29c6420c36b185ccf83f6cb61d84bf2a3e997fa0596a9460173a594d7b6fec8d

Resubmissions

21/07/2023, 18:01

230721-wl7wksgh9x 7

21/07/2023, 17:22

230721-vxxz3sga7t 7

Analysis

max time kernel
154s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
21/07/2023, 17:22

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

logicpos.exe
Size

177.8MB
MD5

5b7511ef293980e0524bd1621ba2a2b0
SHA1

4a89678f4104ddc1e4a3828e55ea2bc39511cec0
SHA256

29c6420c36b185ccf83f6cb61d84bf2a3e997fa0596a9460173a594d7b6fec8d
SHA512

422dc0610ea62d86a995cb0d21a4e8dfeaf00cb4032390f4d1a7e3be5f5717336b370c3228eda5f6f9cfed43585d7717a03f59fb3604cccd498caab4d56a804a
SSDEEP

3145728:uPZp/NgokYGEb9A0Ganbd7+fXSR04TmkRNNDo5euP77Zp2ZgZP9uZjgmvXTnzKvy:oZP3JA0Ganbd7+vSHVo5euPZpagOggTN

Score

7^/10

Malware Config

Signatures

Executes dropped EXE 4 IoCs

pid	Process
4204	MSI9429.tmp
2180	gdk-pixbuf-query-loaders.exe
1964	MSI9F65.tmp
2748	gtk-query-immodules-2.0.exe

Loads dropped DLL 57 IoCs

pid	Process
316	logicpos.exe
316	logicpos.exe
316	logicpos.exe
316	logicpos.exe
316	logicpos.exe
316	logicpos.exe
316	logicpos.exe
316	logicpos.exe
316	logicpos.exe
316	logicpos.exe
316	logicpos.exe
316	logicpos.exe
316	logicpos.exe
64	MsiExec.exe
2180	gdk-pixbuf-query-loaders.exe
2180	gdk-pixbuf-query-loaders.exe
2180	gdk-pixbuf-query-loaders.exe
2180	gdk-pixbuf-query-loaders.exe
2180	gdk-pixbuf-query-loaders.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
2748	gtk-query-immodules-2.0.exe
316	logicpos.exe
316	logicpos.exe

Enumerates connected drives 3 TTPs 46 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\E:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\E:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\GtkSharp\2.12\share\locale\sk\LC_MESSAGES\sk_atk10.mo	msiexec.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\MySqlBackup.dll	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Icons\Dialogs\icon_pos_dialog_action_help.png	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Products\ClothingStore\jeans_menina.jpg	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Products\Butchery\bife_alcatra_novilho.jpg	logicpos.exe
File created	C:\Program Files (x86)\GtkSharp\2.12\share\locale\sl\LC_MESSAGES\sl_gtk20-properties.mo	msiexec.exe
File created	C:\Program Files (x86)\GtkSharp\2.12\share\locale\tk\LC_MESSAGES\tk_gtk20.mo	msiexec.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Google.Protobuf.dll	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\log4net.dll	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Icons\icon_pos_nav_prev.png	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Icons\Other\connection_status_on.png	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Icons\SubFamilies\papel_pequenos_anuncios\icon_pos_subfamily_papel_pequenos_anuncios_-_motor.png	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Products\Butchery\bife_bovino_maturado.jpg	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Products\Cafe\salada.jpg	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Products\Cafe\tarte_de_chila.jpg	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Products\ClothingStore\bota_inverno.jpg	logicpos.exe
File created	C:\Program Files (x86)\GtkSharp\2.12\share\locale\bn_IN\LC_MESSAGES\bn_IN_glib20.mo	msiexec.exe
File created	C:\Program Files (x86)\GtkSharp\2.12\share\locale\bs\LC_MESSAGES\bs_gtk20-properties.mo	msiexec.exe
File created	C:\Program Files (x86)\GtkSharp\2.12\share\locale\gl\LC_MESSAGES\gl_gtk20.mo	msiexec.exe
File created	C:\Program Files (x86)\GtkSharp\2.12\share\locale\uz@cyrillic\LC_MESSAGES\uz@cyrillic_gtk20.mo	msiexec.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Icons\BackOffice\icon_documents_payments.png	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Icons\SubFamilies\Restaurant\Desserts\restaurant_subcategory_icon_280.jpg	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Icons\Windows\icon_window_system.png	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\K4os.Hash.xxHash.dll	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Icons\icon_pos_ticketpad_order.png	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Products\Bakery\donuts.jpg	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Products\Cafe\caves_sao_joao_reserva.jpg	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Products\Cafe\secretos_de_porco_preto.jpg	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Products\ClothingStore\casaco_fecho.jpg	logicpos.exe
File created	C:\Program Files (x86)\GtkSharp\2.12\share\locale\ca@valencia\LC_MESSAGES\ca@valencia_atk10.mo	msiexec.exe
File created	C:\Program Files (x86)\GtkSharp\2.12\share\locale\mk\LC_MESSAGES\mk_atk10.mo	msiexec.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\DevExpress.Xpo.v22.1.dll	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Products\Cafe\tosta_de_fiambre.jpg	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Products\Cafe\torta_de_noz.jpg	logicpos.exe
File created	C:\Program Files (x86)\GtkSharp\2.12\share\locale\ml\LC_MESSAGES\ml_glib20.mo	msiexec.exe
File created	C:\Program Files (x86)\GtkSharp\2.12\share\locale\vi\LC_MESSAGES\vi_gtk20-properties.mo	msiexec.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\LogicposDatalayer.dll	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\LogicposPrinterGenericSocket.dll	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Icons\Dialogs\icon_pos_dialog_action_readcard.png	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Products\Bakery\pao_alentejano.jpg	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Products\Cafe\monsaraz.jpg	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Products\ClothingStore\vestido_longo_estampado.jpg	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Products\HardwareStore\fita_isoladora.jpg	logicpos.exe
File created	C:\Program Files (x86)\GtkSharp\2.12\share\locale\pa\LC_MESSAGES\pa_atk10.mo	msiexec.exe
File created	C:\Program Files (x86)\GtkSharp\2.12\share\locale\ps\LC_MESSAGES\ps_glib20.mo	msiexec.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Icons\icon_pos_ticketpad_payments.png	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Products\Cafe\croquetes.jpg	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Products\Cafe\legumes_salteados.jpg	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Products\Cafe\mateus_rose.jpg	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Products\Cafe\queijo_ovelha_curado.jpg	logicpos.exe
File created	C:\Program Files (x86)\GtkSharp\2.12\share\locale\ca\LC_MESSAGES\ca_glib20.mo	msiexec.exe
File created	C:\Program Files (x86)\GtkSharp\2.12\share\locale\en_GB\LC_MESSAGES\en_GB_glib20.mo	msiexec.exe
File created	C:\Program Files (x86)\GtkSharp\2.12\share\locale\pl\LC_MESSAGES\pl_gtk20-properties.mo	msiexec.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Products\ClothingStore\calca_quadrados.jpg	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Products\HardwareStore\alicate_embutir.jpg	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Products\HardwareStore\cimento.jpg	logicpos.exe
File created	C:\Program Files (x86)\GtkSharp\2.12\share\locale\fa\LC_MESSAGES\fa_atk10.mo	msiexec.exe
File created	C:\Program Files (x86)\GtkSharp\2.12\bin\libexpat-1.dll	msiexec.exe
File created	C:\Program Files (x86)\GtkSharp\2.12\share\locale\mi\LC_MESSAGES\mi_gtk20-properties.mo	msiexec.exe
File created	C:\Program Files (x86)\GtkSharp\2.12\share\locale\ms\LC_MESSAGES\ms_glib20.mo	msiexec.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Icons\Dialogs\DocumentFinanceDialog\icon_pos_dialog_toolbar_5_waybill_from.png	logicpos.exe
File created	C:\Program Files (x86)\Logicpulse\logicpos\Assets\Images\Icons\SubFamilies\ShoeStore\shoe_store_subcategory_icon_70.jpg	logicpos.exe
File created	C:\Program Files (x86)\GtkSharp\2.12\share\locale\crh\LC_MESSAGES\crh_gtk20.mo	msiexec.exe
File created	C:\Program Files (x86)\GtkSharp\2.12\share\themes\MS-Windows\gtk-2.0\gtkrc	msiexec.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\assembly\tmp\ME9PF176\4F3XA84Y	msiexec.exe
File created	C:\Windows\assembly\tmp\9FIVZZT9\policy.2.10.gdk-sharp.dll	msiexec.exe
File created	C:\Windows\assembly\tmp\WTWRPHI7\policy.2.10.gtk-dotnet.dll	msiexec.exe
File created	C:\Windows\assembly\pubpol28.dat	msiexec.exe
File created	C:\Windows\assembly\pubpol43.dat	msiexec.exe
File created	C:\Windows\assembly\GACLock.dat	msiexec.exe
File created	C:\Windows\assembly\tmp\3PVUYW30\gdk-sharp.dll	msiexec.exe
File opened for modification	C:\Windows\assembly\pubpol37.dat	msiexec.exe
File opened for modification	C:\Windows\assembly\pubpol42.dat	msiexec.exe
File created	C:\Windows\assembly\tmp\FA58OMI2\glade-sharp.dll	msiexec.exe
File opened for modification	C:\Windows\assembly\pubpol29.dat	msiexec.exe
File created	C:\Windows\assembly\tmp\4R7SS0JH\policy.2.8.gtk-sharp.dll	msiexec.exe
File opened for modification	C:\Windows\assembly\pubpol24.dat	msiexec.exe
File created	C:\Windows\assembly\pubpol31.dat	msiexec.exe
File created	C:\Windows\assembly\pubpol34.dat	msiexec.exe
File opened for modification	C:\Windows\assembly\pubpol45.dat	msiexec.exe
File opened for modification	C:\Windows\assembly\pubpol52.dat	msiexec.exe
File opened for modification	C:\Windows\Installer\e594fdb.msi	msiexec.exe
File created	C:\Windows\assembly\tmp\3VMDX2VU\policy.2.6.glade-sharp.dll	msiexec.exe
File created	C:\Windows\assembly\tmp\1Y09296V\4GJ1L0KA	msiexec.exe
File created	C:\Windows\assembly\tmp\UXYAE6WJ\policy.2.4.pango-sharp.dll	msiexec.exe
File created	C:\Windows\assembly\tmp\WCJD9PYY\X7RJTTJV	msiexec.exe
File opened for modification	C:\Windows\assembly\pubpol49.dat	msiexec.exe
File created	C:\Windows\assembly\pubpol52.dat	msiexec.exe
File created	C:\Windows\Installer\e594fdb.msi	msiexec.exe
File created	C:\Windows\assembly\tmp\FDJJDSWW\ZF42757W	msiexec.exe
File created	C:\Windows\assembly\pubpol38.dat	msiexec.exe
File created	C:\Windows\assembly\tmp\CXO7F72T\policy.2.4.atk-sharp.dll	msiexec.exe
File created	C:\Windows\assembly\tmp\9UI97YG5\policy.2.6.gtk-sharp.dll	msiexec.exe
File created	C:\Windows\assembly\pubpol40.dat	msiexec.exe
File opened for modification	C:\Windows\assembly\pubpol47.dat	msiexec.exe
File opened for modification	C:\Windows\assembly\pubpol46.dat	msiexec.exe
File created	C:\Windows\assembly\pubpol48.dat	msiexec.exe
File created	C:\Windows\assembly\tmp\KBOYEKME\policy.2.6.glib-sharp.dll	msiexec.exe
File created	C:\Windows\assembly\tmp\H8MSBWCO\2VVN9RKX	msiexec.exe
File created	C:\Windows\assembly\tmp\BFMJIQR6\policy.2.8.gtk-dotnet.dll	msiexec.exe
File created	C:\Windows\Installer\inprogressinstallinfo.ipi	msiexec.exe
File created	C:\Windows\assembly\tmp\17CESBV4\policy.2.4.glade-sharp.dll	msiexec.exe
File created	C:\Windows\assembly\pubpol36.dat	msiexec.exe
File opened for modification	C:\Windows\assembly\pubpol48.dat	msiexec.exe
File created	C:\Windows\assembly\pubpol49.dat	msiexec.exe
File created	C:\Windows\assembly\tmp\KC8UVJWK\policy.2.8.gdk-sharp.dll	msiexec.exe
File opened for modification	C:\Windows\assembly\pubpol34.dat	msiexec.exe
File created	C:\Windows\assembly\tmp\17CESBV4\IXW97Y8U	msiexec.exe
File created	C:\Windows\assembly\tmp\NGGSLWCV\glib-sharp.dll	msiexec.exe
File created	C:\Windows\assembly\tmp\77RFQ98Q\policy.2.10.atk-sharp.dll	msiexec.exe
File created	C:\Windows\assembly\pubpol39.dat	msiexec.exe
File created	C:\Windows\assembly\pubpol51.dat	msiexec.exe
File created	C:\Windows\assembly\tmp\FDJJDSWW\policy.2.10.glib-sharp.dll	msiexec.exe
File opened for modification	C:\Windows\assembly\pubpol26.dat	msiexec.exe
File created	C:\Windows\assembly\tmp\I62VIT4E\policy.2.6.gtk-dotnet.dll	msiexec.exe
File created	C:\Windows\assembly\pubpol30.dat	msiexec.exe
File created	C:\Windows\assembly\pubpol46.dat	msiexec.exe
File created	C:\Windows\assembly\pubpol54.dat	msiexec.exe
File created	C:\Windows\assembly\tmp\9FIVZZT9\5NV1ZW4N	msiexec.exe
File created	C:\Windows\assembly\tmp\KBOYEKME\M3GAPFN1	msiexec.exe
File created	C:\Windows\assembly\tmp\FCUAMRXD\WYCXDRKW	msiexec.exe
File created	C:\Windows\assembly\tmp\I62VIT4E\FP9B6I1Q	msiexec.exe
File created	C:\Windows\assembly\tmp\V415CTXP\policy.2.6.pango-sharp.dll	msiexec.exe
File created	C:\Windows\assembly\tmp\KC8UVJWK\YCQJ27Z2	msiexec.exe
File created	C:\Windows\assembly\pubpol26.dat	msiexec.exe
File created	C:\Windows\assembly\pubpol32.dat	msiexec.exe
File created	C:\Windows\assembly\tmp\7TN1LMMT\TXKN2CIY	msiexec.exe
File created	C:\Windows\assembly\tmp\2LJ4IJTR\policy.2.4.gtk-dotnet.dll	msiexec.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks SCSI registry key(s) 3 TTPs 5 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key created	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters\Partmgr	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 00000000040000006505a1dc8b744c210000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000c01200000000ffffffff0000000027010100000800006505a1dc0000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d012000000000000000032000000ffffffff0000000007000100006809006505a1dc000000000000d012000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d01232000000000020ed0d000000ffffffff0000000007000100006809196505a1dc000000000000d0123200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000006505a1dc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
852	msiexec.exe
852	msiexec.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2488	msiexec.exe
Token: SeIncreaseQuotaPrivilege	2488	msiexec.exe
Token: SeSecurityPrivilege	852	msiexec.exe
Token: SeCreateTokenPrivilege	2488	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	2488	msiexec.exe
Token: SeLockMemoryPrivilege	2488	msiexec.exe
Token: SeIncreaseQuotaPrivilege	2488	msiexec.exe
Token: SeMachineAccountPrivilege	2488	msiexec.exe
Token: SeTcbPrivilege	2488	msiexec.exe
Token: SeSecurityPrivilege	2488	msiexec.exe
Token: SeTakeOwnershipPrivilege	2488	msiexec.exe
Token: SeLoadDriverPrivilege	2488	msiexec.exe
Token: SeSystemProfilePrivilege	2488	msiexec.exe
Token: SeSystemtimePrivilege	2488	msiexec.exe
Token: SeProfSingleProcessPrivilege	2488	msiexec.exe
Token: SeIncBasePriorityPrivilege	2488	msiexec.exe
Token: SeCreatePagefilePrivilege	2488	msiexec.exe
Token: SeCreatePermanentPrivilege	2488	msiexec.exe
Token: SeBackupPrivilege	2488	msiexec.exe
Token: SeRestorePrivilege	2488	msiexec.exe
Token: SeShutdownPrivilege	2488	msiexec.exe
Token: SeDebugPrivilege	2488	msiexec.exe
Token: SeAuditPrivilege	2488	msiexec.exe
Token: SeSystemEnvironmentPrivilege	2488	msiexec.exe
Token: SeChangeNotifyPrivilege	2488	msiexec.exe
Token: SeRemoteShutdownPrivilege	2488	msiexec.exe
Token: SeUndockPrivilege	2488	msiexec.exe
Token: SeSyncAgentPrivilege	2488	msiexec.exe
Token: SeEnableDelegationPrivilege	2488	msiexec.exe
Token: SeManageVolumePrivilege	2488	msiexec.exe
Token: SeImpersonatePrivilege	2488	msiexec.exe
Token: SeCreateGlobalPrivilege	2488	msiexec.exe
Token: SeCreateTokenPrivilege	2488	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	2488	msiexec.exe
Token: SeLockMemoryPrivilege	2488	msiexec.exe
Token: SeIncreaseQuotaPrivilege	2488	msiexec.exe
Token: SeMachineAccountPrivilege	2488	msiexec.exe
Token: SeTcbPrivilege	2488	msiexec.exe
Token: SeSecurityPrivilege	2488	msiexec.exe
Token: SeTakeOwnershipPrivilege	2488	msiexec.exe
Token: SeLoadDriverPrivilege	2488	msiexec.exe
Token: SeSystemProfilePrivilege	2488	msiexec.exe
Token: SeSystemtimePrivilege	2488	msiexec.exe
Token: SeProfSingleProcessPrivilege	2488	msiexec.exe
Token: SeIncBasePriorityPrivilege	2488	msiexec.exe
Token: SeCreatePagefilePrivilege	2488	msiexec.exe
Token: SeCreatePermanentPrivilege	2488	msiexec.exe
Token: SeBackupPrivilege	2488	msiexec.exe
Token: SeRestorePrivilege	2488	msiexec.exe
Token: SeShutdownPrivilege	2488	msiexec.exe
Token: SeDebugPrivilege	2488	msiexec.exe
Token: SeAuditPrivilege	2488	msiexec.exe
Token: SeSystemEnvironmentPrivilege	2488	msiexec.exe
Token: SeChangeNotifyPrivilege	2488	msiexec.exe
Token: SeRemoteShutdownPrivilege	2488	msiexec.exe
Token: SeUndockPrivilege	2488	msiexec.exe
Token: SeSyncAgentPrivilege	2488	msiexec.exe
Token: SeEnableDelegationPrivilege	2488	msiexec.exe
Token: SeManageVolumePrivilege	2488	msiexec.exe
Token: SeImpersonatePrivilege	2488	msiexec.exe
Token: SeCreateGlobalPrivilege	2488	msiexec.exe
Token: SeCreateTokenPrivilege	2488	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	2488	msiexec.exe
Token: SeLockMemoryPrivilege	2488	msiexec.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
2488	msiexec.exe
2488	msiexec.exe

Suspicious use of WriteProcessMemory 18 IoCs

description	pid	Process	procid_target
PID 316 wrote to memory of 2488	316	logicpos.exe	95
PID 316 wrote to memory of 2488	316	logicpos.exe	95
PID 316 wrote to memory of 2488	316	logicpos.exe	95
PID 852 wrote to memory of 64	852	msiexec.exe	105
PID 852 wrote to memory of 64	852	msiexec.exe	105
PID 852 wrote to memory of 64	852	msiexec.exe	105
PID 852 wrote to memory of 1672	852	msiexec.exe	110
PID 852 wrote to memory of 1672	852	msiexec.exe	110
PID 852 wrote to memory of 4204	852	msiexec.exe	112
PID 852 wrote to memory of 4204	852	msiexec.exe	112
PID 4204 wrote to memory of 2180	4204	MSI9429.tmp	114
PID 4204 wrote to memory of 2180	4204	MSI9429.tmp	114
PID 4204 wrote to memory of 2180	4204	MSI9429.tmp	114
PID 852 wrote to memory of 1964	852	msiexec.exe	115
PID 852 wrote to memory of 1964	852	msiexec.exe	115
PID 1964 wrote to memory of 2748	1964	MSI9F65.tmp	117
PID 1964 wrote to memory of 2748	1964	MSI9F65.tmp	117
PID 1964 wrote to memory of 2748	1964	MSI9F65.tmp	117

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\logicpos.exe
"C:\Users\Admin\AppData\Local\Temp\logicpos.exe"
1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of WriteProcessMemory
PID:316
- C:\Windows\SysWOW64\msiexec.exe
  "msiexec" /i C:\Users\Admin\AppData\Local\Temp\gtk-sharp-2.12.26.msi
  2⤵
  - Enumerates connected drives
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  PID:2488

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Enumerates connected drives
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:852
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 650522CC777BB1EAE54FBCC525AE8103 C
  2⤵
  - Loads dropped DLL
  PID:64
- C:\Windows\system32\srtasks.exe
  C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
  2⤵
  PID:1672
- C:\Windows\Installer\MSI9429.tmp
  "C:\Windows\Installer\MSI9429.tmp" "C:\Program Files (x86)\GtkSharp\2.12\bin\gdk-pixbuf-query-loaders.exe" "C:\Program Files (x86)\GtkSharp\2.12\etc\gtk-2.0\gdk-pixbuf.loaders
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:4204
- - C:\Program Files (x86)\GtkSharp\2.12\bin\gdk-pixbuf-query-loaders.exe
    "C:\Program Files (x86)\GtkSharp\2.12\bin\gdk-pixbuf-query-loaders.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:2180
- C:\Windows\Installer\MSI9F65.tmp
  "C:\Windows\Installer\MSI9F65.tmp" "C:\Program Files (x86)\GtkSharp\2.12\bin\gtk-query-immodules-2.0.exe" "C:\Program Files (x86)\GtkSharp\2.12\etc\gtk-2.0\gtk.immodules
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:1964
- - C:\Program Files (x86)\GtkSharp\2.12\bin\gtk-query-immodules-2.0.exe
    "C:\Program Files (x86)\GtkSharp\2.12\bin\gtk-query-immodules-2.0.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:2748

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Checks SCSI registry key(s)
PID:1588

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Config.Msi\e594fdc.rbs

Filesize
90KB

MD5
fcc5c13101ae15f6e8a7cdffef143612

SHA1
a90343d971dae4de9a584b519b008ef2358391a9

SHA256
a22e0d8c960efb3403d7d24ddc7386354af5aa69bb368e97e7dddb49bd227708

SHA512
c1c387a9cde96067b5e9b398ef7c36e493c15e73e8f6d6fe59d5cae2e6ff9f85669822948b75b558c921b24b064c569faf1543220ba14a2373773b7fd5e393b5

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\gdk-pixbuf-query-loaders.exe

Filesize
41KB

MD5
c86d40aac8d78f425fd749424004a2eb

SHA1
82f597a5f08a68dd69a224f09ea7967b7d5c50f6

SHA256
9f16f0ad2495a04dc5eaa691b3ae72944f84a3a2ba2b88a52c96ed8b9aefbbec

SHA512
14e2ccbde1fcd9eea5ec708d40c071fa4ea6faf0f99b21397f3996f2975e6da3fa464377972d313d209bdb9b8410917b70ab4e8b2f9c15d612c73bfa9ba9106a

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\gdk-pixbuf-query-loaders.exe

Filesize
41KB

MD5
c86d40aac8d78f425fd749424004a2eb

SHA1
82f597a5f08a68dd69a224f09ea7967b7d5c50f6

SHA256
9f16f0ad2495a04dc5eaa691b3ae72944f84a3a2ba2b88a52c96ed8b9aefbbec

SHA512
14e2ccbde1fcd9eea5ec708d40c071fa4ea6faf0f99b21397f3996f2975e6da3fa464377972d313d209bdb9b8410917b70ab4e8b2f9c15d612c73bfa9ba9106a

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\gtk-query-immodules-2.0.exe

Filesize
42KB

MD5
a252e8df29e65045bf352b6ee561d1e5

SHA1
b5a59f4affd28fd356e087adb7e731f8da40c705

SHA256
47667f2732ec1ccdf25191f7a70a19e489a306e36039195f35d10309e1855b3e

SHA512
6225ca92dce5f822da6385ef5496f5bf64eaa67c0bfe152e878193b94b753e6142d75706c67d1687e7eb362b3abab3ee077f5276447bea42435da9c32c5cc978

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\gtk-query-immodules-2.0.exe

Filesize
42KB

MD5
a252e8df29e65045bf352b6ee561d1e5

SHA1
b5a59f4affd28fd356e087adb7e731f8da40c705

SHA256
47667f2732ec1ccdf25191f7a70a19e489a306e36039195f35d10309e1855b3e

SHA512
6225ca92dce5f822da6385ef5496f5bf64eaa67c0bfe152e878193b94b753e6142d75706c67d1687e7eb362b3abab3ee077f5276447bea42435da9c32c5cc978

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libatk-1.0-0.dll

Filesize
133KB

MD5
2dcc4a46d446b7c7a1d296fa7330b651

SHA1
9b2b24aca33ba5f88200287b1e2a79185d77e755

SHA256
3ce269955cad020ddeecf1d7a15bda20dfa4f9d71c6222c0bf8a3201387395aa

SHA512
7e6c799228c191cb089933678eb81dfed360e69b6ee818edcacfde49784d4d3d87703eee042a4abd459e40d5ddc5abd5803b9b1469484373e3445efd20c23361

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libatk-1.0-0.dll

Filesize
133KB

MD5
2dcc4a46d446b7c7a1d296fa7330b651

SHA1
9b2b24aca33ba5f88200287b1e2a79185d77e755

SHA256
3ce269955cad020ddeecf1d7a15bda20dfa4f9d71c6222c0bf8a3201387395aa

SHA512
7e6c799228c191cb089933678eb81dfed360e69b6ee818edcacfde49784d4d3d87703eee042a4abd459e40d5ddc5abd5803b9b1469484373e3445efd20c23361

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libcairo-2.dll

Filesize
629KB

MD5
4bf33611ef0a7986e8d62e5cf244ae9a

SHA1
abc5209b50433e895af2607965f08dcfcd4e073b

SHA256
51017cc9767f359501595944810bf668aebf9054ba612365626e920046721a31

SHA512
058f4f4ec7d12078fbd6656cc9724c3ad6b6e6904d0ad0c596bb78a66e0aca90195c574bb17d601b8166205bade20e651f978fe6ca80ad5f98e147d8fffcbc11

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libcairo-2.dll

Filesize
629KB

MD5
4bf33611ef0a7986e8d62e5cf244ae9a

SHA1
abc5209b50433e895af2607965f08dcfcd4e073b

SHA256
51017cc9767f359501595944810bf668aebf9054ba612365626e920046721a31

SHA512
058f4f4ec7d12078fbd6656cc9724c3ad6b6e6904d0ad0c596bb78a66e0aca90195c574bb17d601b8166205bade20e651f978fe6ca80ad5f98e147d8fffcbc11

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libfontconfig-1.dll

Filesize
231KB

MD5
849715500383d765d1e1c60bc6c3f67b

SHA1
889d44a487a1f30cf174405cf3d4e08a3ed2e023

SHA256
2430b5bfb13726ca6a18e7eb080f4cc9f7094ba3c608b8ee0314d69c5fb11b75

SHA512
7e456c08659c696bb5ea773ae40d428ee79516acf71b88c9f6ad90d6bfefe3095a5a2d73358a4927731e21fb7f7b7208d11e9b0e2b46b93a72d02f777893b6c0

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libfontconfig-1.dll

Filesize
231KB

MD5
849715500383d765d1e1c60bc6c3f67b

SHA1
889d44a487a1f30cf174405cf3d4e08a3ed2e023

SHA256
2430b5bfb13726ca6a18e7eb080f4cc9f7094ba3c608b8ee0314d69c5fb11b75

SHA512
7e456c08659c696bb5ea773ae40d428ee79516acf71b88c9f6ad90d6bfefe3095a5a2d73358a4927731e21fb7f7b7208d11e9b0e2b46b93a72d02f777893b6c0

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libfreetype-6.dll

Filesize
482KB

MD5
1fecfcd86f9dc09db239b20dd810a7d7

SHA1
d9d6f6a56759bea7eee19e117b1d173f44801fb4

SHA256
ded3ede45fbf7438d2a5bc4ab27d2d658afe75832679be4ec2ec078bd7f1ed12

SHA512
c4252502e5ecc496e5b8a06369980cf66dd7e33ba52029038ef3730d6bfc3c97c96101c9251759fa0c4eca0cfdde8ec37ac828bfe86fb978dd3bf00eafb09e10

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libfreetype-6.dll

Filesize
482KB

MD5
1fecfcd86f9dc09db239b20dd810a7d7

SHA1
d9d6f6a56759bea7eee19e117b1d173f44801fb4

SHA256
ded3ede45fbf7438d2a5bc4ab27d2d658afe75832679be4ec2ec078bd7f1ed12

SHA512
c4252502e5ecc496e5b8a06369980cf66dd7e33ba52029038ef3730d6bfc3c97c96101c9251759fa0c4eca0cfdde8ec37ac828bfe86fb978dd3bf00eafb09e10

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libgcc_s_sjlj-1.dll

Filesize
118KB

MD5
00a8e5a611dcdeb0cd1830b4fb5db349

SHA1
1b202d8d0b778f1ef64028ffa2bed8b2a99da1da

SHA256
945e9f0302ab3d1bbc222f1ee38b10f5d3fa794a63fe64158e12602d4e5baae3

SHA512
340eaabf332b4de6325555a8c9f4cf9b46d782ecf8c9394aefa2e59723eadbb2ef2ffbad21584ba1d57d4404b5538e55c60d88847f3c6517a97b958429cdf470

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libgcc_s_sjlj-1.dll

Filesize
118KB

MD5
00a8e5a611dcdeb0cd1830b4fb5db349

SHA1
1b202d8d0b778f1ef64028ffa2bed8b2a99da1da

SHA256
945e9f0302ab3d1bbc222f1ee38b10f5d3fa794a63fe64158e12602d4e5baae3

SHA512
340eaabf332b4de6325555a8c9f4cf9b46d782ecf8c9394aefa2e59723eadbb2ef2ffbad21584ba1d57d4404b5538e55c60d88847f3c6517a97b958429cdf470

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libgcc_s_sjlj-1.dll

Filesize
118KB

MD5
00a8e5a611dcdeb0cd1830b4fb5db349

SHA1
1b202d8d0b778f1ef64028ffa2bed8b2a99da1da

SHA256
945e9f0302ab3d1bbc222f1ee38b10f5d3fa794a63fe64158e12602d4e5baae3

SHA512
340eaabf332b4de6325555a8c9f4cf9b46d782ecf8c9394aefa2e59723eadbb2ef2ffbad21584ba1d57d4404b5538e55c60d88847f3c6517a97b958429cdf470

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libgdk-win32-2.0-0.dll

Filesize
648KB

MD5
ad425eefa95c1e5f44e62628d202beb3

SHA1
c8ec06c354826eb4107dc25d6549fae1da5e14ff

SHA256
914beea25385385a85527084102644fbb6c0c2cae9c628c37a7b8db82b0a21e6

SHA512
07cddac28ea7fc7adfa8cb5808e604b52da561a08d7a9d1344705c2baaa1e2eb403abd6475274983413d1fe8bc452b7fecf140932391195170d2c470c236213d

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libgdk-win32-2.0-0.dll

Filesize
648KB

MD5
ad425eefa95c1e5f44e62628d202beb3

SHA1
c8ec06c354826eb4107dc25d6549fae1da5e14ff

SHA256
914beea25385385a85527084102644fbb6c0c2cae9c628c37a7b8db82b0a21e6

SHA512
07cddac28ea7fc7adfa8cb5808e604b52da561a08d7a9d1344705c2baaa1e2eb403abd6475274983413d1fe8bc452b7fecf140932391195170d2c470c236213d

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libgdk_pixbuf-2.0-0.dll

Filesize
266KB

MD5
a7199219457366e5f4013ee79936f1a7

SHA1
f7a74d6fb0d651689542897905c4ee5a64ad205e

SHA256
78bc2be3986510f5b21f42fe01fbbed283fbdd34dd9379bb415828c8133ba939

SHA512
31583db3e89ba7dc9d57f4daef41ab9d809e7ccdb136a84a5ec955636bf74331fafefc817f3a27a4739387612b6645866348dad88ca0b6fba06fb6ff37dbadc0

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libgdk_pixbuf-2.0-0.dll

Filesize
266KB

MD5
a7199219457366e5f4013ee79936f1a7

SHA1
f7a74d6fb0d651689542897905c4ee5a64ad205e

SHA256
78bc2be3986510f5b21f42fe01fbbed283fbdd34dd9379bb415828c8133ba939

SHA512
31583db3e89ba7dc9d57f4daef41ab9d809e7ccdb136a84a5ec955636bf74331fafefc817f3a27a4739387612b6645866348dad88ca0b6fba06fb6ff37dbadc0

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libgio-2.0-0.dll

Filesize
1.1MB

MD5
eed8e4783d57bdd78449ed5bf8dbfc7f

SHA1
95721146e4f3f54c312640b32b4837abec39d9d4

SHA256
92028d4b94cac3d67f9a0cc1d626f5ef9ecacd6c38c33f3ffaaa41a542b8ba22

SHA512
448b59e55f1b28433e51526c98ac960a84f0838ae750959a6e255e5d13ef436747929cc0208f97b38f1d3837fcfe29f431a3b86f51e930bede60765f57209d9c

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libgio-2.0-0.dll

Filesize
1.1MB

MD5
eed8e4783d57bdd78449ed5bf8dbfc7f

SHA1
95721146e4f3f54c312640b32b4837abec39d9d4

SHA256
92028d4b94cac3d67f9a0cc1d626f5ef9ecacd6c38c33f3ffaaa41a542b8ba22

SHA512
448b59e55f1b28433e51526c98ac960a84f0838ae750959a6e255e5d13ef436747929cc0208f97b38f1d3837fcfe29f431a3b86f51e930bede60765f57209d9c

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libglib-2.0-0.dll

Filesize
1.1MB

MD5
c48f2fe947bfc8df8a4b60e8deba4c0b

SHA1
62ed992c0d4abf6861c4aa546f5d92f6c531b4ef

SHA256
a21fb56b6f0ebd80c4c30f10841da0d513670f8b938ff8fc7898faa5995860de

SHA512
ce1bca257519dc5ce1631ea35663e23b6fbbfe76ef8f6fd102e58952684b2aa57425296cf10d4d7c2fb210ae2f582e426168d88c7b13c1bcd213cb4839dee9aa

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libglib-2.0-0.dll

Filesize
1.1MB

MD5
c48f2fe947bfc8df8a4b60e8deba4c0b

SHA1
62ed992c0d4abf6861c4aa546f5d92f6c531b4ef

SHA256
a21fb56b6f0ebd80c4c30f10841da0d513670f8b938ff8fc7898faa5995860de

SHA512
ce1bca257519dc5ce1631ea35663e23b6fbbfe76ef8f6fd102e58952684b2aa57425296cf10d4d7c2fb210ae2f582e426168d88c7b13c1bcd213cb4839dee9aa

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libglib-2.0-0.dll

Filesize
1.1MB

MD5
c48f2fe947bfc8df8a4b60e8deba4c0b

SHA1
62ed992c0d4abf6861c4aa546f5d92f6c531b4ef

SHA256
a21fb56b6f0ebd80c4c30f10841da0d513670f8b938ff8fc7898faa5995860de

SHA512
ce1bca257519dc5ce1631ea35663e23b6fbbfe76ef8f6fd102e58952684b2aa57425296cf10d4d7c2fb210ae2f582e426168d88c7b13c1bcd213cb4839dee9aa

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libglib-2.0-0.dll

Filesize
1.1MB

MD5
c48f2fe947bfc8df8a4b60e8deba4c0b

SHA1
62ed992c0d4abf6861c4aa546f5d92f6c531b4ef

SHA256
a21fb56b6f0ebd80c4c30f10841da0d513670f8b938ff8fc7898faa5995860de

SHA512
ce1bca257519dc5ce1631ea35663e23b6fbbfe76ef8f6fd102e58952684b2aa57425296cf10d4d7c2fb210ae2f582e426168d88c7b13c1bcd213cb4839dee9aa

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libgmodule-2.0-0.dll

Filesize
44KB

MD5
9eaf6107e4c7502e01494cc67dd9c204

SHA1
d2f90127062b004a190de935ab80fefc4d3b7ce0

SHA256
f7c51d059ccbaee4ca5d45978b7808b036cb8d27285b6746867ae7790cc73431

SHA512
b7af06bad95b11e15d033c6d7b574b34fce8c5078e98d5c24884de40653a680a727f56990a4c2381ff07daf11cae9acda4b1a0b1727b950c2bfa6681dce3e05b

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libgmodule-2.0-0.dll

Filesize
44KB

MD5
9eaf6107e4c7502e01494cc67dd9c204

SHA1
d2f90127062b004a190de935ab80fefc4d3b7ce0

SHA256
f7c51d059ccbaee4ca5d45978b7808b036cb8d27285b6746867ae7790cc73431

SHA512
b7af06bad95b11e15d033c6d7b574b34fce8c5078e98d5c24884de40653a680a727f56990a4c2381ff07daf11cae9acda4b1a0b1727b950c2bfa6681dce3e05b

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libgmodule-2.0-0.dll

Filesize
44KB

MD5
9eaf6107e4c7502e01494cc67dd9c204

SHA1
d2f90127062b004a190de935ab80fefc4d3b7ce0

SHA256
f7c51d059ccbaee4ca5d45978b7808b036cb8d27285b6746867ae7790cc73431

SHA512
b7af06bad95b11e15d033c6d7b574b34fce8c5078e98d5c24884de40653a680a727f56990a4c2381ff07daf11cae9acda4b1a0b1727b950c2bfa6681dce3e05b

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libgobject-2.0-0.dll

Filesize
272KB

MD5
041aa671ed8ff5eefd93110e0e727312

SHA1
65f8503ea0320c7cad4c581a01e15057f35e488c

SHA256
4819a3d1d0d8913108672610445b4646f587ec0a71982d65213bc80a439912c8

SHA512
45f8d119f69d824db9c3e4f5ad14daf26174bb1eb45182c04e1dd3f623dafd84a37fefe6a258310551f1761b5aa41f58ad9b246fe3a3bde5fa58d8b3d8b1d903

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libgobject-2.0-0.dll

Filesize
272KB

MD5
041aa671ed8ff5eefd93110e0e727312

SHA1
65f8503ea0320c7cad4c581a01e15057f35e488c

SHA256
4819a3d1d0d8913108672610445b4646f587ec0a71982d65213bc80a439912c8

SHA512
45f8d119f69d824db9c3e4f5ad14daf26174bb1eb45182c04e1dd3f623dafd84a37fefe6a258310551f1761b5aa41f58ad9b246fe3a3bde5fa58d8b3d8b1d903

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libgtk-win32-2.0-0.dll

Filesize
3.6MB

MD5
adb5b095c39c86d131c49701a8d8cce5

SHA1
ad856fdb4209b327acad6910de1e1478d1c9428e

SHA256
beb01b2819d43d0fa0463884df31290bd4c7e11a378d5a2c4926e73dd8fbb2d5

SHA512
ea2bd04f6ec3cf167f87fc1a9bcfd2d0c42ae0e4ccf91437419ccbb53e3ea4cb54b0ca1257346dda9ddc7c6b29b41d6b0875c8506c35c9a7365062088c4b8bfa

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libgtk-win32-2.0-0.dll

Filesize
3.6MB

MD5
adb5b095c39c86d131c49701a8d8cce5

SHA1
ad856fdb4209b327acad6910de1e1478d1c9428e

SHA256
beb01b2819d43d0fa0463884df31290bd4c7e11a378d5a2c4926e73dd8fbb2d5

SHA512
ea2bd04f6ec3cf167f87fc1a9bcfd2d0c42ae0e4ccf91437419ccbb53e3ea4cb54b0ca1257346dda9ddc7c6b29b41d6b0875c8506c35c9a7365062088c4b8bfa

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libintl-8.dll

Filesize
107KB

MD5
df66f92ddd24eaf37142badbb388205e

SHA1
89c33a308ba012a7e833f2c83787aa4d0f796da3

SHA256
0576d12c1304896d4e023edc51c213ce432287fdd8a68016910fd3cfb1101e1e

SHA512
7d81f3fc673e59214aee6041b3d8a0d974b8b522f132ddcb4ea4bb6198b2726cf51af10f247d2bf4a33cb2cdd0bd8b278bf3a9f0a0db9ab2ab75d52140c0afe8

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libintl-8.dll

Filesize
107KB

MD5
df66f92ddd24eaf37142badbb388205e

SHA1
89c33a308ba012a7e833f2c83787aa4d0f796da3

SHA256
0576d12c1304896d4e023edc51c213ce432287fdd8a68016910fd3cfb1101e1e

SHA512
7d81f3fc673e59214aee6041b3d8a0d974b8b522f132ddcb4ea4bb6198b2726cf51af10f247d2bf4a33cb2cdd0bd8b278bf3a9f0a0db9ab2ab75d52140c0afe8

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libintl-8.dll

Filesize
107KB

MD5
df66f92ddd24eaf37142badbb388205e

SHA1
89c33a308ba012a7e833f2c83787aa4d0f796da3

SHA256
0576d12c1304896d4e023edc51c213ce432287fdd8a68016910fd3cfb1101e1e

SHA512
7d81f3fc673e59214aee6041b3d8a0d974b8b522f132ddcb4ea4bb6198b2726cf51af10f247d2bf4a33cb2cdd0bd8b278bf3a9f0a0db9ab2ab75d52140c0afe8

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libpango-1.0-0.dll

Filesize
277KB

MD5
df3417dcb9c6ea8d84c5d30485742668

SHA1
4a845538626f2ec252cb6a159c6bb75ae2915d61

SHA256
6ec3f84620e85c84ba59824609245df56a451da1d6e5fda9a0bf77e3010a0273

SHA512
0af4f81e0794a2b99fc8c392d778988dfe6a0195c5d8a547e26fd76c62faf9e5c1aeb754c013d5124c98211a91e4cb94785062901b2eadd6722540c4e788ce9d

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libpango-1.0-0.dll

Filesize
277KB

MD5
df3417dcb9c6ea8d84c5d30485742668

SHA1
4a845538626f2ec252cb6a159c6bb75ae2915d61

SHA256
6ec3f84620e85c84ba59824609245df56a451da1d6e5fda9a0bf77e3010a0273

SHA512
0af4f81e0794a2b99fc8c392d778988dfe6a0195c5d8a547e26fd76c62faf9e5c1aeb754c013d5124c98211a91e4cb94785062901b2eadd6722540c4e788ce9d

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libpangocairo-1.0-0.dll

Filesize
81KB

MD5
b346ee05a9ce406ee44e9949bd8f58bd

SHA1
d92e181f3e00576c54155ecd02d57a4239eb6a3a

SHA256
6778eb6f318453f7c0bd89d154ea461d6032a22eb6395ce014635eb951556f47

SHA512
cdee2050045639af0cd741f0a1377ee65c4c6032b90083cd83d989fb5e2c2dd8f6e6262f5c61ca26e5b0c12a82e6c07ab8a7167100473d6ec70a6afd8db135d2

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libpangocairo-1.0-0.dll

Filesize
81KB

MD5
b346ee05a9ce406ee44e9949bd8f58bd

SHA1
d92e181f3e00576c54155ecd02d57a4239eb6a3a

SHA256
6778eb6f318453f7c0bd89d154ea461d6032a22eb6395ce014635eb951556f47

SHA512
cdee2050045639af0cd741f0a1377ee65c4c6032b90083cd83d989fb5e2c2dd8f6e6262f5c61ca26e5b0c12a82e6c07ab8a7167100473d6ec70a6afd8db135d2

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libpangowin32-1.0-0.dll

Filesize
94KB

MD5
2ba1e13779bf52822c8133c97c4f0ae1

SHA1
7173f986dfd33b970c02b26da01d1a9c14f5ebf5

SHA256
af1ea0c9370bc32ee01167d3a177d6edd979fb95c23e3fecb502aa5ef1a4ebe3

SHA512
3d54e59a8786329de8e174c3b1460ee60159ad70ebe3b1e244fa1d85d3108745cf07eca51e7068656960c136ea523de21b58702781794c901e8c0e98208015c0

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\bin\libpangowin32-1.0-0.dll

Filesize
94KB

MD5
2ba1e13779bf52822c8133c97c4f0ae1

SHA1
7173f986dfd33b970c02b26da01d1a9c14f5ebf5

SHA256
af1ea0c9370bc32ee01167d3a177d6edd979fb95c23e3fecb502aa5ef1a4ebe3

SHA512
3d54e59a8786329de8e174c3b1460ee60159ad70ebe3b1e244fa1d85d3108745cf07eca51e7068656960c136ea523de21b58702781794c901e8c0e98208015c0

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\share\locale\ca@valencia\LC_MESSAGES\ca@valencia_glib20.mo

Filesize
98KB

MD5
89ca5c2d92fbf2bdacdf82335fd03f23

SHA1
a7d7d4a946646f0b0465f75cb345c4dd4ace9494

SHA256
c0de50aaace3a03500ae05f657fa327b6497f960eb7982d1becb05fbb4d5d61a

SHA512
5b9380d9eac2f341ebc45ae0895a6de38eede097bf23835e4ee1eff6e498a81647428a824e71f645b51b5c3eb15b5578a8fafc7c31d290f923fbcf1cd6fddc91

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\share\locale\ca@valencia\LC_MESSAGES\ca@valencia_gtk20-properties.mo

Filesize
162KB

MD5
2541aedd96c38c4597114697e0ccbc95

SHA1
e6f5f592fcc275e27eab098d5cab4c0869f61deb

SHA256
5f6f58e4fd6a9e639cf75f765c069d6770c33e4748a460b68793d43c91a50a9d

SHA512
3e96112fdbe6d9681304f7e43738848e020bb52916dc8d580516e71c09b5319d00432f7c5c359a659fc0cf54dd98c380e87c3d3a45621189b238e5ba4be362a2

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\share\locale\fi\LC_MESSAGES\fi_gtk20.mo

Filesize
75KB

MD5
d4815558358b4fcc8b9b1ef4f0b23d37

SHA1
89195680503878a8dcbc5d40d15272209ffe44de

SHA256
182554f30eb3e0e3591f5218178148708d02e6cecfc008f9da0702e8cc4315df

SHA512
31affa4b3b8d76463844f74ed45d232a8491efb10f94544550041a165654d440f9f244d543e727efcddf8ad93ee84c34e46c6758ff20f8b6cfe1c2ed427f8617

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\share\locale\fr\LC_MESSAGES\fr_gtk20-properties.mo

Filesize
167KB

MD5
3a0076918c7d46d4268303ee5a9692af

SHA1
48134a0cf01a16f7a7031d9b667047da39608710

SHA256
82a1c067272db808caf24cd4a3a3d55157de4cc40a7af8dbeb83db6d043dfff8

SHA512
78d060ac1b246e50dd8689f04a365a5367ed99abaf4d61f97ce3e1785fabf4d757baf005c0b25dc2d9aa8d7b27e51055901523f13e58d227929a795ed87e8c2c

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\share\locale\gl\LC_MESSAGES\gl_gtk20.mo

Filesize
56KB

MD5
b76be150f5aa94ac070dbf03460dfa79

SHA1
56aa41644c1a11a55163e5d00c461ac304823f65

SHA256
68505c7dc0a89584b12a9e15b17e0bd370b30868f5184d18e10f4d0713c51481

SHA512
67f2343e3687793a404ff875c07a4e469940bcf01881a6e566dbd2e0f9c0f3945a5112af90dcdb1422a24b396570ce67c37cee8ee58f2796366f6878a40bcfb7

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\share\locale\ml\LC_MESSAGES\ml_gtk20-properties.mo

Filesize
269KB

MD5
d0f70f544c86efd5cd62ec5cd6509729

SHA1
7d8c18874a1ec0d1ca5ed21e6db919099822ff4e

SHA256
cf236cfe3a69d46c24518bf8e576d7cb7ef7da0fde9592ab0dc02f44ed128ab3

SHA512
b3911b1545a22dd71f22ac4c7b36372105c76e0007270bc4bb5ec9a98c816211da60a9f6cc028310d8ff673a16ced225e913c034d9c8e5c86e4f7841211cd30b

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\share\locale\nb\LC_MESSAGES\nb_gtk20.mo

Filesize
54KB

MD5
3ba1afac076d1d58bb8ff84073f12402

SHA1
80d3f69b223d0f5176536ff176017dc7f37e4e85

SHA256
449c92afed408e52591423b383be83829ab99442b2f59d29720852164656035c

SHA512
fbf6e1f9460c6413fe0df67df2abb750aa29f60509c2be2023008be914185062fc9cfa481c4e6c5e4aec0e2b05b828a43f828ab8b6852bce6153cab64482b3f0

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\share\locale\sr@ije\LC_MESSAGES\sr@ije_gtk20-properties.mo

Filesize
112KB

MD5
ee2b2af69c61dd1729f1dccd771e65d1

SHA1
86b236b60ac7781d55a1bc4f1af43505e6b23d0f

SHA256
a9a2c2e7ff0371f8873eb6ddf5c4b7e3dadca980855373a134978988faa00561

SHA512
55ba28dccf7ecd8be5f7144d5d3ef5120455346bd39b7056af007c2bf44da6a88ef5100d4af4893a0774ae815fae4a50e8ef63482946e3f94334faceb5c69fd4

Download Submit
C:\Program Files (x86)\GtkSharp\2.12\share\locale\te\LC_MESSAGES\te_gtk20.mo

Filesize
108KB

MD5
4b2a24212bdd59970bbed4c2b0c00cbf

SHA1
bced1aca40443658abc087f410ed7e37b351720f

SHA256
d7bb8c1863171fa2f6efa4e62d55d4eed3a28b17a0cc4774427a28770a65e654

SHA512
e450937e74af7598fc4dbd66141ce29bae9d85d8a5b7821c66a7b75f1258b7a1f3320e09f789479a32b723831bee8669d754786bbfd103c058426f8ca054870b

Download Submit
C:\Users\Admin\AppData\Local\Temp\MSIB706.tmp

Filesize
66KB

MD5
02fb6b551310de9d23fb307aacb51dbe

SHA1
92bdd1ba2df8b88eba961c9aba86a8b411aa8d9f

SHA256
ecc3fef67c2ab89ed1a5b22de807aa4b46827ba517c8d71291e674c611a16f13

SHA512
459661a6559f62cd637b01c5587b39829cf081e6bafa8fe7689fa4963ed520ce2b415921c92e3e4bef86be08dbb0fb29ed0b0b30b44d8c66338285a997f6090d

Download Submit
C:\Users\Admin\AppData\Local\Temp\MSIB706.tmp

Filesize
66KB

MD5
02fb6b551310de9d23fb307aacb51dbe

SHA1
92bdd1ba2df8b88eba961c9aba86a8b411aa8d9f

SHA256
ecc3fef67c2ab89ed1a5b22de807aa4b46827ba517c8d71291e674c611a16f13

SHA512
459661a6559f62cd637b01c5587b39829cf081e6bafa8fe7689fa4963ed520ce2b415921c92e3e4bef86be08dbb0fb29ed0b0b30b44d8c66338285a997f6090d

Download Submit
C:\Users\Admin\AppData\Local\Temp\gtk-sharp-2.12.26.msi

Filesize
24.4MB

MD5
b566eaaab90c8de221b732dd324079b1

SHA1
afd6837d780746c022e270cd9303c1527ddefbd7

SHA256
4ea15710789c1a58f5094ca996cd28130d2ab04533a034d04e814b8cbe08b29b

SHA512
b7518a2447724de20ca60ad0d68fcdf62a4f18c2b8412f667bf7a910335bc50034d59852725c0476c0290dd028e992b8760c40f66d671f8f021f2c0fde3e1482

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsb1440.tmp\AccessControl.dll

Filesize
10KB

MD5
055f4f9260e07fc83f71877cbb7f4fad

SHA1
a245131af1a182de99bd74af9ff1fab17977a72f

SHA256
4209588362785b690d08d15cd982b8d1c62c348767ca19114234b21d5df74ddc

SHA512
a8e82dc4435ed938f090f43df953ddad9b0075f16218c09890c996299420162d64b1dbfbf613af37769ae796717eec78204dc786b757e8b1d13d423d4ee82e26

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsb1440.tmp\AccessControl.dll

Filesize
10KB

MD5
055f4f9260e07fc83f71877cbb7f4fad

SHA1
a245131af1a182de99bd74af9ff1fab17977a72f

SHA256
4209588362785b690d08d15cd982b8d1c62c348767ca19114234b21d5df74ddc

SHA512
a8e82dc4435ed938f090f43df953ddad9b0075f16218c09890c996299420162d64b1dbfbf613af37769ae796717eec78204dc786b757e8b1d13d423d4ee82e26

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsb1440.tmp\ButtonEvent.dll

Filesize
4KB

MD5
55788069d3fa4e1daf80f3339fa86fe2

SHA1
d64e05c1879a92d5a8f9ff2fd2f1a53e1a53ae96

SHA256
d6e429a063adf637f4d19d4e2eb094d9ff27382b21a1f6dccf9284afb5ff8c7f

SHA512
d3b1eec76e571b657df444c59c48cad73a58d1a10ff463ce9f3acd07acce17d589c3396ad5bdb94da585da08d422d863ffe1de11f64298329455f6d8ee320616

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsb1440.tmp\GraphicalInstaller.dll

Filesize
104KB

MD5
9285eb8305156d54d41d40e654c889e5

SHA1
ae0eb1d50f20829bffd49274b271e1f911914d3c

SHA256
a2490b0c1441dd13a422c534ed523423564cb06beeb29f72faf9de34b6b9a2da

SHA512
327e5f7e241a470c0ef01088c9f194e18c81297a8ed3ad21e1b1757580ec1f4efcadf2805cf453e58877269cc713612de8b10940bcd5730ad4bb9f38bfbf799b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsb1440.tmp\LangDLL.dll

Filesize
5KB

MD5
9648b84aec426c8426e8312b73956216

SHA1
9105d2ac9b9d627c1f77708ee3efd2e8760572ca

SHA256
b60aec1c8956d2140fc1539f216768913f39f5731d708b0e060851823b4ff319

SHA512
0d4a2ce9d01f922d7913606b33ebb5d7be91acff5d8f295d683162f80d19e7bf7a0ec9b5c464b6b25ac265bc6e198857b2e34d671bfbfbe3754116a9e57de302

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsb1440.tmp\Marquee.dll

Filesize
6KB

MD5
ab9746e7d18cab32348ec95651ea8728

SHA1
38426e0d8f33fac999a5a70dc045915126cbddc3

SHA256
ac3f9622a9b04c005b79cabf178b623021f1a0121f4b2476f90fefebb9a846a2

SHA512
a2c69596e23df0f3c8047464f736c0aa1d696bf5cac0696f75a5ce8468cdbd61b502d107297c34bd1158d78da26e0bb90d5ed951954bf32ffcfcd448fcc0e473

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsb1440.tmp\Marquee.dll

Filesize
6KB

MD5
ab9746e7d18cab32348ec95651ea8728

SHA1
38426e0d8f33fac999a5a70dc045915126cbddc3

SHA256
ac3f9622a9b04c005b79cabf178b623021f1a0121f4b2476f90fefebb9a846a2

SHA512
a2c69596e23df0f3c8047464f736c0aa1d696bf5cac0696f75a5ce8468cdbd61b502d107297c34bd1158d78da26e0bb90d5ed951954bf32ffcfcd448fcc0e473

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsb1440.tmp\Math.dll

Filesize
66KB

MD5
df05e73e13f31d5443b713a087b79746

SHA1
8e10070efb43c2f30757c7485067652f144df4f6

SHA256
857e16967f736d61ee61e56e9566bfa487fcd1bceb4e8b26879551ecfb879b85

SHA512
91309a9ce8b90d00cd74208a5d6b2f2fb981ae2bcb083056bfcb4be3acce2237a87b062a2cbf145bb70c1ecf94dd6cb10bbfccd4200b16fb4eba8b27926ba81d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsb1440.tmp\System.dll

Filesize
11KB

MD5
fccff8cb7a1067e23fd2e2b63971a8e1

SHA1
30e2a9e137c1223a78a0f7b0bf96a1c361976d91

SHA256
6fcea34c8666b06368379c6c402b5321202c11b00889401c743fb96c516c679e

SHA512
f4335e84e6f8d70e462a22f1c93d2998673a7616c868177cac3e8784a3be1d7d0bb96f2583fa0ed82f4f2b6b8f5d9b33521c279a42e055d80a94b4f3f1791e0c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsb1440.tmp\UserInfo.dll

Filesize
4KB

MD5
acbda33dd5700c122e2fe48e3d4351fd

SHA1
2c154baf7c64052ee712b7cdf9c36b7697dd3fc8

SHA256
943b33829f9013e4d361482a5c8981ba20a7155c78691dbe02a8f8cd2a02efa0

SHA512
d090adf65a74ac5b910b18bb67e989714335e7b4778cd771cff154d7186351a1bebbc7103cca849bdfa2709c991947ffff6c1d8fdf16a74f4dfb614bce3ff6fd

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsb1440.tmp\UserInfo.dll

Filesize
4KB

MD5
acbda33dd5700c122e2fe48e3d4351fd

SHA1
2c154baf7c64052ee712b7cdf9c36b7697dd3fc8

SHA256
943b33829f9013e4d361482a5c8981ba20a7155c78691dbe02a8f8cd2a02efa0

SHA512
d090adf65a74ac5b910b18bb67e989714335e7b4778cd771cff154d7186351a1bebbc7103cca849bdfa2709c991947ffff6c1d8fdf16a74f4dfb614bce3ff6fd

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsb1440.tmp\UserInfo.dll

Filesize
4KB

MD5
acbda33dd5700c122e2fe48e3d4351fd

SHA1
2c154baf7c64052ee712b7cdf9c36b7697dd3fc8

SHA256
943b33829f9013e4d361482a5c8981ba20a7155c78691dbe02a8f8cd2a02efa0

SHA512
d090adf65a74ac5b910b18bb67e989714335e7b4778cd771cff154d7186351a1bebbc7103cca849bdfa2709c991947ffff6c1d8fdf16a74f4dfb614bce3ff6fd

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsb1440.tmp\background.ole

Filesize
123KB

MD5
7a4796fc63707c9fd0468f80b9d256eb

SHA1
0f28d84cf84dfee3f4be704b0963f651187054c9

SHA256
d5eb930a432d9c415dbb93d03ddfa5c762fe7060a3e0bb49b9048707f6905dac

SHA512
54a8b9c246a06b7905926765a2f6b28bc7c518806af938f588a7a79810ff4e7ca1de878403c5ba0b6267a73c5413e45b264daab356bc034cb1e341d031cd2609

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsb1440.tmp\background_small.ole

Filesize
4KB

MD5
35725d7e754f37147d1449a567474d18

SHA1
4a4012995c5b9bfb781b8009857a357aac4788fc

SHA256
0425989b111a215ee708078903e58445ffd96e65299346defa9f8bdde357909b

SHA512
06bcd22231b39522d1c9a933a15211ec0122c6d17c05610a1d0d8209b5402dd87f76c80400aa39f447496c8bbff28247c8722c058bf5c9d0c78b63fd37d85141

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsb1440.tmp\newadvsplash.dll

Filesize
8KB

MD5
9bc6c411efa742a5de7d8372afafa2fa

SHA1
2b57865e87c7ca2db97d0296d8cbe0183df2c2cf

SHA256
0cac914c87d4e73875dea8544391e383f441d624ea5ec9a4864d056db161206c

SHA512
092ef3f13a71a46df0f78a3b5eb4492bee32f1a12be27e0c534638ec7723b2a9aac23391768c352289df6a8988cbc6cf96ea22d8f1983b5ccf609e08d1db4bde

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsb1440.tmp\nsDialogs.dll

Filesize
9KB

MD5
1c8b2b40c642e8b5a5b3ff102796fb37

SHA1
3245f55afac50f775eb53fd6d14abb7fe523393d

SHA256
8780095aa2f49725388cddf00d79a74e85c9c4863b366f55c39c606a5fb8440c

SHA512
4ff2dc83f640933162ec8818bb1bf3b3be1183264750946a3d949d2e7068ee606277b6c840193ef2b4663952387f07f6ab12c84c4a11cae9a8de7bd4e7971c57

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsb1440.tmp\splash.bmp

Filesize
539KB

MD5
b0dff68f6915ab6b76f72b7fbaec8db7

SHA1
4615a1fe49676ae777ba0a5d641e98b4d010d07e

SHA256
2e5e9650120352fea040f28d0ffcd8b499dac5677cfd1d9e754d3b419404286d

SHA512
551f43985fa4dede1ec84510afa6cc89ba4b836bde98768a146e4649966b860461129ba7b7aeb09cbbd004afae5f022a25ba1afecc5013e3709ba126616062f0

Download Submit
C:\Windows\Installer\MSI9429.tmp

Filesize
4KB

MD5
715b818a883cc4f7735076d5b700a1fa

SHA1
874e332713409e59321a4a90760626b3b29ae250

SHA256
29e897059d981f8c7380ff9733526c9fdd58fccd67878040eda18e1a5b44a1ed

SHA512
ae14c423a1d1e04e1003317ecf33910d476a7e883b1c4a2f08e72665854edb77f658e1aaa25609ca157ddc639c59dc9a38f88a5e322a9ab7f24b187f20c2a837

Download Submit
C:\Windows\Installer\MSI9429.tmp

Filesize
4KB

MD5
715b818a883cc4f7735076d5b700a1fa

SHA1
874e332713409e59321a4a90760626b3b29ae250

SHA256
29e897059d981f8c7380ff9733526c9fdd58fccd67878040eda18e1a5b44a1ed

SHA512
ae14c423a1d1e04e1003317ecf33910d476a7e883b1c4a2f08e72665854edb77f658e1aaa25609ca157ddc639c59dc9a38f88a5e322a9ab7f24b187f20c2a837

Download Submit
C:\Windows\Installer\MSI9F65.tmp

Filesize
4KB

MD5
715b818a883cc4f7735076d5b700a1fa

SHA1
874e332713409e59321a4a90760626b3b29ae250

SHA256
29e897059d981f8c7380ff9733526c9fdd58fccd67878040eda18e1a5b44a1ed

SHA512
ae14c423a1d1e04e1003317ecf33910d476a7e883b1c4a2f08e72665854edb77f658e1aaa25609ca157ddc639c59dc9a38f88a5e322a9ab7f24b187f20c2a837

Download Submit
C:\Windows\Installer\MSI9F65.tmp

Filesize
4KB

MD5
715b818a883cc4f7735076d5b700a1fa

SHA1
874e332713409e59321a4a90760626b3b29ae250

SHA256
29e897059d981f8c7380ff9733526c9fdd58fccd67878040eda18e1a5b44a1ed

SHA512
ae14c423a1d1e04e1003317ecf33910d476a7e883b1c4a2f08e72665854edb77f658e1aaa25609ca157ddc639c59dc9a38f88a5e322a9ab7f24b187f20c2a837

Download Submit
C:\Windows\Installer\e594fdd.msi

Filesize
24.4MB

MD5
b566eaaab90c8de221b732dd324079b1

SHA1
afd6837d780746c022e270cd9303c1527ddefbd7

SHA256
4ea15710789c1a58f5094ca996cd28130d2ab04533a034d04e814b8cbe08b29b

SHA512
b7518a2447724de20ca60ad0d68fcdf62a4f18c2b8412f667bf7a910335bc50034d59852725c0476c0290dd028e992b8760c40f66d671f8f021f2c0fde3e1482

Download Submit
C:\Windows\assembly\GAC_MSIL\policy.1.0.Mono.Cairo\1.0.0.0__0738eb9f132ed756\policy.1.0.Mono.Cairo.dll

Filesize
3KB

MD5
c1d9a0fefa2832d6bc19e62ba4efe30a

SHA1
b934b221c8f95ab1952431aee5a19d98807fc1b6

SHA256
bd5428cef0f01f5befd5deab544f879b65ab9b4a90bcff3e86c688be926d5d49

SHA512
858d30800eea39c11e426d4184dbdb38aa829190f7ce31c85af32cd328ddb8f68c6cd33a0ffbc04bbee04efcdf13a497c77e4810b9035f636bd894f10432c303

Download Submit
C:\Windows\assembly\GAC_MSIL\policy.2.0.Mono.Cairo\2.0.0.0__0738eb9f132ed756\policy.2.0.Mono.Cairo.dll

Filesize
3KB

MD5
19188f70e9fb2e8002f964234f1fc55e

SHA1
4dde7e3b27d3838e3b6fb0a92c268aeb5ac66a8c

SHA256
2dd4a811c9ce123edfcca2a994ab2235f3bc2307f99cdd5f566dd97b5e3929f5

SHA512
d8d207fe8d94808a45b9d14c9b6ef57d457f670e4d17a69bf68bda4bbc34622ae50f86aba3a3d991846dc705803150731af60cb220cb0dd6af2e883c1b762dac

Download Submit
C:\Windows\assembly\GAC_MSIL\policy.2.10.atk-sharp\2.10.0.0__35e10195dab3c99f\policy.2.10.atk-sharp.dll

Filesize
3KB

MD5
e6579e39204acf3f4c325db95992c4cf

SHA1
d5d385bb8b98755ec5d14a69b95fa9d4b9f41c9d

SHA256
daf2ffcf665a1f69a5f11496bbe42c32acc2609a222d647648e2b34e8dafc653

SHA512
958464b8f37fac87a0081c8aaf5d67c6800493c8cce2710dfca8539db1aafb520d1a926688438b39b3b4bded656cd152a0d4cca0ab1e235c611fed04d5cce2db

Download Submit
C:\Windows\assembly\GAC_MSIL\policy.2.10.gdk-sharp\2.10.0.0__35e10195dab3c99f\policy.2.10.gdk-sharp.dll

Filesize
3KB

MD5
e8865711751da5fba9b0ef4d9519b8cc

SHA1
06f3d4839df891cb218a899fb975229a500a80b8

SHA256
a2c2e2d379520756f58bad86789977567f96897fa946293e6059f26eca933e68

SHA512
753732b2dd10bb1cf2141c23c8a790f3f0cc74bc3a12b7163ebd8cfb288895b855a18d153de3a2187b7eb51e26ad622479a48d46f3c9bb41f94ccce2ac39b442

Download Submit
C:\Windows\assembly\GAC_MSIL\policy.2.10.glade-sharp\2.10.0.0__35e10195dab3c99f\policy.2.10.glade-sharp.dll

Filesize
3KB

MD5
26d92f66bbf6c06e08b94145b170ab8f

SHA1
f8b45eccd23d5c8c52ed7f88a4868ba2e69f9e35

SHA256
36a96ae044151fffe02dc7160d87d20d2989cddac40cf70652b8b412e0feba2f

SHA512
024630ff6bce0de540a97eb64064a06b24e91dd2f45d04bc90290a247f7f137fa4f9622b12ad87a895ffd2eb118a39c69058e1ff5ad148a722069301779d18fe

Download Submit
C:\Windows\assembly\GAC_MSIL\policy.2.10.glib-sharp\2.10.0.0__35e10195dab3c99f\policy.2.10.glib-sharp.dll

Filesize
3KB

MD5
b626ee3ef5e2b82ec5b62226cf8ee470

SHA1
14e820c9f11949ebf2bcea4eeffd64ddc3f8818a

SHA256
a099a25dc46e108dff4fbb3ec7f9a7c0d36e8c33e82ae5a15fdd0181ef48c4a0

SHA512
a85aec5659f109f4a3d6108b344f8d481c4f1d525b8fca02933821aff213915e25dcc6e127ee51b12571d211595621ec7a91b497d58f6e96a9e831a2ea4b1deb

Download Submit
C:\Windows\assembly\GAC_MSIL\policy.2.10.gtk-dotnet\2.10.0.0__35e10195dab3c99f\policy.2.10.gtk-dotnet.dll

Filesize
3KB

MD5
08662aad2b66c1c52dbd7c5e7b84b0d7

SHA1
661fe503eeaa012f5605e7b40d1bde9ceabef0ca

SHA256
684bc01931063c03430492b1e05fbf0cff201e3ac8ade67be8071a0702f2342f

SHA512
0cf8219000237baa203acfde4c0a9479668640454207f5b40799b81e4f9ce03d5a4d1cc3f42960db6caed2b2daf1bb0a275ed617da264ca9ae35ae81edfbc347

Download Submit
C:\Windows\assembly\GAC_MSIL\policy.2.10.gtk-sharp\2.10.0.0__35e10195dab3c99f\policy.2.10.gtk-sharp.dll

Filesize
3KB

MD5
fe0ef04f25807093e3dcdaf54c216a31

SHA1
7906d72cb8ca61e1f2c1c82468f19e4659c9acb3

SHA256
daf9ff9739ae61520b67b16bf9765f650ee9047e5c7955d321d67bf54b0c2a07

SHA512
83176b79b040c5adec08d06921ca8d14b81895d151affa862879f8245e083ef14ba0476559b2c71246734d5f0d1b90a2d490816ebf259fdde7044700a073d379

Download Submit
C:\Windows\assembly\GAC_MSIL\policy.2.10.pango-sharp\2.10.0.0__35e10195dab3c99f\policy.2.10.pango-sharp.dll

Filesize
3KB

MD5
b68a6e1ad62ede7229c92bff46dc17bd

SHA1
1d88432fcdfd507694cb654e6c44452ccc83d4f6

SHA256
70878cdbca4cdf1fc1900ad0d524de46336b0690992803511374e5520a367877

SHA512
98559359a109f1fd178a9e43a70cd31ef7b5cb45afc433b6ea6b8cae08c3669c7c988dbeb34fe4822e904d5aa2292f14bd85736d227cb8cd1aa3b191008da1bd

Download Submit
C:\Windows\assembly\GAC_MSIL\policy.2.4.atk-sharp\2.4.0.0__35e10195dab3c99f\policy.2.4.atk-sharp.dll

Filesize
3KB

MD5
3b70953752ca78174a771fe06f30a6ae

SHA1
b7c78c33977b1fa8ffb015c81ac0267967863715

SHA256
9c3d2b40d75ecddbee6043a84d193815dd3ef81cb5975db39b608afaa4cb396d

SHA512
8640a4850c1569721957ca624264cb1c0fb56e680532c9b6214b689e8e3a2570be2480b99535d905c9945e76813d58bd42381217fbd3674d65826e369a88e2c9

Download Submit
C:\Windows\assembly\GAC_MSIL\policy.2.4.gdk-sharp\2.4.0.0__35e10195dab3c99f\policy.2.4.gdk-sharp.dll

Filesize
3KB

MD5
1a1a326bfac8edf79d341d5bc5a80d61

SHA1
b142e8b8f83ba0cc0c7d0dd0d67c2ad8a3d7535c

SHA256
c6abd08b3b51c0af292782badbedc29afb33fb85c03a7198678c727bfcf35a69

SHA512
8425013a53da438c7ba3843a26df191650eaaa2e02c5029d85b960223fe056821124b108908f9d0a063de3a9d0571f70b0245a9bbe5e4c0f9454cbc302359a97

Download Submit
C:\Windows\assembly\GAC_MSIL\policy.2.4.glade-sharp\2.4.0.0__35e10195dab3c99f\policy.2.4.glade-sharp.dll

Filesize
3KB

MD5
947516394ba9f5e99cb51e630a05b49f

SHA1
443d84d2c30b94b6ab97a29049eee70efc3a4a5f

SHA256
e32d3a6cbab0b472ae162331caff58ef90d4dcf8db55c2580ad7830fad852d8e

SHA512
61c3d18b44aecf4b211d690172b5f981473877d770166a8e1dbd799138c0b5d5598a4bd5f631bfc3ce5d8719b692b41e235b260b3dcaca7889101f412dc2820b

Download Submit
C:\Windows\assembly\GAC_MSIL\policy.2.4.glib-sharp\2.4.0.0__35e10195dab3c99f\policy.2.4.glib-sharp.dll

Filesize
3KB

MD5
34411fb26b04d9b41923085c67863be3

SHA1
af6b52dcde6e77f3dc3382e5335c09fea39aeeed

SHA256
746cdd12284b7f8570444fd9d451bb5a3c0a2d895869704412df0fca95477c20

SHA512
87c1587acad195e814dc55e7dba4b6e4daa76ac022e2ecb7d9796fe2d9c2c955ffdd95aa450bd258093a8930b0a3631dc6db6cee9945fd3f7b29f9c4acdcc09f

Download Submit
C:\Windows\assembly\GAC_MSIL\policy.2.4.gtk-dotnet\2.4.0.0__35e10195dab3c99f\policy.2.4.gtk-dotnet.dll

Filesize
3KB

MD5
ffddeb2939e4969802764e1a5fe3ce21

SHA1
6b93824c9866e05de2055b1476fc163610fb3daf

SHA256
d41d7bbf357de1fa8c97d3b728b6a6ee639a3bcb13dbe9c718ca57bbf67859fe

SHA512
0477d7a4ef87249d9c1ab6607c04472a098685a79e2c5b577889dd6a332031d1f26e17362cd133ec95a2aeb130060a8efe869880ffdb060d5acf58c5eed9aa84

Download Submit
C:\Windows\assembly\GAC_MSIL\policy.2.4.gtk-sharp\2.4.0.0__35e10195dab3c99f\policy.2.4.gtk-sharp.dll

Filesize
3KB

MD5
64c629a3fbf01ee401395998910885fd

SHA1
9fee0bbad702ba891597cc8b4217360ee0a0a3e8

SHA256
2fa5f97f388c3365ca08a387cb63b9c1efaafd11e22c3cce9735487f126378e0

SHA512
a0359ba68457f74c9541c8ebdfc85218994af3f0465729b775b2186c92fa5879822728b4d1637e48ae329a6bed035c8ba6f46e42c54851256213af7760e2f6b6

Download Submit
C:\Windows\assembly\GAC_MSIL\policy.2.4.pango-sharp\2.4.0.0__35e10195dab3c99f\policy.2.4.pango-sharp.dll

Filesize
3KB

MD5
6c62a3a853dacf194790b9aaffc938ad

SHA1
03cb20348002c1741a4998da51e3828b7a2ad149

SHA256
3a0dc03a79b510b27bf2845dd9752b5c32aead6a18fd7ae90b314be00497fad8

SHA512
d09e55c0813efd0549a5996a91b46140edde5fd0ce2c3a60154fc9a5f70ca626a171949e59e3cf49d88a902c8a7e1a834c35e038f5189d7b38bc0a5bf32778f5

Download Submit
C:\Windows\assembly\GAC_MSIL\policy.2.6.atk-sharp\2.6.0.0__35e10195dab3c99f\policy.2.6.atk-sharp.dll

Filesize
3KB

MD5
52064c51f135fa1645cafaaaf6ea272d

SHA1
806a04d8ec79b8b054d424400cce971440182045

SHA256
5520f3163127529ae3871059f31d5e0d87b416792a0d43d301a20d41a6b6ebc6

SHA512
fb443eab60b4ebc307dcaefa6642c79749034d52ddd904e4fdd01c115f6d78c5271345088950220a425ec2f1cf7b757ec09ac79f8c0bebc00cfa3ffe69705d44

Download Submit
C:\Windows\assembly\GAC_MSIL\policy.2.6.gdk-sharp\2.6.0.0__35e10195dab3c99f\policy.2.6.gdk-sharp.dll

Filesize
3KB

MD5
b7431d2439f71375704332cee492fa9b

SHA1
7ea693c88902865576a4e268ae3e03821237a633

SHA256
ee3e5d7cb84928653e8f65673bda5a7e470bfc7f508e221f87d207da2ab8125d

SHA512
6877dc9b8a0aa4ba28fad29d9cf072419f3214c62217a8a88b205439934ef359b4acb9be9a5810cd3e6f910e15948a7ce2acd21b7d30006dffd9d2676edaff42

Download Submit
C:\Windows\assembly\GAC_MSIL\policy.2.6.glade-sharp\2.6.0.0__35e10195dab3c99f\policy.2.6.glade-sharp.dll

Filesize
3KB

MD5
06eaaab7f330170735a5875ed031215a

SHA1
365caa001ba66ab2f274cc0f5247c7ad5a4f7510

SHA256
a786cb901de5e0d2b82c114d70c69b39bc34347ffb04d0eb1232cebff9168bc1

SHA512
2e256efc28cc83fa27bb5fc70a75cc6ece062956d6f300e85725c74f5035a0d767c4792a2dca2120e796679bfaf7436381ed09c745ec42ca260f43807500acf7

Download Submit
C:\Windows\assembly\GAC_MSIL\policy.2.6.glib-sharp\2.6.0.0__35e10195dab3c99f\policy.2.6.glib-sharp.dll

Filesize
3KB

MD5
8e146289a7266931e0bf530d1fec8bdd

SHA1
aa7297893538c6dfd9b02edf07d6ae3304f9d9a6

SHA256
6a28167464a65d0302c4ef71212816f73a584c48bd9bd35aa371ff4e3063c537

SHA512
949a7ba37f4283866b41a7c0579b46580121223f5c9586007be9f39abe3a751ed87edafcacac6cfb804c3c7a7ef6645cb9a05e77f0adc2975dda18dd660d940b

Download Submit
C:\Windows\assembly\GAC_MSIL\policy.2.6.gtk-dotnet\2.6.0.0__35e10195dab3c99f\policy.2.6.gtk-dotnet.dll

Filesize
3KB

MD5
d907a4abc1bc116ea8192d6c7dd0b713

SHA1
5d64909789c7f5bcce731941c11725211abef324

SHA256
b14b8ddd8f5174d3259f2adb3ee084a0eefa484b21f173286db2e5baf7b4a7c9

SHA512
217af992259c5218a2d4a0220370211d8287f90d3c53a594e9ca51c5649098fc358a2fe66d11fb82dbaefc54bb48fb9c8cabc27384404263013a62e4d2d51a2a

Download Submit
C:\Windows\assembly\GAC_MSIL\policy.2.6.gtk-sharp\2.6.0.0__35e10195dab3c99f\policy.2.6.gtk-sharp.dll

Filesize
3KB

MD5
78f729eabdcf92aa6a168a366d7062db

SHA1
b479b5f854e1ffa0bcab437c080d04bee4c2d339

SHA256
b01eba736267f8a38af653bf9a3d6c53ae14cb0fb7d149938b5a45a9207434ac

SHA512
42f92ec6064c07b373964f409061f7ab2481c20a24bba8e5a06db0b3c6f75938fe748f4c78face5c58fc1a8456c11ace3bcb134b0364dd58dc1f0ff1c031f8b9

Download Submit
C:\Windows\assembly\GAC_MSIL\policy.2.6.pango-sharp\2.6.0.0__35e10195dab3c99f\policy.2.6.pango-sharp.dll

Filesize
3KB

MD5
0cc17501711222d0fc0f70e89a2bc599

SHA1
0140f75d4ea3b73d7885325f90209c85948ac281

SHA256
133b008c81bf5622ef446e0ac5820d7f73ecdcb711b438204d03b417bdb38a55

SHA512
4f07ac8262c5d56cd79edbe8916995e6e10065e9f80dd76796efdb1499b79e5b8833bf0481536ee5a760754259ca18dfda052f4f702074bf946643e1802edc3c

Download Submit
C:\Windows\assembly\GAC_MSIL\policy.2.8.atk-sharp\2.8.0.0__35e10195dab3c99f\policy.2.8.atk-sharp.dll

Filesize
3KB

MD5
ffef9a6284df0c496fd73ff6bd8b5cdb

SHA1
56a221cdf86e4a9010f307c8d139584b174694c2

SHA256
498ef1eb290b296629ced5a9a0fe06927db818b7d3c2a04017d0d45e0597106e

SHA512
c689cbcaf967672ba0a7800210edf49150b9b2896c13b940bb8091d4314bc470f043f345073475d469ccb0e650da861a900635b762ceba977c4748f6ce7116e8

Download Submit
C:\Windows\assembly\GAC_MSIL\policy.2.8.gdk-sharp\2.8.0.0__35e10195dab3c99f\policy.2.8.gdk-sharp.dll

Filesize
3KB

MD5
795e49fc9a8185dda431682711db32c3

SHA1
e72d85b785ce7a517002abee48ee3aaee89ae50c

SHA256
30dbc85aa1e4b27ffc605fd966a978c75e5ea33417ee51dc1a13c3f318da9f24

SHA512
46830d4c02215019013d47fd87cfd8e09c58158563cfd13dc178dec6e90717fa5ed73d1d486c2f1679de37771ce9746644b2003722c9aceca8243e80df737c84

Download Submit
C:\Windows\assembly\GAC_MSIL\policy.2.8.glade-sharp\2.8.0.0__35e10195dab3c99f\policy.2.8.glade-sharp.dll

Filesize
3KB

MD5
2ead70cd28c9a8a0cf8efb3d97acb60a

SHA1
8d59edb7ebde7c1eb26444ed61c845b7b7f6fcc7

SHA256
5e9b9dc7fbae12cd9aae67e5acf7be38ba80da2573654e9ce9f373baede78186

SHA512
4fb1eee124bda9f7fa3ff341d1be19bce155bb6d7aeba5cf844df4f4276391dcd1db92a65d9f43bf9cf44afb16c20d7dc76acc35f84e94adf74e7ebde940f3fc

Download Submit
C:\Windows\assembly\GAC_MSIL\policy.2.8.glib-sharp\2.8.0.0__35e10195dab3c99f\policy.2.8.glib-sharp.dll

Filesize
3KB

MD5
6b5679f8e2c01bbba5759c01307bea7a

SHA1
78bedd9411ff63657b544f32cd6fcf19ae89cacb

SHA256
34adaf9eb40d5632c43453b86299c0c0d87187365ed34ce1950bac70627e1706

SHA512
12cbdb96e391d96a9e633a67d63dfefb82c82c3b6d461ec2cb88d3afcc351504dc55d15638c4c3b54002c48dfe13e98fca2aaa4b321e7816f44245aec979f6cd

Download Submit
C:\Windows\assembly\GAC_MSIL\policy.2.8.gtk-dotnet\2.8.0.0__35e10195dab3c99f\policy.2.8.gtk-dotnet.dll

Filesize
3KB

MD5
5901c21b3fde019c6e06bafb67166f95

SHA1
aa181ee4c5cedcfc616d91bfd53175c6e378a613

SHA256
b14c09e7d286e463fa1ec8cb79d8d9c4604e0319a14a27a5bb0b8a62f641fe39

SHA512
f5e2eba548b8094c3d8526ae67a035497cca17054de8786210cfeb5861f20c20be70fe220b302905d2c9386e3c614e95e4fafbbca6e875c64db9c5a8d9b9a9b1

Download Submit
C:\Windows\assembly\GAC_MSIL\policy.2.8.gtk-sharp\2.8.0.0__35e10195dab3c99f\policy.2.8.gtk-sharp.dll

Filesize
3KB

MD5
7271b03efdf1f48f600983e62239f680

SHA1
cab5e434030782757e04fe0e4500db9691edb2fd

SHA256
97c1abb956a470847025870ecc403cef88423f1fb3d35ff8691c5634385af04d

SHA512
dbf41e9c1e8a98efac0215e743e137e2d1c5fda59a4b01c5f11aa8b6f5dd049017f8507c6ec07bdc368407ce67376303b5b659c8821c8c97b0cdebef3c91f5d4

Download Submit
C:\Windows\assembly\GAC_MSIL\policy.2.8.pango-sharp\2.8.0.0__35e10195dab3c99f\policy.2.8.pango-sharp.dll

Filesize
3KB

MD5
b6d1d13a8088f4ed5720060750a8e7db

SHA1
016b829deb22699407d4fd7ce442e50ae15d1d7b

SHA256
ef275e23b96e2baff916b876f5012cd68b1cbd4f2a52eebf9cbb64eb87545c49

SHA512
8103d573c874958eb14a13d244269f1de2f0d53110095662060ff62baac86ed297745080892d5ba9fb08042e467f854950499fc256986df431362d9f50eb2ec8

Download Submit
C:\Windows\assembly\tmp\3PVUYW30\gdk-sharp.dll

Filesize
236KB

MD5
eb6a11967b5e2e5f160bc2f0e9a51fcb

SHA1
c51317a733e00750e44d91fbaee8b79268af36ff

SHA256
d87b2fdbae0e4395178780393096f28c0e93df77117907c792fb6f5a2fd1a152

SHA512
786ba29175ec6948a40254586a9d32a92f97b0198c5c62a4158495bc7651cc84004ae027e3c1b75dbfed9f2ed75d8e64db54f11f0d3f880e372694f76111cfb5

Download Submit
C:\Windows\assembly\tmp\6BKWAICU\atk-sharp.dll

Filesize
182KB

MD5
7a5f2b58da41ef40fb622baac8a7a03c

SHA1
bfa524e25746856bf1c8c550743c6ce22678de38

SHA256
c3510cfc1504c3c1f03d653562e8da899abb253cabaa290be6b36ecce39a6118

SHA512
74647744fb555560ab8c628296c776696bb1f0da2ee1b80f280ca2edda2af95d0f5c42c489595244e77c311cc987fc5bf3293b308952c7e4845a253622e69f25

Download Submit
C:\Windows\assembly\tmp\8BEES041\pango-sharp.dll

Filesize
95KB

MD5
4de483891e7c26637be3e6af9191be7a

SHA1
376e74361fc481e8260433e4d84206d657cac6fd

SHA256
339cd4d9ec4cabe95cc416d9892733cbcc0a3b7cb93d5dd91cdbd8928b35433f

SHA512
dd97610df428cacc66352744de943e551fdd6a031f58ac8d2c1da041615545fa97a56a7914dc6fbb686d2e209c00633f526d9218190fa371d7e3635173d59c74

Download Submit
C:\Windows\assembly\tmp\FA58OMI2\glade-sharp.dll

Filesize
33KB

MD5
dbb3c600f77328222a4353aaacbe3fa9

SHA1
3bbe1686be02b4ca855b62d3432d83b691420d97

SHA256
db279035d094cc443e253b22ec5e9259dec7f824093fbaac4bde467426c6bd3c

SHA512
c18d5624b2c07abf54e455c6d3fd6b4c84581d8119554a8808c17434660c445759d855ebae23d32afe10a11b5a641d59f8e6223f0fcd4950ee3a028257755936

Download Submit
C:\Windows\assembly\tmp\JHU4BH94\gtk-dotnet.dll

Filesize
5KB

MD5
f98ce2c3d5fe7355e6b077b0e5a46153

SHA1
44e656dff43cde06885eef52b3884b368fccfe13

SHA256
baf9b1b91b72aa8a981dfdc4242e001a5eb41e16d6545550fa29e2f0de74f6ff

SHA512
c3b5e39632b03f6b655c25be87c6f3d5b453588a6e34d9de56e02b3ad75ca0926a3da6284ea04545297bb5bdfd03e46233dbe450329c20ae69ff3d6a7452e729

Download Submit
C:\Windows\assembly\tmp\LGQE18K4\gtk-sharp.dll

Filesize
1.3MB

MD5
ad69dd1f345c763bc376df0c39f9a18c

SHA1
b2a55da7b5586507065540bb1cc0fd8d6ec54cc4

SHA256
23b17e62ac25624d1e8894f0c9d4a2daa500eaf87b749fdc5665c03202896194

SHA512
fee575c943b6af84586c70edecdaa33b734c65c93446864a2dab909547e98c96de5af1c231f61838499fd23cab8f63a5146a2a0b16d3b8a0adc1d2e4dc28715e

Download Submit
C:\Windows\assembly\tmp\MIWRKB14\Mono.Cairo.dll

Filesize
58KB

MD5
4627180394038e10d5db4fd728a7183b

SHA1
e7d8375538262680e54fd6c09c0a6e857725803f

SHA256
db809b40a691f5dd6c547ee230c1ee7d5192e2e72b225b868180670f002a6b9d

SHA512
86ffe75c92d3c740e781b847b76f84d6db249980e78b2b58774272520b99dd80e0778ae061fae09a558e5acf89ab8c220eef368c35bb303680a7e42d4736c864

Download Submit
C:\Windows\assembly\tmp\NGGSLWCV\glib-sharp.dll

Filesize
91KB

MD5
750c90adcea44fc08d60e0da7ea5d16e

SHA1
916c6040d1ffaec6dccd58bc5e06d845266da64c

SHA256
26bfd1663ad2410a5783d2cde72a89fd6b2c901e0f82ef2b62f188a639328e45

SHA512
c9687bfb818cda481285efd448cbff9c38b58664a4a2eb07f542cd9d9c11995925caf8ea0f35f6cd54a79d63123981ae8c50e65741172250ded7d009a6ed537a

Download Submit
C:\Windows\assembly\tmp\PA8M9NTQ\Mono.Posix.dll

Filesize
177KB

MD5
54f6735fc574702af63b7c9cc8eddda7

SHA1
72feb1ba7dabab9676bf142d3e0ed5369d9489e4

SHA256
1852be9e29821ee737f1298c7bca968c17e8ed5560fbb37135b804c26a566e96

SHA512
e03a3bb5aabdfd9baee2b7662848c8d4166c7c4dddffba0d99a73ddcf39d7b880cf43f7c28c5852cca0fb96504cd0f08d800cee7d4139ab01fbaf53715d72c58

Download Submit
\??\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\System Volume Information\SPP\metadata-2

Filesize
23.0MB

MD5
6c4d30d7ce0b0eefa909c8f3e52d4014

SHA1
ce759895d65f11c588c831f6978a472d8c71e232

SHA256
25ca5f164d9425ae33d0745a246033e376ea450440a6e47cc2fbcaf3f00ff091

SHA512
4a9bd38e8901db886424c4e7784237aa42951623b8980939d71d0728881d833a1506f1a6d33014a427cd935d1a750c362c6b5147c552e8fc4b6de330b3e1e79f

Download Submit
\??\Volume{dca10565-0000-0000-0000-d01200000000}\System Volume Information\SPP\OnlineMetadataCache\{4e5ca35d-e24f-432c-b41d-2cab8261ec32}_OnDiskSnapshotProp

Filesize
5KB

MD5
052ea451037dbfa42c72d04a5f17f8f7

SHA1
94f5d1caac65cea25c1358cb1251e32bbff77eef

SHA256
66e5975115c1a8d8ee73c3aff3e09fc2077854dfe663eba894fc33b6cbd9c5be

SHA512
e1488dbb7a7fb43b1ba7577260e2440522e0f5b12d8048c09273fa4aae9ed9433699f6b2241a33f1313c8b08a625b2f7097eb863da3e18f50291a5054936a963

Download Submit
memory/316-199-0x0000000010000000-0x000000001001F000-memory.dmp

Filesize
124KB

Download
memory/316-175-0x0000000010000000-0x000000001001F000-memory.dmp

Filesize
124KB

Download
memory/852-703-0x000001F9EA600000-0x000001F9EA608000-memory.dmp

Filesize
32KB

Download
memory/852-687-0x000001F9EA5C0000-0x000001F9EA5C8000-memory.dmp

Filesize
32KB

Download
memory/852-679-0x000001F9EA5A0000-0x000001F9EA5A8000-memory.dmp

Filesize
32KB

Download
memory/852-675-0x000001F9EA590000-0x000001F9EA598000-memory.dmp

Filesize
32KB

Download
memory/852-671-0x000001F9EA580000-0x000001F9EA588000-memory.dmp

Filesize
32KB

Download
memory/852-667-0x000001F9EA570000-0x000001F9EA578000-memory.dmp

Filesize
32KB

Download
memory/852-663-0x000001F9EA560000-0x000001F9EA568000-memory.dmp

Filesize
32KB

Download
memory/852-659-0x000001F9EA550000-0x000001F9EA558000-memory.dmp

Filesize
32KB

Download
memory/852-655-0x000001F9EA540000-0x000001F9EA548000-memory.dmp

Filesize
32KB

Download
memory/852-651-0x000001F9EA4F0000-0x000001F9EA4F8000-memory.dmp

Filesize
32KB

Download
memory/852-647-0x000001F9EA4E0000-0x000001F9EA4E8000-memory.dmp

Filesize
32KB

Download
memory/852-643-0x000001F9EA4D0000-0x000001F9EA4D8000-memory.dmp

Filesize
32KB

Download
memory/852-639-0x000001F9EA4C0000-0x000001F9EA4C8000-memory.dmp

Filesize
32KB

Download
memory/852-635-0x000001F9EA460000-0x000001F9EA468000-memory.dmp

Filesize
32KB

Download
memory/852-631-0x000001F9EA3B0000-0x000001F9EA3B8000-memory.dmp

Filesize
32KB

Download
memory/852-627-0x000001F9EA3A0000-0x000001F9EA3A8000-memory.dmp

Filesize
32KB

Download
memory/852-623-0x000001F9EA190000-0x000001F9EA198000-memory.dmp

Filesize
32KB

Download
memory/852-612-0x000001F9EA440000-0x000001F9EA45E000-memory.dmp

Filesize
120KB

Download
memory/852-566-0x000001F9EA500000-0x000001F9EA532000-memory.dmp

Filesize
200KB

Download
memory/852-683-0x000001F9EA5B0000-0x000001F9EA5B8000-memory.dmp

Filesize
32KB

Download
memory/852-562-0x000001F9EA420000-0x000001F9EA436000-memory.dmp

Filesize
88KB

Download
memory/852-691-0x000001F9EA5D0000-0x000001F9EA5D8000-memory.dmp

Filesize
32KB

Download
memory/852-695-0x000001F9EA5E0000-0x000001F9EA5E8000-memory.dmp

Filesize
32KB

Download
memory/852-699-0x000001F9EA5F0000-0x000001F9EA5F8000-memory.dmp

Filesize
32KB

Download
memory/852-707-0x000001F9EA610000-0x000001F9EA618000-memory.dmp

Filesize
32KB

Download
memory/852-414-0x000001F9EA620000-0x000001F9EA77C000-memory.dmp

Filesize
1.4MB

Download
memory/852-711-0x000001F9EA780000-0x000001F9EA788000-memory.dmp

Filesize
32KB

Download
memory/852-715-0x000001F9EA790000-0x000001F9EA798000-memory.dmp

Filesize
32KB

Download
memory/852-406-0x000001F9EA0C0000-0x000001F9EA0C8000-memory.dmp

Filesize
32KB

Download
memory/852-719-0x000001F9EA7A0000-0x000001F9EA7A8000-memory.dmp

Filesize
32KB

Download
memory/852-397-0x000001F9EA3C0000-0x000001F9EA3DE000-memory.dmp

Filesize
120KB

Download
memory/852-723-0x000001F9EA7B0000-0x000001F9EA7B8000-memory.dmp

Filesize
32KB

Download
memory/852-391-0x000001F9EA0B0000-0x000001F9EA0BE000-memory.dmp

Filesize
56KB

Download
memory/852-381-0x000001F9EA470000-0x000001F9EA4B2000-memory.dmp

Filesize
264KB

Download
memory/852-727-0x000001F9EA7C0000-0x000001F9EA7C8000-memory.dmp

Filesize
32KB

Download
memory/852-265-0x000001F9EA3E0000-0x000001F9EA414000-memory.dmp

Filesize
208KB

Download
memory/852-731-0x000001F9EA7D0000-0x000001F9EA7D8000-memory.dmp

Filesize
32KB

Download
memory/852-735-0x000001F9EA7E0000-0x000001F9EA7E8000-memory.dmp

Filesize
32KB

Download
memory/852-739-0x000001F9EA7F0000-0x000001F9EA7F8000-memory.dmp

Filesize
32KB

Download
memory/1964-926-0x00007FFAF59B0000-0x00007FFAF6471000-memory.dmp

Filesize
10.8MB

Download
memory/1964-970-0x00007FFAF59B0000-0x00007FFAF6471000-memory.dmp

Filesize
10.8MB

Download
memory/2180-885-0x0000000061CC0000-0x0000000061CE2000-memory.dmp

Filesize
136KB

Download
memory/2180-881-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download
memory/2180-882-0x000000006DD00000-0x000000006DD13000-memory.dmp

Filesize
76KB

Download
memory/2180-883-0x00000000685C0000-0x00000000686E3000-memory.dmp

Filesize
1.1MB

Download
memory/2180-884-0x000000006CEC0000-0x000000006CEE4000-memory.dmp

Filesize
144KB

Download
memory/2748-942-0x0000000068DC0000-0x0000000068E64000-memory.dmp

Filesize
656KB

Download
memory/2748-939-0x0000000065580000-0x00000000655CB000-memory.dmp

Filesize
300KB

Download
memory/2748-957-0x0000000063CC0000-0x0000000063CEE000-memory.dmp

Filesize
184KB

Download
memory/2748-958-0x000000006D4C0000-0x000000006D4DB000-memory.dmp

Filesize
108KB

Download
memory/2748-955-0x000000006B740000-0x000000006B755000-memory.dmp

Filesize
84KB

Download
memory/2748-954-0x0000000068EC0000-0x0000000068F33000-memory.dmp

Filesize
460KB

Download
memory/2748-953-0x000000006B800000-0x000000006B83D000-memory.dmp

Filesize
244KB

Download
memory/2748-952-0x0000000062E80000-0x0000000062EA2000-memory.dmp

Filesize
136KB

Download
memory/2748-951-0x0000000064740000-0x0000000064771000-memory.dmp

Filesize
196KB

Download
memory/2748-950-0x00000000613C0000-0x000000006143F000-memory.dmp

Filesize
508KB

Download
memory/2748-949-0x0000000064F80000-0x0000000064FC1000-memory.dmp

Filesize
260KB

Download
memory/2748-948-0x000000006CEC0000-0x000000006CEE4000-memory.dmp

Filesize
144KB

Download
memory/2748-947-0x000000006B280000-0x000000006B29D000-memory.dmp

Filesize
116KB

Download
memory/2748-946-0x0000000061CC0000-0x0000000061CE2000-memory.dmp

Filesize
136KB

Download
memory/2748-943-0x0000000065340000-0x0000000065388000-memory.dmp

Filesize
288KB

Download
memory/2748-944-0x000000006D580000-0x000000006D697000-memory.dmp

Filesize
1.1MB

Download
memory/2748-965-0x0000000000C60000-0x0000000000CB2000-memory.dmp

Filesize
328KB

Download
memory/2748-941-0x0000000062940000-0x000000006296A000-memory.dmp

Filesize
168KB

Download
memory/2748-940-0x000000006C340000-0x000000006C3E4000-memory.dmp

Filesize
656KB

Download
memory/2748-956-0x0000000070F40000-0x0000000071062000-memory.dmp

Filesize
1.1MB

Download
memory/2748-938-0x000000006DD00000-0x000000006DD13000-memory.dmp

Filesize
76KB

Download
memory/2748-937-0x00000000685C0000-0x00000000686E3000-memory.dmp

Filesize
1.1MB

Download
memory/2748-936-0x0000000061780000-0x0000000061B11000-memory.dmp

Filesize
3.6MB

Download
memory/2748-929-0x0000000000D10000-0x0000000001E8F000-memory.dmp

Filesize
17.5MB

Download
memory/2748-933-0x000000006D140000-0x000000006D287000-memory.dmp

Filesize
1.3MB

Download
memory/2748-935-0x0000000061600000-0x0000000061690000-memory.dmp

Filesize
576KB

Download
memory/2748-934-0x0000000000400000-0x0000000000411000-memory.dmp

Filesize
68KB

Download
memory/2748-932-0x0000000063A40000-0x0000000063A89000-memory.dmp

Filesize
292KB

Download
memory/2748-925-0x0000000000BC0000-0x0000000000C52000-memory.dmp

Filesize
584KB

Download
memory/2748-930-0x0000000000CC0000-0x0000000000D05000-memory.dmp

Filesize
276KB

Download
memory/2748-966-0x0000000000D10000-0x0000000001E8F000-memory.dmp

Filesize
17.5MB

Download
memory/2748-927-0x0000000000C60000-0x0000000000CB2000-memory.dmp

Filesize
328KB

Download
memory/2748-967-0x0000000000CC0000-0x0000000000D05000-memory.dmp

Filesize
276KB

Download
memory/2748-959-0x000000006D700000-0x000000006D71F000-memory.dmp

Filesize
124KB

Download
memory/2748-963-0x000000006FC40000-0x000000006FD19000-memory.dmp

Filesize
868KB

Download
memory/2748-964-0x0000000000BC0000-0x0000000000C52000-memory.dmp

Filesize
584KB

Download
memory/4204-888-0x00007FFAF59B0000-0x00007FFAF6471000-memory.dmp

Filesize
10.8MB

Download
memory/4204-1192-0x00007FFAF59B0000-0x00007FFAF6471000-memory.dmp

Filesize
10.8MB

Download
memory/4204-868-0x00000000004E0000-0x00000000004E8000-memory.dmp

Filesize
32KB

Download