Malware Analysis Report

2025-08-06 00:04

Sample ID 240223-lv3ccaed7x
Target gimp-2.10.36-setup.7z
SHA256 0b463fd8e31fe8b2ca76920e0586b49703e32233c4d73f5e1b599eb628fc90c0
Tags
discovery spyware stealer
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

0b463fd8e31fe8b2ca76920e0586b49703e32233c4d73f5e1b599eb628fc90c0

Threat Level: Shows suspicious behavior

The file gimp-2.10.36-setup.7z was found to be: Shows suspicious behavior.

Malicious Activity Summary

discovery spyware stealer

Executes dropped EXE

Reads local data of messenger clients

Loads dropped DLL

Reads user/profile data of web browsers

Checks installed software on the system

Looks up external IP address via web service

Accesses cryptocurrency files/wallets, possible credential harvesting

Drops file in System32 directory

Drops file in Program Files directory

Unsigned PE

Enumerates physical storage devices

Modifies registry class

Gathers network information

Checks SCSI registry key(s)

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Suspicious use of FindShellTrayWindow

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-02-23 09:54

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-02-23 09:52

Reported

2024-02-23 10:17

Platform

win11-20240221-en

Max time kernel

633s

Max time network

1170s

Command Line

"C:\Users\Admin\AppData\Local\Temp\gimp-2.10.36-setup.exe"

Signatures

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\gimp-2.10.36-setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-18C73.tmp\SystemSpecs3D.exe N/A
N/A N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\web-page\web-page.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\web-browser\web-browser.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\wavelet-decompose\wavelet-decompose.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\warp\warp.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\van-gogh-lic\van-gogh-lic.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\unit-editor\unit-editor.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\twain\twain.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\tile-small\tile-small.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\tile\tile.exe N/A
N/A N/A C:\Program Files\GIMP 2\bin\pythonw.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\guillotine\guillotine.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sparkle\sparkle.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\softglow\softglow.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\smooth-palette\smooth-palette.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sharpen\sharpen.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pnm\file-pnm.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\script-fu\script-fu.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-tiff\file-tiff.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-tga\file-tga.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\qbist\qbist.exe N/A
N/A N/A C:\Program Files\GIMP 2\bin\pythonw.exe N/A
N/A N/A C:\Program Files\GIMP 2\bin\pythonw.exe N/A
N/A N/A C:\Program Files\GIMP 2\bin\pythonw.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\procedure-browser\procedure-browser.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\print\print.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\colormap-remap\colormap-remap.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\photocopy\photocopy.exe N/A
N/A N/A C:\Program Files\GIMP 2\bin\pythonw.exe N/A
N/A N/A C:\Program Files\GIMP 2\bin\pythonw.exe N/A
N/A N/A C:\Program Files\GIMP 2\bin\pythonw.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\pagecurl\pagecurl.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\ifs-compose\ifs-compose.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\metadata-viewer\metadata-viewer.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\metadata-editor\metadata-editor.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\max-rgb\max-rgb.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\map-object\map-object.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\lighting\lighting.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\jigsaw\jigsaw.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\imagemap\imagemap.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\ifs-compose\ifs-compose.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\hot\hot.exe N/A
N/A N/A C:\Program Files\GIMP 2\bin\pythonw.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\help-browser\help-browser.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\filter-pack\filter-pack.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\guillotine\guillotine.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\grid\grid.exe N/A
N/A N/A C:\Program Files\GIMP 2\bin\pythonw.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gradient-map\gradient-map.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\depth-merge\depth-merge.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\goat-exercise\goat-exercise.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gimpressionist\gimpressionist.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gfig\gfig.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\fractal-trace\fractal-trace.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\fractal-explorer\fractal-explorer.exe N/A
N/A N/A C:\Program Files\GIMP 2\bin\pythonw.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\flame\flame.exe N/A
N/A N/A C:\Windows\System32\svchost.exe N/A
N/A N/A C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gegl\file-gegl.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe N/A
N/A N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe N/A
N/A N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe N/A
N/A N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe N/A
N/A N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe N/A
N/A N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe N/A
N/A N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe N/A
N/A N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe N/A
N/A N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe N/A
N/A N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe N/A
N/A N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe N/A
N/A N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe N/A
N/A N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe N/A
N/A N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe N/A
N/A N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe N/A
N/A N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe N/A
N/A N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe N/A
N/A N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe N/A
N/A N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe N/A
N/A N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe N/A

Reads local data of messenger clients

spyware stealer

Reads user/profile data of web browsers

spyware stealer

Accesses cryptocurrency files/wallets, possible credential harvesting

spyware

Checks installed software on the system

discovery

Looks up external IP address via web service

Description Indicator Process Target
N/A ip-api.com N/A N/A

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\System32\DriverStore\FileRepository\netrtl64.inf_amd64_8e9c2368fe308df2\netrtl64.PNF C:\Windows\SysWOW64\dxdiag.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\hdaudbus.inf_amd64_8207ba80cf22e40a\hdaudbus.PNF C:\Windows\SysWOW64\dxdiag.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\machine.inf_amd64_726cea1f0f349cf7\machine.PNF C:\Windows\SysWOW64\dxdiag.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\input.inf_amd64_702fdf2336d2162d\input.PNF C:\Windows\SysWOW64\dxdiag.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\msmouse.inf_amd64_5ab7d1c25144fcab\msmouse.PNF C:\Windows\SysWOW64\dxdiag.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\keyboard.inf_amd64_cc6edbde0940344f\keyboard.PNF C:\Windows\SysWOW64\dxdiag.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_amd64_84ea762c0a90c362\mshdc.PNF C:\Windows\SysWOW64\dxdiag.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\display.inf_amd64_01cf530faf2f1752\display.PNF C:\Windows\SysWOW64\dxdiag.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\usbport.inf_amd64_585900615f764770\usbport.PNF C:\Windows\SysWOW64\dxdiag.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files\GIMP 2\lib\python2.7\idlelib\is-GSQB5.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files (x86)\GIMP.Core\Data\include\is-LDO45.tmp C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files (x86)\GIMP.Core\Data\Lib\idlelib\is-4AMI5.tmp C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files (x86)\GIMP.Core\Data\Lib\site-packages\Crypto\Cipher\is-L9AQ1.tmp C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files (x86)\GIMP.Core\Data\Lib\site-packages\psutil\tests\__pycache__\is-BULIP.tmp C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files (x86)\GIMP.Core\Data\Lib\site-packages\win32\test\is-F3VCT.tmp C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files (x86)\GIMP.Core\Data\tcl\tcl8\8.5\is-HB8D8.tmp C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\share\gimp\2.0\menus\is-M8EQ8.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\lib\python2.7\idlelib\is-9N0GS.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\lib\python2.7\site-packages\pip\_internal\vcs\is-48LCP.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\share\locale\nb\LC_MESSAGES\is-61R8I.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\share\locale\ve\LC_MESSAGES\is-1EN6R.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files (x86)\GIMP.Core\Data\Lib\is-G2CVR.tmp C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files (x86)\GIMP.Core\Data\Lib\idlelib\Icons\is-AMNAN.tmp C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\share\mypaint-data\1.0\brushes\deevad\is-E3GFB.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\lib\python2.7\is-PUI33.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\lib\python2.7\ctypes\test\is-25PN4.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\lib\python2.7\distutils\tests\is-O6M77.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\lib\python2.7\idlelib\is-89572.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\lib\python2.7\distutils\tests\is-6DMK2.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files (x86)\GIMP.Core\Data\Lib\site-packages\Crypto\Cipher\__pycache__\is-L0QDF.tmp C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files (x86)\GIMP.Core\Data\Lib\site-packages\pip\_vendor\is-3FTSN.tmp C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files (x86)\GIMP.Core\Data\Lib\site-packages\setuptools\_vendor\packaging\is-TR72R.tmp C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files (x86)\GIMP.Core\Data\Lib\site-packages\win32com\test\is-FDFUI.tmp C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files (x86)\GIMP.Core\Data\Lib\test\cjkencodings\is-VUEVT.tmp C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files (x86)\GIMP.Core\Data\Lib\xml\sax\is-2E84D.tmp C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files (x86)\GIMP.Core\Data\tcl\tcl8.6\is-MLCLS.tmp C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\lib\python2.7\site-packages\colorama\is-9863J.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File opened for modification C:\Program Files\GIMP 2\32\bin\libgio-2.0-0.dll C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\share\gimp\2.0\icons\Symbolic\scalable\apps\is-J5KS7.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\palette-offset\is-E5RMB.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\py-slice\is-2LKMI.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\emboss\is-FNCI7.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\lib\python2.7\site-packages\pytoml-0.1.21-py2.7.egg-info\is-RDURG.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files (x86)\GIMP.Core\Data\Tools\scripts\is-AT4N0.tmp C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp N/A
File opened for modification C:\Program Files\GIMP 2\bin\libopenjp2-7.dll C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\lib\python2.7\distutils\tests\is-9UHVB.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files (x86)\GIMP.Core\Data\Lib\site-packages\Crypto\SelfTest\is-UVCBR.tmp C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files (x86)\GIMP.Core\Data\Lib\site-packages\win32\Demos\__pycache__\is-DS8AU.tmp C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\share\gimp\2.0\icons\Symbolic-Inverted-High-Contrast\24x24\apps\is-4ML6R.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\lib\python2.7\distutils\tests\is-8IULK.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\32\bin\is-U0NCB.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\lib\python2.7\test\is-BBM25.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files (x86)\GIMP.Core\Data\Lib\site-packages\win32com\makegw\is-BTJ0I.tmp C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp N/A
File opened for modification C:\Program Files\GIMP 2\lib\babl-0.1\x86-64-v3-gggl.dll C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\share\gimp\2.0\icons\Color\scalable\apps\is-0R2R6.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\share\gimp\2.0\icons\Symbolic\scalable\apps\is-KNGH2.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\share\gimp\2.0\icons\Symbolic-High-Contrast\is-LMTK8.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\share\locale\kok\LC_MESSAGES\is-S9FTG.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\lib\python2.7\test\is-D49J4.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\lib\python2.7\test\decimaltestdata\is-CJASC.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files (x86)\GIMP.Core\Data\tcl\tcl8.6\tzdata\Canada\is-GPH5B.tmp C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp N/A
File opened for modification C:\Program Files\GIMP 2\32\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-gif.dll C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\share\poppler\cMap\Adobe-Japan1\is-M788G.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\lib\python2.7\is-7SDSI.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\lib\python2.7\site-packages\chardet\is-P1QL9.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\lib\python2.7\test\is-4QQR2.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\share\locale\pl\LC_MESSAGES\is-14PRT.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\share\mypaint-data\1.0\brushes\deevad\is-2JSNB.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\lib\python2.7\idlelib\idle_test\is-9279L.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files (x86)\GIMP.Core\Data\Lib\site-packages\pip\_internal\commands\is-MSL2V.tmp C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\share\gimp\2.0\brushes\Sketch\is-FJPDM.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\share\gimp\2.0\patterns\Food\is-JN5GG.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
File created C:\Program Files\GIMP 2\share\locale\vi\LC_MESSAGES\is-E7K1T.tmp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A

Enumerates physical storage devices

Checks SCSI registry key(s)

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\CompatibleIDs C:\Windows\SysWOW64\dxdiag.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_DADY_DVD-ROM\4&215468A5&0&010000 C:\Windows\SysWOW64\dxdiag.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\HardwareID C:\Windows\SysWOW64\dxdiag.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000 C:\Windows\SysWOW64\dxdiag.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\HardwareID C:\Windows\SysWOW64\dxdiag.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\CompatibleIDs C:\Windows\SysWOW64\dxdiag.exe N/A

Gathers network information

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\ipconfig.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\MACHINE\Software\Classes\GIMP2.apm C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.ora C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\Software\Classes\GIMP2.jxl\DefaultIcon C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\Software\Classes\GIMP2.ppm\DefaultIcon C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\Software\Classes\.wmf\OpenWithProgids C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\Software\Classes\GIMP2.jpg C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\Software\Classes\.ora\OpenWithProgids C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\Software\Classes\GIMP2.im8\DefaultIcon C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Applications\gimp-2.10.exe\SupportedTypes\.im24 C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\GIMP2.webp C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.fit\OpenWithProgids C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\Software\Classes\GIMP2.alpha C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.tiff\OpenWithProgids\GIMP2.tiff C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\GIMP2.jxl\DefaultIcon\ = "C:\\Program Files\\GIMP 2\\bin\\gimp-2.10.exe,1" C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\GIMP2.ppm\shell\open\command\ = "\"C:\\Program Files\\GIMP 2\\bin\\gimp-2.10.exe\" \"%1\"" C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Applications\gimp-2.10.exe\SupportedTypes\.svg C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\GIMP2.icb\shell\open C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\Software\Classes\GIMP2.fit\shell\open\command C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.sgi\OpenWithProgids\GIMP2.sgi C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.icon\OpenWithProgids\GIMP2.icon C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\GIMP2.g3\shell\open\command\ = "\"C:\\Program Files\\GIMP 2\\bin\\gimp-2.10.exe\" \"%1\"" C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\GIMP2.png\shell\open\command\ = "\"C:\\Program Files\\GIMP 2\\bin\\gimp-2.10.exe\" \"%1\"" C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\Software\Classes\GIMP2.pfm C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\Software\Classes\GIMP2.psp\shell\open\command C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\GIMP2.ras\shell\open\command\ = "\"C:\\Program Files\\GIMP 2\\bin\\gimp-2.10.exe\" \"%1\"" C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\GIMP2.tga\shell\open C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\Software\Classes\GIMP2.wmf\DefaultIcon C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\GIMP2.matte\shell\open C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\Software\Classes\GIMP2.als C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagClassObject\CurVer C:\Windows\SysWOW64\dxdiag.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.xwd C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Applications\gimp-2.10.exe\SupportedTypes\.ora C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\GIMP2.pcc\shell\open\command C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\Software\Classes\GIMP2.eps\DefaultIcon C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\GIMP2.svg C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.sgi\OpenWithProgids C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\Software\Classes\GIMP2.ico C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A65B8071-3BFE-4213-9A5B-491DA4461CA7}\InprocServer32 C:\Windows\SysWOW64\dxdiag.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.xcf\OpenWithProgids C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\GIMP2.jxl\shell\open\command C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\GIMP2.vda C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.icb\OpenWithProgids C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\GIMP2.webp\shell\open C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Applications\gimp-2.10.exe\SupportedTypes\.xpm C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\Software\Classes\.matte\OpenWithProgids C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.im8 C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\Software\Classes\GIMP2.ras\DefaultIcon C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\Software\Classes\.vst\OpenWithProgids C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\GIMP2.xpm C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Applications\gimp-2.10.exe\SupportedTypes\.rgba C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\Software\Classes\GIMP2.bw\DefaultIcon C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.pix\OpenWithProgids C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-627134735-902745853-4257352768-1000\{35028B6C-0CA8-43DF-9AC0-C6E5CD78D48B} C:\Windows\SysWOW64\dxdiag.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\GIMP2.g3 C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\Software\Classes\GIMP2.exr\DefaultIcon C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\GIMP2.xwd\DefaultIcon\ = "C:\\Program Files\\GIMP 2\\bin\\gimp-2.10.exe,1" C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.fit\OpenWithProgids\GIMP2.fit C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\GIMP2.alpha\shell\open C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\GIMP2.eps\DefaultIcon\ = "C:\\Program Files\\GIMP 2\\bin\\gimp-2.10.exe,1" C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\GIMP2.ppm\DefaultIcon\ = "C:\\Program Files\\GIMP 2\\bin\\gimp-2.10.exe,1" C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\GIMP2.pfm\ = "GIMP 2.10.36 PFM" C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\GIMP2.im1\shell\open C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagProvider\ = "DxDiagProvider Class" C:\Windows\SysWOW64\dxdiag.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\GIMP2.heic C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\dxdiag.exe N/A
N/A N/A C:\Windows\SysWOW64\dxdiag.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\GIMP.Core\Data\python.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\dxdiag.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1972 wrote to memory of 2116 N/A C:\Users\Admin\AppData\Local\Temp\gimp-2.10.36-setup.exe C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp
PID 1972 wrote to memory of 2116 N/A C:\Users\Admin\AppData\Local\Temp\gimp-2.10.36-setup.exe C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp
PID 1972 wrote to memory of 2116 N/A C:\Users\Admin\AppData\Local\Temp\gimp-2.10.36-setup.exe C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp
PID 2116 wrote to memory of 2368 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Windows\SysWOW64\cmd.exe
PID 2116 wrote to memory of 2368 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Windows\SysWOW64\cmd.exe
PID 2116 wrote to memory of 2368 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Windows\SysWOW64\cmd.exe
PID 2116 wrote to memory of 3748 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 2116 wrote to memory of 3748 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 2116 wrote to memory of 3748 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 2368 wrote to memory of 3816 N/A C:\Windows\SysWOW64\cmd.exe C:\Program Files (x86)\GIMP.Core\Data\python.exe
PID 2368 wrote to memory of 3816 N/A C:\Windows\SysWOW64\cmd.exe C:\Program Files (x86)\GIMP.Core\Data\python.exe
PID 2368 wrote to memory of 3816 N/A C:\Windows\SysWOW64\cmd.exe C:\Program Files (x86)\GIMP.Core\Data\python.exe
PID 2116 wrote to memory of 4876 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Program Files (x86)\GIMP.Core\gimp-2.10.36-setup.exe
PID 2116 wrote to memory of 4876 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Program Files (x86)\GIMP.Core\gimp-2.10.36-setup.exe
PID 2116 wrote to memory of 4876 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Program Files (x86)\GIMP.Core\gimp-2.10.36-setup.exe
PID 2116 wrote to memory of 2420 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 2116 wrote to memory of 2420 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 2116 wrote to memory of 2420 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 4876 wrote to memory of 4880 N/A C:\Program Files (x86)\GIMP.Core\gimp-2.10.36-setup.exe C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp
PID 4876 wrote to memory of 4880 N/A C:\Program Files (x86)\GIMP.Core\gimp-2.10.36-setup.exe C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp
PID 4876 wrote to memory of 4880 N/A C:\Program Files (x86)\GIMP.Core\gimp-2.10.36-setup.exe C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp
PID 2116 wrote to memory of 2788 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 2116 wrote to memory of 2788 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 2116 wrote to memory of 2788 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 2116 wrote to memory of 5656 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 2116 wrote to memory of 5656 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 2116 wrote to memory of 5656 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 2116 wrote to memory of 4556 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 2116 wrote to memory of 4556 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 2116 wrote to memory of 4556 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 2116 wrote to memory of 5788 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 2116 wrote to memory of 5788 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 2116 wrote to memory of 5788 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 2116 wrote to memory of 1336 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 2116 wrote to memory of 1336 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 2116 wrote to memory of 1336 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 2116 wrote to memory of 6104 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 2116 wrote to memory of 6104 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 2116 wrote to memory of 6104 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 2116 wrote to memory of 2816 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Users\Admin\AppData\Local\Temp\is-18C73.tmp\SystemSpecs3D.exe
PID 2116 wrote to memory of 2816 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Users\Admin\AppData\Local\Temp\is-18C73.tmp\SystemSpecs3D.exe
PID 2116 wrote to memory of 2816 N/A C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp C:\Users\Admin\AppData\Local\Temp\is-18C73.tmp\SystemSpecs3D.exe
PID 2816 wrote to memory of 5128 N/A C:\Users\Admin\AppData\Local\Temp\is-18C73.tmp\SystemSpecs3D.exe C:\Windows\SysWOW64\cmd.exe
PID 2816 wrote to memory of 5128 N/A C:\Users\Admin\AppData\Local\Temp\is-18C73.tmp\SystemSpecs3D.exe C:\Windows\SysWOW64\cmd.exe
PID 2816 wrote to memory of 5128 N/A C:\Users\Admin\AppData\Local\Temp\is-18C73.tmp\SystemSpecs3D.exe C:\Windows\SysWOW64\cmd.exe
PID 5128 wrote to memory of 2600 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 5128 wrote to memory of 2600 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 5128 wrote to memory of 2600 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 2816 wrote to memory of 5336 N/A C:\Users\Admin\AppData\Local\Temp\is-18C73.tmp\SystemSpecs3D.exe C:\Windows\SysWOW64\dxdiag.exe
PID 2816 wrote to memory of 5336 N/A C:\Users\Admin\AppData\Local\Temp\is-18C73.tmp\SystemSpecs3D.exe C:\Windows\SysWOW64\dxdiag.exe
PID 2816 wrote to memory of 5336 N/A C:\Users\Admin\AppData\Local\Temp\is-18C73.tmp\SystemSpecs3D.exe C:\Windows\SysWOW64\dxdiag.exe
PID 5524 wrote to memory of 3524 N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\web-page\web-page.exe
PID 5524 wrote to memory of 3524 N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\web-page\web-page.exe
PID 5524 wrote to memory of 4208 N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\web-browser\web-browser.exe
PID 5524 wrote to memory of 4208 N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\web-browser\web-browser.exe
PID 5524 wrote to memory of 2260 N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\wavelet-decompose\wavelet-decompose.exe
PID 5524 wrote to memory of 2260 N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\wavelet-decompose\wavelet-decompose.exe
PID 5524 wrote to memory of 3292 N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\warp\warp.exe
PID 5524 wrote to memory of 3292 N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\warp\warp.exe
PID 5524 wrote to memory of 32 N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\van-gogh-lic\van-gogh-lic.exe
PID 5524 wrote to memory of 32 N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\van-gogh-lic\van-gogh-lic.exe
PID 5524 wrote to memory of 5200 N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\unit-editor\unit-editor.exe
PID 5524 wrote to memory of 5200 N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\unit-editor\unit-editor.exe
PID 5524 wrote to memory of 3844 N/A C:\Program Files\GIMP 2\bin\gimp-2.10.exe C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\twain\twain.exe

Processes

C:\Users\Admin\AppData\Local\Temp\gimp-2.10.36-setup.exe

"C:\Users\Admin\AppData\Local\Temp\gimp-2.10.36-setup.exe"

C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp

"C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp" /SL5="$8003C,358998007,825344,C:\Users\Admin\AppData\Local\Temp\gimp-2.10.36-setup.exe"

C:\Windows\SysWOW64\cmd.exe

"cmd.exe" " /c ""C:\Program Files (x86)\GIMP.Core\Data\python.exe" "C:\Program Files (x86)\GIMP.Core\Data\Lib\html.py" "

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

"powershell.exe" Set-ExecutionPolicy -ExecutionPolicy Bypass -Scope LocalMachine -Force

C:\Program Files (x86)\GIMP.Core\Data\python.exe

"C:\Program Files (x86)\GIMP.Core\Data\python.exe" "C:\Program Files (x86)\GIMP.Core\Data\Lib\html.py"

C:\Program Files (x86)\GIMP.Core\gimp-2.10.36-setup.exe

"C:\Program Files (x86)\GIMP.Core\gimp-2.10.36-setup.exe" /SILENT /SUPPRESSMSGBOXES /SILENTMODE

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

"powershell.exe" Add-MpPreference -ExclusionExtension exe -Force

C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp

"C:\Users\Admin\AppData\Local\Temp\is-FL2DS.tmp\gimp-2.10.36-setup.tmp" /SL5="$4006A,318890958,832512,C:\Program Files (x86)\GIMP.Core\gimp-2.10.36-setup.exe" /SILENT /SUPPRESSMSGBOXES /SILENTMODE

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

"powershell.exe" Add-MpPreference -ExclusionExtension bat -Force

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

"powershell.exe" Add-MpPreference -ExclusionProcess FlushCache.exe -Force

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

"powershell.exe" Add-MpPreference -ExclusionProcess schtasks.exe -Force

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

"powershell.exe" Add-MpPreference -ExclusionProcess cmd.exe -Force

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

"powershell.exe" Add-MpPreference -ExclusionProcess powershell.exe -Force

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

"powershell.exe" Add-MpPreference -ExclusionProcess mshta.exe -Force

C:\Users\Admin\AppData\Local\Temp\is-18C73.tmp\SystemSpecs3D.exe

"C:\Users\Admin\AppData\Local\Temp\is-18C73.tmp\SystemSpecs3D.exe"

C:\Windows\SysWOW64\cmd.exe

cmd /C "ipconfig /flushdns"

C:\Windows\SysWOW64\ipconfig.exe

ipconfig /flushdns

C:\Windows\SysWOW64\dxdiag.exe

C:\Windows\System32\dxdiag.exe /x C:\Users\Admin\AppData\Local\Temp\dxdiag.xml

C:\Program Files\GIMP 2\bin\gimp-2.10.exe

"C:\Program Files\GIMP 2\bin\gimp-2.10.exe"

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\web-page\web-page.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\web-page\web-page.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\web-browser\web-browser.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\web-browser\web-browser.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\wavelet-decompose\wavelet-decompose.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\wavelet-decompose\wavelet-decompose.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\warp\warp.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\warp\warp.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\van-gogh-lic\van-gogh-lic.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\van-gogh-lic\van-gogh-lic.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\unit-editor\unit-editor.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\unit-editor\unit-editor.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\twain\twain.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\twain\twain.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\tile-small\tile-small.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\tile-small\tile-small.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\tile\tile.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\tile\tile.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\bin\pythonw.exe

"C:\Program Files\GIMP 2\bin\pythonw.exe" "C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\spyro_plus\spyro_plus.py" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sphere-designer\sphere-designer.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sphere-designer\sphere-designer.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sparkle\sparkle.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sparkle\sparkle.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\softglow\softglow.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\softglow\softglow.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\smooth-palette\smooth-palette.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\smooth-palette\smooth-palette.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sharpen\sharpen.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sharpen\sharpen.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\selection-to-path\selection-to-path.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\selection-to-path\selection-to-path.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\script-fu\script-fu.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\script-fu\script-fu.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\screenshot\screenshot.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\screenshot\screenshot.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sample-colorize\sample-colorize.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sample-colorize\sample-colorize.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\qbist\qbist.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\qbist\qbist.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\bin\pythonw.exe

"C:\Program Files\GIMP 2\bin\pythonw.exe" "C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\python-eval\python-eval.py" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\bin\pythonw.exe

"C:\Program Files\GIMP 2\bin\pythonw.exe" "C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\python-console\python-console.py" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\bin\pythonw.exe

"C:\Program Files\GIMP 2\bin\pythonw.exe" "C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\py-slice\py-slice.py" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\procedure-browser\procedure-browser.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\procedure-browser\procedure-browser.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\print\print.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\print\print.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\plugin-browser\plugin-browser.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\plugin-browser\plugin-browser.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\photocopy\photocopy.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\photocopy\photocopy.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\bin\pythonw.exe

"C:\Program Files\GIMP 2\bin\pythonw.exe" "C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\palette-to-gradient\palette-to-gradient.py" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\bin\pythonw.exe

"C:\Program Files\GIMP 2\bin\pythonw.exe" "C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\palette-sort\palette-sort.py" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\bin\pythonw.exe

"C:\Program Files\GIMP 2\bin\pythonw.exe" "C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\palette-offset\palette-offset.py" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\pagecurl\pagecurl.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\pagecurl\pagecurl.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\nl-filter\nl-filter.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\nl-filter\nl-filter.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\metadata-viewer\metadata-viewer.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\metadata-viewer\metadata-viewer.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\metadata-editor\metadata-editor.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\metadata-editor\metadata-editor.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\max-rgb\max-rgb.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\max-rgb\max-rgb.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\map-object\map-object.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\map-object\map-object.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\lighting\lighting.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\lighting\lighting.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\jigsaw\jigsaw.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\jigsaw\jigsaw.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\imagemap\imagemap.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\imagemap\imagemap.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\ifs-compose\ifs-compose.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\ifs-compose\ifs-compose.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\hot\hot.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\hot\hot.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\bin\pythonw.exe

"C:\Program Files\GIMP 2\bin\pythonw.exe" "C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\histogram-export\histogram-export.py" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\help-browser\help-browser.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\help-browser\help-browser.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\help\help.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\help\help.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\guillotine\guillotine.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\guillotine\guillotine.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\grid\grid.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\grid\grid.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\bin\pythonw.exe

"C:\Program Files\GIMP 2\bin\pythonw.exe" "C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gradients-save-as-css\gradients-save-as-css.py" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gradient-map\gradient-map.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gradient-map\gradient-map.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gradient-flare\gradient-flare.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gradient-flare\gradient-flare.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\goat-exercise\goat-exercise.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\goat-exercise\goat-exercise.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gimpressionist\gimpressionist.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gimpressionist\gimpressionist.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gfig\gfig.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gfig\gfig.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\fractal-trace\fractal-trace.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\fractal-trace\fractal-trace.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\fractal-explorer\fractal-explorer.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\fractal-explorer\fractal-explorer.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\bin\pythonw.exe

"C:\Program Files\GIMP 2\bin\pythonw.exe" "C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\foggify\foggify.py" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\flame\flame.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\flame\flame.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\filter-pack\filter-pack.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\filter-pack\filter-pack.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\film\film.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\film\film.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-xwd\file-xwd.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-xwd\file-xwd.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-xpm\file-xpm.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-xpm\file-xpm.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-xbm\file-xbm.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-xbm\file-xbm.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-wmf\file-wmf.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-wmf\file-wmf.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-webp\file-webp.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-webp\file-webp.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-tiff\file-tiff.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-tiff\file-tiff.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-tga\file-tga.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-tga\file-tga.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-svg\file-svg.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-svg\file-svg.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-sunras\file-sunras.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-sunras\file-sunras.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-sgi\file-sgi.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-sgi\file-sgi.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-rawtherapee\file-rawtherapee.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-rawtherapee\file-rawtherapee.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-raw-placeholder\file-raw-placeholder.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-raw-placeholder\file-raw-placeholder.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-raw-data\file-raw-data.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-raw-data\file-raw-data.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-psp\file-psp.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-psp\file-psp.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-psd\file-psd.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-psd\file-psd.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-ps\file-ps.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-ps\file-ps.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pnm\file-pnm.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pnm\file-pnm.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-png\file-png.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-png\file-png.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pix\file-pix.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pix\file-pix.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pdf-save\file-pdf-save.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pdf-save\file-pdf-save.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pdf-load\file-pdf-load.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pdf-load\file-pdf-load.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pcx\file-pcx.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pcx\file-pcx.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pat\file-pat.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pat\file-pat.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\bin\pythonw.exe

"C:\Program Files\GIMP 2\bin\pythonw.exe" "C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-openraster\file-openraster.py" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-mng\file-mng.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-mng\file-mng.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-jpegxl\file-jpegxl.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-jpegxl\file-jpegxl.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-jpeg\file-jpeg.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-jpeg\file-jpeg.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-jp2-load\file-jp2-load.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-jp2-load\file-jp2-load.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-ico\file-ico.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-ico\file-ico.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-html-table\file-html-table.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-html-table\file-html-table.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-heif\file-heif.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-heif\file-heif.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-header\file-header.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-header\file-header.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-glob\file-glob.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-glob\file-glob.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gih\file-gih.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gih\file-gih.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gif-save\file-gif-save.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gif-save\file-gif-save.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gif-load\file-gif-load.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gif-load\file-gif-load.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gegl\file-gegl.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gegl\file-gegl.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gbr\file-gbr.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gbr\file-gbr.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-fli\file-fli.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-fli\file-fli.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-fits\file-fits.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-fits\file-fits.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-faxg3\file-faxg3.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-faxg3\file-faxg3.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-exr\file-exr.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-exr\file-exr.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-dicom\file-dicom.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-dicom\file-dicom.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-desktop-link\file-desktop-link.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-desktop-link\file-desktop-link.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-dds\file-dds.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-dds\file-dds.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-darktable\file-darktable.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-darktable\file-darktable.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-csource\file-csource.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-csource\file-csource.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-compressor\file-compressor.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-compressor\file-compressor.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-cel\file-cel.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-cel\file-cel.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-bmp\file-bmp.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-bmp\file-bmp.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\emboss\emboss.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\emboss\emboss.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\edge-dog\edge-dog.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\edge-dog\edge-dog.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\destripe\destripe.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\destripe\destripe.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\despeckle\despeckle.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\despeckle\despeckle.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\depth-merge\depth-merge.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\depth-merge\depth-merge.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\decompose\decompose.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\decompose\decompose.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\curve-bend\curve-bend.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\curve-bend\curve-bend.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\crop-zealous\crop-zealous.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\crop-zealous\crop-zealous.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\contrast-retinex\contrast-retinex.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\contrast-retinex\contrast-retinex.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\compose\compose.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\compose\compose.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\bin\pythonw.exe

"C:\Program Files\GIMP 2\bin\pythonw.exe" "C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\colorxhtml\colorxhtml.py" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\colormap-remap\colormap-remap.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\colormap-remap\colormap-remap.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\colorify\colorify.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\colorify\colorify.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\color-enhance\color-enhance.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\color-enhance\color-enhance.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\color-cube-analyze\color-cube-analyze.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\color-cube-analyze\color-cube-analyze.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\cml-explorer\cml-explorer.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\cml-explorer\cml-explorer.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\checkerboard\checkerboard.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\checkerboard\checkerboard.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\cartoon\cartoon.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\cartoon\cartoon.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\busy-dialog\busy-dialog.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\busy-dialog\busy-dialog.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\border-average\border-average.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\border-average\border-average.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\blur\blur.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\blur\blur.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\blinds\blinds.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\blinds\blinds.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\animation-play\animation-play.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\animation-play\animation-play.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\animation-optimize\animation-optimize.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\animation-optimize\animation-optimize.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\align-layers\align-layers.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\align-layers\align-layers.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-rawtherapee\file-rawtherapee.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-rawtherapee\file-rawtherapee.exe" -gimp 5 4 -init 0

C:\Program Files\GIMP 2\bin\gspawn-win64-helper.exe

"C:\Program Files\GIMP 2\bin\gspawn-win64-helper.exe" 10 11 z 8 z - y y w - rawtherapee -v -w

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k WerSvcGroup

C:\Windows\system32\werfault.exe

werfault.exe /h /shared Global\b78dec63bf174d7bb1b0832b4af7ba90 /t 4952 /p 5524

C:\Windows\system32\DllHost.exe

C:\Windows\system32\DllHost.exe /Processid:{7966B4D8-4FDC-4126-A10B-39A3209AD251}

C:\Program Files\GIMP 2\bin\gimp-2.10.exe

"C:\Program Files\GIMP 2\bin\gimp-2.10.exe"

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\web-page\web-page.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\web-page\web-page.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\web-browser\web-browser.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\web-browser\web-browser.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\wavelet-decompose\wavelet-decompose.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\wavelet-decompose\wavelet-decompose.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\warp\warp.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\warp\warp.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\van-gogh-lic\van-gogh-lic.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\van-gogh-lic\van-gogh-lic.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\unit-editor\unit-editor.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\unit-editor\unit-editor.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\twain\twain.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\twain\twain.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\tile-small\tile-small.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\tile-small\tile-small.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\tile\tile.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\tile\tile.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\bin\pythonw.exe

"C:\Program Files\GIMP 2\bin\pythonw.exe" "C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\spyro_plus\spyro_plus.py" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sphere-designer\sphere-designer.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sphere-designer\sphere-designer.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sparkle\sparkle.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sparkle\sparkle.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\softglow\softglow.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\softglow\softglow.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\smooth-palette\smooth-palette.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\smooth-palette\smooth-palette.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sharpen\sharpen.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sharpen\sharpen.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\selection-to-path\selection-to-path.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\selection-to-path\selection-to-path.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\script-fu\script-fu.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\script-fu\script-fu.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\screenshot\screenshot.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\screenshot\screenshot.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sample-colorize\sample-colorize.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sample-colorize\sample-colorize.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\qbist\qbist.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\qbist\qbist.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\bin\pythonw.exe

"C:\Program Files\GIMP 2\bin\pythonw.exe" "C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\python-eval\python-eval.py" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\bin\pythonw.exe

"C:\Program Files\GIMP 2\bin\pythonw.exe" "C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\python-console\python-console.py" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\bin\pythonw.exe

"C:\Program Files\GIMP 2\bin\pythonw.exe" "C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\py-slice\py-slice.py" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\procedure-browser\procedure-browser.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\procedure-browser\procedure-browser.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\print\print.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\print\print.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\plugin-browser\plugin-browser.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\plugin-browser\plugin-browser.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\photocopy\photocopy.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\photocopy\photocopy.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\bin\pythonw.exe

"C:\Program Files\GIMP 2\bin\pythonw.exe" "C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\palette-to-gradient\palette-to-gradient.py" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\bin\pythonw.exe

"C:\Program Files\GIMP 2\bin\pythonw.exe" "C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\palette-sort\palette-sort.py" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\bin\pythonw.exe

"C:\Program Files\GIMP 2\bin\pythonw.exe" "C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\palette-offset\palette-offset.py" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\pagecurl\pagecurl.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\pagecurl\pagecurl.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\nl-filter\nl-filter.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\nl-filter\nl-filter.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\metadata-viewer\metadata-viewer.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\metadata-viewer\metadata-viewer.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\metadata-editor\metadata-editor.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\metadata-editor\metadata-editor.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\max-rgb\max-rgb.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\max-rgb\max-rgb.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\map-object\map-object.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\map-object\map-object.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\lighting\lighting.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\lighting\lighting.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\jigsaw\jigsaw.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\jigsaw\jigsaw.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\imagemap\imagemap.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\imagemap\imagemap.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\ifs-compose\ifs-compose.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\ifs-compose\ifs-compose.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\hot\hot.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\hot\hot.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\bin\pythonw.exe

"C:\Program Files\GIMP 2\bin\pythonw.exe" "C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\histogram-export\histogram-export.py" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\help-browser\help-browser.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\help-browser\help-browser.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\help\help.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\help\help.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\grid\grid.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\grid\grid.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\guillotine\guillotine.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\guillotine\guillotine.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\bin\pythonw.exe

"C:\Program Files\GIMP 2\bin\pythonw.exe" "C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gradients-save-as-css\gradients-save-as-css.py" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gradient-map\gradient-map.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gradient-map\gradient-map.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gradient-flare\gradient-flare.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gradient-flare\gradient-flare.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\goat-exercise\goat-exercise.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\goat-exercise\goat-exercise.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gimpressionist\gimpressionist.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gimpressionist\gimpressionist.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gfig\gfig.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gfig\gfig.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\fractal-trace\fractal-trace.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\fractal-trace\fractal-trace.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\fractal-explorer\fractal-explorer.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\fractal-explorer\fractal-explorer.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\bin\pythonw.exe

"C:\Program Files\GIMP 2\bin\pythonw.exe" "C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\foggify\foggify.py" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\flame\flame.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\flame\flame.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\filter-pack\filter-pack.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\filter-pack\filter-pack.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\film\film.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\film\film.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-xwd\file-xwd.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-xwd\file-xwd.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-xpm\file-xpm.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-xpm\file-xpm.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-xbm\file-xbm.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-xbm\file-xbm.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-wmf\file-wmf.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-wmf\file-wmf.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-webp\file-webp.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-webp\file-webp.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-tiff\file-tiff.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-tiff\file-tiff.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-tga\file-tga.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-tga\file-tga.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-svg\file-svg.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-svg\file-svg.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-sunras\file-sunras.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-sunras\file-sunras.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-sgi\file-sgi.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-sgi\file-sgi.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-rawtherapee\file-rawtherapee.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-rawtherapee\file-rawtherapee.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-raw-placeholder\file-raw-placeholder.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-raw-placeholder\file-raw-placeholder.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-raw-data\file-raw-data.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-raw-data\file-raw-data.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-psp\file-psp.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-psp\file-psp.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-psd\file-psd.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-psd\file-psd.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-ps\file-ps.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-ps\file-ps.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pnm\file-pnm.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pnm\file-pnm.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-png\file-png.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-png\file-png.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pix\file-pix.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pix\file-pix.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pdf-save\file-pdf-save.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pdf-save\file-pdf-save.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pdf-load\file-pdf-load.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pdf-load\file-pdf-load.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pcx\file-pcx.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pcx\file-pcx.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pat\file-pat.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pat\file-pat.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\bin\pythonw.exe

"C:\Program Files\GIMP 2\bin\pythonw.exe" "C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-openraster\file-openraster.py" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-mng\file-mng.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-mng\file-mng.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-jpegxl\file-jpegxl.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-jpegxl\file-jpegxl.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-jpeg\file-jpeg.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-jpeg\file-jpeg.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-jp2-load\file-jp2-load.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-jp2-load\file-jp2-load.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-ico\file-ico.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-ico\file-ico.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-html-table\file-html-table.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-html-table\file-html-table.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-heif\file-heif.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-heif\file-heif.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-header\file-header.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-header\file-header.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-glob\file-glob.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-glob\file-glob.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gih\file-gih.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gih\file-gih.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gif-save\file-gif-save.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gif-save\file-gif-save.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gif-load\file-gif-load.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gif-load\file-gif-load.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gegl\file-gegl.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gegl\file-gegl.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gbr\file-gbr.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gbr\file-gbr.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-fli\file-fli.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-fli\file-fli.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-fits\file-fits.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-fits\file-fits.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-faxg3\file-faxg3.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-faxg3\file-faxg3.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-exr\file-exr.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-exr\file-exr.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-dicom\file-dicom.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-dicom\file-dicom.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-desktop-link\file-desktop-link.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-desktop-link\file-desktop-link.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-dds\file-dds.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-dds\file-dds.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-darktable\file-darktable.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-darktable\file-darktable.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-csource\file-csource.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-csource\file-csource.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-compressor\file-compressor.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-compressor\file-compressor.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-cel\file-cel.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-cel\file-cel.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-bmp\file-bmp.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-bmp\file-bmp.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\emboss\emboss.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\emboss\emboss.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\edge-dog\edge-dog.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\edge-dog\edge-dog.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\destripe\destripe.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\destripe\destripe.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\despeckle\despeckle.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\despeckle\despeckle.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\depth-merge\depth-merge.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\depth-merge\depth-merge.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\decompose\decompose.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\decompose\decompose.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\curve-bend\curve-bend.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\curve-bend\curve-bend.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\crop-zealous\crop-zealous.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\crop-zealous\crop-zealous.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\contrast-retinex\contrast-retinex.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\contrast-retinex\contrast-retinex.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\compose\compose.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\compose\compose.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\bin\pythonw.exe

"C:\Program Files\GIMP 2\bin\pythonw.exe" "C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\colorxhtml\colorxhtml.py" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\colormap-remap\colormap-remap.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\colormap-remap\colormap-remap.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\colorify\colorify.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\colorify\colorify.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\color-enhance\color-enhance.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\color-enhance\color-enhance.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\color-cube-analyze\color-cube-analyze.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\color-cube-analyze\color-cube-analyze.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\cml-explorer\cml-explorer.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\cml-explorer\cml-explorer.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\checkerboard\checkerboard.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\checkerboard\checkerboard.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\cartoon\cartoon.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\cartoon\cartoon.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\busy-dialog\busy-dialog.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\busy-dialog\busy-dialog.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\border-average\border-average.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\border-average\border-average.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\blur\blur.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\blur\blur.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\blinds\blinds.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\blinds\blinds.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\animation-play\animation-play.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\animation-play\animation-play.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\animation-optimize\animation-optimize.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\animation-optimize\animation-optimize.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\align-layers\align-layers.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\align-layers\align-layers.exe" -gimp 5 4 -query 0

C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-rawtherapee\file-rawtherapee.exe

"C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-rawtherapee\file-rawtherapee.exe" -gimp 5 4 -init 0

C:\Program Files\GIMP 2\bin\gspawn-win64-helper.exe

"C:\Program Files\GIMP 2\bin\gspawn-win64-helper.exe" 10 11 z 8 z - y y w - rawtherapee -v -w

Network

Country Destination Domain Proto
US 8.8.8.8:53 140.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 180.178.17.96.in-addr.arpa udp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
GB 163.70.147.35:443 www.facebook.com tcp
US 208.95.112.1:80 ip-api.com tcp
US 208.95.112.1:80 ip-api.com tcp
NL 149.154.167.220:443 api.telegram.org tcp
US 208.95.112.1:80 ip-api.com tcp
US 209.145.56.222:80 panel.tinygames.org tcp
GB 184.25.204.27:443 tcp
US 20.42.73.25:443 browser.pipe.aria.microsoft.com tcp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.171:443 r.bing.com tcp
US 8.8.8.8:53 73.159.190.20.in-addr.arpa udp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.171:443 r.bing.com tcp
GB 184.25.204.27:443 tcp

Files

memory/1972-0-0x0000000000400000-0x00000000004D7000-memory.dmp

memory/1972-2-0x0000000000400000-0x00000000004D7000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\is-G193C.tmp\gimp-2.10.36-setup.tmp

MD5 c78e4fecda8ba1709bf2d29899b73c31
SHA1 f94c8e006292e2c0602ccedf455a8f304be4cee8
SHA256 af5111c43648326862529f27f1b993799c81308a444a337ac363bad050f5270f
SHA512 dd328c029637cca3744e2a83acb77f284c2ea1dc2231aded4fb59adf5b9b123bd63b7fbdbf33214c27b0a6e31d98d0972b4245ce406d501da3526a593b80aa14

memory/2116-6-0x00000000025D0000-0x00000000025D1000-memory.dmp

memory/1972-8-0x0000000000400000-0x00000000004D7000-memory.dmp

memory/2116-9-0x0000000000400000-0x0000000000712000-memory.dmp

memory/2116-12-0x00000000025D0000-0x00000000025D1000-memory.dmp

memory/2116-22-0x0000000000400000-0x0000000000712000-memory.dmp

memory/2116-2302-0x0000000000400000-0x0000000000712000-memory.dmp

C:\Program Files (x86)\GIMP.Core\Data\Lib\site-packages\charset_normalizer-3.3.2.dist-info\is-BIQDS.tmp

MD5 365c9bfeb7d89244f2ce01c1de44cb85
SHA1 d7a03141d5d6b1e88b6b59ef08b6681df212c599
SHA256 ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508
SHA512 d220d322a4053d84130567d626a9f7bb2fb8f0b854da1621f001826dc61b0ed6d3f91793627e6f0ac2ac27aea2b986b6a7a63427f05fe004d8a2adfbdadc13c1

memory/2116-6552-0x0000000000400000-0x0000000000712000-memory.dmp

C:\Program Files (x86)\GIMP.Core\Data\Lib\site-packages\win32comext\axscript\is-O4T70.tmp

MD5 f45c606ffc55fd2f41f42012d917bce9
SHA1 ca93419cc53fb4efef251483abe766da4b8e2dfd
SHA256 f0bb50af1caea5b284bd463e5938229e7d22cc610b2d767ee1778e92a85849b4
SHA512 ba7bebe62a6c2216e68e2d484c098662ba3d5217b39a3156b30e776d2bb3cf5d4f31dcdc48a2eb99bc5d80fffe388b212ec707b7d10b48df601430a07608fd46

C:\Program Files (x86)\GIMP.Core\Data\Lib\site-packages\win32comext\taskscheduler\is-K13VR.tmp

MD5 3d90a8bdf51de0d7fae66fc1389e2b45
SHA1 b1d30b405f4f6fce37727c9ec19590b42de172ee
SHA256 7d1a6fe54dc90c23b0f60a0f0b3f9d5cae9ac1afecb9d6578f75b501cde59508
SHA512 bd4ea236807a3c128c1ec228a19f75a0a6ef2b29603c571ee5d578847b20b395fec219855d66a409b5057b5612e924edcd5983986bef531f1309aba2fe7f0636

C:\Program Files (x86)\GIMP.Core\Data\Lib\test\cjkencodings\is-KAQ5G.tmp

MD5 cc34bcc252d8014250b2fbc0a7880ead
SHA1 89a79425e089c311137adcdcf0a11dfa9d8a4e58
SHA256 a6bbfb8ecb911d13581f7713391f8c0ceea1edd41537fdb300bbb4d62dd72e9b
SHA512 c6fb4a793870993a9f1310ce59697397e5334dbb92031ab49a3ecc33c55e84737e626e815754c5ddbe7835b15d3817bf07d2b4c80ea5fd956792b4db96c18c2f

C:\Program Files (x86)\GIMP.Core\Data\Lib\test\test_importlib\is-LNISR.tmp

MD5 47878c074f37661118db4f3525b2b6cb
SHA1 9671e2ef6e3d9fa96e7450bcee03300f8d395533
SHA256 b4dc0b48d375647bcfab52d235abf7968daf57b6bbdf325766f31ce7752d7216
SHA512 13c626ada191848c31321c74eb7f0f1fde5445a82d34282d69e2b086ba6b539d8632c82bba61ff52185f75fec2514dad66139309835e53f5b09a3c5a2ebecff5

C:\Program Files (x86)\GIMP.Core\Data\Lib\test\test_importlib\extension\is-S7IJ8.tmp

MD5 c3239b95575b0ad63408b8e633f9334d
SHA1 7dbb42dfa3ca934fb86b8e0e2268b6b793cbccdc
SHA256 6546a8ef1019da695edeca7c68103a1a8e746d88b89faf7d5297a60753fd1225
SHA512 5685131ad55f43ab73afccbef69652d03bb64e6135beb476bc987f316afe0198157507203b9846728bc7ea25bc88f040e7d2cb557c9480bac72f519d6ba90b25

memory/2116-10859-0x0000000000400000-0x0000000000712000-memory.dmp

C:\Program Files (x86)\GIMP.Core\Data\Scripts\is-SDFGI.tmp

MD5 05d8656b96bab2d785fcca9ffde3ea99
SHA1 296f5aeef1d6cb5ceaafe412afddd8510131b639
SHA256 4be212e5d8c26b8ba01ea01f28750420275d37719390f71b923cb5bd07e0cad4
SHA512 45ea5b6e6cc3b99e18ab3711883214f57e0c05ed76a5c6cf9c02fb36699ab775217a592a8ec39ecbbe75e8900601eb55a40aa8cec9d5ade1cc568c02500f85d9

C:\Program Files (x86)\GIMP.Core\Data\Tools\pynche\is-1RJKH.tmp

MD5 3d02598f327c3159a8be45fd28daac9b
SHA1 78bd4ccb31f7984b68a96a9f2d0d78c27857b091
SHA256 b36ae7da13e8cafa693b64b57c6afc4511da2f9bbc10d0ac03667fca0f288214
SHA512 c59c5b77a0cf85bb9fbf46f9541c399a9f739f84828c311ced6e270854ecce86d266e4c8d5aa07897b48ce995c3da29fea994e8cd017d48e5a4fab7a6b65e903

C:\Program Files (x86)\GIMP.Core\Data\python.exe

MD5 b6a00884f34e2a0ed22291b5bc600ce2
SHA1 6cf8830575acbefb83c361a6b719bdd15f0b1245
SHA256 da2293a6ed23fcfc1eb795d420f1e04c784e2b7c0eddebc953d4bccfc2f7ee69
SHA512 b610eb2c8e37cb89dd8f244c9b6fa0d6113193d4aa56781908ffd54e0bd7405f668a65c36a18f9a79f7702df51c4ff58f469ad44969af3d7a9fc34f38f39fbf1

C:\Program Files (x86)\GIMP.Core\Data\python38.dll

MD5 cac2f6648d8f6465ff9e390f2636f5dc
SHA1 f65b91385b40c3a54ad3e11fce87d8971ef3ed06
SHA256 7b1ea9ba454b4182d56395ab27d54e842fc1031ad85cb2b8e8b3506b7c140072
SHA512 0fed4a72592efc2294ed0f20db802323f86748f4439c734a472b5e179319141a26a47a77d13a831ee8dda76a26cad14f3d0429d3cf92e2a654561f21b20216af

C:\Program Files (x86)\GIMP.Core\Data\vcruntime140.dll

MD5 5f9d90d666620944943b0d6d1cca1945
SHA1 08ead2b72a4701349430d18d4a06d9343f777fa6
SHA256 9ec4afad505e0a3dad760fa5b59c66606ae54dd043c16914cf56d7006e46d375
SHA512 be7a2c9dae85e425a280af552dbd7efd84373f780fa8472bab9a5ff29376c3a82d9dfa1fef32c6cf7f45ba6e389de90e090cb579eebff12dcfe12e6f3e7764d1

C:\Program Files (x86)\GIMP.Core\Data\python38.dll

MD5 6f21217cc59e70503d3e0a1fdafc4062
SHA1 1bf2178fd65aeb921119e790d5311948e2eff039
SHA256 576fba120e74149bd4feb4cb086dc6d994ddb0aae2fa1869a9152f4ca6a8b2c4
SHA512 1dde1b2e91c39cfb54ba26672aa4a60700b14b1aa5c93cd549027e56b07a028254478c0087db83953412fbe6f05b6060f61cb00862b9f77f411373ad74213f72

C:\Program Files (x86)\GIMP.Core\Data\lib\encodings\__pycache__\__init__.cpython-38.pyc

MD5 5cf46a59be3f63cb25bdc251eadbaf9f
SHA1 0db1795b07b311c1c0b746fa1b6ab26c4d7e6c1e
SHA256 258f8f8ac75ebb29a3b293f4dcfd698206c54a3250681112766436a26c9c065d
SHA512 9571de9cf5cc336efb6d9a13d8ba7e6a205f657f397b7b7c75ef98da1b231742f99a165c33fe099c408a19aa4d79756d4394b61457b2339f18f66a8bf758061f

C:\Program Files (x86)\GIMP.Core\Data\lib\encodings\__init__.py

MD5 dfca2bf597f8830c9647dfd4e9904918
SHA1 f830914a2b81f49bd1e111bca3fa7722f6d99f6c
SHA256 73bf331b7d7cf6881551e1e49976f635a7bc473e297bc280beb56151b5ef6388
SHA512 ddca1accc8b911a29b095ffbf3b36da164519e6df5ae51617e44be5baa6b1d7a38ff03ae5e995643826622133f0e2f8eaec2da55e6f74216b138d5cd17853673

C:\Program Files (x86)\GIMP.Core\Data\lib\encodings\__pycache__\aliases.cpython-38.pyc

MD5 28860ed86d50e9b987e8f582feab4e58
SHA1 558542e73acec8e5bb43ddf9f29bebf8d5b448b7
SHA256 49de1a2f5a548d4fac0708648eaab97992e3a67a290f593631bab3390f953b3f
SHA512 fb0922e83bd5338cd4043bb3c4a43025c4b0a25fa532a96e94de6ebea3849323e9ef5aeef69602a1250b7ce1abd730cb3cb0d677ed7c97f02db5fc035c7489c7

C:\Program Files (x86)\GIMP.Core\Data\lib\encodings\__pycache__\cp1252.cpython-38.pyc

MD5 954cbe20dbd570bb98df9b34d59d6b02
SHA1 a8411ab94a93a952e0549778a2fecf29e11fd750
SHA256 a1252d3f652482620c0dab05699fd282b1b157154285451f445bf44ff8bd78b0
SHA512 86aae2f9ce8836dc9eb14fcafa5f2b544fe6e8bc94a25667bcd3a431b6de0d9ead08f298bb8d7bfc6b265cef063cbe7d31a4c7fc8966697b43f3bdc82d6090ae

C:\Program Files (x86)\GIMP.Core\Data\lib\__pycache__\site.cpython-38.pyc

MD5 2e9ddbac92f6091b2a5a296e2cdc6d68
SHA1 2496fcabb3b680e3cf1c249b455339393cf75ebe
SHA256 5a1b67a811de17e6d81377cb69085ea0e4c26ec7be77ec93f28647aa9c84d4f6
SHA512 1f54be4f7fecc1c92c3b9460358bbbeac9ba3472f265e46e2d1b16e51d0510136a03c16664ae7493d87a647cc663bd2137093d6fb338e06f72b0cf45b57f4015

C:\Program Files (x86)\GIMP.Core\Data\lib\site.py

MD5 d00f11fb645e04757aef14a56ca02c17
SHA1 7054ebe99fe58dc7e9f2d3a3ab52e57294c057f6
SHA256 c25cdecebd65597f5cfcbd60e269bd23dab5b4e292e428e5044cca7a90e2e443
SHA512 83bba0db143cebc3c687f6a173c3e647bdf1c942181378b31e2a71c9537cf7b387c66140dea3aad5568786bf40d71a2302312af04560bc953324e15b4fbe046e

memory/3748-14341-0x00000000047F0000-0x0000000004800000-memory.dmp

memory/3748-14340-0x00000000739B0000-0x0000000074161000-memory.dmp

C:\Program Files (x86)\GIMP.Core\Data\lib\__pycache__\os.cpython-38.pyc

MD5 ebbe1643b80a757a47b6d4913ee6c072
SHA1 1239f8f5ae217505e8558c76cd84fac53315d89d
SHA256 77bec163262b8d78a70e3bcbe5596b58aad955cfb18540e53e65764099368632
SHA512 9d33dc6865635a5d8e1086362d1b8b932d054ebbcdf7e902bd8b40a04ee940c9874a11749a4420728a2d5ffdc3e46a48e2d08922d9b189c0c1c61adcaa9565e3

C:\Program Files (x86)\GIMP.Core\Data\lib\os.py

MD5 b912f4b99fd48b52569963da6153da0c
SHA1 51f7f3b07023ce7b615a083eddb507deb82e11ad
SHA256 def06fcf2319784f2261c2fccfaa59e8227c11a5aa0efefc60abbbff9aa86126
SHA512 27d6920a754659dd078bd27638f559c3269ee1dee8ebc51d5b419ac94a4703fb294f0ccea92d72514899e4f7afe0b754cc3fdd6d365a239e93a604bed45fc6db

C:\Program Files (x86)\GIMP.Core\Data\lib\__pycache__\abc.cpython-38.pyc

MD5 9803107d52e5b32666038db4e2172bd9
SHA1 ab10a79f280571e9e4d91b272a381cc3199be421
SHA256 7fe681185908398eab6daad4ceafc0d6cfe89fa3d8bd75764f22bbab0f6b0eba
SHA512 306cb6b7469f8a362258d7a66cc0c96f0ad5fdf2e8838ee6c99dacb311e76f83300a0504c3e2d32270fb619b44441d4ca63248e3e1c96688a6ea5e6f08db032b

C:\Program Files (x86)\GIMP.Core\Data\lib\abc.py

MD5 b827a69fc0ae3a823fe1f8e516cb61d0
SHA1 c8ec16017a7155c12aa241a85b093f0663c719eb
SHA256 3ca4c7164f2ea77940a191a79a3f2aa9f0f0dcbaae454c5947059923c6a73360
SHA512 76c65d974a6e5dfef7b5456090d3092251cf45b02695635cd2e4377d73efaa42fb443832e1f6b96293c6064a8aed6c44f6e268d648561007e0d8b8f45f14a6de

C:\Program Files (x86)\GIMP.Core\Data\lib\__pycache__\io.cpython-38.pyc

MD5 547602d786ecb6ad5c291fb11ccf33b6
SHA1 3879974d730410cdd91e3a84fcee504dbbc5b8f9
SHA256 ad8034477197d42c6c994a963685d8e641c5cd6763bc30c3e209c014f6a6a857
SHA512 b5f06dcc26d6a9514f5bf73ac930176437d21b477b13e89f4df1838f51bc80b1891866600abd8463de4dafabaed500849cb0cde5703f553d6aebfd1c3903d9eb

C:\Program Files (x86)\GIMP.Core\Data\lib\io.py

MD5 bfefc78dd16547a0bcdb09d7b1397d97
SHA1 af0269ec9b60a04ffcf2d3c77b279cd33453520c
SHA256 da5be2a0927caf50cfe8136d36143cdc75a796dbcca258c0b80c44c164fb70c2
SHA512 a0a809cdc2802a22ca942c89f15029ff7b93871bfffc9dba16757f76137ac36bad0bd3919dd85d17dcd28d57d4ddd2752ed4549a78c0e1e4ce8382df83661e9e

C:\Program Files (x86)\GIMP.Core\Data\lib\encodings\__pycache__\latin_1.cpython-38.pyc

MD5 4db442c58044348fbc3f78508007dff7
SHA1 11386b156f8a2aac8eca328153fe4ed6681c71bb
SHA256 bee3d32d3467ec752bd174a1ecc94e27fdbb564b4e6ea9cd385b566374814207
SHA512 dcf5c2102b06dbcbafc9535bb08eae402d436fe8da7a38751d5b0cdc6aa1da0f990610bd7a76561985ed7d8f655fdb7abe439b4e662a1c28a43d2035146c8946

C:\Program Files (x86)\GIMP.Core\Data\lib\encodings\latin_1.py

MD5 92c4d5e13fe5abece119aa4d0c4be6c5
SHA1 79e464e63e3f1728efe318688fe2052811801e23
SHA256 6d5a6c46fe6675543ea3d04d9b27ccce8e04d6dfeb376691381b62d806a5d016
SHA512 c95f5344128993e9e6c2bf590ce7f2cffa9f3c384400a44c0bc3aca71d666ed182c040ec495ea3af83abbd9053c705334e5f4c3f7c07f65e7031e95fdfb7a561

C:\Program Files (x86)\GIMP.Core\Data\lib\encodings\cp1252.py

MD5 52084150c6d8fc16c8956388cdbe0868
SHA1 368f060285ea704a9dc552f2fc88f7338e8017f2
SHA256 7acb7b80c29d9ffda0fe79540509439537216df3a259973d54e1fb23c34e7519
SHA512 77e7921f48c9a361a67bae80b9eec4790b8df51e6aff5c13704035a2a7f33316f119478ac526c2fdebb9ef30c0d7898aea878e3dba65f386d6e2c67fe61845b4

C:\Program Files (x86)\GIMP.Core\Data\lib\encodings\__pycache__\utf_8.cpython-38.pyc

MD5 59e1867833d451d55771984481d79099
SHA1 ec83c929e836f2ffad31263fb6638aac26abaade
SHA256 0c64ce0a02bc0ffc571e74dcb09ff3922fc3fa69facc7ad237efa464115e7508
SHA512 3a9a0ab58d365ef5628ba16e1219307c358db351c2427fb4580883c638ecb722e6bebd90b9dbaeb0f2d93968f2a0372f2f0d2355fca97b7173cf3f9f1511966b

C:\Program Files (x86)\GIMP.Core\Data\lib\encodings\utf_8.py

MD5 f932d95afcaea5fdc12e72d25565f948
SHA1 2685d94ba1536b7870b7172c06fe72cf749b4d29
SHA256 9c54c7db8ce0722ca4ddb5f45d4e170357e37991afb3fcdc091721bf6c09257e
SHA512 a10035ae10b963d2183d31c72ff681a21ed9e255dda22624cbaf8dbed5afbde7be05bb719b07573de9275d8b4793d2f4aef0c0c8346203eea606bb818a02cab6

C:\Program Files (x86)\GIMP.Core\Data\lib\__pycache__\codecs.cpython-38.pyc

MD5 614b42af5315672f7fb90cc7dfa7e157
SHA1 6368846e9d525b8604707572917a6ff6eac75bd1
SHA256 00f8159a51dce7beb9cb2299fb45baafac81f1203c5be7d139766394cd21586b
SHA512 0131a36662c05de4b414f94853a0ae39356b66308ab4e1c8a65138731e3cede3d505882cb6782c90ea4f5f3773afde31db90970cd9fcb42f258332885033f96f

C:\Program Files (x86)\GIMP.Core\Data\lib\codecs.py

MD5 a12184c5360aff98ef6527cef8f5dadb
SHA1 eef94692da28311fc555ec0f0537ae78d5deedc4
SHA256 182005d76cbdaee8670df64e4bb66395ac317bf27a47df0f8d4affe913263786
SHA512 64ea133ff1e5b6da36f0f481fb93df1d22c31ea6519904443cd7201fb238d07aa5ba9f7de27e226424882ec018b17029f2184cbf15026a6b97d537ede3081e46

C:\Program Files (x86)\GIMP.Core\Data\lib\encodings\aliases.py

MD5 60d65efe463359055b686582d13216b8
SHA1 d9b9362337a26a930f242e31894d0965e1e17b58
SHA256 04dbe6f68bcce2c32cf79a36b776025822a79bc7f2d47d481bc4f8e05e784086
SHA512 668e5288af936c42bd6253074f209860a75f155ad2254c26d6c3f21f308fd4f39e27f753f43e4d2b5ae48727fa92f74e75c6742fee2d0f7849a1029bd20f3e49

memory/3748-14292-0x0000000004800000-0x0000000004836000-memory.dmp

memory/3748-14406-0x0000000004E70000-0x000000000549A000-memory.dmp

C:\Program Files (x86)\GIMP.Core\Data\Lib\__pycache__\re.cpython-38.pyc

MD5 00e5fe79d6574aa02e9d6c791142df62
SHA1 72543d86e3e2a362df95e10eff849ab57c05d971
SHA256 43644c2e93ccab2226e4bb4fce606ffa6e1404ed0f9b9d3967e91b48f24e261f
SHA512 bebcda9a052a25d74c70129d4ae1f4511f88b5c025bf2311d227429f8b88c68824ebeffca672343582a9d98ba1da2cc32f6b6527618c87aeb3760a172c996045

C:\Program Files (x86)\GIMP.Core\Data\Lib\functools.py

MD5 14aa9d359db5d76ee721553967f24a29
SHA1 8b18b4cd11c8126507476d2151d1ddb72dff8f74
SHA256 630840f361e91df53f4421ea89f413464ff83c61c80a569eb289a2f6934a3ad8
SHA512 37afc988e2cb024357edcac3c44c6831493bcce49aad8c41e73585d12a2a97bdc1f460f3a6b1b384bde4c7c7a561f59e80b0eff1cf64bd9fcd37b33c0467380f

C:\Program Files (x86)\GIMP.Core\Data\Lib\__pycache__\sre_constants.cpython-38.pyc

MD5 8bfb0dbd80eeca0ed7cc8a4a813a351b
SHA1 57e7ef56bc54a29a8969e1127660610724c64bf7
SHA256 f8c964e72042fd2ec340f0336b261322e72d7bd6b56a6c0a2a52d34ac344bf00
SHA512 74fd1e71ea915e48da4420082a16c92a2f2c7e7fe3fd3bd948b0dd83f8a577871fa48c58e3055364639fb18684cdf5d0811b6eef9a216b236b6751ff355356fa

C:\Program Files (x86)\GIMP.Core\Data\Lib\sre_constants.py

MD5 42cd9ffee98617e622a44bd07e4ed659
SHA1 bc4e42eeee2c3ec254654a675834f1485d0c8a2e
SHA256 1cb5370c6ea69a222cfbfd37ef9750f12d9c25dcb652a7cd6300d177f2ec9acf
SHA512 3db80b111fa1c5d357c93db029ac9724f590facdd57c7646b0e1a71eeb0bbb095894c07a32a2789be275964a120059c96af78b18b1feb69765880594866bedbb

C:\Program Files (x86)\GIMP.Core\Data\Lib\__pycache__\sre_parse.cpython-38.pyc

MD5 9e4919fe1ae9308ca47bfb25c5e97954
SHA1 a9b40f8e3f890facb1518916e60c5bd8ceaa400c
SHA256 10d7118f3e8220e1186795a01a25b022411257db1c22c09d240eeb23dace6662
SHA512 8bbc569c6bd9ad7108d03ae04e91630ea56ccce792b2d1cae647049ef9b0ac1d242ab557ee42b468cf6dfc87aa172a59be962797bb085de8e3aa999cb45534d8

C:\Program Files (x86)\GIMP.Core\Data\Lib\sre_parse.py

MD5 2d62b314625870eb3e1d329d7a278067
SHA1 1a4c79bf0e07163d4e831bc3285046f85cabfb90
SHA256 0ed8ea2417da4d21bbc926ee24465c7b7a22d4ceb6fd38db31f79a9ebe6bb3d7
SHA512 e46202f3e3dce2d72fcfc8ea7339b87da88a581dfa34902935b07dfd82190f852a6b451ba52c9ce18d1d381c6b0cafb6dff56f4f38dc84335944f5d5e636877f

C:\Program Files (x86)\GIMP.Core\Data\Lib\__pycache__\sre_compile.cpython-38.pyc

MD5 56d4ea0aa33d9249e87009801071c28a
SHA1 9d0f506666257a10298208e7c0b2cffba27cf9c8
SHA256 90b45ef18a5ac1277895608d71a40879f18c73c62b82a1cbdf472486dc0e2258
SHA512 d2c7d4e6db03fd5374bbc0b271e55a576cfb794ff0c7ef4123641eac926c7e730afef3954ccc283251f4eca546cdd0065261f722bef605615c43f8c32b9484d4

C:\Program Files (x86)\GIMP.Core\Data\Lib\sre_compile.py

MD5 b0f2c8c41db9d0c30b250d553f786802
SHA1 73f19a12862e1fb633e6e99444d23cd1bcd9b54f
SHA256 1763d18c6a6a948183ccbe86034e0f64e6220edfd858f251c02b334bc78bdfd5
SHA512 7cde837eee5ffedb21f906952ebc6ad745ee24d6d9beb0fc9f92ef86adfa2a8ef8dc896f5ecb299bb7b5c2232ac8f6b9d6ee0aca064ed4a912e6fb09154316a6

C:\Program Files (x86)\GIMP.Core\Data\Lib\__pycache__\types.cpython-38.pyc

MD5 67b8ae9b8557c746181474aca51043f6
SHA1 6283f8f1125da997e01ba3c12a7263c37f08690c
SHA256 4d76b15900e934338579efa08a56053a8d14fb51982b08d752639ab487743b80
SHA512 5184629d00dae1a2659e282983a3e5cdf8c21478e4db36d03375d9da5c95f645d1f72f2074e1b6254351113fdb551674671aace42ad81ce0e6a3bc74929d75ca

C:\Program Files (x86)\GIMP.Core\Data\Lib\types.py

MD5 e4447dac719e8b35afc20e4ad510f2c6
SHA1 0f2b608f92ae6aaf948a2b0c052e8d93094b81d6
SHA256 637557b314a2428ce884917134e939d256e32b4ccce9a038477e5a2b615c93f0
SHA512 c1cb697981eb317264f9e25cfd413c6b745ec585fa6da1e06dbf40a664e0b8014e1e03cacce4a44cd99085c39639f52f7f5a1c543488a9618552a72be9decf57

C:\Program Files (x86)\GIMP.Core\Data\Lib\__pycache__\enum.cpython-38.pyc

MD5 3db158948d092a3569592fc4a35cc33d
SHA1 b34b955e26bc7a4acb8a1d6f9699808cb3d159f2
SHA256 390cf0035e8c7f2e20d3854474b8ae2d870960c14ac4890c14f0bca9d0f3fcfd
SHA512 f27e17352beef0ed52b165678e130d1090fd33acce86707c2b994fa3127c753b9f573428f556aade540f4152e79ba649f652f06f04d32e47b1a99bbf23ac566a

C:\Program Files (x86)\GIMP.Core\Data\Lib\enum.py

MD5 e00ebf5dead0fc3a46013d63e04fe1f2
SHA1 55e688744867714deffaec691627fdb6094384fc
SHA256 8f191ec69325c353fa4800ce9e613f3b3247d2d473382e0381a694dd84d6f778
SHA512 265bfdaf0426a2a513f7ec3c9fa7b669b0bdc7901dc1a5c084faeb6668bc75cdb93cd24646f28a554766027ed69af748a4e8424a60b9210db3163c104927ce3f

memory/3748-14494-0x0000000005630000-0x0000000005652000-memory.dmp

C:\Program Files (x86)\GIMP.Core\Data\Lib\re.py

MD5 32222a411b288a4f240b40b3010f3702
SHA1 e4f1d529d10b163cc06dc36b27c39b2fa9bec984
SHA256 26708bcb5ef63abff03c961805c245a06df40f2b09992872c7d6c22fa9a6a5c1
SHA512 3b1338a41bc07e4360284384396009f30a8c4a19461ce44d3f1c1d420d9d04d7a45fd8f88b71d29882c8f6dbdb04c72bce60bc19fc90c85c0181a19989c0a274

C:\Program Files (x86)\GIMP.Core\Data\Lib\__pycache__\glob.cpython-38.pyc

MD5 5a64ca96c3fd1e0adfb0fffd13875a8a
SHA1 fc7b69850254ca1389f989d52627ed2885de6e9e
SHA256 13751a951656749a70a8a7f8da7226e795f53c7d6965d9d7bc1df09442f9c959
SHA512 97acd459357df167374841ec754b90834a4daa59d44f4413a6cf97e94834fa2bf135a5ed631d395bf99fa99de440cae5823e62827ea02433b93b5c50d86badf2

C:\Program Files (x86)\GIMP.Core\Data\Lib\glob.py

MD5 6bd42030b50006bbf544e217aafbadab
SHA1 2dce2bda55cd3f15aa18d24fbf3e915234cbb1ba
SHA256 c8d5ada871ca42fb3e550dddc6ae8a4561657302e9611ecdeec7fda463dae5ad
SHA512 de4b31b2a8b2c13302a7040e30619ff59b24cea6e846aaf7af75608304a36da692b7ac2e069e236bee4bf6dcce9ba265be294f4dd602ed6a76df01522d4e7ec6

C:\Program Files (x86)\GIMP.Core\Data\Lib\__pycache__\_compression.cpython-38.pyc

MD5 235fe625e45606b9a1a3cf0221903934
SHA1 6477938bb42e056f108bec1e672b7cb6bb1a5818
SHA256 c81af1428273d15c120f6272d4c0923af43dae820ff8bda83355f98dbb2e3dc4
SHA512 ca37387d723f3aa758dbf42a628856f56d0340114f02f2fa296d9dbe471394021e75164c747d59baa8b6884aeb9356badf5e51c2b2a352fdf42dc7a583371221

C:\Program Files (x86)\GIMP.Core\Data\Lib\_compression.py

MD5 4f120f1f22de8eb30099d764465a5b1a
SHA1 4ffe0443fb81d68bfcd52113da20a7d4d8b7c986
SHA256 88437c52c7907823a3919731222a77de27ba42bbd9ae0239903e4ee8507ed47b
SHA512 611445143ae1c5710e7d9c091a5cfe3aad215b83053eb8d155b51836a200644f27f2504a6b15d95b2518b17b8f803365a789ec724a6c8e56e4976f83187aaea9

C:\Program Files (x86)\GIMP.Core\Data\Lib\__pycache__\struct.cpython-38.pyc

MD5 aeebf9ae36f2071815799ccbc4deba4e
SHA1 9e0a942df0ee29ced305d366d0d1446b9dcce86b
SHA256 ed86b6b41958d3c65843deedc566094f5d0fc78358bde021c77dfd12e4347101
SHA512 7bcbc4128086c42075d734f393d2bd580ec5da1298a02001508e1a336813d4b896ab431c5c8ab999bdf840c9ab3141ced688e80e7af4ca3725bcfe237eaf349f

C:\Program Files (x86)\GIMP.Core\Data\Lib\struct.py

MD5 5b6fab07ba094054e76c7926315c12db
SHA1 74c5b714160559e571a11ea74feb520b38231bc9
SHA256 eadbcc540c3b6496e52449e712eca3694e31e1d935af0f1e26cff0e3cc370945
SHA512 2846e8c449479b1c64d39117019609e5a6ea8030220cac7b5ec6b4090c9aa7156ed5fcd5e54d7175a461cd0d58ba1655757049b0bce404800ba70a2f1e12f78c

memory/3748-14385-0x00000000047F0000-0x0000000004800000-memory.dmp

C:\Program Files (x86)\GIMP.Core\Data\Lib\__pycache__\gzip.cpython-38.pyc

MD5 4b6558dd50149d6b8b1c50ff5d6862a6
SHA1 9f4ef69c71cb28dcd0d0fafcaea9b446f1048759
SHA256 c94d68e282df1fd5e06c6aecdd9f58813f3ba469efe72efbacdc0c4e27b98e9d
SHA512 6e5a589df9a93bff30f0bd608b3919f3cd1d550798de50a760cc99ebe31fdc21bebb8c03643677c1742ae7b763963753ebc13d2f756156e1c9643800d828a085

C:\Program Files (x86)\GIMP.Core\Data\Lib\gzip.py

MD5 2e608f6e041586b906f67bcfe05d7eac
SHA1 7db0b42c4e7ac342cf4cb9be74861110619acab8
SHA256 d037d441df34a2cfa663e9d2e5a06b1edc970bc67b73caae67d981fbae3d1e21
SHA512 ebc0bc98e710d1a4523b4e7b78f3fc18cc418ec6f60b060dc3ae1a4592c217deffa0df12be9f7d7107856f028eb78241b9547fb6e10f38c516ca75f5e7b783a1

C:\Program Files (x86)\GIMP.Core\Data\Lib\html.py

MD5 02e98c71545c8345d28920fbc4f99c28
SHA1 a09e2b273c4cb323d4ea424ae456d9dbc9fc43f0
SHA256 864d7bcd96f8cf35b9e372b6508bc6ef1a704eaaa03c34bd79577b057aebec5b
SHA512 62ca71f1028be36e9afa5d26c8f11471d6679658b8b3db7b2db696f093a2a9d5e616a7b3c336a18c143c5c73908259eb4ca2f4af66d3ee56a5dc4ee358d2f530

C:\Program Files (x86)\GIMP.Core\Data\lib\site-packages\win32\lib\__pycache__\pywin32_bootstrap.cpython-38.pyc

MD5 a4f0efdf38c4aa257074e56fcef23380
SHA1 a8f76fa22050a4afbf103f264dde8d552a8eb3ff
SHA256 e1e08479b08810b260c51b19b5cff6e497ad887a2f2a03fb61f66a2ab2d0d46d
SHA512 bfc1d2bcae38d194f2a55ce60ec64a24f97d002a7d6b36c5a7c171ac0dbe9ec9ecab82480750520d50c045f758199888af694373b9d97b14177683e16a59d2d2

C:\Program Files (x86)\GIMP.Core\Data\lib\site-packages\win32\lib\pywin32_bootstrap.py

MD5 5d28a84aa364bcd31fdb5c5213884ef7
SHA1 0874dca2ad64e2c957b0a8fd50588fb6652dd8ee
SHA256 e298ddcfcb0232257fcaa330844845a4e7807c4e2b5bd938929ed1791cd9d192
SHA512 24c1ad9ce1d7e7e3486e8111d8049ef1585cab17b97d29c7a4eb816f7bdf34406aa678f449f8c680b7f8f3f3c8bc164edac95ccb15da654ef9df86c5beb199a5

C:\Program Files (x86)\GIMP.Core\Data\lib\site-packages\pywin32.pth

MD5 322bf8d4899fb978d3fac34de1e476bb
SHA1 467808263e26b4349a1faf6177b007967fbc6693
SHA256 4f67ff92af0ea38bf18ac308efd976f781d84e56f579c603ed1e8f0c69a17f8d
SHA512 d7264690d653ac6ed4b3d35bb22b963afc53609a9d14187a4e0027528b618c224ed38e225330ceae2565731a4e694a6146b3214b3dcee75b053c8ae79f24a9dd

C:\Program Files (x86)\GIMP.Core\Data\lib\__pycache__\_bootlocale.cpython-38.pyc

MD5 e36e3b26603b3b7bec401317101ab84c
SHA1 eeb5be170586d043ac07c2fef5625dfd1650d615
SHA256 3353305c3c969aa320d78d84f80d1b5565caf13949060fa366abe10e29563daa
SHA512 4930b1082dcee98622e1786a2983804a47811c0a807e4b2c6c535b8b4d8f17dbac8696ded1783f630f7284d33eeb7aff42d6cffeca68564ad6494318cf695bd9

C:\Program Files (x86)\GIMP.Core\Data\lib\_bootlocale.py

MD5 f8b749a164c1d2d609bd1d8f3b373401
SHA1 82321e3ba1a8a767418894841792d974a443abba
SHA256 77742b69385a221c4c41854e851d4c3ece387c8edaeed30ca8d2a066d12397ee
SHA512 394c4e2bae2042d40b7763096912e23878163a51cfde6a7539e1fa4add7073b0e08742cf386b6cb703c027ac06d30a5280c5caca83e69a8308ecaac858a3bbb5

C:\Program Files (x86)\GIMP.Core\Data\lib\site-packages\distutils-precedence.pth

MD5 c39367750a2ad85b290fa7595d4cc457
SHA1 4e2b7b413113994e4730efe03e564a84cebe2d73
SHA256 7ea7ffef3fe2a117ee12c68ed6553617f0d7fd2f0590257c25c484959a3b7373
SHA512 40e5b4813f24601ad581c93fa0115454ef89e61f6b911644e3b89946280ff97cbd46ae00287d8dc71392ef6c940ebaa173d2e3c32df72f0aa27d65ed73fe37c1

C:\Program Files (x86)\GIMP.Core\Data\lib\__pycache__\_sitebuiltins.cpython-38.pyc

MD5 7a8f0b5ed6bd2afb23b5ab37f85a5f02
SHA1 07a9ab67e66f29c0bf52fdf5da5cc5e21c266317
SHA256 514d132fd50043f8326e29e1d94f62a250a8e8c88b8cd7d2a067fe626ca992be
SHA512 a36d2ad33998323faafe4e6663c8cd690c765d764ef0273743d701d08aec3cbb1511d084a3699c08d743ed785e65299e3ea78d32932cb220b2e4eb7a2b6698fe

C:\Program Files (x86)\GIMP.Core\Data\lib\_sitebuiltins.py

MD5 385fa756146827f7cf8d0cd67db9f4e8
SHA1 11121d9dc26c3524d54d061054fa2eeafd87a6f4
SHA256 f7d3f4f4fa0290e861b2eaeb2643ffaf65b18ab7e953143eafa18b7ec68dbf59
SHA512 23369ba61863f1ebe7be138f6666619eaabd67bb055c7f199b40a3511afe28758096b1297a14c84f5635178a309b9f467a644c096951cb0961466c629bf9e77c

C:\Program Files (x86)\GIMP.Core\Data\lib\__pycache__\genericpath.cpython-38.pyc

MD5 58637973034bf3519370b3892f93080b
SHA1 4156782e040b1ab3aa572a5b2a69cf9f45d3d68d
SHA256 49109a6e31044b26757e623c71089e487306df5490b438589619411307a8a237
SHA512 35d60662b1d12aa039667c0e8a7572e74dcb59ceff9ec1ec5c569e48016003d633f46c5f07c4d19357a254668a93e22dbea8053fbb06901d7d2670051a1ae747

C:\Program Files (x86)\GIMP.Core\Data\lib\genericpath.py

MD5 5ad610407613defb331290ee02154c42
SHA1 3ff9028bdf7346385607b5a3235f5ff703bcf207
SHA256 2e162781cd02127606f3f221fcaa19c183672d1d3e20fdb83fe9950ab5024244
SHA512 9a742c168a6c708a06f4307abcb92cede02400bf53a004669b08bd3757d8db7c660934474ec379c0464e17ffd25310dbab525b6991cf493e97dcd49c4038f9b7

C:\Program Files (x86)\GIMP.Core\Data\lib\__pycache__\ntpath.cpython-38.pyc

MD5 1f6614bf10cd0dc8c6f0366f74f34ac5
SHA1 eaa2eef2e9833781010bc4759912e5577760b769
SHA256 96f1ed27edb4e474da2890672683d549917ca6c63b5acf9d9f0f2ca7bdf643f2
SHA512 853c41c61f8b47c83290be4d7718894c268d1fce0dbf4d80768eac9706bb1ed401412c54fdd857e204b26db829046f8b8ba1db049298dfb722877e70d6ae514f

memory/3748-14509-0x00000000056D0000-0x0000000005736000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_ywoqv4qb.n5y.ps1

MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

memory/3748-14523-0x0000000005740000-0x00000000057A6000-memory.dmp

C:\Program Files (x86)\GIMP.Core\Data\lib\ntpath.py

MD5 aea38f14b21e3b834e733f99be190c05
SHA1 286af16623185e1f27c36b463a61fe37830f2600
SHA256 51499c0f04c675a76c2e25551ed12d7fa9c22383caa1db3cfcd64f7c7e38e175
SHA512 536f863ac2ed408801f67efa06d3858ab6f7b853e489995f0c443e51e839dca53c5742cd46cf75706474978e33e48dcf3abe557db7b8f78226a3545a1df8201d

C:\Program Files (x86)\GIMP.Core\Data\lib\__pycache__\_collections_abc.cpython-38.pyc

MD5 0473a755a04bc22f8444733770436954
SHA1 8f99a762c6149a0021e6d02dff640dcc50d2962a
SHA256 7587d5a8de886c850199edd25a1b2afdafef866cc7cede3462687f54652b41f4
SHA512 6f529d3c3501e3e9b9cbf2b664a11cd64907238a250fb918fc6c140c0265560a668310a4c815684a76c41321063783814fbed430ceaf92cd2d4e88eb61eff98d

C:\Program Files (x86)\GIMP.Core\Data\lib\_collections_abc.py

MD5 711b513cd73bddbbe743043a71cfa902
SHA1 26f5e732c0066309690ba3ec5f785d1e3a980a80
SHA256 9279993b18c62a62d666ea35d828e6ef5564ac19b434484a22ab94ffb1ecc117
SHA512 149a71605c0574fefa1d9d23f79525c7441fda992ed0148720dc2882b3f078a18cbb4eca07255ebdd7461d7c22ee963145369d7c05472a128b15cbd5a2e67ef0

C:\Program Files (x86)\GIMP.Core\Data\lib\stat.py

MD5 7a7143cbe739708ce5868f02cd7de262
SHA1 e915795b49b849e748cdbd8667c9c89fcdff7baf
SHA256 e514fd41e2933dd1f06be315fb42a62e67b33d04571435a4815a18f490e0f6ce
SHA512 7ecf6ac740b734d26d256fde2608375143c65608934aa51df7af34a1ee22603a790adc5b3d67d6944ba40f6f41064fa4d6957e000de441d99203755820e34d53

C:\Program Files (x86)\GIMP.Core\Data\lib\__pycache__\stat.cpython-38.pyc

MD5 41ec4cd07a9565236d1df8e198050532
SHA1 ecb5b6dd760b3f73eda0558855bf796ab19217cb
SHA256 fd8215caa596446ccb65a03a57b84ba0613ac41f349f172a6ae139593a031b1e
SHA512 6ef9ac4786d08b80737f1280be606e3da085943fdb4713fdada6f5bce16a65f104fbb13b7195e2ad1665c73e2473b1fd2e5ab96ea092d4def6c611328aa89fb9

memory/3748-14563-0x00000000057B0000-0x0000000005B07000-memory.dmp

memory/3748-14632-0x0000000005CB0000-0x0000000005CCE000-memory.dmp

memory/3748-14651-0x0000000005CF0000-0x0000000005D3C000-memory.dmp

memory/2116-14816-0x0000000000400000-0x0000000000712000-memory.dmp

memory/3748-14817-0x00000000047F0000-0x0000000004800000-memory.dmp

memory/3748-14892-0x0000000006290000-0x00000000062C4000-memory.dmp

memory/3748-14902-0x000000006F990000-0x000000006F9DC000-memory.dmp

memory/3748-14901-0x000000007F2D0000-0x000000007F2E0000-memory.dmp

memory/3748-14911-0x0000000006C90000-0x0000000006CAE000-memory.dmp

memory/3748-14912-0x0000000006CB0000-0x0000000006D54000-memory.dmp

memory/3748-14913-0x0000000007630000-0x0000000007CAA000-memory.dmp

memory/3748-14914-0x0000000006FF0000-0x000000000700A000-memory.dmp

memory/3748-14915-0x0000000007060000-0x000000000706A000-memory.dmp

memory/3748-14933-0x0000000007290000-0x0000000007326000-memory.dmp

memory/3748-14934-0x0000000007200000-0x0000000007211000-memory.dmp

memory/3748-14952-0x00000000739B0000-0x0000000074161000-memory.dmp

memory/4876-14970-0x0000000000400000-0x00000000004D8000-memory.dmp

memory/4876-14972-0x0000000000400000-0x00000000004D8000-memory.dmp

memory/2420-14976-0x0000000072DD0000-0x0000000073581000-memory.dmp

memory/2420-14978-0x0000000002D70000-0x0000000002D80000-memory.dmp

memory/2420-14977-0x0000000002D70000-0x0000000002D80000-memory.dmp

memory/2420-14993-0x0000000006170000-0x00000000064C7000-memory.dmp

memory/4880-14990-0x00000000024D0000-0x00000000024D1000-memory.dmp

memory/2420-14994-0x0000000006740000-0x000000000678C000-memory.dmp

memory/2420-15871-0x0000000002D70000-0x0000000002D80000-memory.dmp

memory/2420-16238-0x000000007FE00000-0x000000007FE10000-memory.dmp

memory/2420-16413-0x0000000070DB0000-0x0000000070DFC000-memory.dmp

memory/2420-16574-0x0000000007880000-0x0000000007924000-memory.dmp

C:\Program Files\GIMP 2\share\gimp\2.0\icons\Legacy\16x16\apps\is-CPC84.tmp

MD5 ab55a144d95bc43b492cce938234af57
SHA1 6216105c8611793325c857e5ef7ea2de449f87e1
SHA256 b661bf5d3a06354dc9cc0026d10b1d808555f1a1f1d276102e2f327e0a803885
SHA512 c15d565ed1548be18a1b6b8f685de3da80edf26fe45614fd10206cfd606a0f8d861144bb57942ceec5d8ffcaad8b0e38ef2987797a1d58a51607271bde7999d4

memory/2420-17299-0x0000000007B10000-0x0000000007B21000-memory.dmp

C:\Program Files\GIMP 2\share\gimp\2.0\icons\Legacy\22x22\tools\is-9HKNR.tmp

MD5 165965adfb48b92f53811143c74d8185
SHA1 a3a756ea4601b5f9be6fee896e2d55ad2607293f
SHA256 50d12c9a7c0982bf46c1bda75aeed105f288f0f5556ad873c98cb4ce1253a5bb
SHA512 cffaf0c3967701541e3b6f91024f00eb41ef9aa8cc397b11624e3faed707867918cf067cf40b727137f6a233d14e046b40b22641a38c546553478b0dc9b04efb

memory/2420-17993-0x0000000007B40000-0x0000000007B4E000-memory.dmp

memory/2420-18220-0x0000000007B50000-0x0000000007B65000-memory.dmp

memory/2420-18376-0x0000000007C50000-0x0000000007C6A000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\tmpr6ffi2zq\Cookies\Google-Chrome_Default.txt

MD5 b422e9405bfe5adb5f67471e327ddd20
SHA1 3d0ddd666b219789328759f0d181031dbd1cdadf
SHA256 2328cfe76cc8c20f59d65871b2d67689c57ecbc8ebe88b32a162dce424d66350
SHA512 e0782a44c57e2df7e536b039814687cd944e64fe9efa61ef6c868b331c18bdf0327356e7f61b46e41f768e23223f618204c6f9bbc66bc9674f3069140daf797c

memory/2420-19450-0x0000000007C40000-0x0000000007C48000-memory.dmp

memory/2420-20166-0x0000000072DD0000-0x0000000073581000-memory.dmp

C:\Program Files\GIMP 2\share\gimp\2.0\icons\Symbolic-Inverted\scalable\apps\is-SLSQ4.tmp

MD5 1f65356ad5ee2bd2a3bc0490aa052c1d
SHA1 873dca659697c30f4986c017dcc6f62258efbed3
SHA256 9e6b7520a1c00ba09425ea35da5040eea655f9e7b6977c94674df59b65b2b4ff
SHA512 f6778c37b9a7d1d7b208654a529b0e5bbaafaed66a7c5e74759e1a8480eaf6fefe0f47870a5452e41d6a80fddf9bb150320ea307a7625ebe123809a766fdbfcc

memory/2788-20372-0x0000000072DD0000-0x0000000073581000-memory.dmp

memory/2788-20645-0x0000000005580000-0x0000000005590000-memory.dmp

memory/2788-20675-0x0000000005580000-0x0000000005590000-memory.dmp

C:\Program Files\GIMP 2\share\gimp\2.0\icons\Symbolic-Inverted\scalable\apps\is-RNLH4.tmp

MD5 f15026b18efefe9bbf08b9e9c90181d5
SHA1 b5a6eaacb99bfcb3f9fb80cd7bf634644c5ae8e0
SHA256 d29a2290a73e5402f6b2b817bb60f03134c9b86c132d009f5374d6b3efabe774
SHA512 a7360c931a8b887b887dca413275f5b47b78fae0b8705146a7b06749f351ce8f087ba0fa9c8a61322ad56d56d827ac2ae95581e3661d6611230e50a0012548a7

memory/4876-20529-0x0000000000400000-0x00000000004D8000-memory.dmp

C:\Program Files\GIMP 2\share\gimp\2.0\themes\Gray\ui\is-C7I3T.tmp

MD5 402a76fc99595619e6b33fc041b263e1
SHA1 71d164198d66bce7d5b76276ef76426d0d5cb88c
SHA256 1bde7717f254b11cff6b951cf905f47433dc1dfba5ec02c6b5df5453163bc850
SHA512 264a98a9ec8fb5998f29cab556e6b3f923559b67b60f6bfaa625210130e387b184e8eae0add16dca5bfea2d137ec7f98136d61c0e223e870b4ceddec2e86bf7e

C:\Program Files\GIMP 2\share\gimp\2.0\themes\Gray\ui\is-P719D.tmp

MD5 b16e065bb94b48fe53a799f10ef5edf7
SHA1 73bbe5ef3f54e1f813cda135af61acc67285d1af
SHA256 a8ae65edcc2ba664f5f933b9b23d04b35922500217c289ab81dc13da070531bf
SHA512 16779dc2f5d2bbf297db3a41fd5a4e44c50833b96834e2b7c30cb96050ab4ec00a1bc1c190316990a4ded725fc4c86e1138f4aea7fbbb87fb7740abb0629c7c6

C:\Program Files\GIMP 2\share\gimp\2.0\themes\Light\ui\is-V2O2I.tmp

MD5 9eba6e7b912b4f744f5e59da37b7ab86
SHA1 83084cc62b584f27c50ff0f5f7329411cfaaf8db
SHA256 2f215eca7386723faec37dbabcd5a9768c687670ab837abe8f0a5911a8e8bb67
SHA512 5b4799c3c82340aaaf31545db2294280d2a8f67808ae98b8a1bdc563860be065feb1ab966a2587dab408760c8587bcf28226f0f80e51e4f3857ff26fa04fae46

C:\Program Files\GIMP 2\share\gimp\2.0\themes\Light\ui\is-DTJ0K.tmp

MD5 48c8847f96af9a9b0992ab14e4674c19
SHA1 f8af226e558f75c62e293f608d3062ba2e7360cb
SHA256 4c5de97ef60e55f9d6016e2e4bc7bf7d41cb0b503e422fd6647d42c1ff201df6
SHA512 3058943e99bed692cc084232a81c9ec0d50995024bd27b5ae68442b61caba8c8b25a17e659406e6e7c4bf4417c3c68fe9703784fedc0418c197aca362aea19f7

C:\Program Files\GIMP 2\share\gimp\2.0\themes\Light\ui\is-1QRVG.tmp

MD5 e153ba3383645b3ca2a79b7f3765d90b
SHA1 d2a6c6a22bccbf68ae9000192e62fb655884291b
SHA256 8be5edbdad818929af74d16f29167acfd299b957ed62a394d838cc740ba9e080
SHA512 1242c574a52cff86351bd40ccbaeacafadacc8be4d8f5b0d2b78bee9553716997bbb9a9d7521af962eaa14d51192c60a15c2033d367a7acad80962bef893d45b

memory/2788-22961-0x0000000005580000-0x0000000005590000-memory.dmp

C:\Program Files\GIMP 2\share\gimp\2.0\themes\Light\ui\is-V8KQQ.tmp

MD5 3d312fce6f668edcf804e19854784a3d
SHA1 84ef02eab7cccc63adf54f98d141c9211e83c2e4
SHA256 f18cbe0ef5fbec9121e1f23b4cae65e15218aa3f5da3fb4c37a17bc8748d8438
SHA512 dc79e1684bc9aa1e2eca2aca11a4c23f7a7ba7d5ba80dac326c3edbb9b9fe032f0ae2dcdd36ddab8aff0f8ceadb820d88029cf8bc36d08612ad9cf5b9a4eedb5

memory/4880-23511-0x0000000000400000-0x000000000071C000-memory.dmp

memory/2788-23675-0x000000007F450000-0x000000007F460000-memory.dmp

memory/2788-23595-0x0000000007B00000-0x0000000007BA4000-memory.dmp

memory/2788-23443-0x0000000070DB0000-0x0000000070DFC000-memory.dmp

memory/2788-24236-0x0000000007E10000-0x0000000007E21000-memory.dmp

C:\Program Files\GIMP 2\share\locale\bn_IN\LC_MESSAGES\is-5G3UF.tmp

MD5 fd5e59a9bbaed9edde284c567bc25a0d
SHA1 62496e6ba136ac606bfa949aa07da08f74421931
SHA256 7e0d4b75af8b33231fbfae7ed11dffe55c7f65f3977bfbf2afcab1bd33798584
SHA512 b0c96dd70179d67266b406e23b0ade4ab5f0aac90dc66cb052eb184195cf5409aeae7accae9e642a6d1a5019f08aaac9b6809c46c3a026152046769a68dcfaf7

C:\Program Files\GIMP 2\share\locale\ca\LC_MESSAGES\is-416N8.tmp

MD5 7853fba83ca24ae8b7931f1d437068cc
SHA1 4ae398ea93d834a8cd662ae27a310b910b3aa241
SHA256 c69cb305a54b1b97dafa06484e92c8822dca179975ec0e495e969a54b276dbcb
SHA512 20ab902b3c92fe7e248a2486cd1b17d11bc00462171488147f3b2f5c5702ae257ab75405b3f3d266f013cbe601225c3c6bc3d8b286429e62830f6991d75b03bb

C:\Program Files\GIMP 2\share\locale\da\LC_MESSAGES\is-6CDC8.tmp

MD5 ada1260462420435d2684e637df256a8
SHA1 820138a00a81f7c288d21b44e95e7db1e5365c44
SHA256 e258dd8aa38028fcb16f2996eb387bb37f9cfaf1dd760f93da6c2f8d4e9a8d6d
SHA512 d11749c0dc2da01f31787a3057b2fdd42f46d98aa7b565e8a510a5ba333d7960a2090012dbfaa71a4496c34a822ca823feab550c78483fcbe12bd31d5edf7a5b

C:\Program Files\GIMP 2\share\locale\de\LC_MESSAGES\is-12BIC.tmp

MD5 a80c1e14b3a43f7dc019d2cd844c4188
SHA1 e1ae24e2cf454430e5aff30c83fb0037650d5d26
SHA256 bb805e14d5718aab72427bfa9da4a0606947ad4e15c57e179475dea87c1c0698
SHA512 f07eae5f65979e82d9b3e7e588b957273ca99308a9038c7070d553137e16c35d17bf0ff655c6c263e8065e4d12f820b1d5288bb0f0279296d7b793ca6f479065

C:\Program Files\GIMP 2\share\locale\de\LC_MESSAGES\is-NPVEF.tmp

MD5 796e88337260ca6cab3f58185fb010b2
SHA1 c60779fec71062a87d3319f23797664e43986951
SHA256 07bc0654309da40cfb2aeb295c6ba061cd649e918fdd634c2ed2783f26512ae9
SHA512 93a3bdc7d8eee6fbe68d5027a71324100fb2fdad6c2a172ac9df9328bd97eb07829b3a0c573d9a69fe03ef357ead835eb7f798c1df717cc9395734bdab697fc4

C:\Program Files\GIMP 2\share\locale\de\LC_MESSAGES\is-L3T1F.tmp

MD5 b60ef37e52395a1ed0204c16fc06a9be
SHA1 272b3ac8701fb8b5eedf46b5c73c6d8c70596a43
SHA256 6592064aa9cc371bcae37d46af72094f5cc4f091673fef319295fd3f95e03261
SHA512 228484bf359c7f5db48302f6162f65954628cc22be36633e3744114d869be411f8d70fdf21ff673966c656c88fb7e4e181684336ac9da671f1493a7a55d0c5cb

memory/2788-24737-0x0000000007E50000-0x0000000007E65000-memory.dmp

C:\Program Files\GIMP 2\share\locale\en_GB\LC_MESSAGES\is-1N96A.tmp

MD5 083153bd440129488b2bbb195ae087b4
SHA1 6d01630d448a32908398643f3ec9dbfbb13dbac1
SHA256 248c212cc3d4cca917a378cceeb1ef1e7ed2fd3306cef7bec5446c50df3654c2
SHA512 68be7fdb71639a81602f23ae1f265698a5b1ba08d652bab595a45d45fc0092603cbcc0606a46c8ddc98402946a7dfd79fe2fc706e7a1f033cd236eeb2ce21610

C:\Program Files\GIMP 2\share\locale\es\LC_MESSAGES\is-50IHG.tmp

MD5 84ff2655ed038a8d54034b921543c4d5
SHA1 b00369b37ab135eba992688ee87b9061ed720ff2
SHA256 1e9fd41f590f31de319f2bd2eb08ae124100d56d6145610ed6f94874a6998085
SHA512 fafd0ca21ed647a8537a92238e3e998d2c6d361d01dc327b87ac9b7faab6a8f65c5be355191b9aa84857318c27ef3a45f819a953654d0ccb0c6933810c904892

C:\Program Files\GIMP 2\share\locale\es\LC_MESSAGES\is-UFDT5.tmp

MD5 b4fb1bd5e6eb7df51d0c549e06ff8782
SHA1 7e83d2b12be82f9919a60a6b211263f2aee0bb69
SHA256 e91d9e2d02bf5befc851be9913b1ef95f278531f73fc5e16078cc9a2ac531272
SHA512 7b2390ab868b38e9cc9e86a638eb815bb4bc736dbc9332c2cfb83b142d092af84ebe9cf39bc92f1b5264260ac218301b05e21579b52ca46e6f4cda9bf107ea19

C:\Program Files\GIMP 2\share\locale\et\LC_MESSAGES\is-ETTEL.tmp

MD5 9280fd05ae7e4f4a19072e6b156c019a
SHA1 dde4dee726dbe7f7ced00aa1260ca15d49e083ce
SHA256 94cd8d3f59fc7ba7e6d1779618f7d76240c2aa2ff6ef4ed861bef0ca69f6c394
SHA512 921a165e315becdfb14a0bfa58fd22056b7266522eb36162f99fc7f015e2163ffeec78057f7cc1926887f2f339909c8595c19b84b1c3ac50c93f6bf16ab12f5f

C:\Program Files\GIMP 2\share\locale\fr\LC_MESSAGES\is-IEE76.tmp

MD5 52a6c80cde006e734b3ff44e3bb404cf
SHA1 b975b7b20beaf08cb78f35fb26db2e50f246946d
SHA256 b394376d0b6cd99314f5f5b5ea352642616eed35ebf6ccf461465a30cce72618
SHA512 bce301da09dbf6663cda744425b669d5be51afd5b768f7f01a8d23550b508b8593177bb025ef1a89c0c59f5132d31cd6a1113a094a24ded3f7b09bd7873deace

C:\Program Files\GIMP 2\share\locale\fr\LC_MESSAGES\is-4PTAI.tmp

MD5 30e84c28764e22f145011a45fe27f538
SHA1 8312167c63be25c07b6a9cc3e3d72f7e413ad1e1
SHA256 caeb45cfb2f52bd5795d2dfa0e9000cbbbe4dfca99f6ca6237801f91d14de6b4
SHA512 291e6aac0eec4bfe4ab30cae35d87364299121ffc387961d03b21a255bfb9dee25791b64573870befa1a496c1cdbced05fb6883586a779fa9f89d8f981e80274

memory/2788-25673-0x0000000072DD0000-0x0000000073581000-memory.dmp

C:\Program Files\GIMP 2\share\locale\hi\LC_MESSAGES\is-G2ES8.tmp

MD5 bbea22679d2ddadc3f15b7973784059c
SHA1 b4169ac302d70e94dec9d0985d0d78d9c550d2cb
SHA256 af49f44e2a00402d21876057b8bbce4e4f4a59cf59f20698c30517757762598b
SHA512 e316a31b694d5acfd9656860c78a591576a76bfb1f51ccf277ae2c89e50f81df138e35443e530e7362cf7fc1c5c1af0703af084e734c2ceb302cf5c460d07e3a

memory/5656-26068-0x0000000073230000-0x00000000739E1000-memory.dmp

memory/5656-26090-0x0000000004F00000-0x0000000004F10000-memory.dmp

memory/5656-26117-0x0000000004F00000-0x0000000004F10000-memory.dmp

C:\Program Files\GIMP 2\share\locale\it\LC_MESSAGES\is-O7JBL.tmp

MD5 048bb5364edcaac60d1aa8fccfcafa6b
SHA1 210193a99be7914a31cfe900130e9e6079301845
SHA256 b63c33cca9cc4cf7b87ecb88f6ee21cd915efdaf154c7a75bf8afe9ff550f518
SHA512 75046bac1d6dd3860f4994acebc63331f3f7e20f2ded3973c85fccc3416b23939dc3a77873ad36e5a1a5dec0c0845218ad792dbe376c39f7d4da8deee97e0c25

C:\Program Files\GIMP 2\share\locale\kn\LC_MESSAGES\is-KOFK5.tmp

MD5 b7240e55a88fa7bcf6acc8406ec90d03
SHA1 1d57a28e435f61386c06f0cbed301d0fd39382b0
SHA256 7c5198ce8889d51fd1d08e401d218660af87abc501c97ad17be3f7f0146e761e
SHA512 1b5d23780476d01c948113563953640e6199fdfce40a529ed158420267f025a5eb076aea01b3633ce7f4d2e4a9fe44b622e852d04095b0b32d2dc98878ed17c2

memory/5656-26340-0x0000000005CE0000-0x0000000006037000-memory.dmp

C:\Program Files\GIMP 2\share\locale\ml\LC_MESSAGES\is-PN3QE.tmp

MD5 b1b81f78d8b1f270491d8f78647d8cc2
SHA1 d88e4af12cc54047b9ebfa515e9401eebfec18d3
SHA256 ffc5151d22b3fc1206dd5cbc974110cc25cf796caa7e931ea403dcded4d7967d
SHA512 427a56a2d57da50c337ef68a280788dbcf02966df2fbee6d9e55aca529fd9d4a7a342dedeff19d0ea0104608a459c9b1ecaa7488329beda765e3cd29b59208ea

memory/5656-26707-0x0000000006320000-0x000000000636C000-memory.dmp

C:\Program Files\GIMP 2\share\locale\mr\LC_MESSAGES\is-2Q058.tmp

MD5 9c53e7f3452e5b395383a3fa064e45d1
SHA1 b85acde652760034b0fc57e8661a718b5b5204da
SHA256 2a597f9f5e1d3e8dbd18bc4c40057684aa9cbcbaf260d66854808b155b53bf0d
SHA512 24c7d66de94841c1944cb98dd86c7a030102168069faef40f2fe415ccb762c5e9a1f865641ea78beed101fde29490367f07ee839486af2f3d0c131f354952ac4

C:\Program Files\GIMP 2\share\locale\mn\LC_MESSAGES\is-KSG9A.tmp

MD5 95647700cae1f4e846d21d0370717721
SHA1 5c47497cd3fd6a54d1888dc23519a94d4dc2802c
SHA256 d626087676b8f1053c1bcc942ad513fa8905ab1246055614be70638255ae5041
SHA512 91beb308d242c631b2de9e9df4941a62086b60408faa0bc2dbff843c2d1f2e8051f847655c640dfb697c25d9e5f34386c5ee53177cc81f161b85930991fe97bb

C:\Program Files\GIMP 2\share\locale\nb\LC_MESSAGES\is-OSPUB.tmp

MD5 92ae154ddff823459b63b34620ad0e03
SHA1 ab7735255b01b634f0ebd921e91463b4519ad9da
SHA256 c5a33d336ec8c9b0755c817b00595c11dfa2eaa06a462660f167ab662d19ca4a
SHA512 038f8b139aa7c1ea08c9eaca712db19d35c4b8a906e9ed7135fcf7a3277023a3bfb2c379a575a700b2fda135c3dc56385fda17103dfc01d9b2c15f05bef15174

C:\Program Files\GIMP 2\share\locale\or\LC_MESSAGES\is-OPBI6.tmp

MD5 17960bcd0adac506464b02e63cba295d
SHA1 30ad7a4817d42703e38fcbaa0e66ad07d6e0836c
SHA256 c460e41d0ac258881551190e265df2e50835d30b85ab5ae4d193eb73f76d26a1
SHA512 f19d3b228f87abb2376ff159a156aa8c4de9202795e170ea6d728d6929f7d7d7c3b64d0a1c083a0372f3a59414d0fb107c43f38c779b5a9859e8649b7c011888

C:\Program Files\GIMP 2\share\locale\pl\LC_MESSAGES\is-6DKD3.tmp

MD5 79e99883d612de81f8bf4f8a122179bd
SHA1 0081ede6b8448fb34839736398b9721114088d72
SHA256 d651a1132906b0910599dbcf5eb385c7d7fc459e35b74ee0ac9af0bb6d8a8ca9
SHA512 805f5e5e50609fd9e6586f8f3d3a1a706f5add2d92a9e7a670b5bd3c4a9acb4395920f25691f42160a74230754d86a7d7a4c82efd0e92d533f5382506517718c

C:\Program Files\GIMP 2\share\locale\pt\LC_MESSAGES\is-DSD3J.tmp

MD5 b1c058a7fbb6ca5584bd3d0a86cc3777
SHA1 e7452a2eb51fc099c7fe31a3800e4efddf2c10c7
SHA256 a44ca4806c4f4291c5eb26a286b68b733d3a7e6934a893f8e187be10d2b282b7
SHA512 7709eaec5bb94cd5a7cf4a240172a44ae49357397a10f9bc97f4df565fb9bb44a6ca2b848ae6c5031115f4d6e48871e69b1893c776e34c4767b351864e27c75c

C:\Program Files\GIMP 2\share\locale\pl\LC_MESSAGES\is-320BD.tmp

MD5 feb4e4e9f31f0644ffb9cc9734c8ed52
SHA1 ebaa285184e4b42eeb31221fdb88ed15bb539ea6
SHA256 10b218f1f97bdfd42a17c9c766901719e4ee72b72d6bf592b7994d14146a232f
SHA512 d57e8437ddd3a133a1b2a0e0c604135616b27408ccea1e69a8065f4fca3ddf9739e0bf058129643ffd3f2537e7c69c7bfeb74cb26f740a1c9567b6418e8bcb4d

C:\Program Files\GIMP 2\share\locale\ru\LC_MESSAGES\is-HJ1B8.tmp

MD5 7607d1343c7ba57c8d3b72b112ee7f45
SHA1 98a147b5240bc92dea651dc072d675b5e5b402c4
SHA256 9750b2899fb526832c0d26bc06ce4b0a9dcdb72d507efe8b4859ef9e050e0800
SHA512 458cf52d27bf480043fef17cd16ae644bf0bae00a952519bdf37ec9f001edeed1100b810788fcd15f3063c9c5a26a69b15463e90cf76e00d3bd6b4ccbf0d9e52

C:\Program Files\GIMP 2\share\locale\sr@latin\LC_MESSAGES\is-E0I0Q.tmp

MD5 c8bdfac3091da4ca1b248f8cc720ba32
SHA1 43c4cb9f88c626bd3e9ca22ab14fd61c2cfafdc6
SHA256 6abece7f748333247575344602d4a5b6bdd0cd3778683514ddf319a3b5ba8000
SHA512 db2540febefd6e5cbb095f49ed69901a1047596edc898a2e16e2b17effb75f89e6e6d1a593920036176963ecbe7ee2d06d3a6cfc81ad2a2c8429a3bd18191793

C:\Program Files\GIMP 2\share\locale\sv\LC_MESSAGES\is-L25C9.tmp

MD5 75b3624db785a92361fe015f6ca9884a
SHA1 408eeb84d734cf2a3dc9f7e28b55e867975739de
SHA256 fb8ad87c8d9c34f764b133dc7215a40d41e0f4cb108904bb6a49cb72f1fe6410
SHA512 f244fcbdda56f22c7089ffdb3dc73c5c09355772c8392c276cdd94192056b120bb9ae04a448036e9c3612d204267c74c3c9092d711bc7c024e5307d23fb511a4

memory/5656-28022-0x0000000004F00000-0x0000000004F10000-memory.dmp

C:\Program Files\GIMP 2\share\locale\th\LC_MESSAGES\is-RF7HO.tmp

MD5 6a421cf116c128c5333deffc0cb659b1
SHA1 5d2d457d4415b03ac6cd7393ac84e920c7a57d07
SHA256 7c5cf78ba4b1cfcf808a9e6af343258d8c974d0232d966794fe54c9343e812ec
SHA512 cf3eb3db0a28405c4887596f59e2567982f3c996786dc78179237e38b01fc414e529c840c443c4f4e7abc8f438e79c21acb11290cbdf934959201d7756efcabe

memory/4880-28391-0x00000000024D0000-0x00000000024D1000-memory.dmp

memory/5656-28451-0x0000000073A60000-0x0000000073AAC000-memory.dmp

memory/5656-28496-0x000000007FAA0000-0x000000007FAB0000-memory.dmp

memory/5656-28621-0x00000000074D0000-0x0000000007574000-memory.dmp

C:\Program Files\GIMP 2\share\locale\uk\LC_MESSAGES\is-Q8R3K.tmp

MD5 6b0d554470716c5ea782f4af8f0b8f78
SHA1 126e21b2e4e4c14bafe1be81e10fb951ff68203d
SHA256 3f7375ca8ae0e0ab54b0e2e9acbb94a06ec728d35cafcb0ac3b41f7a0d57d3b8
SHA512 1b7eedc0cf9ef7345e2e3be2b6fcb945b21d7bb509c7ed28b134348618f68d0b11b9314daa059bdcccf6aad9379b9bc3f185a7fa7859f0827754f476fb9b1948

C:\Program Files\GIMP 2\share\locale\yi\LC_MESSAGES\is-VN5K2.tmp

MD5 8d918d7631dbe53eb52c32c1b8a0d44d
SHA1 d50e88652e1c4668d63b3802fa9d018610c881e4
SHA256 ae48340c62be9ff8ed8f931cd364ac37ea31c89d52735126289fd2a782c3bc47
SHA512 458b7835e0a02adbb44ebd3ea8cd92342f59c6bf77228c04732c2c967c87977d6af995e7568750b48a0fae06826d9f37bb7431d09c64f2648ea72ca54b5893f4

C:\Program Files\GIMP 2\share\locale\zh_TW\LC_MESSAGES\is-2OAD6.tmp

MD5 0560f7a619ee9fdbde0695d3e57acff2
SHA1 d8b8eb2bb3d7abc9c9a9f506ef1edf172a06d28c
SHA256 5db8d9fa48ebca2a1760121a1f56901c7acc922ba77b023baefe6b7bcd188030
SHA512 8a4f88080f38d9c835c711a0c50aec4fdf35fff843887a69fa9d926613f87ccaceb7af51d13ae9c5a3b73fee99b7bb5aa376fe1f641f8a881f441351a452667b

C:\Program Files\GIMP 2\share\locale\el\LC_MESSAGES\is-BLUBT.tmp

MD5 d12a67f9a48ba29e4e1f3ea0c011cd03
SHA1 1d80977a8fae10364a15928c04eb8ba2511be925
SHA256 3c1dfe283bf5d19e816fa158acd31681e8dcacab2c6ae0a930fc43dc1a9b4365
SHA512 9f41700b140e9d869e2172204c444d779d5c2421dc3f2d6651e21fa02507f2a58f938cfeba3905d17bd4746ff93728a5d76ca28b0c88f55dba717554606a8b79

C:\Program Files\GIMP 2\share\locale\es\LC_MESSAGES\is-P6JPG.tmp

MD5 82f7aea15a48eb8bc9c411282367af62
SHA1 a7f98c6f817ea1f4ab0d4e6a0ec8d3e1888591bc
SHA256 3d25a6e145e98a960407338e4042b9299b6ba13753cc7f7ff1ae6f070a1c2692
SHA512 68eea023794bdb080dd224ce12cd6d1b61c63f00f1400a721b3c984783a5caa402942894278aad1d6d3dbecc81e50a6e209b8706461087dd78a3bf861258a7e5

memory/5656-29074-0x00000000077D0000-0x00000000077E1000-memory.dmp

C:\Program Files\GIMP 2\share\locale\fr\LC_MESSAGES\is-JT8TA.tmp

MD5 20a6c07e4d1e7715ba0fa40da2b376ed
SHA1 cea4f9313641d561681925b4100e9a13bf756752
SHA256 d2c16bbe4a9ddc054c77c0a668ec4a8cb2939907d3762cca61ee7a82dd3f023a
SHA512 1d29ba153d570773c35a0297cbcc98a6dcc3f4f0da40ce236fe2d9dfb44ebb15743c7191987c085d56b828f2be36f46d199aa47c0573e1c5c4459d934aad2919

C:\Program Files\GIMP 2\share\locale\ja\LC_MESSAGES\is-RMEJL.tmp

MD5 9fa56e015a073fede34261881fcbb648
SHA1 06a2112b99ba72781d5e53598a6c10683b6a2f6a
SHA256 4626f361118bacb5c83a44b77b6b51ab5fa257534b190936c93f0d7cc6ea4079
SHA512 d2c65d180284edb8a4a2f7fc3b4115304e9a7ea14ec445bf8276398783599bfd3d753cce2b27464f8dae5177b6cc36d30520e5cb07245a628171fef5390716d1

C:\Program Files\GIMP 2\share\locale\it\LC_MESSAGES\is-9648M.tmp

MD5 248ffe3647b94edd5ea8c9e4e020334a
SHA1 75da68c18c541002026efb07a760b51c12cd580f
SHA256 e54314d3f8bceaa1a083fc2e9ed5ef76f87fabd317c49a8b1fe37e281db32ec2
SHA512 cc3935a19ca20829da3b9cc3578533f466a49243e64f0d0cba98241c4eeccf63f5c95254972428e9d806e49bb8b190c93f395c279cbeb7a5a72ea1667fc6cf66

C:\Program Files\GIMP 2\share\locale\nl\LC_MESSAGES\is-DQSE3.tmp

MD5 e65149ff124ea39096f514d1a9fe9a16
SHA1 d97f6897210eea0695c42e6ee4c0593c67a0bcfc
SHA256 96e1fd3e328ba8bf1ef2372931e1c4eaa6ea0f81b7c1434f84ab72c8089670b6
SHA512 d238320abd9a53303e7148e7581f86a3a8d02f735dc00873de0a90ae02a127e63b950789a6b2c3a4043cd9aa6f75ca352d7853607e310df7b6ee0f7d317933ba

C:\Program Files\GIMP 2\share\locale\pl\LC_MESSAGES\is-JD6Q1.tmp

MD5 f9e6f083ec0a2e31ac250cd565f3a1b7
SHA1 48341f51c1f469b8727334dee936785402c46271
SHA256 14124e8dc03fc50f9ca0f6910aaf5b3ff7d428ed959229ddd517dffcfae5b6a9
SHA512 d4061f463496405dc34930698664afe7027f976522c25769fad87e4be97cbeb6337f7b3a2c2b9925c35649aaa02515904891ce12650bfbd0bb65a2570183bf59

C:\Program Files\GIMP 2\share\locale\ro\LC_MESSAGES\is-U5J1R.tmp

MD5 e1eca4b581f9fba78efc958e83973afc
SHA1 9f4ac1eb6df1cf4dce219fe3ee2bdbdb73d59ab3
SHA256 6ba28891f180adad1d7d811f3b615c35dad38f59201043905ebf9f24060c8bda
SHA512 8cf1e18aae856696396f4137a2bfc70b07498607231a278b4dd8d1ab5157897bd29b04089b4ad7fe99192d75fce3920841a2a0a9dd9fad0fd31cd3d421ef3d8f

C:\Program Files\GIMP 2\share\locale\ru\LC_MESSAGES\is-61BPQ.tmp

MD5 f4bf7331fc2440ee2b8d11e22a9db228
SHA1 07be342421e30c4e1331f5b953c3af35f768e830
SHA256 1166ba236df51110f682e76fb913c4707eaf454bbe0e2173eab5f4614bd71cf8
SHA512 fec8a37b0789ea0a3d07319d5384b5894cac4b2e3a01e350132e8c94e2729785948d5375e38d48c7801ff522439d5566b261aea1dafbc8bc7d77a292ae8e176a

C:\Program Files\GIMP 2\share\locale\uk\LC_MESSAGES\is-22AD7.tmp

MD5 5fe26d0fe4634ba7e1af17cad0a8f867
SHA1 5c918a36ef731b35b2a2f53936e6788ae887def9
SHA256 46f790b2b9852a792ec87d7eb3617d8a6648688378a125c22e4da61b0856fa1c
SHA512 8c1b0a373e2c6aa79efb45dc1d0477ec4b5ea233e2e3bd4a077e16f79bd8e439b2c5a4ba5fbe6da83f061757d807d4cb877218aa3ba53baa12fd6432813f4176

C:\Program Files\GIMP 2\share\locale\tr\LC_MESSAGES\is-DL2EL.tmp

MD5 bfee65018914191935e3a353d872e535
SHA1 c188303ff40e6f613c01d204362884d8b32e548c
SHA256 4f6a70502db099936a1d40f44786d3b9ab8d64b11e8e104050948b515cd90ddd
SHA512 15d0421608be950565fe2daf66b3297155615765f39b55ad1b03820825c7941fe68a1303606b585642eb98798c6b1e8064ba2e6982695a192cf8a6784068e693

memory/4880-30393-0x0000000000400000-0x000000000071C000-memory.dmp

C:\Program Files\GIMP 2\bin\libgs-10.dll

MD5 86a2cf0acbfe1cc90debf3d90fb4ffa9
SHA1 713424124c5db1ac55f1acb0f75297b4b398ea7b
SHA256 9d24849fa958f43c84eb1a1982b66ed99e0e08c4a640ba0901265ca97488cfcc
SHA512 e8fa609ed66bdb7ae83c011d06eb801fc8742a312d44f7bd613a3458a8db8d626daa3ace64334c89d57314798ce20a183107b93e7500eae7f68ef612201c5d2d

C:\Program Files\GIMP 2\bin\libgstvideo-1.0-0.dll

MD5 79c85ee00e9f85c8e32619d62a8d40f3
SHA1 7c0ff60eccb284c1f9f34c6408ddbd807d9fc8d9
SHA256 e753f866c76a2d69883cd3a988b77aea8d04d2dc02bea583005288ccf1d4d7bc
SHA512 98962c4ff190d7363277a95d9e765a233a94b2d914a3fb1b6c5f1314294f51def3e62cb78f0f29d94da21a7f85cc0da5110ba339c4d32b7976881e96b48c7006

C:\Program Files\GIMP 2\bin\libgsttag-1.0-0.dll

MD5 c4e647179927d6b15f0c871bd956a936
SHA1 6716a360a9e71f2cdb22ab49d65643ce7c4088b4
SHA256 66668dae6ca56e21bfa6ad5d0c933dde409b2d3b57550b25cc4b48e9ef02b128
SHA512 af9ce610e95fc6036406627d8e5208e081c9c10dd5c7893ca401c5b756aa4afafaecc65592c4a098a86b836e1430b598ecb91d4ca6b99cd3ab1aadc3da281a28

C:\Program Files\GIMP 2\bin\libgstreamer-1.0-0.dll

MD5 53305d2ecdaf3461a12955107741da50
SHA1 ae07b2ac4eb2ba0e56569b0d2349b7ef174ca6a8
SHA256 d00d4ec1c88f667ca51f1d5682bb9426f401e93dda01ffd2a3a39211646c6374
SHA512 64c84332f77fc393e93db81e203321ba9372fc7a70f3fe276c296f760f05c9992ade38958aa8ce0fb028459430dbf8187259427cf73d36333c61fd78753e6e4c

C:\Program Files\GIMP 2\bin\libgstpbutils-1.0-0.dll

MD5 227c00d2e07e6b302c0aa6fbcaa27690
SHA1 3719a414570804e357eb71049220cce1281808d0
SHA256 405bb30729815d837b40c36b6a26bb1978560b9615ed3d90b8ed228cec369060
SHA512 a820da729c7381921a282b4cddb452240f3ad18e8221d0d3c4019b502bc1359a4a2151a949c6a4ea147545f787bdb6f3912d3c47a817f3e6157f344d85b8f72c

C:\Program Files\GIMP 2\bin\libgstfft-1.0-0.dll

MD5 4822be4e1eb900c4f4686dd55100c1b8
SHA1 8e110d807578afa531c4674e5593bd3a8ce400bf
SHA256 2cb9a668211898089d7843b1d20b545405b6e86387a7975103355139afa82f9f
SHA512 6a93d3c13ba738030ef4b157c6355aaaaba801d1a4c06e2c3cf7e60639c7dd1d1ea57f927ecbab21a2f2d784845ddf252524f2e7d2baf1b7ca9cd6cea7968783

C:\Program Files\GIMP 2\bin\libgstbase-1.0-0.dll

MD5 db847c9ec04113917d178780f61dccd4
SHA1 27487e727dd12870e17d5e8108b254ca150f1dc3
SHA256 e030aa697d3451a375970b46bd317d98c6fbb95d1565fc3cc4d50e812d297af7
SHA512 8f41f2a7013ff18a917d19337ac2a9103bcdd7b5b02fed9596ebd04e2408201963572f889cdbf0fc4dc2ec2348873a404e4bbefb51896b8ee16ed3668026e6d3

C:\Program Files\GIMP 2\bin\libgstaudio-1.0-0.dll

MD5 ef2e4375a4915ca337e8b3187a59985b
SHA1 a5c2319c0e82c038d16b3af4f09ddbf8841a7f43
SHA256 08e2bd69ddc624fe3b631202ce5609e64257a106afbf7139f4b16a22b49f6aba
SHA512 92cf2452e778f7c801ebd85d6f993b86a91609d1efd8963115f87ec808087a05963279599d1612c90934fedf1bb424006ad1326d884df7f35dbe9653e20ddeab

C:\Program Files\GIMP 2\bin\libgstapp-1.0-0.dll

MD5 511bafe6490fe897dfca49e2af0dd4c7
SHA1 a1eae0e4130ea80da68f4525d2982a26de0d5aac
SHA256 1f34f9487f977c6c768ed121443bef4bb3e773b7798d631c3ea9f6883a4bee27
SHA512 c08a880e3808fedf3d43498baed5d6b9002c57b7029805b000141940085e6d8c2fc2e5cd1c75b0d153c357aa7babd6901914f6ddf6072096adda5f67783803c4

memory/4880-31325-0x0000000000400000-0x000000000071C000-memory.dmp

C:\Program Files\GIMP 2\bin\libpython2.7.dll

MD5 f8fdedcb949cd21038f39b144f460f38
SHA1 098cb382195ec56b281c4b31b9a1606eb75cb0e6
SHA256 92e9eca345ea2669a8a2ea98e9d7d17f5553705f6cdd6d90f9657f8002d281f9
SHA512 400ed9efac8e8e4fc575107af96efee8fcdaacbac27788ece9e2c7b12fa5d34f7e4f693ce7c7b5054e0d55cacdee41067d285501c2fd3a40a7a07763bd400393

C:\Program Files\GIMP 2\lib\python2.7\email\test\data\is-EIP4I.tmp

MD5 2d3d86aedec6b204f70cee1e483d3e14
SHA1 0bb29f5835dbf25b09e98271205a5b0e3b499ac3
SHA256 bb24009573f88b990c922fdc65adddec1312e30373dc635c6099912d4f836a41
SHA512 4981b870b89ab02309d9b5a4acdadd1f145baaacb5f23d0575ba2c62f10bbfe2343c1178456270ad5d9f22f9528e846928d014c14146ec100b8bfeb07cb3f29a

memory/4880-36620-0x0000000000400000-0x000000000071C000-memory.dmp

C:\Program Files\GIMP 2\lib\python2.7\site-packages\attrs-19.3.0-py2.7.egg-info\is-R9P1U.tmp

MD5 68b329da9893e34099c7d8ad5cb9c940
SHA1 adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
SHA256 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
SHA512 be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09

C:\Program Files\GIMP 2\lib\python2.7\site-packages\packaging\is-DE4BP.tmp

MD5 2eed0787819307cc2e25cf45a4a9b5ad
SHA1 74e5f4a45cf9a2e4e3e1f66456676bc7c49b2fd1
SHA256 e9e9dba795e045f8c18ec23df9b9f4d078c77f94c7db53c330e2a4256f31c3ec
SHA512 3dbe5d38dfbafdae2bd2d0bc621996e3b5b857e714bb2f24264a88d929349255f9332256ce01121b8e19ba9f2ace51d5da9db3898066f43ad2f4975ed2692537

C:\Program Files\GIMP 2\lib\python2.7\site-packages\pip\_vendor\msgpack\is-2SMO6.tmp

MD5 741a33042796dcc6a1c101898f38e87e
SHA1 4ceae08460a40acdf926dbb2908ff87ab6309e4e
SHA256 7424d67a2f1da64accb100dc8d093be004e5f47b08047d326edf3338f36a3187
SHA512 24578d126892750ebaaced8a9977b01e84f3804cb484ebcdb120cead612eb2517a0cc4504fae41971c05fd39da65225931e868498f4605bda8178462ee56024a

C:\Program Files\GIMP 2\lib\python2.7\site-packages\pip\_vendor\packaging\is-83UFJ.tmp

MD5 2a2f319784450ed303d86e6524053f42
SHA1 b6b3552024c5bc24df9f000e34e13b6a37992ee5
SHA256 a339025fc43c7f6a84d4489cdd8890e1bb8355f833da261ebd8f5eed1db2de26
SHA512 55ca410aa4222751656ba1d5c8b7c1cef972db9333f8115cb3cc91fc3ced293aada426895b96be81ba4fd1587b7a7aadb8e6a467e50e82d71c423d4226089291

C:\Program Files\GIMP 2\lib\python2.7\site-packages\pkg_resources\_vendor\is-VTCBF.tmp

MD5 845b81ec7ab998bd8a74a81d90876921
SHA1 b2210670fd12e935f2e38eec166f62e389ee9c8e
SHA256 3227af504bafde5fe6408487e52174b210e4fc13611c7cd88803eb4f72133782
SHA512 cbfade70cb495b5f1be533da89d6b6d325fdc162456b24b98262d77bea70188c1a176520bcbb72bd4f96f22c0116d0563e9a8261fba44134c2c9ca7352053b12

C:\Program Files\GIMP 2\lib\python2.7\site-packages\pkg_resources\_vendor\is-T2H65.tmp

MD5 fc9c293f584c3bf6de629ac89e5a0e83
SHA1 6823808a8e61fd3e3ec722ef45ad6cf1b4bd9aa2
SHA256 b66ae9fa5bbea8ed62ef967320de40d769ca4510f50a6e15a64fb92d1f6b8a6b
SHA512 1d037acba4b9362a24f2e8867fa5b85fb1aab1cf121dd0054ef7706e643e0d9d989a7cc202d04c5e9acee4a73d1af08e082ca19d9c34a9fc04e4e9b001de42e0

memory/5336-41193-0x0000000002150000-0x0000000002151000-memory.dmp

memory/5336-41202-0x0000000002150000-0x0000000002151000-memory.dmp

memory/5336-41255-0x0000000002150000-0x0000000002151000-memory.dmp

C:\Program Files\GIMP 2\lib\python2.7\site-packages\setuptools\_vendor\is-SBG7H.tmp

MD5 f3186384f56969acbd47dd1e14431fd0
SHA1 e036fb43b3fdb55291bb33008b375b4d9465c09c
SHA256 75b68272cdbb77237d827316185e6703f06b567e90f8dae329826957dfdf801b
SHA512 99a0bf021448f74031c8a9ed7950c6ebe8e4134d537da42774d500131f285cfe842e198150731dea9bbe249e443364c9d79d3a18f530a8789c0a7f3a4b0fde24

C:\Program Files\GIMP 2\lib\python2.7\site-packages\setuptools\_vendor\is-V0LHA.tmp

MD5 37ea4a767cd61e0c606b286de5ce36c1
SHA1 ded390e4887aca857a0b8437f289995e13c073d1
SHA256 c5a73d18d3da93f1f304f33fdb2b5b4bf2bfb3acb319effb417cb15be34eb485
SHA512 7d4e662273b7d9a1a9cf10b33fee1583efd46487aef0672fd709ec4336e8a3dc21cb46e5393fcaeaa0677835ddc52f446109cc29db4b5f5886bb550b819bf995

C:\Program Files\GIMP 2\lib\python2.7\site-packages\setuptools\_vendor\is-KE6GN.tmp

MD5 bc699ae46b6550114d7feaaa4d551563
SHA1 9e01c8a7fc0affc9d99f72a275d40b8bbc1bb809
SHA256 7588f5e278703e8256a1a2bcdba282f61f7d028f1ff46ba0b753deea392bd524
SHA512 c0e81d080666d130fcadbdc619cc0f651929431c03acecb9e481a3af14ce8517d91a37a4e4c4d5ab2e6a64fec43b40414ce90f5dd2b4a43a62cc0f4a59a2b5a6

memory/5336-41349-0x0000000002150000-0x0000000002151000-memory.dmp

C:\Program Files\GIMP 2\lib\python2.7\site-packages\setuptools-44.1.1-py2.7.egg-info\is-ETAUC.tmp

MD5 81051bcc2cf1bedf378224b0a93e2877
SHA1 ba8ab5a0280b953aa97435ff8946cbcbb2755a27
SHA256 7eb70257593da06f682a3ddda54a9d260d4fc514f645237f5ca74b08f8da61a6
SHA512 1b302a2f1e624a5fb5ad94ddc4e5f8bfd74d26fa37512d0e5face303d8c40eee0d0ffa3649f5da43f439914d128166cb6c4774a7caa3b174d7535451eb697b5d

C:\Program Files\GIMP 2\lib\python2.7\site-packages\webencodings\is-OM1LG.tmp

MD5 f576e857b45ecf794935b1fd1919a2c7
SHA1 745ca9bd26cc0c09828bee5f21d461d3aefb9484
SHA256 3ad18bca384d6357ef916d46bcb27f155f59a2a0bd027ca3afbab79314dbccdb
SHA512 8f1cc6997a3c6dbf669af6df41fe0586464b07974c1dafb079a511226048d344cc425f192c1e79377bee40b05fa4322404a81cfa65bebf801d8e89d8b83ec728

C:\Program Files\GIMP 2\lib\python2.7\site-packages\webencodings\is-9H65G.tmp

MD5 55d9055c84ed1357a3a9ddfcd4bef2ca
SHA1 b86d0c96a67c31ebb93d1dfbc506289cd8ed30c0
SHA256 a8e04922e3f2ff8072607e96fdb360245faa610d83a14f9d2ac0eee724560978
SHA512 83f0a156004d77c51704e65158198e49320d954f5295cc995a281d8c151dd17dc47ee212ef4fdc0b197cbf339ebc500056f49782dffdae7590e6404de167e3df

memory/5336-41664-0x0000000002150000-0x0000000002151000-memory.dmp

memory/5336-41703-0x0000000002150000-0x0000000002151000-memory.dmp

memory/5336-41710-0x0000000002150000-0x0000000002151000-memory.dmp

C:\Program Files\GIMP 2\lib\python2.7\site-packages\webencodings\is-TT725.tmp

MD5 74a6bdc155e4e6e8c08b22b0b34b5e7e
SHA1 e7b80b249b8a194b29acaa3b3709f655d75a7a62
SHA256 c8ea9649d9a9cad19f52087f67a258803361a1cf81007cb279e4f5e45af8dad3
SHA512 ccc32377c20e805bcc30e1eae818397052f94566af0e0b8edcb7617b61c6c581c6a19cb84d481168a40e95c564cb21037fe14efdb725bd2f013c745668651d5e

memory/5336-41747-0x0000000002150000-0x0000000002151000-memory.dmp

memory/5336-41607-0x0000000002150000-0x0000000002151000-memory.dmp

C:\Program Files\GIMP 2\lib\python2.7\site-packages\webencodings\is-KHLV6.tmp

MD5 16b377e26f6f4b9353464784ccad19dc
SHA1 1fac2e8b532eb9062024c99e8ae7d0417f12520d
SHA256 19821ecb09e968b9cfd064a273c2c55a0774515bcefe5d4d73a62817ef3b47fe
SHA512 db6c969e5be37c2ea70b98b8227c87121611ec364bd752a8ce083bb0deb59f7cf08aa59e370c46f9a6fe8f7eb2a11fe8717f37a59825aa9d45d6a6ffc464ce85

C:\Program Files\GIMP 2\lib\python2.7\site-packages\webencodings\is-M4KH4.tmp

MD5 f60643fb1d1bcc67d909770217036a43
SHA1 0d571c80a0923785fd20100b9db8c74993d035e7
SHA256 e003bf2b14dd76a1adacbf67b3b9003e36f409c37ac6c088c5b2b7ec763daf71
SHA512 1c3df76548c9ff20f24f6750cf3dabb7866b498924f45213f72d1befd9e8232b91f7b4e4bd5133a3517b92554e74e7da2c6fc6642167c00122ac6093764fa7f3

memory/5336-41507-0x0000000002150000-0x0000000002151000-memory.dmp

C:\Program Files\GIMP 2\lib\python2.7\test\cjkencodings\is-H7ST6.tmp

MD5 4ad57dc71cd0710481e757484c6d1197
SHA1 44cffb5117f62e0697f27f9d2537de3108749df4
SHA256 175e984c0c7bd073f037b0aaa6df4d8aadacb6f1b8898484a567b5e70f5a5837
SHA512 4a2f934f6f907cd2b3c70e3614684460f253e29ce554a418cdc53555feb26252607283d4d5c27221cc8205d002febf4c73b49d5ac0c6b7376e5dade72e9fc9ee

C:\Program Files\GIMP 2\lib\python2.7\test\cjkencodings\is-A7BRD.tmp

MD5 856e0cebae566258f572e27aedcbf34d
SHA1 9c4e3bafcc4a0c146d4bf21dd126484bb454e789
SHA256 21cb011018b58c87f2c824e08085d24f9379244bcde6fbb6b46da2f6431540c7
SHA512 21e996c6470367d7a74e6cf96b0105ddd93fda0c20fa4053842c3504f582c83688caf04fb64f7fa0e28378d894d29a7b1a39b8bfa7869f710fcc804a6231b3b8

C:\Program Files\GIMP 2\32\bin\libgs-10.dll

MD5 28eeed3787af29de9edc29fbe45bc201
SHA1 015edfecf7eedf6c85335ebac2d029c8f1110cf5
SHA256 5846bf93d13f3f667f751cf0cb18f193ea86c318d7924d421f670a7670b4b88c
SHA512 f0dcce415a7f7c1cf1643e944f67ec7cae64bf08bcca8f494955cd5f80a6300090698351d296b0b13ef7c775116ad50eebdb54dde70a5e722641d6b22b31c4d7

C:\Program Files\GIMP 2\32\bin\libgstfft-1.0-0.dll

MD5 80a2ba7ffad76ed05aae5439d07646ca
SHA1 aa59030de60cd8162edf262993585263f083d8a4
SHA256 0ff2becd8005213d3d85d2dda15c3c272fc5aac700f02dbe84abacfd342d387a
SHA512 a90ea4ac5e10db3d41d742830fa40da218f48974752515f77d79851eee0d31495c12b717f4f32e0777ecc90ee5234f0116747f3e51d2fa2545685ea2847cca43

C:\Program Files\GIMP 2\32\bin\libgstbase-1.0-0.dll

MD5 3b3ccf807627d8b367da46365b86d097
SHA1 08f8d4f5d834f19a88a889a84fafc8eae0e5cf57
SHA256 7aeb0bda44ad2649f8f156ceff85ae1eeaa5fe3f9ac1caa82b372e671888d9bb
SHA512 4f15137ae9bcfeb5107bac30bed3d67206b3d21347437555c4abcca1792447e6e85aa8501aff45ed72bbe589160c7e6383bbea48b1bbb32c3ad79e48ded0a6db

C:\Program Files\GIMP 2\32\bin\libgstaudio-1.0-0.dll

MD5 d93c2d0795a5e81f9e8ec4b3d1fe62b6
SHA1 c45b77b37a0e968ca09b4a0fbcc99eb9b1c39559
SHA256 1935859a6779210a669896236f89280e3b6a75285e71e4584154d079ac576173
SHA512 45137352469ec181172109a0de1bd205307085a90db2482f8bf51551053c95f95c46e6bb5441a43fa2eafaf035ddb79dce22a009315cc19da1742f244be9fb2c

C:\Program Files\GIMP 2\32\bin\libgstapp-1.0-0.dll

MD5 d021865d4e818dea16d17eeab6c8ead8
SHA1 15d15800e50bfb5f463a0315582ce372a538e852
SHA256 4d243a701536bb4802765a3d44d37969dc727aa35ccb24a4e3ff78b978b7dfa5
SHA512 6b6f6f2146699ee5f06b3489df9b5336eb374f91a4aa94ad353b08d2e23303cd69299d27d1e531479868050995cb67b60d024c6e9a630b4930b0028a38c17b46

C:\Program Files\GIMP 2\32\bin\libgstreamer-1.0-0.dll

MD5 0a3ca0048552dae6c915ce14ab761981
SHA1 abe59a31cca4d04ae0031e82726ab2e2b493c8b7
SHA256 3e3a550f9956fb71079a09a42d25a2bb25b3ce82985c833461f12beba9a549eb
SHA512 01d8f793221ff5f031bb4d7072b827e3ad10e72cc558d586099d2a9ea80b2f77e227a461c458b3efdc02dc53c28aed2fd042ec4e96c354f936ac37cd9809d5fe

C:\Program Files\GIMP 2\32\bin\libgstvideo-1.0-0.dll

MD5 a7b74e1eaddc747cecf4ea98841c6bf0
SHA1 3984f3f4b97906fcfa1aafaf3d9307af4a3242ec
SHA256 19ce3147bdd46b0ee56e2ffbf3b611de38dd1e45aa851b16b7510feb46faa6e6
SHA512 810d3060b692229155032021da324ce30ae858a6a78449e941c5b9830a010088a95346723a570427966ecaf00a3716c8d462bcbd578c38bf47055878734a25a4

C:\Program Files\GIMP 2\32\bin\libgsttag-1.0-0.dll

MD5 867364d859d89c215b47f36fb655b46d
SHA1 111631521f785b7835cf511912cc9d04ef8d6ebe
SHA256 bf33d373a782b4892583ef5c7f61b92ee114b364b9d0098694e2281b00ac1361
SHA512 ef1a5f7ddfe6c6fbd4b80e3a0cf6c61b3504879ca1f93887b550c71825e517658eb27286cc1816f63973ea47b54251f3bbc94a7ffa3cb3e1cb5bba81c9cb5dee

C:\Program Files\GIMP 2\32\bin\libgstpbutils-1.0-0.dll

MD5 add756c2e872ad5d27b9a33c12d4118b
SHA1 ee5ab4f31b7908be3309b6be57953a48354f103d
SHA256 d569e753852c3ca1ff87edca3298f2c4c9468267f3a085eb5225dc8bfb4783c8
SHA512 81cf21f2f44c86429bb85de05c9671582dc4f270ec9e1f18a86ced60671ae420aa38e0325ff21a467e94005e2d3349c816b6e0b2be2b0d56ea6c861184fa8969

C:\Program Files\GIMP 2\32\etc\fonts\conf.d\11-lcdfilter-default.conf

MD5 4dd5ffa8e7c3448e76fe1bbe2f3df871
SHA1 82d6f28b0b2457e5ff02476aaa5bff2789ee052f
SHA256 76aec9d8dac48faabe1bbde9e887cfb09fa45f30be5f8826e945a394a0097e48
SHA512 351e2f0a3c274971f464453ac6dc0c691feeac633cdd56d40980a7b997f35a1cd03fb139b1cecd63dece278136ab6c25c62fb60472cdd988de9abf9db409ae01

C:\Program Files\GIMP 2\32\etc\fonts\conf.d\10-hinting-slight.conf

MD5 5da52d777c5af2cb4b7445b81ead6c3d
SHA1 eaa33b6e3caab59de4d1658dddcc1d49acdd8149
SHA256 d138eca2bac3f78d45ff7cfb649ad792caa4a6e61f73cea7cf0ea54b091f1ef4
SHA512 d49ff3355bf0c0fa9c1c23ee0326d82fbd6c2d320d9439f841a21f5e0cef346f87fff4b6b489f3722ce9c8eaa54b384e060ee76f9ba2be7d6736bef34a79d9f3

C:\Program Files\GIMP 2\32\etc\fonts\conf.d\10-yes-antialias.conf

MD5 908d9e324c24bf809448ca7041db580b
SHA1 d0b8a9221bbf15a96b4ec974a38dcb82249cb2ef
SHA256 e6d82a642d1b37f7d24dc37f938b999f00ff7aa4303b2602d04164d53f221005
SHA512 f13d491cf884e354e1f00fc231a3ed61883f3f121c8f3ed9cc2f58f6cdc7ca8847fa4a2571a0303f4ba7243d3a8031f2a3daff00b51f0009158cf872f776b42e

C:\Program Files\GIMP 2\32\etc\fonts\conf.d\10-sub-pixel-none.conf

MD5 3b917873967397433a44ddff38568ce8
SHA1 9a8f7683c1097b70cad6c92208e8d662e48377c1
SHA256 0f00b5cf0ce07062ec65b9b340aa888f6c5fbc215aafebd26781be2d5a13ff6a
SHA512 a4b27dd1b809f686819679ce6fcee662e59d005c5c72a00802a7aba366cfb740a77e04df7f2832de04efc24a4b0294a3099c63c8457bfe4ec11ca419baee5fd8

C:\Program Files\GIMP 2\32\etc\fonts\conf.d\10-scale-bitmap-fonts.conf

MD5 8588f87eaf68a1eb73920066f6817b48
SHA1 d662489d576538a2fa80387f0992c2c47159659a
SHA256 df8e99abb6f82384c61978906a45a95794940545da95790d87f01d9391e0894b
SHA512 d419ef273977ca59742a03207e3b0f1cc4e342753025860246b9c2dfcd1c1ea4f42faa84e7aba539a548a6c5a7dd9d61a89be11ec9316470156ea7ccc0cd6ef7

C:\Program Files\GIMP 2\32\etc\fonts\fonts.conf

MD5 819a5091568f21e0709ce38793952f52
SHA1 597f6965ff18993c9fd244a3e63c01819f7d5520
SHA256 d043c4d0951ee229708340503b04322041acbf29bac7056e8a05905b8708f7f9
SHA512 7c67c371d81557a17d4fc191d8c6862a3f7a1750dd5d5b1bdc099efb53991dc7058389be32d0f1f71a45dfdb52fd5cae441d3c5c2b98ddf9daa4b33878d4493b

C:\Program Files\GIMP 2\32\etc\fonts\conf.d\45-latin.conf

MD5 a4d73455619dd836ecd6c711d7d6b522
SHA1 57fdb3a40419eae849b451060e66fc5a49b6b938
SHA256 30ee92d2633ea4ec2328975fa44e3ff4f8c6465b468b79c3b1df7002f0693d23
SHA512 2ee6aefe51f4421b306d3d894cb58aa92187f551145086788b31739be80752427a27f1b7f73502fc68d00ddc91ba29a8e6e91f197465a919451b6bdc272335a9

C:\Program Files\GIMP 2\32\etc\fonts\conf.d\65-fonts-persian.conf

MD5 b04584ac948140f0c6af958b87f0a734
SHA1 876f3ad3ee03a2a9f9b45cfdb594885fba24887d
SHA256 c675fab143a3638346874798be45f51f6878ebec591b4362d83cfffb828ec4ca
SHA512 46615f5b1e199296e08c6312c32fbcf3719fbdd610520a5992d617b83459d0cd21b5f4e5516a2fc46485e41c84987dfa4f67aaf296c234ca9f2dcfa23aff0589

C:\Program Files\GIMP 2\32\etc\fonts\conf.d\README

MD5 ad6182d0b838d9d8f39219a37b88b24d
SHA1 3f1d5904612ec60b102ade1189257d2d4c3a41e8
SHA256 fdc29a3ebd8816eb07ed04c2cbe151076e95a7b0b2a0ec8fe94e5c8a67931d3c
SHA512 7e430271bf1e4dd99349fd0b3610776bf55a72b81ea53077c4cb566835019cf2d0ed85857dadaafee15b86e25064d6204bd13ecb083f08106e900d55e13b822f

C:\Program Files\GIMP 2\32\etc\fonts\conf.d\90-synthetic.conf

MD5 3202b57ed004b0828d6e2e70f56d951d
SHA1 45fc77d7ecc0029128ba150869736338769ba8ab
SHA256 cdd0aac7840c664a7127b64db66bdfe8dc22be3774d10bc22f4a41c98de5d85e
SHA512 da2d9448d67fd8945f1b5743bfb5ffb961f1c4a47959b1079f7c0498b346110726573a39f2d6cc950effa424747a1d9df11cf87e55dce3a0ed5f6da2976955df

C:\Program Files\GIMP 2\32\etc\fonts\conf.d\80-delicious.conf

MD5 bf3e2f77fdab77b46f9f793dcfa267f8
SHA1 f87ad2085c95b59b73c5bdba7ea38a837107378a
SHA256 34f27b7fe9cd83b2b6d46f16ef9c477412f2d7ef63634f86b9b38b79bc4f81ad
SHA512 6b39f7e945d38fce55fed2654163559685f252799648cd2365a6d99c7367a96ba06f2d4ea145f638f50b50c4ddb97863880079866b92baa6a07f23084d370516

C:\Program Files\GIMP 2\32\etc\fonts\conf.d\69-unifont.conf

MD5 50c85de35a0dc211f7222ae974df7f3a
SHA1 d3baa57cc3dcc8a224f724a48cbb986bc6a2e717
SHA256 fa97c0cf5f79d70e2dc3dc48155d4c9220cd7c6a8bc95b89c4ebcc517f97479e
SHA512 1b2b9fd585ab37bfc79daf87831746049cba49899b96925cce57832a0582533cf9090082ad3df9250f2788993b35bb3b847baf8aa6f371f15cac48ca4978fb91

C:\Program Files\GIMP 2\32\etc\fonts\conf.d\65-nonlatin.conf

MD5 741b4468181be70d9661ba6cfe21656f
SHA1 c7cc728ddcd9980357ea8764a8f5cf8eba9a7470
SHA256 62368f194f78e9d9b52c13dd605cb8bdd8d4386fc8177b72eff5fb01dcb61d48
SHA512 d5751089fa48638a9b6e5ff949ccae73e3d9dcad5b891fbf59c7aff5727264a48edde6a969d1512c1c3103056942fa003674dde9096df90fcd98dcc9db077d43

C:\Program Files\GIMP 2\32\etc\fonts\conf.d\60-latin.conf

MD5 887f091506809fe493dd452a40cf97ab
SHA1 1adc4ce6985da52bc10fce3a3d8139f0c0fd430b
SHA256 df313037dc3a13daa6eb82483aedfc236157cd3895c557250aa5e72b71ad5508
SHA512 523214aecbac02e9807835412c238b1881bc07da3c701a7031ef082f16c7b241db599931441fb6d5f50f4c664edbdec5d8fc9a05dde2031f4dcd1788f9453745

C:\Program Files\GIMP 2\32\etc\fonts\conf.d\60-generic.conf

MD5 381ad51b6c9a0c578c7176ae47481985
SHA1 30f0188bf1413da4929cee95e05273e788039343
SHA256 195bc8605dd23289d42c10d79cc13a5ce4a4b3cf965df5b30ecc0b7149bb951f
SHA512 babfd6d9f0a9b9fb681814cb7ab430523522a35ae9c7e7bdb5de6c0d4cda0c3fdf93f357b36097de98c4e46be769849af1272b24ccd4619607094fe0bb137aa4

C:\Program Files\GIMP 2\32\etc\fonts\conf.d\51-local.conf

MD5 99b54670882634722fada39c78a39863
SHA1 c45b9c072773024a3bc8f75c6fe0b661b9423ffc
SHA256 dca9d917e1f66f73bfa495943b4d1eaab2d93810a51bc8e600cf4d4e9df03e67
SHA512 dbaf31cb11b79f7ba9602c1d4003cea1bb9b67921784e4b1a4dc633ae7bafdebc9c5b763d4eeb5f54ae93c812dc6b31deb9582d0a1e820bcf50f3cada512e834

C:\Program Files\GIMP 2\32\etc\fonts\conf.d\50-user.conf

MD5 acde2cbca39bb6261deea4e6e4bf597e
SHA1 4c445cc1e11e1a9ecd2659ed3aeedb4656a9536c
SHA256 449137ccce57d60bca178d57519ba54e1942d757ad171f3a88cd78df2161c970
SHA512 8c0102f19908d2047452804192f1ba46888d18104ea7dba2e5a5facd9eb09be0457d141065931a25d6220451fb13212cecaefafcd36d7f8e92b035a5bf31ac0b

C:\Program Files\GIMP 2\32\etc\fonts\conf.d\49-sansserif.conf

MD5 fb5873c73e8ea39848ffb07a8d87d8cb
SHA1 941303d6620266798d8bb5f7e27d209dfbf96f2f
SHA256 7849a11ce5243e8bb3d06bcad558737a8682e5122e73c8e427f4c011a2054818
SHA512 93184af6f7eb1461aef28272ce765fa3ecb6724f31f53f39d845e85688d6501112a775c88289e9671c6a1e61d4b30b975c40b0dabeeca4c5e9d45806ed8893cc

C:\Program Files\GIMP 2\32\etc\fonts\conf.d\48-spacing.conf

MD5 9ef1b86cdc752b8765d2d1531e799cc1
SHA1 aceb6139032c431a8ff176c9fb823d10b6f0c5f0
SHA256 99d839cd8aa28854e8f54f26e7200b6e57951f39f56791a0ed473662488bcef6
SHA512 f4180859b4782c3ac1f23bd8de9555452ed5d431d5371bb99fa57a4e8d49962c0705d9a08b1a56e4a5a5064600e89f8aa70f96aea431c5dd75a55a4abcb19e95

C:\Program Files\GIMP 2\32\etc\fonts\conf.d\30-metric-aliases.conf

MD5 7be41db6d316caacc8978247ff444f29
SHA1 e621f64446c48b68cdbf2324990c58d8c93c6353
SHA256 4c17a813364e7f38ca5758350cf47fead36a9f5497e4a310ebf473f2e6103661
SHA512 fb4fa8b68d87351c860151cc23421460b5cfa779fe0cd8559ec422c3b2745f14b4b13c88be63ac5e637c8d33654e3457178bf425c59d90afc27c98ac935f9408

C:\Program Files\GIMP 2\32\etc\fonts\conf.d\45-generic.conf

MD5 6eb7544e52701729de1bc87c7e03b155
SHA1 295754dd99d277d8b61c07828e1e28284789f982
SHA256 24de9f68189d544bb4cc084d9bd8f3a59d8b988a9dc44b11e9877d5add5fc948
SHA512 fab9eb85c2462345cd43fa65b35ef5bf4ff8421226f82b5d530e38168585ffb31c319881367363a1d9fab2f7e42b32000a05c9ff51cdd7ce567b24ef4cb629de

C:\Program Files\GIMP 2\32\etc\fonts\conf.d\40-nonlatin.conf

MD5 a5b99766dd902496b2b708dd0a5d047a
SHA1 f206d6f64f1c72bcccc1d6438439de33e73688da
SHA256 5c3f7d62a44258d5d9e81a93b1685bee5ab78acb8688b25a43c4c1e749312a84
SHA512 88146901c41c194d449e69550af3d3bb6d8b2d691a5e23fcab39cbc362aeb3f90c029dc41b66dde35cfb6b2ba10feb524ea7358f70fb5de3a551c1490a27ca9b

C:\Program Files\GIMP 2\32\etc\fonts\conf.d\is-PB4TR.tmp

MD5 535df1a3aed553ced27e176639e4b541
SHA1 955a354712d2b13466a95016fa6df29351747902
SHA256 278732c68c16177f2aa3c7e4ea318b9f720aee13a433c32eb15ba626806c609d
SHA512 ca312f20fc6a2c23e1520c98aab57f62c8b35cf1dbd56703c1fde6744b5ad88bdcf8a068c671f7264439c9aebb61ceec3b506ed1b1ec2090322771b23697d162

C:\Program Files\GIMP 2\32\share\themes\Emacs\gtk-2.0-key\gtkrc

MD5 4b600a3c3c2ac37f7d0c13c4d86ac752
SHA1 d1da549c070d74aa9f9456c4c1e0ccbdde5256c8
SHA256 4214bee389645edcc7c9971ba35dc4d96e8c135ebc92c51c05b0c7dd36abd8e5
SHA512 d4ece8e39a80073bec016b375a75bb5ff5c697aff560e5d4aafc6031f26451f8d3ef32faf1a0b2be3470450eb2ea3ae8978cc444ee0e2d2ef374ef43340e64ba

C:\Program Files\GIMP 2\32\share\themes\MS-Windows\gtk-2.0\gtkrc

MD5 94d104680cec5f3d8bbec56258d0c926
SHA1 72ede372fcb34b29754f20ad44f49bc8605cf22c
SHA256 e9dd3015f76e05f185ebe7564d364aef8b8168b05e62421c99875e14e4597977
SHA512 cf7d04304fa58e2dd9a8492b31b065c03c1f7ea96ab71d7d3d212eb17436c7c181470c23296fa3f599f1ef56c6b243921ed7f0a92ad3e0a6cd40a5fe857955a9

C:\Program Files\GIMP 2\32\share\themes\Default\gtk-2.0-key\gtkrc

MD5 4ae0697ce8ce144e285609dd83ad53f3
SHA1 f4886997fdb05b998f3510ee4bfc62257e15dd30
SHA256 dcdbb5a775eb9dbf659d80b6694d381a822af3665706c3ed7488b84d95eb8f8a
SHA512 c9e8ba2431bd469d7ac212fd7e548cc1fd8285e216a1bf0fcbf9ea9aff16d7e2b9b31cf0d1a2be5233a9e0ec0b27313fa094de5208204c3dad4e8dd41b332adf

C:\Program Files\GIMP 2\32\share\themes\Raleigh\gtk-2.0\gtkrc

MD5 5fc9003ddc2c64b110b1161259f61923
SHA1 4ecddbcceddbd90a3a654d3788ec3aef8c197a8a
SHA256 6d9beaf039092aec5c1fbc23a62402bcd0704c45c430189a6ac69ae8aa797a67
SHA512 5c90f3f1037fff9f10aa2030bed2c670edd528482532e617549db2133e26cf801bdec56d4543feb024cdec1c0026909ca9a21b378ec3b89489c18c395660c9fc

C:\Program Files\GIMP 2\32\etc\gtk-2.0\im-multipress.conf

MD5 c358838e1789c1d4e6da7f525fc922cf
SHA1 576ffc2f578a8b78b2295584c059338d976c485a
SHA256 d52dfea88f5964b7581c93cdea1a3e47dd7b1d8334e8f5eb53018711428221ed
SHA512 524fccb13eae05a54297320119626b668bd3f615772931f068344395a73ced6363a580b64431b9f739f15920ce541bbc5375fe4d399a749c52e75b73560cc778

C:\Program Files\GIMP 2\32\etc\gtk-2.0\gtkrc

MD5 a995f633c6fa06cfec58c15c1a2b3730
SHA1 8c86022e94be5804e45b773d681798d6b3807ac5
SHA256 289ef821fd025b088cfcb2d7a2dcc576a2192efa51f14f1cbbb42e45f59d9ef3
SHA512 5c532c03ea4f605a307d49adbb0c49f495d202252a56a7848a01d3c3941941272290389a041299c4d9faadc777fe66db6e78f75a09ea3a08bf59d201dd2a6a8d

C:\Users\Admin\AppData\Roaming\GIMP\2.10\themerc

MD5 885728e929d0ed3a0dc2c649c378880e
SHA1 94afb238208f85de905c5302fc81b981de1df695
SHA256 00ec936f12ff8d39e28b2909c29442f4aaef7b22f71fb03bc2d3d499e9483cba
SHA512 af2be6a207d554e7a6fd4d7601560086497b1efaaee0d078f3db745051d1addb67a0eb070a7f9d7eb6716c9d95727802eddf67d95a2a87cc59b22f4aa83232ea