Analysis
- user interaction
yes - max time kernel
898s - max time network
491s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
05/07/2026, 17:43
General
- Target gimp.exe
- Size 179.4MB
- Sample260705-warefsev9z
- SHA256 52cfa91801256c8e92b9975d89fac105034de08101f1f48f9c3e526c1467e99b
Score
5/10
Malware Config
Signatures
- Checks computer location settings 2 TTPs 3 IoCs
Looks up country code configured in the registry, likely geofence.
- Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Executes dropped EXE 64 IoCs
- Loads dropped DLL 64 IoCs
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Inno Setup is an open-source installation builder for Windows applications. 3 IoCs
Inno Setup installer
- Modifies registry class 64 IoCs
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
- Suspicious use of WriteProcessMemory 64 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\gimp.exe"C:\Users\Admin\AppData\Local\Temp\gimp.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-8SVYHNBCPO.tmp\gimp.tmp"C:\Users\Admin\AppData\Local\Temp\is-8SVYHNBCPO.tmp\gimp.tmp" /SL5="$5021E,184011737,1004544,C:\Users\Admin\AppData\Local\Temp\gimp.exe"2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\gimp-3.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\gimp-3.exe"3⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\gdbus.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\gdbus.exe" _win32_run_session_bus4⤵
- Checks computer location settings
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\wia\wia.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\wia\wia.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\web-browser\web-browser.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\web-browser\web-browser.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\wavelet-decompose\wavelet-decompose.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\wavelet-decompose\wavelet-decompose.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\warp\warp.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\warp\warp.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\van-gogh-lic\van-gogh-lic.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\van-gogh-lic\van-gogh-lic.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\unit-editor\unit-editor.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\unit-editor\unit-editor.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\tile-small\tile-small.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\tile-small\tile-small.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\tile\tile.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\tile\tile.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\gimp-script-fu-interpreter-3.0.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\gimp-script-fu-interpreter-3.0.exe" "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\test-sphere-v3\test-sphere-v3.scm" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\pythonw.exepythonw.exe "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\spyro-plus\spyro-plus.py" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\sphere-designer\sphere-designer.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\sphere-designer\sphere-designer.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\sparkle\sparkle.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\sparkle\sparkle.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\smooth-palette\smooth-palette.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\smooth-palette\smooth-palette.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\selection-to-path\selection-to-path.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\selection-to-path\selection-to-path.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\script-fu-server\script-fu-server.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\script-fu-server\script-fu-server.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\script-fu\script-fu.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\script-fu\script-fu.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\screenshot\screenshot.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\screenshot\screenshot.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\sample-colorize\sample-colorize.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\sample-colorize\sample-colorize.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\qbist\qbist.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\qbist\qbist.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\pythonw.exepythonw.exe "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\python-eval\python-eval.py" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\pythonw.exepythonw.exe "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\python-console\python-console.py" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\procedure-browser\procedure-browser.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\procedure-browser\procedure-browser.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\print\print.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\print\print.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\plugin-browser\plugin-browser.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\plugin-browser\plugin-browser.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\pythonw.exepythonw.exe "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\palette-to-gradient\palette-to-gradient.py" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\pythonw.exepythonw.exe "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\palette-sort\palette-sort.py" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\pythonw.exepythonw.exe "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\palette-offset\palette-offset.py" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\pythonw.exepythonw.exe "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\palette-export-as-kpl\palette-export-as-kpl.py" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\pagecurl\pagecurl.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\pagecurl\pagecurl.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\nl-filter\nl-filter.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\nl-filter\nl-filter.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\metadata-viewer\metadata-viewer.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\metadata-viewer\metadata-viewer.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\metadata-editor\metadata-editor.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\metadata-editor\metadata-editor.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\map-object\map-object.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\map-object\map-object.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\lighting\lighting.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\lighting\lighting.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\jigsaw\jigsaw.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\jigsaw\jigsaw.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\imagemap\imagemap.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\imagemap\imagemap.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\ifs-compose\ifs-compose.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\ifs-compose\ifs-compose.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\hot\hot.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\hot\hot.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\pythonw.exepythonw.exe "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\histogram-export\histogram-export.py" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\help\help.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\help\help.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\guillotine\guillotine.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\guillotine\guillotine.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\grid\grid.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\grid\grid.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\pythonw.exepythonw.exe "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\gradients-save-as-css\gradients-save-as-css.py" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\gradient-map\gradient-map.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\gradient-map\gradient-map.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\gradient-flare\gradient-flare.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\gradient-flare\gradient-flare.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\gimpressionist\gimpressionist.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\gimpressionist\gimpressionist.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\gfig\gfig.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\gfig\gfig.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\fractal-explorer\fractal-explorer.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\fractal-explorer\fractal-explorer.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\pythonw.exepythonw.exe "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\foggify\foggify.py" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\flame\flame.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\flame\flame.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\filter-browser\filter-browser.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\filter-browser\filter-browser.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\film\film.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\film\film.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-xwd\file-xwd.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-xwd\file-xwd.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-xpm\file-xpm.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-xpm\file-xpm.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-xbm\file-xbm.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-xbm\file-xbm.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-wmf\file-wmf.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-wmf\file-wmf.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-webp\file-webp.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-webp\file-webp.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-wbmp\file-wbmp.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-wbmp\file-wbmp.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-tim\file-tim.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-tim\file-tim.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-tiff\file-tiff.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-tiff\file-tiff.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-tga\file-tga.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-tga\file-tga.exe" -gimp 279 5 4 -query 04⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-svg\file-svg.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-svg\file-svg.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-sunras\file-sunras.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-sunras\file-sunras.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-sgi\file-sgi.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-sgi\file-sgi.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-seattle-filmworks\file-seattle-filmworks.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-seattle-filmworks\file-seattle-filmworks.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-rawtherapee\file-rawtherapee.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-rawtherapee\file-rawtherapee.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-raw-placeholder\file-raw-placeholder.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-raw-placeholder\file-raw-placeholder.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-raw-data\file-raw-data.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-raw-data\file-raw-data.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-qoi\file-qoi.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-qoi\file-qoi.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-pvr\file-pvr.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-pvr\file-pvr.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-psp\file-psp.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-psp\file-psp.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-psd\file-psd.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-psd\file-psd.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-ps\file-ps.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-ps\file-ps.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-pnm\file-pnm.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-pnm\file-pnm.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-png\file-png.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-png\file-png.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-pix\file-pix.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-pix\file-pix.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-pdf-load\file-pdf-load.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-pdf-load\file-pdf-load.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-pdf-export\file-pdf-export.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-pdf-export\file-pdf-export.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-pcx\file-pcx.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-pcx\file-pcx.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-pat\file-pat.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-pat\file-pat.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-paa\file-paa.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-paa\file-paa.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\pythonw.exepythonw.exe "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-openraster\file-openraster.py" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-mng\file-mng.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-mng\file-mng.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-lnk\file-lnk.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-lnk\file-lnk.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-jpegxl\file-jpegxl.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-jpegxl\file-jpegxl.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-jpeg\file-jpeg.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-jpeg\file-jpeg.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-jp2\file-jp2.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-jp2\file-jp2.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-iff\file-iff.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-iff\file-iff.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-ico\file-ico.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-ico\file-ico.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-icns\file-icns.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-icns\file-icns.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-html-table\file-html-table.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-html-table\file-html-table.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-heif\file-heif.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-heif\file-heif.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-header\file-header.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-header\file-header.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-glob\file-glob.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-glob\file-glob.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-gih\file-gih.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-gih\file-gih.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-gif-load\file-gif-load.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-gif-load\file-gif-load.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-gif-export\file-gif-export.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-gif-export\file-gif-export.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-gegl\file-gegl.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-gegl\file-gegl.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-gbr\file-gbr.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-gbr\file-gbr.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-fli\file-fli.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-fli\file-fli.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-fits\file-fits.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-fits\file-fits.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-faxg3\file-faxg3.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-faxg3\file-faxg3.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-farbfeld\file-farbfeld.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-farbfeld\file-farbfeld.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-exr\file-exr.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-exr\file-exr.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-dicom\file-dicom.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-dicom\file-dicom.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-dds\file-dds.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-dds\file-dds.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-darktable\file-darktable.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-darktable\file-darktable.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-csource\file-csource.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-csource\file-csource.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-compressor\file-compressor.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-compressor\file-compressor.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-cel\file-cel.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-cel\file-cel.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-bmp\file-bmp.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-bmp\file-bmp.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-another-rawtherapee\file-another-rawtherapee.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-another-rawtherapee\file-another-rawtherapee.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-aa\file-aa.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-aa\file-aa.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\destripe\destripe.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\destripe\destripe.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\despeckle\despeckle.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\despeckle\despeckle.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\depth-merge\depth-merge.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\depth-merge\depth-merge.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\decompose\decompose.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\decompose\decompose.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\curve-bend\curve-bend.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\curve-bend\curve-bend.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\crop-zealous\crop-zealous.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\crop-zealous\crop-zealous.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\contrast-retinex\contrast-retinex.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\contrast-retinex\contrast-retinex.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\compose\compose.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\compose\compose.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\pythonw.exepythonw.exe "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\colorxhtml\colorxhtml.py" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\colormap-remap\colormap-remap.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\colormap-remap\colormap-remap.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\cml-explorer\cml-explorer.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\cml-explorer\cml-explorer.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\checkerboard\checkerboard.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\checkerboard\checkerboard.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\busy-dialog\busy-dialog.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\busy-dialog\busy-dialog.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\border-average\border-average.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\border-average\border-average.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\blinds\blinds.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\blinds\blinds.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\animation-play\animation-play.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\animation-play\animation-play.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\animation-optimize\animation-optimize.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\animation-optimize\animation-optimize.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\align-layers\align-layers.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\align-layers\align-layers.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\pythonw.exepythonw.exe "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\extensions\org.gimp.extension.goat-exercises\goat-exercise-py3.py" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\extensions\org.gimp.extension.goat-exercises\goat-exercise-vala.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\extensions\org.gimp.extension.goat-exercises\goat-exercise-vala.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\extensions\org.gimp.extension.goat-exercises\goat-exercise-c.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\extensions\org.gimp.extension.goat-exercises\goat-exercise-c.exe" -gimp 279 5 4 -query 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-rawtherapee\file-rawtherapee.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-rawtherapee\file-rawtherapee.exe" -gimp 279 5 4 -init 04⤵
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\gspawn-win64-helper.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\gspawn-win64-helper.exe" 10 11 z 8 z - y y w - rawtherapee -v -w5⤵
-
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-heif\file-heif.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-heif\file-heif.exe" -gimp 279 5 4 -init 04⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-darktable\file-darktable.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-darktable\file-darktable.exe" -gimp 279 5 4 -init 04⤵
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\gspawn-win64-helper.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\gspawn-win64-helper.exe" 12 13 z 8 10 - y y w - darktable --gimp version5⤵
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\gspawn-win64-helper.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\gspawn-win64-helper.exe" 12 13 z 8 10 - y y w - darktable --version5⤵
-
-
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-another-rawtherapee\file-another-rawtherapee.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-another-rawtherapee\file-another-rawtherapee.exe" -gimp 279 5 4 -init 04⤵
- Checks computer location settings
-
C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\gspawn-win64-helper.exe"C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\gspawn-win64-helper.exe" 10 11 z 8 z - y y w - ART-cli -v -w5⤵
-
-
-
-
-
C:\Windows\system32\werfault.exewerfault.exe /h /shared Global\92640d64a0cf4d22a4da940dd86486ce /t 3352 /p 6521⤵
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
exchndl.dll
is-GJ97B9A3JL.tmp
is-GLRBPLIPDR.tmp
is-I2V099B74N.tmp
is-KSZPZ1F444.tmp
is-LZ0R4UEN4W.tmp
libappstream-5.dll
libarchive-13.dll
libbabl-0.1-0.dll
libcairo-2.dll
libfontconfig-1.dll
libfreetype-6.dll
libgdk-3-0.dll
libgdk_pixbuf-2.0-0.dll
libgegl-0.4-0.dll
libgexiv2-2.dll
libgimpbase-3.0-0.dll
libgimpcolor-3.0-0.dll
libgimpconfig-3.0-0.dll
libgimpmath-3.0-0.dll
libgimpmodule-3.0-0.dll
libgimpthumb-3.0-0.dll
libgimpwidgets-3.0-0.dll
libgio-2.0-0.dll
libglib-2.0-0.dll
libgobject-2.0-0.dll
libgtk-3-0.dll
libharfbuzz-0.dll
libintl-8.dll
libjson-glib-1.0-0.dll
liblcms2-2.dll
libmypaint-0.dll
libpango-1.0-0.dll
libpangocairo-1.0-0.dll
libpangoft2-1.0-0.dll
zlib1.dll
is-20TEY7P6NL.tmp
is-5UV39TWOE5.tmp
is-AWTABR9LYK.tmp
is-ERIT1IQYNH.tmp
is-EYK5JV985K.tmp
is-I9637KGU7Z.tmp
is-O64URJTLPG.tmp
is-O6NKXJTZDV.tmp
is-V43ID0TDBQ.tmp
is-WAG97RFG5K.tmp
is-IUSRUKJ88D.tmp
is-U7MPBLO8QW.tmp
is-XHVMSUJ4U1.tmp
is-1DKHB2M8X9.tmp
is-S7KSZ0710M.tmp
is-VA7TGQV7IB.tmp
is-Q4760XCE4X.tmp
is-VROV91BIYC.tmp
is-K65FPC4B2S.tmp
is-0JZA2SJE0L.tmp
is-7BZ0SRT6CO.tmp
is-4AYDRJC7F8.tmp
is-K9H4GQYFYT.tmp
is-4R5AFX9Q1X.tmp
is-PD1FSLRUQN.tmp
is-7A2F8N6HAT.tmp
is-3JCX4LRB9Z.tmp
is-AJKA6W1R3N.tmp
is-5A33I052K8.tmp
is-PYK1AAYSA1.tmp
is-MIZT4KMWNQ.tmp
is-SEBCZUU21T.tmp
is-2ZPNUA4UDW.tmp
is-KN8C84A6KY.tmp
is-S5YQRROXRX.tmp
is-Q271U6AMPP.tmp
is-CVOND7E8GG.tmp
is-TOZFWXSHGX.tmp
is-906FGWHWNZ.tmp
is-NEYEZJ6MKB.tmp
is-OMH7R1EJG4.tmp
is-TB9VFI3C19.tmp
is-YP7GJI6X1Z.tmp
is-ZU5P6XX5OU.tmp
is-70XM0K29IG.tmp
is-I3RSUIXKG7.tmp
is-KKA8IAEVFL.tmp
is-XLLLQ2LUE1.tmp
is-DWR0QX13PV.tmp
is-J8XIQQYQA5.tmp
is-Q17PEHC1FQ.tmp
is-X1WF51MBFB.tmp
is-HJN5EQOIMU.tmp
is-R88VY7ED1Q.tmp
is-JTMID8AOCH.tmp
is-RZBHSUD3LO.tmp
is-K5UYEP5824.tmp
is-QBU9G97LL2.tmp
is-VTEWAVDBHI.tmp
is-VBTT1W9C0H.tmp
is-BTIBXNGBBD.tmp
is-VFTLSUOQ7Q.tmp
is-E4Z9FA0GJ9.tmp
is-M4L0HQP62U.tmp
is-BGJNK21V7I.tmp
is-QXY3FSWNXA.tmp
is-QD7YW4N2Z8.tmp
is-1N7S9TKCPO.tmp
is-S5ISL1X2DX.tmp
gimp.tmp
memory/652-17832-0x00007FFD94E30000-0x00007FFD94EBE000-memory.dmp
memory/652-17819-0x00007FFD95440000-0x00007FFD9576E000-memory.dmp
memory/652-17821-0x00007FFD95420000-0x00007FFD954AE000-memory.dmp
memory/652-17833-0x00007FFD94FC0000-0x00007FFD950A4000-memory.dmp
memory/652-17834-0x00007FFD950C0000-0x00007FFD951BB000-memory.dmp
memory/652-17835-0x00007FFD94440000-0x00007FFD9476E000-memory.dmp
memory/652-17818-0x00007FF7D5030000-0x00007FF7D572D000-memory.dmp
memory/652-17817-0x00007FFD98970000-0x00007FFD9901C000-memory.dmp
memory/652-17836-0x00007FFD94770000-0x00007FFD947DF000-memory.dmp
memory/652-17822-0x00007FFD955B0000-0x00007FFD95694000-memory.dmp
memory/652-17823-0x00007FFD956B0000-0x00007FFD957AB000-memory.dmp
memory/652-17820-0x00007FFD95770000-0x00007FFD957DF000-memory.dmp
memory/1196-17877-0x00007FFD94440000-0x00007FFD9476E000-memory.dmp
memory/1196-17878-0x00007FFD94770000-0x00007FFD947DF000-memory.dmp
memory/1196-17879-0x00007FFD94E30000-0x00007FFD94EBE000-memory.dmp
memory/1196-17880-0x00007FFD94FC0000-0x00007FFD950A4000-memory.dmp
memory/1196-17881-0x00007FFD950C0000-0x00007FFD951BB000-memory.dmp
memory/1604-17973-0x00007FF77A850000-0x00007FF77A8A1000-memory.dmp
memory/1604-17972-0x00007FFD950C0000-0x00007FFD951BB000-memory.dmp
memory/1804-17853-0x0000019339000000-0x000001933902C000-memory.dmp
memory/2152-17943-0x00007FFD96C20000-0x00007FFD96CC0000-memory.dmp
memory/2348-17886-0x00007FFD94440000-0x00007FFD9476E000-memory.dmp
memory/2348-17887-0x00007FFD94770000-0x00007FFD947DF000-memory.dmp
memory/2348-17888-0x00007FFD94E30000-0x00007FFD94EBE000-memory.dmp
memory/2348-17889-0x00007FFD94FC0000-0x00007FFD950A4000-memory.dmp
memory/2348-17890-0x00007FFD950C0000-0x00007FFD951BB000-memory.dmp
memory/2988-17941-0x0000015655CC0000-0x0000015655CEC000-memory.dmp
memory/3124-17840-0x0000000000F20000-0x0000000001024000-memory.dmp
memory/3124-0-0x0000000000F20000-0x0000000001024000-memory.dmp
memory/3124-17-0x0000000000F20000-0x0000000001024000-memory.dmp
memory/3160-17900-0x00007FFD94440000-0x00007FFD9476E000-memory.dmp
memory/3160-17904-0x00007FFD950C0000-0x00007FFD951BB000-memory.dmp
memory/3160-17901-0x00007FFD94770000-0x00007FFD947DF000-memory.dmp
memory/3160-17903-0x00007FFD94FC0000-0x00007FFD950A4000-memory.dmp
memory/3160-17902-0x00007FFD94E30000-0x00007FFD94EBE000-memory.dmp
memory/3496-17951-0x00007FFD94770000-0x00007FFD947DF000-memory.dmp
memory/3496-17950-0x00007FFD94440000-0x00007FFD9476E000-memory.dmp
memory/3748-14114-0x0000000000870000-0x0000000000D7E000-memory.dmp
memory/3748-7626-0x0000000000870000-0x0000000000D7E000-memory.dmp
memory/3748-18-0x0000000000870000-0x0000000000D7E000-memory.dmp
memory/3748-17839-0x0000000000870000-0x0000000000D7E000-memory.dmp
memory/3748-12346-0x0000000000870000-0x0000000000D7E000-memory.dmp
memory/3748-5-0x0000000001260000-0x0000000001261000-memory.dmp
memory/3748-19-0x0000000001260000-0x0000000001261000-memory.dmp
memory/3748-15970-0x0000000000870000-0x0000000000D7E000-memory.dmp
memory/3748-17749-0x0000000000870000-0x0000000000D7E000-memory.dmp
memory/3748-2360-0x0000000000870000-0x0000000000D7E000-memory.dmp
memory/3936-17965-0x00007FFDA8110000-0x00007FFDA82A5000-memory.dmp
memory/3936-17963-0x00007FFD8EA10000-0x00007FFD8FD09000-memory.dmp
memory/3936-17964-0x00007FFD94E30000-0x00007FFD94EBE000-memory.dmp
memory/3988-17898-0x000001E171F10000-0x000001E171F3C000-memory.dmp
memory/4200-17869-0x00000257A6780000-0x00000257A67AC000-memory.dmp
memory/4712-17924-0x00007FFD94770000-0x00007FFD947DF000-memory.dmp
memory/4712-17927-0x00007FFD950C0000-0x00007FFD951BB000-memory.dmp
memory/4712-17926-0x00007FFD94FC0000-0x00007FFD950A4000-memory.dmp
memory/4712-17925-0x00007FFD94E30000-0x00007FFD94EBE000-memory.dmp
memory/4712-17923-0x00007FFD94440000-0x00007FFD9476E000-memory.dmp
memory/4820-17859-0x000001C118540000-0x000001C11856C000-memory.dmp
memory/4936-17915-0x00007FFD94FC0000-0x00007FFD950A4000-memory.dmp
memory/4936-17914-0x00007FFD94E30000-0x00007FFD94EBE000-memory.dmp
memory/4936-17917-0x00007FFD94E30000-0x00007FFD94EBE000-memory.dmp
memory/4936-17918-0x00007FFD94FC0000-0x00007FFD950A4000-memory.dmp
memory/4936-17919-0x00007FFD950C0000-0x00007FFD951BB000-memory.dmp
memory/4936-17916-0x00007FFD950C0000-0x00007FFD951BB000-memory.dmp
memory/4936-17912-0x00007FFD94440000-0x00007FFD9476E000-memory.dmp
memory/4936-17913-0x00007FFD94770000-0x00007FFD947DF000-memory.dmp