96121624b8e5bd7560c1f4e55ae28faf7f252bca250707ccda38391cb62e4040

Analysis

max time kernel
430s
max time network
442s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
14/03/2024, 18:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

texstudio-4.7.3-win-qt6.exe
Size

137.5MB
MD5

868a99d73b47ab722921ea371b53399b
SHA1

76a288e302aa5c5a6798c6a9f8b1fdc206da91d1
SHA256

96121624b8e5bd7560c1f4e55ae28faf7f252bca250707ccda38391cb62e4040
SHA512

328a9cdd4ea8fc5ec606227ea2fc09d026790b64c749c6d26509349eb834e2182697822224530ad577d465f9af1385e8946429e8b885353d06b926a0d131f12d
SSDEEP

3145728:AGsNbXJBNC/+kwWT9cki21DqLSCM06qTqS85xZqSH:RsN9BNbpWTOmySCASUeSH

Score

7^/10

discovery

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
1356	texstudio.exe

Loads dropped DLL 64 IoCs

pid	Process
2324	texstudio-4.7.3-win-qt6.exe
2324	texstudio-4.7.3-win-qt6.exe
2324	texstudio-4.7.3-win-qt6.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe
1356	texstudio.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\texstudio\libquazip1-qt6.dll	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\translations\qt_gl.qm	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\dictionaries\cs_CS-Czech.dic	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\dictionaries\es_MX-SpanishMexico.aff	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\help\list.png	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\help\_images\doc3.png	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\dictionaries\ga_GA-Irish.dic	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\share\poppler\cMap\Adobe-GB1\GBTpc-EUC-H	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\share\poppler\cMap\Adobe-Japan1\UniHojo-UTF16-H	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\dictionaries\en_ZA-EnglishSouthAfrica.dic	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\libsharpyuv-0.dll	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\help\_images\menu_session.png	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\share\poppler\cMap\Adobe-Japan1\UniHojo-UCS2-H	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\dictionaries\es_PE-SpanishPeru.dic	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\dictionaries\es_PH-SpanishPhilippines.aff	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\dictionaries\ko_KO-Korean.aff	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\translations\qt_help_ca.qm	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\help\_images\configure_shortcuts.png	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\share\poppler\cMap\Adobe-Japan1\EUC-H	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\share\poppler\cMap\Adobe-Japan1\78ms-RKSJ-V	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\libssl-3-x64.dll	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\help\compiling.html	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\help\_images\doc16.png	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\dictionaries\cs_CS-Czech.aff	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\translations\qt_help_uk.qm	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\share\poppler\cMap\Adobe-CNS1\UniCNS-UTF32-H	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\dictionaries\sr_SR-Serbian.aff	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\translations\qt_es.qm	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\translations\texstudio_ru_RU.qm	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\help\_images\wizard_array.png	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\share\poppler\unicodeMap\ISO-8859-7	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\dictionaries\es_VE-SpanishVenezuela.dic	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\help\_images\configure_customizeMenu.png	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\share\poppler\cMap\Adobe-Japan1\UniJIS2004-UTF8-V	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\dictionaries\es_PA-SpanishPanama.dic	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\dictionaries\sk_SK-Slovak.dic	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\help\_images\speller_dialog.png	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\share\poppler\cMap\Adobe-GB1\Adobe-GB1-0	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\share\poppler\cMap\Adobe-Korea1\Adobe-Korea1-0	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\share\poppler\cMap\Adobe-Korea1\Adobe-Korea1-2	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\libgraphite2.dll	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\share\poppler\cMap\Adobe-Japan1\WP-Symbol	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\dictionaries\es_CO-SpanishColombia.dic	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\libnghttp2-14.dll	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\help\_images\syntax_error_tooltip.png	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\help\_images\txs_symbol.png	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\help\_static\documentation_options.js	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\share\poppler\cMap\Adobe-Korea1\UniKS-UTF8-H	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\share\poppler\unicodeMap\ISO-8859-6	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\dictionaries\de_AT-GermanAustria.aff	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\Qt6Xml.dll	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\translations\texstudio_de.qm	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\help\_images\wizard_figure.png	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\share\poppler\cMap\Adobe-CNS1\ETHK-B5-H	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\dictionaries\en_EN-EnglishUnitedKingdom.dic	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\dictionaries\nb_NB-NorwegianBokmal.dic	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\dictionaries\ltg_LTG-Latgalian.dic	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\Qt6Core5Compat.dll	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\share\poppler\cMap\Adobe-CNS1\HKdla-B5-H	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\share\poppler\cMap\Adobe-Japan1\78-EUC-V	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\translations\qt_uk.qm	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\help\search.html	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\help\_images\table_remRow.png	texstudio-4.7.3-win-qt6.exe
File created	C:\Program Files\texstudio\share\poppler\cMap\Adobe-Japan1\UniHojo-UTF32-H	texstudio-4.7.3-win-qt6.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 30 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\tex File\shell	texstudio-4.7.3-win-qt6.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\tex File\shell\edit\command	texstudio-4.7.3-win-qt6.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.txss\ = "txs Session File"	texstudio-4.7.3-win-qt6.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\txs Session File	texstudio-4.7.3-win-qt6.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\txs Session File\shell\open\command\ = "\"C:\\Program Files\\texstudio\\texstudio.exe\" \"%1\""	texstudio-4.7.3-win-qt6.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\tex File	texstudio-4.7.3-win-qt6.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\tex File\shell\open	texstudio-4.7.3-win-qt6.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\tex File\shell\edit	texstudio-4.7.3-win-qt6.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.txss	texstudio-4.7.3-win-qt6.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\txs Session File\ = "txs Session File"	texstudio-4.7.3-win-qt6.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\txs Session File\shell\ = "open"	texstudio-4.7.3-win-qt6.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\txs Session File\DefaultIcon	texstudio-4.7.3-win-qt6.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\txs Session File\shell\edit\ = "Edit txs Session File"	texstudio-4.7.3-win-qt6.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.tex\ = "tex File"	texstudio-4.7.3-win-qt6.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\tex File\shell\open\command\ = "\"C:\\Program Files\\texstudio\\texstudio.exe\" \"%1\""	texstudio-4.7.3-win-qt6.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\tex File\DefaultIcon\ = "C:\\Program Files\\texstudio\\texstudio.exe,0"	texstudio-4.7.3-win-qt6.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\tex File\DefaultIcon	texstudio-4.7.3-win-qt6.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\tex File\shell\open\command	texstudio-4.7.3-win-qt6.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\tex File\shell\edit\ = "Edit tex File"	texstudio-4.7.3-win-qt6.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\tex File\shell\edit\command\ = "\"C:\\Program Files\\texstudio\\texstudio.exe\" \"%1\""	texstudio-4.7.3-win-qt6.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\txs Session File\shell\edit\command\ = "\"C:\\Program Files\\texstudio\\texstudio.exe\" \"%1\""	texstudio-4.7.3-win-qt6.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\tex File\shell\ = "open"	texstudio-4.7.3-win-qt6.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\txs Session File\shell\open	texstudio-4.7.3-win-qt6.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\txs Session File\DefaultIcon\ = "C:\\Program Files\\texstudio\\texstudio.exe,0"	texstudio-4.7.3-win-qt6.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\tex File\ = "tex File"	texstudio-4.7.3-win-qt6.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.tex	texstudio-4.7.3-win-qt6.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\txs Session File\shell\edit	texstudio-4.7.3-win-qt6.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\txs Session File\shell\open\command	texstudio-4.7.3-win-qt6.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\txs Session File\shell\edit\command	texstudio-4.7.3-win-qt6.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\txs Session File\shell	texstudio-4.7.3-win-qt6.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
1356	texstudio.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1356	texstudio.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

description	pid	Process
Token: SeManageVolumePrivilege	2880	svchost.exe
Token: 33	5112	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	5112	AUDIODG.EXE

C:\Users\Admin\AppData\Local\Temp\texstudio-4.7.3-win-qt6.exe
"C:\Users\Admin\AppData\Local\Temp\texstudio-4.7.3-win-qt6.exe"
1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Modifies registry class
PID:2324

C:\Windows\system32\rundll32.exe
"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe
1⤵
PID:4696

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k UnistackSvcGroup
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2880

C:\Program Files\texstudio\texstudio.exe
"C:\Program Files\texstudio\texstudio.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
PID:1356

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x4cc 0x2d4
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5112

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\texstudio\Qt6Concurrent.dll

Filesize
32KB

MD5
1caa14defdfb91c2865a57fff81450b3

SHA1
1de924fe5a80bb28c4680553cab7a647784ff654

SHA256
b7af59b985cfd71cb5443a1ab335c85383a55b921bcc3b96ec44d6a4c5985580

SHA512
05adf60839060ba483cf42a14286b2908c2df41b243cf14bbed36d0979614b6e08e22c9ce553c949c35e4961b02b0b20eb56a27efcc84956654aac4ebf677974

Download Submit
C:\Program Files\texstudio\Qt6Core.dll

Filesize
2.7MB

MD5
d2de2d70e40b6cbfe41162bd4d6fe08d

SHA1
702fc612d09006a6c52f5564b8d7a8c81fc8b201

SHA256
ea58050fa4b41fe08384be8c1759d906439705ed80cdb092d4432fa81350250e

SHA512
bde3c8e92fb41ed3f95385982a501feaaa7b146a7a7ec2386827d2544c12d41f925fc8b078f3e89de63d94698c0e942d643c471757666f5f5f060ccb83497e99

Download Submit
C:\Program Files\texstudio\Qt6Core.dll

Filesize
2.2MB

MD5
e2bae51c9022679ea0535ff8d645b499

SHA1
12fd73e5c5db89aa38a26a69479b99424a96e7fe

SHA256
76b8686f6762bdf0acd07e7a08e558282c9fc6ade63dbe5517a79d861f66de4c

SHA512
9a6625212f987bc2122eaabbf559254505737ea7dc2ac2989a2020706f6cb3fb92e79d391a50c4d3bfccf07a30d565edda9d6e240f837d49001f77184aee9bda

Download Submit
C:\Program Files\texstudio\Qt6Core5Compat.dll

Filesize
360KB

MD5
03f236207395206cbec658ed38649175

SHA1
1e7b0f4f89aa3eef96ae1492217a3b04f656748d

SHA256
ff56106779c80bc6ad63f950e590cba3c42b4f3cc0e948c505a92f4f03000c33

SHA512
8fcd506552fc21968b826929532959f15b07b0787d1a8f2e59a1ad6f497ca27f12c90ab6f6a7a43de43067a5a6998b5ab33fbb3098dcb2754fb6fa2c97f9bd14

Download Submit
C:\Program Files\texstudio\Qt6DBus.dll

Filesize
770KB

MD5
96d259295488e2331718ef2927f7c690

SHA1
6b9943da7e16d8cc526b80cdfe78d7a6435f4e4d

SHA256
9b18399430abbd16e33e6cf8cb332e6a221b522c33046edbcaf7c06a2121159f

SHA512
68161bc74f6eebf825175d2e69e9db2afc16015c7467d44dcd7b5da0743e0a838f08424d85bb938a00b69e5699b6614a00bf89c5571fca0eddee3ac8c5a2710c

Download Submit
C:\Program Files\texstudio\Qt6Gui.dll

Filesize
2.3MB

MD5
7148933cc2761449a93eade46d1bc006

SHA1
d32678ea1d5321dc441b6eb7d1d1511657c32afa

SHA256
0f3825536d2248dbf1094e07ceb7530cf7d0e92c95ed1cf519db7bcdfda68ae4

SHA512
f8d58be8a90423c2e09258ffc2ee690a04e5648cfb6a73d8795e98329378293202da1626d5a7e92d431a7f9dfc93bf2c744d7a67292950e4bdfe65cd1f09a700

Download Submit
C:\Program Files\texstudio\Qt6Gui.dll

Filesize
2.2MB

MD5
e73539d5d759bbb43b977983b4674917

SHA1
eae56337e674ee9e6737c6e4e341b3d6447764c0

SHA256
1827c147d47d81fd4aab755a47ef793bbcf189796e02143318ea0aaa26ce98ef

SHA512
ed18acea9528c48ae8d093b0740bccc986f9c6541f31d644ea764788432f97a826977cecf52d707bb5f667a91894e9f5684c10931247ed5f277b257ea818f4c1

Download Submit
C:\Program Files\texstudio\Qt6Network.dll

Filesize
1.7MB

MD5
a0a694820f4ae13f621b4f9f4a18111b

SHA1
f5a1512ba8cce1893452c7baf17f33bd6a886c06

SHA256
7b493142528cac99a5c6102a08450d1f5ce86f5e640963d90667aee46a74ad40

SHA512
f230e4614721e310444543e4bdfd5fdff6ff3f645fcf9ad3353e5ac6973a4022003476ad0abfdd4022f52760ab8045b49e80c034f4159d208b582d9f40a552e2

Download Submit
C:\Program Files\texstudio\Qt6PrintSupport.dll

Filesize
439KB

MD5
43aded4fef09d8045443d0cb210608a1

SHA1
d4361d0c7d2d2872d550820ce747cc2408da1592

SHA256
23a766b478dc183357aa8dfbc7ed0978b80d7bbc1f361c5c56e74ef56dca80c3

SHA512
031423f32a5f67d37e8a74aca0f112f6c35fa00584894ffbe9758898910ddd1e3e9a71135c83d67d07c40066b2aa7224caf87f4a4082699cdafa55894838f795

Download Submit
C:\Program Files\texstudio\Qt6Qml.dll

Filesize
1.9MB

MD5
e90d56035c13629916f04896423b7f35

SHA1
fd4a2791cc0ea1cc1d8e5a75cad0353c3ea1af4e

SHA256
13d3f6f8943aae28b3379b68ba1ee7ad99218c04b472e4c2ced94311e6a0875a

SHA512
a4d957c9afc5368761c16e8acd72e66a1f2956538a1b21eb164bc363ea9f0d896a530cda1e4a3c32c82f92ca588dd363095b06817b059e5be2c3518c61416bfb

Download Submit
C:\Program Files\texstudio\Qt6Qml.dll

Filesize
2.1MB

MD5
6f6195fe73b8586ba250240bfbfe963c

SHA1
9143ec66d4e3af9f8be57d8c0ebdd9e99bb1bbfa

SHA256
013f8b7aa3ba4385e16857fb5c0f45158519a701dcbe8f15d8c096b90c9f498b

SHA512
6e8a1ead5f737de89d65a46a0cd91f90e9783a88cfd700f47fd0025162c044ee1e9d2aab7c41bc093f06d0a9f4d18e21487196e3815b59b32a713ef809611750

Download Submit
C:\Program Files\texstudio\Qt6Svg.dll

Filesize
382KB

MD5
ffca13030f4ff87aa94ba1c0b4128227

SHA1
ba5eef498530251b838bb66940e246fecdb01e12

SHA256
903379aad4f65d0323ef293f7cc58cdfcfd8f4bfe61e8d381988c9fb258fa046

SHA512
21c3fdece16ab6cae8db61c6ea846d62b441803b06fcdb5d7409d0e0563e1007f88fde04a3828395ea6f7e19bc7899e731d80d6aa98948a4b4db84b6f47ecc5b

Download Submit
C:\Program Files\texstudio\Qt6Widgets.dll

Filesize
2.0MB

MD5
82b7631e6e4fefbc02c071a40093fd98

SHA1
94b0b27dab03b67446b0d5201f8b5e1b672b4f26

SHA256
72b34585c0b37b57a5fb4fe6b3a64d5d7101898599cbea9caf7c60a32141414e

SHA512
fc5813a875be24111f8931b272df98174022075a2395f23b270c25c30f82bf31eddc8208034630b4f3a4be5d94bd88e11a633c7358b841785c8d8de62aded2d8

Download Submit
C:\Program Files\texstudio\Qt6Widgets.dll

Filesize
2.0MB

MD5
dab23feed7a160687d4873a30dd1f770

SHA1
9a4feb121eb5882965f158b9e29a970a4390e317

SHA256
529b05c27a1d1b95dcef23d2dba720721f1965eadedf4214cc1c494a7c20cc3a

SHA512
c0bbd4b6923246dfec17a20c82ec7ae48a9d23d20ff0e3733779a0f50f4cffed1680af1ac8dfdaa9eb29c3c9c25590d89b8f1f8f31be3b3f739464fcd1ef33be

Download Submit
C:\Program Files\texstudio\Qt6Xml.dll

Filesize
149KB

MD5
40a5e216e04e27f149123036bed7b23f

SHA1
e2e884617a37b0adde583110d7de222b3d06299b

SHA256
5cb8a7ab54880549b2623691359688daef1913ddc6e1451a416a3494ad941f2e

SHA512
ba61b17edf715f9f39033d89e634251231c3cd5213d493331f0fd4545c670604506f581cf27f53459906b12700ad33e963dd634dce14407cbf006d3894f2254d

Download Submit
C:\Program Files\texstudio\dictionaries\es_CU-SpanishCuba.aff

Filesize
162KB

MD5
2c3165ee3fa3df590e81da76a28613ca

SHA1
e49999e6499ed9be1efed21f726bcc9d65e48c57

SHA256
bd3b3e63648d7522700fb729edae14b56f1b1f0b88cbc76350b89f12ab50ba7b

SHA512
42a0523baf405a1fe6bd0b84c7fe5466767149ae4b3e12a71786d6567f4e0ffb6bee742433670a13176442413b0d2b78549c72374f71b4529ce48a436ea8a848

Download Submit
C:\Program Files\texstudio\libb2-1.dll

Filesize
36KB

MD5
a3deb59dc62888d2ac3ac6feb7572546

SHA1
f3464005f423c6d1dae17b8ea0bd6b7ede434bd2

SHA256
cd747a41d621e755aadc1591f9c4f9578ba20a2b68cc1df1d25f783732a7b197

SHA512
34c44710482dd5470f37ec132ef832c661f7a63b046a12350414fa17d6101c65642b6dd94723a72f25ba21cd5bda7444c75745d16eeb93087bb91646b3efd1d8

Download Submit
C:\Program Files\texstudio\libbrotlidec.dll

Filesize
62KB

MD5
d16ac51022c6974aa2f42f9b2e4791a2

SHA1
d5c6b840fb14fd3b749c8d5eb9340daded5b626e

SHA256
eb7c0189eff844be6872d6d2afb45ebd1fc69766ba617f178bb2f58ce3f80ae2

SHA512
aabca1b04918971e97d08b443a82600bf80d6cafb1ee868a6a8de982dc210d37f07df8fa72097ddf117974ac4491202ca08aceac15b4cae2e5d4f66edd1627d9

Download Submit
C:\Program Files\texstudio\libbz2-1.dll

Filesize
76KB

MD5
6b3421ee5222837efb4358f16ffefa90

SHA1
1e04b9f81109d16e875bbc26707c557bbb3abcbc

SHA256
669a4bf9266d5f020e843aa5fd75b93ce8ebde27014d5ac466a8b3cf39d8aba7

SHA512
5d27b5ea949264ab5480dca5dd11bb72a5f23cbb119984a23ee854435b0ed8d12ff4a539b3fadc1269dbe864a3379cc89ef95048df1627f825bbdca4a9148f06

Download Submit
C:\Program Files\texstudio\libdouble-conversion.dll

Filesize
73KB

MD5
75f26a738af415c93019c313262e6a78

SHA1
c77e440c1ec4cb499977da0bf8968f76e92ba466

SHA256
7073fd8151455243b1a8f447fe6c57c50829b8f287272362d36515dcd4c25ba4

SHA512
099546eef46a18189aa70b8c157e3514208746f6cf65351b92a3c7f43f5a80e14aae0902219de85aabe8a855aa0c7c76bc07b77b490b789317537c3103d4f194

Download Submit
C:\Program Files\texstudio\libfreetype-6.dll

Filesize
760KB

MD5
7ccd3e142098ca16c4831da55770f14e

SHA1
0a52be3dd9e3c9ec849a6480c61621eebcc05f28

SHA256
27e2122ec950dc59caad5de0edddbfed32ccf7633331b62af51ebcef82de415c

SHA512
1af09cfafc7906290ec542c06d5b592ddcaaded3e73d260bb91ff24d9ab7e601cfab480ebd19768ed6db769cb3108b41a5f1680e122d0ce37ea1b9de35806513

Download Submit
C:\Program Files\texstudio\libgcc_s_seh-1.dll

Filesize
118KB

MD5
5a474936884fd2e3988daeadf09742f3

SHA1
2ac6de45a141353982ee4362eecc8f4942eb7082

SHA256
b603d9b07f3a9eb51aacbde89f0f54cde35cd2f9b72e4771d6e4f097ca6bb623

SHA512
e5e64ff53fd3f6bbf1cb9a8356eb662fb00387ea957a28c50aab8d0cc1edd300ae7578c5f86992530bbfbdef92e9676a1d26b526a33318cf564608ae84d249d7

Download Submit
C:\Program Files\texstudio\libharfbuzz-0.dll

Filesize
1.2MB

MD5
30421226bb9755dc4c3351f2cc87e967

SHA1
ff016fbde63de97dd3f2c8cd13edb05281ff3197

SHA256
4fcc9cf6c547e8e5a7f8daabb3837e01a934d9e5eb11c6c4e3a5b1d5273a6ece

SHA512
20717f8eb9877c3ebe5feef2f22d864442afd81658520db3ab1c85fc8943da96f31f064c0428590b7e044b4e03fb54255aa4569c734655127cc234a88ed594ee

Download Submit
C:\Program Files\texstudio\libhunspell-1.7-0.dll

Filesize
771KB

MD5
597eb1075dbd850d5674e3cc82da0282

SHA1
784aa215f8f65275560a341edcf1166671c45f4e

SHA256
3656a322b2db499174dcc9c10375631032e325ae45ea35c543f171ea0db07fe9

SHA512
5f1a23f11d56248a40b124a2a3c99671e198baf30cb4f3442b588a5210138878183688d675132c99d75ccceec045cdba61dcf22f8f9ccd41b5a6e9b9f0ca2752

Download Submit
C:\Program Files\texstudio\libicuin74.dll

Filesize
256KB

MD5
0503471d77a5815bdb04e11ca27dc02c

SHA1
6ce2ac8767a53b73bef98c12149cf18458b2a26d

SHA256
d4ab1c8d34e263e96944d9af618ca3484eca9ac1ba0fd99a1e278385fa5a06a8

SHA512
6feaada3daaf41204328eadfeb023782f42f509761b17f503675d9f6b19b5dcab4cc8b6fe8265c2342b1abe99f09cc68d79bacc0f1837d3da7df47bab2e3191f

Download Submit
C:\Program Files\texstudio\libicuuc74.dll

Filesize
256KB

MD5
8063737ffd9097925bd754c9cd13a190

SHA1
913e8ffc7c1ea4b127c9b88a9ce5c81ed394e68d

SHA256
20949e4b74c6c1e0ec2ceb98ae4c7bd85d61b10547b4c55791d5fcc14b7a4f9f

SHA512
e18bffb48328f72ce1c73a9298944dfb69caca4b6acfc4175ed82c50e0a7c831b73a84e59cd7288ff235416fef45b3454451d899372891838eb661bb8897b744

Download Submit
C:\Program Files\texstudio\liblcms2-2.dll

Filesize
415KB

MD5
3dfd1f05cad3f93d2f1f248196dda566

SHA1
d068641d17654bb8938f125654fe7000a967926b

SHA256
4de91d5370669f3804b49123b4a144d1e1da114e8c13249aae41b9665785ce82

SHA512
051b3b55bba04f030da887bfa5ab654dcf3cc9ed2c211c010f534399340efc280a8f447c2f214e36d2ff19b55a70a0e4d30a9fd293832855d3695125f39e817a

Download Submit
C:\Program Files\texstudio\libmd4c.dll

Filesize
88KB

MD5
da614108d8aef629f1abf8f770ca2942

SHA1
848b648ccfc5c27ddf9cbd4ad95c18f9666b953f

SHA256
15fadada630eee0083f3d12cadea18790c7265211dc56bac22d36c8022f66808

SHA512
382c9a01bff017b43b778c0b4009e9e4e0305e921c9fd4060e73899d4880f62e42ebd1ac9e302612796e2d1296ef9ade7cd293877a9828be074b948e034e097c

Download Submit
C:\Program Files\texstudio\libpng16-16.dll

Filesize
239KB

MD5
d8ce6bb3b17681f91d6b149e3f352928

SHA1
3a64cf5c42023159e27a288ca13d60bc6f146ce8

SHA256
e53263d7b4cc605e401c62577eb4f2cafa36b85aa3a78272bb7fbdba9b5a98b1

SHA512
02dcb8e33d3f60dd82c8528dfa4dfb09c7c5b494eb1fcb951c4901324bfbaa82886d4a5b32152df7638a643c80ab3a66d36df8a120dbf47c9c140bdec9ac2879

Download Submit
C:\Program Files\texstudio\libpoppler-133.dll

Filesize
320KB

MD5
7b1188d500c932cc194c1b8d407c5186

SHA1
89434c1f257186412883066bd1a7a22b862ab1e7

SHA256
1b188d6a97d155df00dc99ad6e6da9ec429e70d3092bae8e4ec87e54f6a6d6fb

SHA512
5e55a72fffa8432a818d422aded922997cffc7a164147041af15581aa0cbe63552d28043591d78d0723b03f33a488266d9df491988596e34b53acc644bae3148

Download Submit
C:\Program Files\texstudio\libpoppler-133.dll

Filesize
2.1MB

MD5
6df92f1b851af6a369c3c6825117d878

SHA1
bbe446b62189e0e9e5bd4bdd1d9302c8084e88e2

SHA256
4daa86211f3a3b1ecd3396cec5e58cbfc18b4b348a8d7cba6511b255a4cbcec3

SHA512
280862ae264ff0f9bcb9a13ed472096e05f09f74bd22dedb41351c65499c9e39b337ebd54f283b3de1dd1a9c26cca024a94da47c88fa7f7bc4e1ffdc3164089a

Download Submit
C:\Program Files\texstudio\libpoppler-qt6-3.dll

Filesize
506KB

MD5
869d4753691e337be8da070a3a7fd658

SHA1
905624660c09912fc207b3f37c7b811e768f34ed

SHA256
c35122bbcbbc710cf591680381d1ebb44030a0943220c781f88e79bfad1b0f88

SHA512
e7fa97284084e634cccc7d795e9bcdf9745e64cb0795e7e0221f78558a9f51e61d3a5971be48dca8a6a8db7c8436d7f54dd6e579efe340cffed5af285bb9e54f

Download Submit
C:\Program Files\texstudio\libquazip1-qt6.dll

Filesize
243KB

MD5
e446cd06ba58700d2e567e50b73dacae

SHA1
cb8c80f61530398aafef556d82042ca2181b8032

SHA256
b15bbc052fc3ab2ed969059689076ca39fe5053c3492bbdb5dd0220a7bdb998c

SHA512
bca4b6a03a21a28a863a32b8bb3294775e0b4b0ec1e727350436e1cf34b5bc139d8b1cabb59ff5ebb2120a628f934049f5a849768830d3cb0b16d57bf33f989a

Download Submit
C:\Program Files\texstudio\libstdc++-6.dll

Filesize
2.2MB

MD5
4a75b021a4323f30ee5a6898cbfd4630

SHA1
9c4539139b5f905dce8f1f81a4b4324261c96718

SHA256
d72891be0c39be7fc0820ebe4739ccd1b4a45ab6f8a9ab57af68282541a9a69c

SHA512
34b331e2d070aff13934b87dbf3df853e571fdc9f26d53da135d399b4d29203ceda371e287255ef3e4db20b5ad53172a932d289349031bb9dfd64ab99d632fac

Download Submit
C:\Program Files\texstudio\libstdc++-6.dll

Filesize
952KB

MD5
45486ef3a4e44f0fdb92a43a98700eed

SHA1
68b2fdd86464dacaa7f85bc3fa2a75745f32408b

SHA256
217e586e655bd67ef57893d12e07d684b8f3765d49828f4bb21878d7fb8f63b8

SHA512
9beeb9b479fe6b5673fcc55c8f7887043248198a88b56ce9889937b498713222198401b521380c419f3522a678af7a020db43def89d0ddca2af43e61199b4e0f

Download Submit
C:\Program Files\texstudio\libwinpthread-1.dll

Filesize
61KB

MD5
751392df821a570233cdfd817c2af45e

SHA1
3db1aacf2813def752e82a7913c4d408d28a1728

SHA256
039b0ff4f88d93f4343a115dea0728bb143b5db90d5cbf4848ac1c7b303dc690

SHA512
e4a0871fc0ce686ef94cbb6bd1a9a2aa39199f374f9bbdad2f1d1c00d6cde1f3be2a6a222a7f7ce53e01c9626d6988d90f994462e2156829872d754c518e6d96

Download Submit
C:\Program Files\texstudio\texstudio.exe

Filesize
1.1MB

MD5
339346f34376a2cc2c95dd69dc0a99c7

SHA1
9e23de234d2aa0c0b103e72367533642ade945f7

SHA256
2e5383fe62d8451100161fe1bcb42ac50047ecb8f023c1f32278edf29b295cdb

SHA512
9bd0aa28951048b3fc8ca5e5fe620df20d067c96d31dd44707ff9591908c9caf9e8dae08262e7018f819641bbebcc62b04b1764a120115d336f6be324f227753

Download Submit
C:\Program Files\texstudio\texstudio.exe

Filesize
896KB

MD5
d428c4947c5d712be033d8a7f81af471

SHA1
43635c41fc21a38b25f622f691144c6147a4f5c6

SHA256
fe372adc9f72f49a99e8ca0992050727367dbdf06c7ac7ee6cd198c72d3cad7a

SHA512
bd911596af6247ba7bb5958dc6c5b123c1bbb8a63488f5143bc8c0a014e021b87682c1ee939639ce1ece5d3dda6dd44404451207e0da77839c1f16d64cc9b86d

Download Submit
C:\Program Files\texstudio\zlib1.dll

Filesize
97KB

MD5
ee01439a96e6c269c5d3d42c46c4516e

SHA1
bb68ca3b10f3949f093a65c7278da6319e76aa5d

SHA256
1dc85208162ee57fe97e892bb5160fe9588903992995f90adc3a3a358dac6fc6

SHA512
3866a452892f1d76b31f3db273161e0059c68791ba5d83c068db2264145c9f1f92578621ff2e496bdd492e5220a67de40c7724732d87a5efd7d8440c2c486b8d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsc1885.tmp\System.dll

Filesize
26KB

MD5
d6f185c5bb8b9d6ee47908be05135e4b

SHA1
135bb033c5c63d69d193d36447b036157f12cd09

SHA256
19d826cfdbdeb27fccecfbcfecc4f1bdce9f01df509f46b9ba1674f095d62659

SHA512
16addd64cd38a9e222e1d4b344d0d25e2a1c363116f3f1f77cf76db9b93ca0487f65bc82c601ccf3edc623f2ebbb929d5cda3e61ffa1f3f5a04d34a219ee36dc

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsc1885.tmp\nsDialogs.dll

Filesize
14KB

MD5
2a95e9a70be1d165a1d8b8d79da1e2c7

SHA1
bf2209d255448a73a7ca5414043e631e99f5989b

SHA256
3f19ce87dc3fd1540104352afb61a9f3f816a164a184eed43742efeadec445cf

SHA512
779862fd67f6e6d161b47551a6129b5b390caab20407043d8f94890a4895f6544ae19bf40359451b3ec5ffc176b4816655d8474610c3d70f57c78bc35168c066

Download Submit
C:\Users\Admin\AppData\Roaming\texstudio\texstudio.ini.VnLGjr

Filesize
15KB

MD5
767d3bdd167e0637e60537b11661578a

SHA1
387d5c9211528cb7799737e489c08105c124d914

SHA256
80d7ed44eff3f2c38e34004b6ddb1f60916cd5ce33d044565585f29879c17c10

SHA512
db7b820eefc564c30dd9ce7c73f6358e545ca7bb30bf6496132dba0d7c14439590ae1da637adc3c1d6a1eada565026c44e4634080798b2ddd65014c97cdf9b5a

Download Submit
memory/2324-58-0x0000000140000000-0x000000014018F000-memory.dmp

Filesize
1.6MB

Download
memory/2324-6-0x0000000140000000-0x000000014018F000-memory.dmp

Filesize
1.6MB

Download
memory/2324-961-0x0000000140000000-0x000000014018F000-memory.dmp

Filesize
1.6MB

Download
memory/2324-7-0x00007FFD68420000-0x00007FFD6842D000-memory.dmp

Filesize
52KB

Download
memory/2324-62-0x00007FFD68890000-0x00007FFD6889F000-memory.dmp

Filesize
60KB

Download
memory/2324-590-0x0000000140000000-0x000000014018F000-memory.dmp

Filesize
1.6MB

Download
memory/2324-61-0x00007FFD68420000-0x00007FFD6842D000-memory.dmp

Filesize
52KB

Download
memory/2880-992-0x000001F050D60000-0x000001F050D70000-memory.dmp

Filesize
64KB

Download