cddadbd0c115b6833542e023766c362d189cefae1c9ca19d46b

    SHA512

    35537eaa454963187be75aabf6735c1b98b8d662d0256feb12383ea00dc529bda6b73ec4586428b4eeb08320643b7ffae1b441cc35bd4166c0cb4b7cb5d3985f

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\VGCore.dll

    Filesize

    13.7MB

    MD5

    da041cb0ca07eef5a686cf811aad1f92

    SHA1

    b61c412aba768c497ccd0fc155d3959bbcc34a45

    SHA256

    d9953b2703ab2bd990461dd11e4ccf8b08a543860e2b75572f779a0e75344eb5

    SHA512

    40a0c103d3b84376c14f3259e2ebaf3bc55efca56db8eb2c37f01ef9bf38a1e03bb65963a139c8914803eee8888bff08c94e6f9483a11283a1b585f6668f1d50

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\WindowPainter.dll

    Filesize

    6.0MB

    MD5

    20cbf2d59665b99578613fe3faa976b6

    SHA1

    d1c8c96a572ec110aae138cfffc85c8372b521c7

    SHA256

    ee2d8f3249326554b3d66244fa31537a2552d86adbb69b796e999c2a8455b07a

    SHA512

    8994f3bb4d1905174829809fdaec9bdf22206c57e7bc7dbf061025da05dea4d2db185b8062277b6cd5427460853786157c5ba25cf1f08eb1ac25d982fac57334

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\icudt59.dll

    Filesize

    25.1MB

    MD5

    771b3dc897351d0d212b0d07c4d89a67

    SHA1

    fa2217d2b98c272b6b8323682e54cef81177d16b

    SHA256

    8667fdcb6c53ec2573c8f77d4828bdbf74cf2c1566916fa9564f45ce06e5a1f2

    SHA512

    e525fce640a40d21e93aa36a033116867a12e1ce953cba23ebbf7897c022a600716daf7629d44e54fc776c80dbbc7bfe7a2f032d66214365da41ba2f06b7b21c

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\icuin59.dll

    Filesize

    2.0MB

    MD5

    27da9f9a5d85b81a2bd186accb170675

    SHA1

    19658dfcf8c3d0a872fc52e2305da010fdc84356

    SHA256

    9d7c67e27490ee3d77bd06e602a6c1fba34cfff28ac7464190674d2bc662c3b9

    SHA512

    77cbb3e5d6a9c6e1e7dac252b2eadbb2ba9de9c7d391b2d2241affc16a7d2b85bc49236112b761dbec8b35a5f60a6e3a11909621b6a8c5c1cd3400a57d69d721

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\icuio59.dll

    Filesize

    58KB

    MD5

    2d80b9dc2301886483e236ef3cae2d64

    SHA1

    be67e8f1b7e03c921dd3e24713c38fa5525b1452

    SHA256

    1c69c9e687f5c50ff7ddbe1a8f4731eec3a44c56f9c5046b9c4f38e4d39fcfbb

    SHA512

    42226fcffbe7b530761322bd2b1002a74812e80d5ee4cde49331afbd0317f0e21654d7eb6103c643aa153c1b3e2f8e03f522f56a9efb6c96c06ac58309adc826

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\icuuc59.dll

    Filesize

    1.4MB

    MD5

    4c6e8602230c49a9bb2b6aa0db866942

    SHA1

    bc2e987e1a7a2d82141f57a73dd51db81b58fd41

    SHA256

    1b8568fda337328512b04f831ecbc61d12bf07e05d8095d2ccafc33df61f9190

    SHA512

    d1300f2940bd52c46081f53cb3dd8cc100d47e44fb9c4bec885b245eaba1a544a7f524302adbc3eac41847f4dd346e4546774a314247e59a890ad47b51223c86

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILESCOMMONX86@\Protexis\License Service\PsiService_2.exe

    Filesize

    270KB

    MD5

    16783d49b6931414bad1b2368add9656

    SHA1

    8f52ca93479a1c38ee0539393890548baeb2bbf2

    SHA256

    596f28b0f1dbc8ac3a43fe00a890af088ca837da3bb227411fd76c4d27bf27e9

    SHA512

    3dd8820623a5449c66639134f12ee63f46c94cda9ff655dcdb0354db4ab59c5bfbfc4c86cc6e6d28229deae31410458ea232efbc3697dd4b6b531d0dfd79909d

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@SYSTEM@\concrt140.dll

    Filesize

    325KB

    MD5

    efb4a3f8ffaa4f5b01838bfbc0860aef

    SHA1

    48112b71a07395c3cac6b457acf0a5c1a06062f2

    SHA256

    8864e0b73408cc267a1a23b758ba36740a9a65e7ae0d75c86e3eda4f0730c799

    SHA512

    3a1c17a1afd23ad3313e340e8adee81909a8750f2fd6fd1e7252ef96bd87fdbb9d6839a8939242af21cc040583385458b5fa1d59f3b1e1b0d4ef13cc6f751883

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@SYSTEM@\mfc140enu.dll

    Filesize

    64KB

    MD5

    ec2edf46c2f78ecd76f4488c0bd40ee2

    SHA1

    36fa90ef6ba38108f0063a1742837d1b5b2fca21

    SHA256

    a6f8269af2d47fcf16f9e1f98d773db0a45d726675767fbffeb533d4def085c1

    SHA512

    6a0623e1f23cc5c60b33c6ac1ccdcadca9d355885126a0fddeba1f2c019f9436421b8f6c34f5e3ce8fea922d993e6f8df22b56d27c61696d70e8a1112528321c

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@SYSTEM@\mfc140u.dll

    Filesize

    5.5MB

    MD5

    e4530e2c6cd94b26f7d1ae95436fcf12

    SHA1

    785d243da35c1d9d22943e0f1f3c80a44dd24d38

    SHA256

    72c2c667ae5c2f1c3cffec544265174f528b1e2617567430da04b1840c783389

    SHA512

    83277c8199ab1318332f1cae75df85161e4d7e52e0f2d9a69a268182665e59e4ed3a951c057382c97fe3c490e99cb19eb14426f638b1da9e7d48f3f5e4d4655a

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@SYSTEM@\msvcp140.dll

    Filesize

    604KB

    MD5

    5d2728bede4841dc65ab364987fdebe7

    SHA1

    c2999c99db5ce3fbc7bdeca7abf5175bbc9e2b08

    SHA256

    6b1184d2226366c1504fdd7c307066a6c72c606fc3007d8591119b9211f93984

    SHA512

    157e64e62cc08ca7eb60fc9194758d97a2ff52ffb82d8b4924353df453186da2e13225964d24181e82f6698fc6e2c2e09c139c0cdaad5633becb3526b69174af

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@SYSTEM@\vcruntime140.dll

    Filesize

    83KB

    MD5

    d5d9432a97cf932a0cddd707d4ee2698

    SHA1

    59ff5524bd5924261ca5c3502e12b3d04b073bd8

    SHA256

    58e437ff49e77bffdb2ceca6c375160e779b0f43d9ffca4c2b1dbb8d4937451a

    SHA512

    29a5b5487506b2c452558b7a02c699b26f3907307f23d7364f4c6adc49190f0f817f5ac49e7e2221733257ac736d30468f1a1c3aaf0ff873e6fc22f94809126a

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@SYSTEM@\vcruntime140_1.dll

    Filesize

    42KB

    MD5

    e4a89845a9467079ec110a6fd042f9bd

    SHA1

    283cf58655bd2c2d337505193cff4c183e80e451

    SHA256

    a9f474b63a1ca360fe6a7b70073087db8c653b4d18bea5da8f0da77efe088f5a

    SHA512

    dac7a2baee9f211c95c8ca818e885665a9d824cb3e5e69b4152836401145e50cc1a75a71bddd01c8101d6df2b1f381820d85a2d1dc3748bda836628901098df4

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\stubexe\0x5A6C9B8D9B3ECC55\CorelDRW.exe

    Filesize

    31KB

    MD5

    998ca8e37d51fb437dfe845ab3e80c8b

    SHA1

    846fbc2367a4a446dc9978c9b92fd3c242e7bae6

    SHA256

    3e4359ce1fefc1087992bca05e49e5ecd04296841b5bf6e6c242d087b4078baa

    SHA512

    25cf76860b5cbc4edc51f87ee1727528a72ed7890cf006b82299caeccbc955ae0183d4e7b1e941bb4e9c54b2335e3ac0e97d5fde719c0eed2115e81f3e47f2ac

  • \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\stubexe\0x5A6C9B8D9B3ECC55\CorelDRW.exe

    Filesize

    31KB

    MD5

    998ca8e37d51fb437dfe845ab3e80c8b

    SHA1

    846fbc2367a4a446dc9978c9b92fd3c242e7bae6

    SHA256

    3e4359ce1fefc1087992bca05e49e5ecd04296841b5bf6e6c242d087b4078baa

    SHA512

    25cf76860b5cbc4edc51f87ee1727528a72ed7890cf006b82299caeccbc955ae0183d4e7b1e941bb4e9c54b2335e3ac0e97d5fde719c0eed2115e81f3e47f2ac

  • memory/560-389-0x0000000057290000-0x0000000057291000-memory.dmp

    Filesize

    4KB

  • memory/560-381-0x0000000001C70000-0x0000000002210000-memory.dmp

    Filesize

    5.6MB

  • memory/560-581-0x0000000000400000-0x0000000000447000-memory.dmp

    Filesize

    284KB

  • memory/560-579-0x0000000000400000-0x0000000000447000-memory.dmp

    Filesize

    284KB

  • memory/560-598-0x0000000075600000-0x000000007563C000-memory.dmp

    Filesize

    240KB

  • memory/560-601-0x0000000075600000-0x000000007563C000-memory.dmp

    Filesize

    240KB

  • memory/560-582-0x0000000000400000-0x0000000000447000-memory.dmp

    Filesize

    284KB

  • memory/560-1897-0x0000000001C70000-0x0000000002210000-memory.dmp

    Filesize

    5.6MB

  • memory/560-390-0x0000000057290000-0x0000000057291000-memory.dmp

    Filesize

    4KB

  • memory/560-587-0x0000000075640000-0x0000000075691000-memory.dmp

    Filesize

    324KB

  • memory/560-580-0x0000000000400000-0x0000000000447000-memory.dmp

    Filesize

    284KB

  • memory/560-588-0x0000000075640000-0x0000000075691000-memory.dmp

    Filesize

    324KB

  • memory/560-583-0x0000000075640000-0x0000000075691000-memory.dmp

    Filesize

    324KB

  • memory/560-595-0x0000000075600000-0x000000007563C000-memory.dmp

    Filesize

    240KB

  • memory/560-604-0x0000000000400000-0x0000000000447000-memory.dmp

    Filesize

    284KB

  • memory/560-594-0x0000000075600000-0x000000007563C000-memory.dmp

    Filesize

    240KB

  • memory/560-584-0x0000000075640000-0x0000000075691000-memory.dmp

    Filesize

    324KB

  • memory/560-585-0x0000000075640000-0x0000000075691000-memory.dmp

    Filesize

    324KB

  • memory/560-591-0x0000000000400000-0x0000000000447000-memory.dmp

    Filesize

    284KB

  • memory/560-394-0x0000000000400000-0x0000000000447000-memory.dmp

    Filesize

    284KB

  • memory/560-602-0x0000000075600000-0x000000007563C000-memory.dmp

    Filesize

    240KB

  • memory/560-388-0x0000000001C70000-0x0000000002210000-memory.dmp

    Filesize

    5.6MB

  • memory/560-386-0x0000000000240000-0x0000000000241000-memory.dmp

    Filesize

    4KB

  • memory/560-385-0x0000000001C70000-0x0000000002210000-memory.dmp

    Filesize

    5.6MB

  • memory/560-384-0x0000000001C70000-0x0000000002210000-memory.dmp

    Filesize

    5.6MB

  • memory/560-603-0x0000000075600000-0x000000007563C000-memory.dmp

    Filesize

    240KB

  • memory/560-605-0x0000000001C70000-0x0000000002210000-memory.dmp

    Filesize

    5.6MB

  • memory/560-382-0x0000000001C70000-0x0000000002210000-memory.dmp

    Filesize

    5.6MB

  • memory/560-593-0x0000000000400000-0x0000000000447000-memory.dmp

    Filesize

    284KB

  • memory/560-597-0x0000000075600000-0x000000007563C000-memory.dmp

    Filesize

    240KB

  • memory/560-379-0x0000000001C70000-0x0000000002210000-memory.dmp

    Filesize

    5.6MB

  • memory/560-1297-0x0000000001C70000-0x0000000002210000-memory.dmp

    Filesize

    5.6MB

  • memory/560-596-0x0000000075600000-0x000000007563C000-memory.dmp

    Filesize

    240KB

  • memory/560-592-0x0000000000400000-0x0000000000447000-memory.dmp

    Filesize

    284KB

  • memory/560-1343-0x0000000000240000-0x0000000000241000-memory.dmp

    Filesize

    4KB

  • memory/560-590-0x0000000075640000-0x0000000075691000-memory.dmp

    Filesize

    324KB

  • memory/560-380-0x0000000001C70000-0x0000000002210000-memory.dmp

    Filesize

    5.6MB

  • memory/560-586-0x0000000075640000-0x0000000075691000-memory.dmp

    Filesize

    324KB

  • memory/560-378-0x0000000001C70000-0x0000000002210000-memory.dmp

    Filesize

    5.6MB

  • memory/560-599-0x0000000075600000-0x000000007563C000-memory.dmp

    Filesize

    240KB

  • memory/560-377-0x0000000001C70000-0x0000000002210000-memory.dmp

    Filesize

    5.6MB

  • memory/560-600-0x0000000075600000-0x000000007563C000-memory.dmp

    Filesize

    240KB

  • memory/560-589-0x0000000075640000-0x0000000075691000-memory.dmp

    Filesize

    324KB

  • memory/632-623-0x0000000140000000-0x000000014005E000-memory.dmp

    Filesize

    376KB

  • memory/632-696-0x0000000000B70000-0x0000000001198000-memory.dmp

    Filesize

    6.2MB

  • memory/632-1621-0x0000000000B70000-0x0000000001198000-memory.dmp

    Filesize

    6.2MB

  • memory/632-1891-0x0000000000B70000-0x0000000001198000-memory.dmp

    Filesize

    6.2MB

  • memory/632-626-0x0000000000350000-0x0000000000352000-memory.dmp

    Filesize

    8KB

  • memory/1376-68-0x0000000002DD0000-0x0000000002E8B000-memory.dmp

    Filesize

    748KB

  • memory/1376-67-0x0000000000CB0000-0x00000000012D8000-memory.dmp

    Filesize

    6.2MB

  • memory/1376-61-0x0000000002DD0000-0x0000000002E8B000-memory.dmp

    Filesize

    748KB

  • memory/1376-878-0x0000000000CB0000-0x00000000012D8000-memory.dmp

    Filesize

    6.2MB

  • memory/1376-73-0x0000000002DD0000-0x0000000002E8B000-memory.dmp

    Filesize

    748KB

  • memory/1376-60-0x000007FEDF830000-0x000007FEDF831000-memory.dmp

    Filesize

    4KB

  • memory/1376-59-0x000007FEDF830000-0x000007FEDF831000-memory.dmp

    Filesize

    4KB

  • memory/1376-57-0x000007FEDF860000-0x000007FEDF861000-memory.dmp

    Filesize

    4KB

  • memory/1376-58-0x000007FEDF860000-0x000007FEDF861000-memory.dmp

    Filesize

    4KB

  • memory/1376-1893-0x0000000000CB0000-0x00000000012D8000-memory.dmp

    Filesize

    6.2MB

  • memory/1376-74-0x0000000002DD0000-0x0000000002E8B000-memory.dmp

    Filesize

    748KB