Resubmissions

05/07/2026, 17:47

260705-wc1qxaew2z

05/07/2026, 17:43

260705-warefsev9z6

Analysis

  • user interaction
    yes
  • max time kernel
    899s
  • max time network
    433s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260629-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    05/07/2026, 17:43

General

  • Target
    gimp.exe
  • Size 179.4MB
  • Sample260705-warefsev9z
  • SHA256 52cfa91801256c8e92b9975d89fac105034de08101f1f48f9c3e526c1467e99b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

  • Checks SCSI registry key(s) 3 TTPs 62 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 54 IoCs
  • Suspicious use of SendNotifyMessage 62 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Users\Admin\AppData\Local\Temp\gimp.exe
    "C:\Users\Admin\AppData\Local\Temp\gimp.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2732
    • C:\Users\Admin\AppData\Local\Temp\is-AGI4V8Y8PZ.tmp\gimp.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-AGI4V8Y8PZ.tmp\gimp.tmp" /SL5="$40210,184011737,1004544,C:\Users\Admin\AppData\Local\Temp\gimp.exe"
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:3248
      • C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\gimp-3.exe
        "C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\gimp-3.exe"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: AddClipboardFormatListener
        • Suspicious use of WriteProcessMemory
        PID:3336
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\gdbus.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\gdbus.exe" _win32_run_session_bus
          4⤵
          • Executes dropped EXE
          PID:4056
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\wia\wia.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\wia\wia.exe" -gimp 279 6 5 -query 0
          4⤵
          • Executes dropped EXE
          PID:4168
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\web-browser\web-browser.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\web-browser\web-browser.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:6096
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\wavelet-decompose\wavelet-decompose.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\wavelet-decompose\wavelet-decompose.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:3620
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\warp\warp.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\warp\warp.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:4080
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\van-gogh-lic\van-gogh-lic.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\van-gogh-lic\van-gogh-lic.exe" -gimp 279 6 5 -query 0
          4⤵
          • Executes dropped EXE
          PID:96
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\unit-editor\unit-editor.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\unit-editor\unit-editor.exe" -gimp 279 6 5 -query 0
          4⤵
          • Executes dropped EXE
          PID:4540
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\tile-small\tile-small.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\tile-small\tile-small.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:3164
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\tile\tile.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\tile\tile.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:5156
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\gimp-script-fu-interpreter-3.0.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\gimp-script-fu-interpreter-3.0.exe" "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\test-sphere-v3\test-sphere-v3.scm" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:2568
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\pythonw.exe
          pythonw.exe "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\spyro-plus\spyro-plus.py" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:1932
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\sphere-designer\sphere-designer.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\sphere-designer\sphere-designer.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:1240
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\sparkle\sparkle.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\sparkle\sparkle.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:5180
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\smooth-palette\smooth-palette.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\smooth-palette\smooth-palette.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:828
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\selection-to-path\selection-to-path.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\selection-to-path\selection-to-path.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:2032
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\script-fu-server\script-fu-server.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\script-fu-server\script-fu-server.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:4044
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\script-fu\script-fu.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\script-fu\script-fu.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:3112
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\screenshot\screenshot.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\screenshot\screenshot.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:1256
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\sample-colorize\sample-colorize.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\sample-colorize\sample-colorize.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:4184
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\qbist\qbist.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\qbist\qbist.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:5896
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\pythonw.exe
          pythonw.exe "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\python-eval\python-eval.py" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:2396
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\pythonw.exe
          pythonw.exe "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\python-console\python-console.py" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:4964
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\procedure-browser\procedure-browser.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\procedure-browser\procedure-browser.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:5980
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\print\print.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\print\print.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:4008
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\plugin-browser\plugin-browser.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\plugin-browser\plugin-browser.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:1308
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\pythonw.exe
          pythonw.exe "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\palette-to-gradient\palette-to-gradient.py" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:5952
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\pythonw.exe
          pythonw.exe "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\palette-sort\palette-sort.py" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:2972
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\pythonw.exe
          pythonw.exe "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\palette-offset\palette-offset.py" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:4552
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\pythonw.exe
          pythonw.exe "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\palette-export-as-kpl\palette-export-as-kpl.py" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:3520
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\pagecurl\pagecurl.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\pagecurl\pagecurl.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:1368
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\nl-filter\nl-filter.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\nl-filter\nl-filter.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:5360
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\metadata-viewer\metadata-viewer.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\metadata-viewer\metadata-viewer.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:1280
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\metadata-editor\metadata-editor.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\metadata-editor\metadata-editor.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:820
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\map-object\map-object.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\map-object\map-object.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:1640
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\lighting\lighting.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\lighting\lighting.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:5480
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\jigsaw\jigsaw.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\jigsaw\jigsaw.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:4708
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\imagemap\imagemap.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\imagemap\imagemap.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:2416
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\ifs-compose\ifs-compose.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\ifs-compose\ifs-compose.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:4476
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\hot\hot.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\hot\hot.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:3308
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\pythonw.exe
          pythonw.exe "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\histogram-export\histogram-export.py" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:3688
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\help\help.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\help\help.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:2840
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\guillotine\guillotine.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\guillotine\guillotine.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:3064
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\grid\grid.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\grid\grid.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:5112
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\pythonw.exe
          pythonw.exe "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\gradients-save-as-css\gradients-save-as-css.py" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:1492
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\gradient-map\gradient-map.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\gradient-map\gradient-map.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:5200
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\gradient-flare\gradient-flare.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\gradient-flare\gradient-flare.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:3060
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\gimpressionist\gimpressionist.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\gimpressionist\gimpressionist.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:5284
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\gfig\gfig.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\gfig\gfig.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:5736
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\fractal-explorer\fractal-explorer.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\fractal-explorer\fractal-explorer.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:1572
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\pythonw.exe
          pythonw.exe "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\foggify\foggify.py" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:2872
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\flame\flame.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\flame\flame.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:5068
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\filter-browser\filter-browser.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\filter-browser\filter-browser.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:3676
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\film\film.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\film\film.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:5856
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-xwd\file-xwd.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-xwd\file-xwd.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:5332
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-xpm\file-xpm.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-xpm\file-xpm.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:2720
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-xbm\file-xbm.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-xbm\file-xbm.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:2632
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-wmf\file-wmf.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-wmf\file-wmf.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:3192
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-webp\file-webp.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-webp\file-webp.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:928
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-wbmp\file-wbmp.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-wbmp\file-wbmp.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:4796
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-tim\file-tim.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-tim\file-tim.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:3680
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-tiff\file-tiff.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-tiff\file-tiff.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:2688
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-tga\file-tga.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-tga\file-tga.exe" -gimp 279 5 4 -query 0
          4⤵
          • Executes dropped EXE
          PID:2568
        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-svg\file-svg.exe
          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-svg\file-svg.exe" -gimp 279 5 4 -query 0
          4⤵
            PID:4548
          • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-sunras\file-sunras.exe
            "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-sunras\file-sunras.exe" -gimp 279 5 4 -query 0
            4⤵
              PID:2196
            • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-sgi\file-sgi.exe
              "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-sgi\file-sgi.exe" -gimp 279 5 4 -query 0
              4⤵
                PID:3204
              • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-seattle-filmworks\file-seattle-filmworks.exe
                "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-seattle-filmworks\file-seattle-filmworks.exe" -gimp 279 5 4 -query 0
                4⤵
                  PID:4860
                • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-rawtherapee\file-rawtherapee.exe
                  "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-rawtherapee\file-rawtherapee.exe" -gimp 279 5 4 -query 0
                  4⤵
                    PID:1464
                  • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-raw-placeholder\file-raw-placeholder.exe
                    "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-raw-placeholder\file-raw-placeholder.exe" -gimp 279 5 4 -query 0
                    4⤵
                      PID:4376
                    • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-raw-data\file-raw-data.exe
                      "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-raw-data\file-raw-data.exe" -gimp 279 5 4 -query 0
                      4⤵
                        PID:4668
                      • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-qoi\file-qoi.exe
                        "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-qoi\file-qoi.exe" -gimp 279 5 4 -query 0
                        4⤵
                          PID:2580
                        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-pvr\file-pvr.exe
                          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-pvr\file-pvr.exe" -gimp 279 5 4 -query 0
                          4⤵
                            PID:4276
                          • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-psp\file-psp.exe
                            "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-psp\file-psp.exe" -gimp 279 5 4 -query 0
                            4⤵
                              PID:2100
                            • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-psd\file-psd.exe
                              "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-psd\file-psd.exe" -gimp 279 5 4 -query 0
                              4⤵
                                PID:5368
                              • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-ps\file-ps.exe
                                "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-ps\file-ps.exe" -gimp 279 5 4 -query 0
                                4⤵
                                  PID:384
                                • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-pnm\file-pnm.exe
                                  "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-pnm\file-pnm.exe" -gimp 279 5 4 -query 0
                                  4⤵
                                    PID:2812
                                  • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-png\file-png.exe
                                    "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-png\file-png.exe" -gimp 279 5 4 -query 0
                                    4⤵
                                      PID:5316
                                    • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-pix\file-pix.exe
                                      "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-pix\file-pix.exe" -gimp 279 5 4 -query 0
                                      4⤵
                                        PID:1308
                                      • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-pdf-load\file-pdf-load.exe
                                        "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-pdf-load\file-pdf-load.exe" -gimp 279 5 4 -query 0
                                        4⤵
                                          PID:5028
                                        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-pdf-export\file-pdf-export.exe
                                          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-pdf-export\file-pdf-export.exe" -gimp 279 5 4 -query 0
                                          4⤵
                                            PID:3420
                                          • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-pcx\file-pcx.exe
                                            "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-pcx\file-pcx.exe" -gimp 279 5 4 -query 0
                                            4⤵
                                              PID:4460
                                            • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-pat\file-pat.exe
                                              "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-pat\file-pat.exe" -gimp 279 5 4 -query 0
                                              4⤵
                                                PID:1644
                                              • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-paa\file-paa.exe
                                                "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-paa\file-paa.exe" -gimp 279 5 4 -query 0
                                                4⤵
                                                  PID:6008
                                                • C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\pythonw.exe
                                                  pythonw.exe "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-openraster\file-openraster.py" -gimp 279 5 4 -query 0
                                                  4⤵
                                                    PID:1368
                                                  • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-mng\file-mng.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-mng\file-mng.exe" -gimp 279 5 4 -query 0
                                                    4⤵
                                                      PID:5360
                                                    • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-lnk\file-lnk.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-lnk\file-lnk.exe" -gimp 279 5 4 -query 0
                                                      4⤵
                                                        PID:1280
                                                      • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-jpegxl\file-jpegxl.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-jpegxl\file-jpegxl.exe" -gimp 279 5 4 -query 0
                                                        4⤵
                                                          PID:820
                                                        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-jpeg\file-jpeg.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-jpeg\file-jpeg.exe" -gimp 279 5 4 -query 0
                                                          4⤵
                                                            PID:1736
                                                          • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-jp2\file-jp2.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-jp2\file-jp2.exe" -gimp 279 5 4 -query 0
                                                            4⤵
                                                              PID:3300
                                                            • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-iff\file-iff.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-iff\file-iff.exe" -gimp 279 5 4 -query 0
                                                              4⤵
                                                                PID:2924
                                                              • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-ico\file-ico.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-ico\file-ico.exe" -gimp 279 5 4 -query 0
                                                                4⤵
                                                                  PID:4572
                                                                • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-icns\file-icns.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-icns\file-icns.exe" -gimp 279 5 4 -query 0
                                                                  4⤵
                                                                    PID:2420
                                                                  • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-html-table\file-html-table.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-html-table\file-html-table.exe" -gimp 279 5 4 -query 0
                                                                    4⤵
                                                                      PID:4644
                                                                    • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-heif\file-heif.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-heif\file-heif.exe" -gimp 279 5 4 -query 0
                                                                      4⤵
                                                                        PID:4116
                                                                      • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-header\file-header.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-header\file-header.exe" -gimp 279 5 4 -query 0
                                                                        4⤵
                                                                          PID:3940
                                                                        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-glob\file-glob.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-glob\file-glob.exe" -gimp 279 5 4 -query 0
                                                                          4⤵
                                                                            PID:4604
                                                                          • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-gih\file-gih.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-gih\file-gih.exe" -gimp 279 5 4 -query 0
                                                                            4⤵
                                                                              PID:3144
                                                                            • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-gif-load\file-gif-load.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-gif-load\file-gif-load.exe" -gimp 279 5 4 -query 0
                                                                              4⤵
                                                                                PID:1440
                                                                              • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-gif-export\file-gif-export.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-gif-export\file-gif-export.exe" -gimp 279 5 4 -query 0
                                                                                4⤵
                                                                                  PID:3260
                                                                                • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-gegl\file-gegl.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-gegl\file-gegl.exe" -gimp 279 5 4 -query 0
                                                                                  4⤵
                                                                                    PID:4416
                                                                                  • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-gbr\file-gbr.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-gbr\file-gbr.exe" -gimp 279 5 4 -query 0
                                                                                    4⤵
                                                                                      PID:1196
                                                                                    • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-fli\file-fli.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-fli\file-fli.exe" -gimp 279 5 4 -query 0
                                                                                      4⤵
                                                                                        PID:2428
                                                                                      • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-fits\file-fits.exe
                                                                                        "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-fits\file-fits.exe" -gimp 279 5 4 -query 0
                                                                                        4⤵
                                                                                          PID:976
                                                                                        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-faxg3\file-faxg3.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-faxg3\file-faxg3.exe" -gimp 279 5 4 -query 0
                                                                                          4⤵
                                                                                            PID:3660
                                                                                          • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-farbfeld\file-farbfeld.exe
                                                                                            "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-farbfeld\file-farbfeld.exe" -gimp 279 5 4 -query 0
                                                                                            4⤵
                                                                                              PID:5616
                                                                                            • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-exr\file-exr.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-exr\file-exr.exe" -gimp 279 5 4 -query 0
                                                                                              4⤵
                                                                                                PID:4720
                                                                                              • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-dicom\file-dicom.exe
                                                                                                "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-dicom\file-dicom.exe" -gimp 279 5 4 -query 0
                                                                                                4⤵
                                                                                                  PID:1468
                                                                                                • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-dds\file-dds.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-dds\file-dds.exe" -gimp 279 5 4 -query 0
                                                                                                  4⤵
                                                                                                    PID:3048
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-darktable\file-darktable.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-darktable\file-darktable.exe" -gimp 279 5 4 -query 0
                                                                                                    4⤵
                                                                                                      PID:2724
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-csource\file-csource.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-csource\file-csource.exe" -gimp 279 5 4 -query 0
                                                                                                      4⤵
                                                                                                        PID:1744
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-compressor\file-compressor.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-compressor\file-compressor.exe" -gimp 279 5 4 -query 0
                                                                                                        4⤵
                                                                                                          PID:4712
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-cel\file-cel.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-cel\file-cel.exe" -gimp 279 5 4 -query 0
                                                                                                          4⤵
                                                                                                            PID:2544
                                                                                                          • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-bmp\file-bmp.exe
                                                                                                            "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-bmp\file-bmp.exe" -gimp 279 5 4 -query 0
                                                                                                            4⤵
                                                                                                              PID:2500
                                                                                                            • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-another-rawtherapee\file-another-rawtherapee.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-another-rawtherapee\file-another-rawtherapee.exe" -gimp 279 5 4 -query 0
                                                                                                              4⤵
                                                                                                                PID:1628
                                                                                                              • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-aa\file-aa.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-aa\file-aa.exe" -gimp 279 5 4 -query 0
                                                                                                                4⤵
                                                                                                                  PID:3872
                                                                                                                • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\destripe\destripe.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\destripe\destripe.exe" -gimp 279 5 4 -query 0
                                                                                                                  4⤵
                                                                                                                    PID:936
                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\despeckle\despeckle.exe
                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\despeckle\despeckle.exe" -gimp 279 5 4 -query 0
                                                                                                                    4⤵
                                                                                                                      PID:5856
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\depth-merge\depth-merge.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\depth-merge\depth-merge.exe" -gimp 279 5 4 -query 0
                                                                                                                      4⤵
                                                                                                                        PID:3772
                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\decompose\decompose.exe
                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\decompose\decompose.exe" -gimp 279 5 4 -query 0
                                                                                                                        4⤵
                                                                                                                          PID:2788
                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\curve-bend\curve-bend.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\curve-bend\curve-bend.exe" -gimp 279 5 4 -query 0
                                                                                                                          4⤵
                                                                                                                            PID:5676
                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\crop-zealous\crop-zealous.exe
                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\crop-zealous\crop-zealous.exe" -gimp 279 5 4 -query 0
                                                                                                                            4⤵
                                                                                                                              PID:2632
                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\contrast-retinex\contrast-retinex.exe
                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\contrast-retinex\contrast-retinex.exe" -gimp 279 5 4 -query 0
                                                                                                                              4⤵
                                                                                                                                PID:4540
                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\compose\compose.exe
                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\compose\compose.exe" -gimp 279 5 4 -query 0
                                                                                                                                4⤵
                                                                                                                                  PID:3408
                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\pythonw.exe
                                                                                                                                  pythonw.exe "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\colorxhtml\colorxhtml.py" -gimp 279 5 4 -query 0
                                                                                                                                  4⤵
                                                                                                                                    PID:3052
                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\colormap-remap\colormap-remap.exe
                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\colormap-remap\colormap-remap.exe" -gimp 279 5 4 -query 0
                                                                                                                                    4⤵
                                                                                                                                      PID:4744
                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\cml-explorer\cml-explorer.exe
                                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\cml-explorer\cml-explorer.exe" -gimp 279 5 4 -query 0
                                                                                                                                      4⤵
                                                                                                                                        PID:612
                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\checkerboard\checkerboard.exe
                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\checkerboard\checkerboard.exe" -gimp 279 5 4 -query 0
                                                                                                                                        4⤵
                                                                                                                                          PID:5044
                                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\busy-dialog\busy-dialog.exe
                                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\busy-dialog\busy-dialog.exe" -gimp 279 5 4 -query 0
                                                                                                                                          4⤵
                                                                                                                                            PID:2512
                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\border-average\border-average.exe
                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\border-average\border-average.exe" -gimp 279 5 4 -query 0
                                                                                                                                            4⤵
                                                                                                                                              PID:6104
                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\blinds\blinds.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\blinds\blinds.exe" -gimp 279 5 4 -query 0
                                                                                                                                              4⤵
                                                                                                                                                PID:4860
                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\animation-play\animation-play.exe
                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\animation-play\animation-play.exe" -gimp 279 5 4 -query 0
                                                                                                                                                4⤵
                                                                                                                                                  PID:4188
                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\animation-optimize\animation-optimize.exe
                                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\animation-optimize\animation-optimize.exe" -gimp 279 5 4 -query 0
                                                                                                                                                  4⤵
                                                                                                                                                    PID:4216
                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\align-layers\align-layers.exe
                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\align-layers\align-layers.exe" -gimp 279 5 4 -query 0
                                                                                                                                                    4⤵
                                                                                                                                                      PID:3200
                                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\pythonw.exe
                                                                                                                                                      pythonw.exe "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\extensions\org.gimp.extension.goat-exercises\goat-exercise-py3.py" -gimp 279 5 4 -query 0
                                                                                                                                                      4⤵
                                                                                                                                                        PID:6112
                                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\extensions\org.gimp.extension.goat-exercises\goat-exercise-vala.exe
                                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\extensions\org.gimp.extension.goat-exercises\goat-exercise-vala.exe" -gimp 279 5 4 -query 0
                                                                                                                                                        4⤵
                                                                                                                                                          PID:4276
                                                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\extensions\org.gimp.extension.goat-exercises\goat-exercise-c.exe
                                                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\extensions\org.gimp.extension.goat-exercises\goat-exercise-c.exe" -gimp 279 5 4 -query 0
                                                                                                                                                          4⤵
                                                                                                                                                            PID:2100
                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-rawtherapee\file-rawtherapee.exe
                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-rawtherapee\file-rawtherapee.exe" -gimp 279 5 4 -init 0
                                                                                                                                                            4⤵
                                                                                                                                                              PID:5368
                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\gspawn-win64-helper.exe
                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\gspawn-win64-helper.exe" 10 11 z 8 z - y y w - rawtherapee -v -w
                                                                                                                                                                5⤵
                                                                                                                                                                  PID:3888
                                                                                                                                                        • C:\Windows\system32\sihost.exe
                                                                                                                                                          sihost.exe
                                                                                                                                                          1⤵
                                                                                                                                                          • Suspicious use of FindShellTrayWindow
                                                                                                                                                          • Suspicious use of WriteProcessMemory
                                                                                                                                                          PID:4916
                                                                                                                                                          • C:\Windows\explorer.exe
                                                                                                                                                            explorer.exe /LOADSAVEDWINDOWS
                                                                                                                                                            2⤵
                                                                                                                                                            • Boot or Logon Autostart Execution: Active Setup
                                                                                                                                                            • Enumerates connected drives
                                                                                                                                                            • Checks SCSI registry key(s)
                                                                                                                                                            • Modifies Internet Explorer settings
                                                                                                                                                            • Modifies registry class
                                                                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                            • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                            • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                            • Suspicious use of FindShellTrayWindow
                                                                                                                                                            • Suspicious use of SendNotifyMessage
                                                                                                                                                            • Suspicious use of SetWindowsHookEx
                                                                                                                                                            PID:5236
                                                                                                                                                        • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                                                                                                                          "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                                                                                                                          1⤵
                                                                                                                                                          • Modifies registry class
                                                                                                                                                          • Suspicious use of SetWindowsHookEx
                                                                                                                                                          PID:5116
                                                                                                                                                        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                                          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                                          1⤵
                                                                                                                                                          • Suspicious use of SetWindowsHookEx
                                                                                                                                                          PID:3840
                                                                                                                                                        • C:\Windows\system32\svchost.exe
                                                                                                                                                          C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                                                                                          1⤵
                                                                                                                                                            PID:932
                                                                                                                                                          • C:\Windows\system32\backgroundTaskHost.exe
                                                                                                                                                            "C:\Windows\system32\backgroundTaskHost.exe" -ServerName:Global.RulesEngine.AppXgphnekvm0vv49drvfehh4b6kyf6ckafp.mca
                                                                                                                                                            1⤵
                                                                                                                                                              PID:3660
                                                                                                                                                            • C:\Windows\System32\SecurityHealthHost.exe
                                                                                                                                                              \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
                                                                                                                                                              1⤵
                                                                                                                                                                PID:1288
                                                                                                                                                              • C:\Windows\system32\werfault.exe
                                                                                                                                                                werfault.exe /h /shared Global\b573806cedab46f4b977466aa7714cd6 /t 3744 /p 3336
                                                                                                                                                                1⤵
                                                                                                                                                                  PID:3324

                                                                                                                                                                Network

                                                                                                                                                                      MITRE ATT&CK Enterprise v16

                                                                                                                                                                      Replay Monitor

                                                                                                                                                                      Loading Replay Monitor...

                                                                                                                                                                      Downloads

                                                                                                                                                                      prep_Activatable Class_Hermes_perf.cache

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                                                                                                                                                                      • Size 599B
                                                                                                                                                                      • SHA256 b536a3dae9ea5c69081f0491eed829e3b57e32401fdf49a63031bcd6b20e6fdb
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      exchndl.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\exchndl.dll
                                                                                                                                                                      • Size 719KB
                                                                                                                                                                      • SHA256 a115ce2ecb77201bf77c57bf4a0817cf9b525c962d86119a7636509aced4aad2
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-BU0BQTK7N9.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\is-BU0BQTK7N9.tmp
                                                                                                                                                                      • Size 6.9MB
                                                                                                                                                                      • SHA256 b4ea813a747ee419657bc3e1289ebbe79f90a28bdf6fbbd445f7c5b3fbe41e99
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-ED0WLJTYVI.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\is-ED0WLJTYVI.tmp
                                                                                                                                                                      • Size 82KB
                                                                                                                                                                      • SHA256 6242723eabddc8770e43116a3384ff7a076c935ae1f74c0d87bce8599e21c5f6
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-MEYBT3SB7U.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\is-MEYBT3SB7U.tmp
                                                                                                                                                                      • Size 3.3MB
                                                                                                                                                                      • SHA256 8dbb5502c69d63456ab53dc43b5c9baa8e435808a9fcad47d44c44a5e82fa3d4
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-PRCBIH6UZD.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\is-PRCBIH6UZD.tmp
                                                                                                                                                                      • Size 94KB
                                                                                                                                                                      • SHA256 71729e4885ed5ddb0aace2eac16147ee77cccd8124a53f2bf36fc14f8e2cc8df
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-U8KJTMVST9.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\is-U8KJTMVST9.tmp
                                                                                                                                                                      • Size 89KB
                                                                                                                                                                      • SHA256 6d67066068d2341aaf9c03aab9acde92644ee54b1339c50d0ac5e529f3a7b83d
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      libappstream-5.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\libappstream-5.dll
                                                                                                                                                                      • Size 677KB
                                                                                                                                                                      • SHA256 5aefcc1f6c05673e2eeffbee2e7ed124bc005b7cee2eaa2dfb06430f077ba22a
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      libarchive-13.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\libarchive-13.dll
                                                                                                                                                                      • Size 863KB
                                                                                                                                                                      • SHA256 2e26db38753de26cb4b12b96a38833319c2424235cb316f11015294acb7b1c71
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      libbabl-0.1-0.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\libbabl-0.1-0.dll
                                                                                                                                                                      • Size 813KB
                                                                                                                                                                      • SHA256 91016fb97c3868aaaa47ba091ea36a81a8bca77c1efc1a701d92680a330addbb
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      libcairo-2.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\libcairo-2.dll
                                                                                                                                                                      • Size 1.2MB
                                                                                                                                                                      • SHA256 b00d4dd7cfe57d7c8b62fb05ae688c4dbaf7abb6a8e9bd67cce596d9d972da0d
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      libfontconfig-1.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\libfontconfig-1.dll
                                                                                                                                                                      • Size 348KB
                                                                                                                                                                      • SHA256 3cb33273d221c0ca563d1e9dc6ccb9eecdffe0ee8367560c5cce78cc4f4d0887
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      libfreetype-6.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\libfreetype-6.dll
                                                                                                                                                                      • Size 824KB
                                                                                                                                                                      • SHA256 fee9b0490e5217611436a4686fd75f341ce5e8c531cdf127fbdf3ecd9226f929
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      libgdk-3-0.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\libgdk-3-0.dll
                                                                                                                                                                      • Size 1.5MB
                                                                                                                                                                      • SHA256 f8fe343413d7aac30f0fca8707abdefd8502de46090bd171052c58d5477e8bfa
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      libgdk_pixbuf-2.0-0.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\libgdk_pixbuf-2.0-0.dll
                                                                                                                                                                      • Size 358KB
                                                                                                                                                                      • SHA256 524eed6455ef5bba6ffb3056c71ecf9f34f677833c96bf0f8de2f87d1dae3d7b
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      libgegl-0.4-0.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\libgegl-0.4-0.dll
                                                                                                                                                                      • Size 922KB
                                                                                                                                                                      • SHA256 95b3be41918aa3c16552552f5764173b79131b690c54f832abcdfc3a7b6e32b3
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      libgexiv2-2.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\libgexiv2-2.dll
                                                                                                                                                                      • Size 262KB
                                                                                                                                                                      • SHA256 9883c002c3b023a10e774a358c37cb3d7f3378eab7b3475eb56edaabb493f4e2
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      libgimpbase-3.0-0.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\libgimpbase-3.0-0.dll
                                                                                                                                                                      • Size 454KB
                                                                                                                                                                      • SHA256 bb9f84957485ba2109aaac4a306761255df1917e7c1ab1bee3ebdbd52f373a0e
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      libgimpcolor-3.0-0.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\libgimpcolor-3.0-0.dll
                                                                                                                                                                      • Size 121KB
                                                                                                                                                                      • SHA256 ac34522a626a655cf0234e257a4e849cd1e617962dabd5e22d2d8514821c0dee
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      libgimpconfig-3.0-0.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\libgimpconfig-3.0-0.dll
                                                                                                                                                                      • Size 141KB
                                                                                                                                                                      • SHA256 354304998e6a12d5e78d7cea93a133a6fc3a4b58197f508aeebdb97ddaa5b5bb
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      libgimpmath-3.0-0.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\libgimpmath-3.0-0.dll
                                                                                                                                                                      • Size 73KB
                                                                                                                                                                      • SHA256 2db9dd92f0cddb95b1da8094ceb5e24aad77a4e3a2b9827fed35b7c9c4a70cbc
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      libgimpmodule-3.0-0.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\libgimpmodule-3.0-0.dll
                                                                                                                                                                      • Size 70KB
                                                                                                                                                                      • SHA256 a0902c43bc89cadb72d0ef6838f040a2156bbd095ecbbca8e333ac16deb11c3b
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      libgimpthumb-3.0-0.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\libgimpthumb-3.0-0.dll
                                                                                                                                                                      • Size 82KB
                                                                                                                                                                      • SHA256 62b602bce36248ac2a69542f6be0c2d6534f89affd9ab82705e7b73441f88d28
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      libgimpwidgets-3.0-0.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\libgimpwidgets-3.0-0.dll
                                                                                                                                                                      • Size 2.5MB
                                                                                                                                                                      • SHA256 bf9ff0126261b3c087c82fa234198ede6a139b92a2cdbebe15ad324eeb45bf27
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      libgio-2.0-0.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\libgio-2.0-0.dll
                                                                                                                                                                      • Size 2.1MB
                                                                                                                                                                      • SHA256 3d0e1ce2aef0d479b0cfe91a51e2a5f4f15a2705675cd49951ac4ac333024a8f
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      libglib-2.0-0.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\libglib-2.0-0.dll
                                                                                                                                                                      • Size 1.6MB
                                                                                                                                                                      • SHA256 25815fe53925f4e01860bbd834a12f5aa13865382c4156570f64cf47c6fbfc47
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      libgobject-2.0-0.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\libgobject-2.0-0.dll
                                                                                                                                                                      • Size 359KB
                                                                                                                                                                      • SHA256 81983e9e231c049faee9b2e3ecd4177f61511ec741c89b9fcbba8b5426171845
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      libgtk-3-0.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\libgtk-3-0.dll
                                                                                                                                                                      • Size 7.2MB
                                                                                                                                                                      • SHA256 7bff271c41930f0f6e64bd2467b8db481d37f2b2ab6acb1fee1f6ebc7df3472b
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      libharfbuzz-0.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\libharfbuzz-0.dll
                                                                                                                                                                      • Size 1.5MB
                                                                                                                                                                      • SHA256 fc0e0882c0e3ebbbc49307c2676ac4b2d029bbe771f4d4faf48210fffdf4b46c
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      libintl-8.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\libintl-8.dll
                                                                                                                                                                      • Size 295KB
                                                                                                                                                                      • SHA256 b648dfd190711371bedd58f36cf7bf80cc60be0ff78e574e57f3bd81135eeff5
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      libjson-glib-1.0-0.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\libjson-glib-1.0-0.dll
                                                                                                                                                                      • Size 166KB
                                                                                                                                                                      • SHA256 6712da62bcc66df11da870880b2f706433fb44e5dbb5bab45d7320232a2378dc
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      liblcms2-2.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\liblcms2-2.dll
                                                                                                                                                                      • Size 464KB
                                                                                                                                                                      • SHA256 fa745ce8b431a3d5f4f5922fb57a0b4d6b6ffbf1c660c60903a7855220b6f770
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      libmypaint-0.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\libmypaint-0.dll
                                                                                                                                                                      • Size 145KB
                                                                                                                                                                      • SHA256 2bd0064d0fc68ef661b0f93f4aa7d7081d5ff43453988f68ddedfa9fd8042677
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      libpango-1.0-0.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\libpango-1.0-0.dll
                                                                                                                                                                      • Size 427KB
                                                                                                                                                                      • SHA256 d816394ed8ce376ec6c1952efc3f1c4e8620affaebf73cb594a82c9179d1288e
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      libpangocairo-1.0-0.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\libpangocairo-1.0-0.dll
                                                                                                                                                                      • Size 75KB
                                                                                                                                                                      • SHA256 d1a92a0642955c4bd2790a08f5fbb7f9953ce9e7e56c1a99c2db4229980c2c01
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      libpangoft2-1.0-0.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\libpangoft2-1.0-0.dll
                                                                                                                                                                      • Size 115KB
                                                                                                                                                                      • SHA256 a2eee2fffc906e5c1160747688f5ac5d4ed2aa9f477750a17a394aad3718deb9
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      zlib1.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\zlib1.dll
                                                                                                                                                                      • Size 128KB
                                                                                                                                                                      • SHA256 94dd0a72d4da79e25294a91d1edf902d76eade7512d9218609a5fe43e3a7397a
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-5SXQUL07CL.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\babl-0.1\is-5SXQUL07CL.tmp
                                                                                                                                                                      • Size 196KB
                                                                                                                                                                      • SHA256 e0eb93a4c21368ac08363b79db77eca4d94a772052565deaa598b9b2f551306e
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-9YCCI2WGQ2.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\babl-0.1\is-9YCCI2WGQ2.tmp
                                                                                                                                                                      • Size 208KB
                                                                                                                                                                      • SHA256 8e647d4b9befce874019d4164d8bec9fa141646fd8747c1d6326698640dacb4f
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-9YQDL62OYN.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\babl-0.1\is-9YQDL62OYN.tmp
                                                                                                                                                                      • Size 212KB
                                                                                                                                                                      • SHA256 b2c0e133c42744197672f0b81e1b5816c61c1868d42cbe22f3291108f2016cd6
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-CRJIFGKCM0.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\babl-0.1\is-CRJIFGKCM0.tmp
                                                                                                                                                                      • Size 200KB
                                                                                                                                                                      • SHA256 a15661827843d75e80d5d416765c69ce0fea56d63c8d2fba5b1b798920c7c160
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-D03EC3HRUX.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\babl-0.1\is-D03EC3HRUX.tmp
                                                                                                                                                                      • Size 208KB
                                                                                                                                                                      • SHA256 a95e98a082cd2289f8bd37b334cbc54d25e787393a238c1cdaff3ae447bd4b71
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-E75Z9ES56F.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\babl-0.1\is-E75Z9ES56F.tmp
                                                                                                                                                                      • Size 220KB
                                                                                                                                                                      • SHA256 3a56e1c802c25b0665f51708be58a781555ee255877f21307655eeabc3a4582b
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-FPWFL8SH8D.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\babl-0.1\is-FPWFL8SH8D.tmp
                                                                                                                                                                      • Size 204KB
                                                                                                                                                                      • SHA256 d63955c94474323c31379795e6d325a3e9749ce4f451113196d9eada87839f8d
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-IKIHPO62CM.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\babl-0.1\is-IKIHPO62CM.tmp
                                                                                                                                                                      • Size 224KB
                                                                                                                                                                      • SHA256 819f22309543a28b85128471bb6290732c628bb97cb039920822caf9fad4e582
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-KVOV4DT37I.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\babl-0.1\is-KVOV4DT37I.tmp
                                                                                                                                                                      • Size 212KB
                                                                                                                                                                      • SHA256 a89261141acd5cf0c4c13f538fccfcc105a1d0ef01b4b769e9d6877462443827
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-NLJSFWZQU4.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\babl-0.1\is-NLJSFWZQU4.tmp
                                                                                                                                                                      • Size 216KB
                                                                                                                                                                      • SHA256 fa66a0823052e1822c76a11932e1ba23dcbe2513f0adcb2eb55149842ff6572e
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-F8V4TCPSEW.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gegl-0.4\is-F8V4TCPSEW.tmp
                                                                                                                                                                      • Size 236KB
                                                                                                                                                                      • SHA256 6e4e5b05d40f626ff3515b1235a64ee6978ed8a594ab5cff82567417caa626d0
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-V6347S8HR9.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gegl-0.4\is-V6347S8HR9.tmp
                                                                                                                                                                      • Size 248KB
                                                                                                                                                                      • SHA256 75723e82c615e284170992b19359e0505805500570f69e17aab72ec31a37820e
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      org.gimp.extension.goat-exercises.mo

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\extensions\org.gimp.extension.goat-exercises\locale\eu\LC_MESSAGES\org.gimp.extension.goat-exercises.mo
                                                                                                                                                                      • Size 291KB
                                                                                                                                                                      • SHA256 5b4dcf880ca4c7344ee507db131ae0cdd93d79605c6f40cdd74fd0262c59bc92
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-VTOHXXZSMM.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\extensions\org.gimp.extension.goat-exercises\locale\sr\LC_MESSAGES\is-VTOHXXZSMM.tmp
                                                                                                                                                                      • Size 362KB
                                                                                                                                                                      • SHA256 4e23db261597aaa1ed6eada9583b4829f15fa0c98b60eb92444892030c15dffe
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-DBKHIM7A4C.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\extensions\org.gimp.extension.goat-exercises\locale\tr\LC_MESSAGES\is-DBKHIM7A4C.tmp
                                                                                                                                                                      • Size 294KB
                                                                                                                                                                      • SHA256 7ec67de14583695911c649ea6be116c8921cb577874043de41254bcac9147aa1
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-3113ZVTTCU.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\modules\is-3113ZVTTCU.tmp
                                                                                                                                                                      • Size 232KB
                                                                                                                                                                      • SHA256 3440fa43d52551350690e2226cf41377b74de7a3997928ff33b8ff9a682ab1c5
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-IVY2Q5R84Y.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\depth-merge\is-IVY2Q5R84Y.tmp
                                                                                                                                                                      • Size 340KB
                                                                                                                                                                      • SHA256 d469ddfbe2f0e63d413a31734676af8b917b573bb0573241876fed1690772a11
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-HCK82OSDPP.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\destripe\is-HCK82OSDPP.tmp
                                                                                                                                                                      • Size 336KB
                                                                                                                                                                      • SHA256 c78050b35b0d295ffa47faaffc90ead09f3f73296de154b58b6850efb457324c
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-5LNUJG5VT9.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-farbfeld\is-5LNUJG5VT9.tmp
                                                                                                                                                                      • Size 328KB
                                                                                                                                                                      • SHA256 7320782c42b361f0e1a427b6d8da9f15b103d186877c1a94b5e1457bdc623946
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-A24S6S3N8L.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-iff\is-A24S6S3N8L.tmp
                                                                                                                                                                      • Size 336KB
                                                                                                                                                                      • SHA256 acfe778ffa198e22d7bf5b2dfade9f6f2b61781b7e8c80d60ae5ff0909e90049
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-6DJVUOTF78.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-paa\is-6DJVUOTF78.tmp
                                                                                                                                                                      • Size 316KB
                                                                                                                                                                      • SHA256 9b70f26587ac617c7875a46c532e84b68d54e16bdf46901a1ef0ce2b645bd2fb
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      file-pix.pdb

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-pix\file-pix.pdb
                                                                                                                                                                      • Size 332KB
                                                                                                                                                                      • SHA256 8e7d377d40401aa78645a0757d36e291b5b7a8b0a94747c8584f02d6ed93a396
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-QGEAB9CANQ.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-seattle-filmworks\is-QGEAB9CANQ.tmp
                                                                                                                                                                      • Size 324KB
                                                                                                                                                                      • SHA256 9dbb517da327f1ae317ffb82842944ea2c5d16040f8aac8dd141b70378cec427
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-USTI8OU366.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-sunras\is-USTI8OU366.tmp
                                                                                                                                                                      • Size 364KB
                                                                                                                                                                      • SHA256 a879dce76d9a97fe45c15f0bbb6bc3869b138b83659e7681a99dc27f1bc7caff
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-8SJI20M33K.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\help\is-8SJI20M33K.tmp
                                                                                                                                                                      • Size 376KB
                                                                                                                                                                      • SHA256 fd28458e81d22f38f6c5615f04c176e983b71939d319c216878ea1ea1c37a3fe
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-9JVTKX4RSV.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\smooth-palette\is-9JVTKX4RSV.tmp
                                                                                                                                                                      • Size 348KB
                                                                                                                                                                      • SHA256 4554e3d02d8c7ed63ce4541bafeb85bda6883dbff377b49028f30ce6eaa94687
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-4QQX4AJ1XX.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\van-gogh-lic\is-4QQX4AJ1XX.tmp
                                                                                                                                                                      • Size 344KB
                                                                                                                                                                      • SHA256 5c4ae07628774d3c3bbc8cf10543d4d1b2fd7a248afe73f9fca4defe7aea2571
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-H7VJDHHHXF.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\python3.14\site-packages\packaging-26.1.dist-info\licenses\is-H7VJDHHHXF.tmp
                                                                                                                                                                      • Size 9KB
                                                                                                                                                                      • SHA256 0d542e0c8804e39aa7f37eb00da5a762149dc682d7829451287e11b938e94594
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-Z1DTHWHAQS.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\python3.14\site-packages\pkg_resources\tests\data\my-test-package_unpacked-egg\my_test_package-1.0-py3.7.egg\EGG-INFO\is-Z1DTHWHAQS.tmp
                                                                                                                                                                      • Size 1B
                                                                                                                                                                      • SHA256 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
                                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                                      is-2GATZRLKOE.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\python3.14\site-packages\setuptools-81.0.0.dist-info\is-2GATZRLKOE.tmp
                                                                                                                                                                      • Size 91B
                                                                                                                                                                      • SHA256 60b2577585d0d8543452a9f627eea21080bede239ecbc947df10adbc52e477c4
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      is-NZ5S7FG5P1.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\python3.14\site-packages\setuptools-81.0.0.dist-info\licenses\is-NZ5S7FG5P1.tmp
                                                                                                                                                                      • Size 1023B
                                                                                                                                                                      • SHA256 86da0f01aeae46348a3c3d465195dc1ceccde79f79e87769a64b8da04b2a4741
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      is-GZU98XK128.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\python3.14\site-packages\setuptools\_vendor\importlib_metadata-8.7.1.dist-info\is-GZU98XK128.tmp
                                                                                                                                                                      • Size 2B
                                                                                                                                                                      • SHA256 e6184ce10e266134fdcfa401e8f1a95005bcd4f18d16b62b757323e2833fe9a9
                                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                                      is-9QNERZ30UN.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\python3.14\site-packages\setuptools\_vendor\jaraco_functools-4.4.0.dist-info\is-9QNERZ30UN.tmp
                                                                                                                                                                      • Size 7B
                                                                                                                                                                      • SHA256 d099cddcb7d71f82c845f5cbf9014e18227341664edc42f1e11d5dfe5a2ea103
                                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                                      is-TQHWWFIUPG.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\python3.14\site-packages\setuptools\_vendor\jaraco_functools-4.4.0.dist-info\is-TQHWWFIUPG.tmp
                                                                                                                                                                      • Size 91B
                                                                                                                                                                      • SHA256 ff309ddcdd65ebd02bc724dbf2bcc4a0ff53a5b61792a44548d383e4ebb19d3b
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      is-BE3KJQBQMJ.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\python3.14\site-packages\setuptools\_vendor\more_itertools-10.8.0.dist-info\is-BE3KJQBQMJ.tmp
                                                                                                                                                                      • Size 82B
                                                                                                                                                                      • SHA256 1b68144734c4b66791f27add5d425f3620775585718a03d0f9b110ba3a4d88db
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      is-BVM3EWUJE4.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\python3.14\test\cjkencodings\is-BVM3EWUJE4.tmp
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 a6bbfb8ecb911d13581f7713391f8c0ceea1edd41537fdb300bbb4d62dd72e9b
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      is-EO6JKOHQCX.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\python3.14\test\test_importlib\builtin\is-EO6JKOHQCX.tmp
                                                                                                                                                                      • Size 58B
                                                                                                                                                                      • SHA256 cb9a3ce8f18e7d0a0cadb73cc9264772462de953499534736998d3c54f8c7c3c
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      is-U13SF03ZPM.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\python3.14\test\test_importlib\builtin\is-U13SF03ZPM.tmp
                                                                                                                                                                      • Size 142B
                                                                                                                                                                      • SHA256 8962a375442bddd8d49865f3bf601c2c7a741fe947d8ec667358bb640cd0d19b
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      is-RCGQ0AOLI8.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\python3.14\test\test_pydoc\is-RCGQ0AOLI8.tmp
                                                                                                                                                                      • Size 132B
                                                                                                                                                                      • SHA256 9b2cce72fa8c7a7e688a79d55e15ea4914078c81058b0289ceb80cd5b69821c9
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      is-ADFZC9DUDZ.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\python3.14\test\test_unittest\namespace_test_pkg\noop\is-ADFZC9DUDZ.tmp
                                                                                                                                                                      • Size 110B
                                                                                                                                                                      • SHA256 ca0d1af9a86e0385990873c970af3f3729b44b9721fdd75a14de686475e7e52d
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      is-ARCKATF2IV.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\gimp\3.0\icons\Legacy\scalable\apps\is-ARCKATF2IV.tmp
                                                                                                                                                                      • Size 3KB
                                                                                                                                                                      • SHA256 6322b92ffce987312813cc2f3cf2e08086232aa9a8253c33115fdc7cd9bc51b4
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      is-I04QBK6UB4.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\gimp\3.0\icons\Legacy\scalable\apps\is-I04QBK6UB4.tmp
                                                                                                                                                                      • Size 3KB
                                                                                                                                                                      • SHA256 408e2b0429070d792cc7f9c8807060daa5231beef28a0d608cf3e33b22938f16
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      is-XMV1WXGPUD.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\gimp\3.0\icons\Legacy\scalable\apps\is-XMV1WXGPUD.tmp
                                                                                                                                                                      • Size 3KB
                                                                                                                                                                      • SHA256 3b3407c2fa3fe4151689e132e07c19eadc6dcad9154bce69cec9be00f57bfdd5
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      is-CJIW63SXDC.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\icons\Adwaita\16x16\places\is-CJIW63SXDC.tmp
                                                                                                                                                                      • Size 333B
                                                                                                                                                                      • SHA256 dc62059ee4fca7026c5f05a9a167aa95ab89266adc429548f290a648c3d5feaf
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      is-YE86RM6Y9Y.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\icons\Adwaita\scalable\places\is-YE86RM6Y9Y.tmp
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 1ad4aea2e388f553fd958fa0ce8120fb80d48319a004d48ce777d89e051c179d
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      is-5NB8QAL62Q.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\icons\Adwaita\symbolic\devices\is-5NB8QAL62Q.tmp
                                                                                                                                                                      • Size 543B
                                                                                                                                                                      • SHA256 edbcdcbca98efa81f57cdfda0ce01a03c324e27e1d224f82a3b640a5443cbe68
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      is-EGVVCCD1ZM.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\icons\Adwaita\symbolic\devices\is-EGVVCCD1ZM.tmp
                                                                                                                                                                      • Size 629B
                                                                                                                                                                      • SHA256 400909b4e6008b6a90e83e5bac3338ca96b068a6e765b548ce8af87e090054b1
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      is-X6QET9F2S5.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\icons\Adwaita\symbolic\devices\is-X6QET9F2S5.tmp
                                                                                                                                                                      • Size 652B
                                                                                                                                                                      • SHA256 4901616f75ba2773b3cfcc738a22a153d71cc99ae2f83d0a2fe240338869ea54
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      is-6Y46IZP5YE.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\icons\Adwaita\symbolic\status\is-6Y46IZP5YE.tmp
                                                                                                                                                                      • Size 488B
                                                                                                                                                                      • SHA256 cdfb44e001493bbc89b85916f6a3b53e3acce6f91403d4df5332ab9b5ade9ce0
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      is-D8JTCC5NVI.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\icons\Adwaita\symbolic\status\is-D8JTCC5NVI.tmp
                                                                                                                                                                      • Size 457B
                                                                                                                                                                      • SHA256 1ae63c45551ac54158a0d5a8131feeb56f1055f9099dd2fb7a60cd8630ec7bae
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      is-EI8PQVNYLX.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\icons\Adwaita\symbolic\status\is-EI8PQVNYLX.tmp
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 86ca7c95e67b5e593ea1a8b6810ee3f7f5c07369ff0bc98a08d28ab487144fbd
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      is-VHKV411K6F.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\icons\Adwaita\symbolic\status\is-VHKV411K6F.tmp
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 818f6738b6c21c6c09350a888dc73274e2411b221b70d5bfa11d9a45cc94d166
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      is-BW6FP8WWRY.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\ca\LC_MESSAGES\is-BW6FP8WWRY.tmp
                                                                                                                                                                      • Size 285KB
                                                                                                                                                                      • SHA256 e26f0d39d34955c7c5815d58c6cfe9970b8a8cfdc2c6b40737a93f60ffd12f04
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-EREBIJ01MO.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\ca\LC_MESSAGES\is-EREBIJ01MO.tmp
                                                                                                                                                                      • Size 108KB
                                                                                                                                                                      • SHA256 4b2cb2f579a78fc8ba3dc6814b6efcf74239ec09c1c5c89ffe467ac1b0d4b68c
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-SMR6C3LU6D.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\cs\LC_MESSAGES\is-SMR6C3LU6D.tmp
                                                                                                                                                                      • Size 202KB
                                                                                                                                                                      • SHA256 41a0a401c49586cec84e8bb7b892bbbee28114231b2cf5664b93416f2d1cba6f
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-QJRIJ2OSUL.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\de\LC_MESSAGES\is-QJRIJ2OSUL.tmp
                                                                                                                                                                      • Size 282KB
                                                                                                                                                                      • SHA256 2e1df2ae33f806c10ea014ef7606528e39af1aa1fcd7d6309fa3950d6057f2e4
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-LE4R3BF9OX.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\el\LC_MESSAGES\is-LE4R3BF9OX.tmp
                                                                                                                                                                      • Size 281KB
                                                                                                                                                                      • SHA256 9b3039e00a18e6fe05f675078e1e2e4e10a0e3492e5c611894c4762350c27a6c
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-QWE7PCWEWT.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\el\LC_MESSAGES\is-QWE7PCWEWT.tmp
                                                                                                                                                                      • Size 67KB
                                                                                                                                                                      • SHA256 54df64bc96081833e7639e199712b90c6f88bf032ded255286ef09c2e6ff327f
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-QNMTHSF410.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\es\LC_MESSAGES\is-QNMTHSF410.tmp
                                                                                                                                                                      • Size 51KB
                                                                                                                                                                      • SHA256 e36d60d4132ea7d98476f1c71c3554937904890467bcb274a34a8ea2db9216c1
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-FA0WI7QY3O.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\hu\LC_MESSAGES\is-FA0WI7QY3O.tmp
                                                                                                                                                                      • Size 398KB
                                                                                                                                                                      • SHA256 348b9ac6588103af89a9d1ae76e0b1e7a60a9db587df7a0fe2155dc9cdfd3971
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-PELEDYZ2T7.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\it\LC_MESSAGES\is-PELEDYZ2T7.tmp
                                                                                                                                                                      • Size 200KB
                                                                                                                                                                      • SHA256 c74f9a556ea5b981e145d183fe4b1715930750112fbb718b70ebd04736801960
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-G0RUQV0VYF.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\ja\LC_MESSAGES\is-G0RUQV0VYF.tmp
                                                                                                                                                                      • Size 586KB
                                                                                                                                                                      • SHA256 f8fd1c1e2d44feac43a068a9cfc2ebc5406fbf9a75c3843d4f356bbc9723e832
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-N4Y402Q3OV.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\kk\LC_MESSAGES\is-N4Y402Q3OV.tmp
                                                                                                                                                                      • Size 663KB
                                                                                                                                                                      • SHA256 60fe13461435afed2bf654167ba36f3fd85503f36feb0c4dbcc59e2c13d59bea
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-5M54FU9N1Q.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\lt\LC_MESSAGES\is-5M54FU9N1Q.tmp
                                                                                                                                                                      • Size 531KB
                                                                                                                                                                      • SHA256 f0921ed7ea05fdf619cc60aca182becea0c324e9a20b3fdc593962ab2f8d68b2
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-IWXKTV4XSK.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\nn\LC_MESSAGES\is-IWXKTV4XSK.tmp
                                                                                                                                                                      • Size 192KB
                                                                                                                                                                      • SHA256 2432a8f739e5dd7da9d0fac78eed107bc8940b29ef7fdbba462f2cefee999bf8
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-HHD3SS0XLP.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\pt\LC_MESSAGES\is-HHD3SS0XLP.tmp
                                                                                                                                                                      • Size 202KB
                                                                                                                                                                      • SHA256 c0df75cd97972a994ae46372bec49ce7fe479f49608c7f31addf17db0d857a71
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-F00X5RI2MK.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\ta\LC_MESSAGES\is-F00X5RI2MK.tmp
                                                                                                                                                                      • Size 104KB
                                                                                                                                                                      • SHA256 72caec8dbc81852c73f440e445b59007266922ca49f0cd7b7beb370d44313c13
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-4FLAJBU4NR.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\uk\LC_MESSAGES\is-4FLAJBU4NR.tmp
                                                                                                                                                                      • Size 500KB
                                                                                                                                                                      • SHA256 8528a15d82719cbe7a5cba335cb31391ef05b21a2c177ab8a21611860a7dfd9f
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-3AOBNPAVIB.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\zh_HK\LC_MESSAGES\is-3AOBNPAVIB.tmp
                                                                                                                                                                      • Size 169KB
                                                                                                                                                                      • SHA256 dceda1a517315c390902fe815b872498c0e7634034e590d75fbec9778cef95fd
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      gimp.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-AGI4V8Y8PZ.tmp\gimp.tmp
                                                                                                                                                                      • Size 4.9MB
                                                                                                                                                                      • SHA256 d707931d020ad49c98645bd680cceb3d86a648eb34490ae1d5ffe2afc0b06670
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      GIMP 3.2.4.lnk

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GIMP 3.2.4.lnk
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 50f40dc2eb58ecb78e4702c3a175123a986e25f05b6942eaf2af2c04ee5b392d
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      GIMP 3.2.4.lnk

                                                                                                                                                                      • Path C:\Users\Admin\Desktop\GIMP 3.2.4.lnk
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 d580c6bef3b1a1469078cc184c6001bc2250e767800162bdf7fe9e6eb99ee236
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      memory/1640-18083-0x00007FFAAB070000-0x00007FFAAB39E000-memory.dmp

                                                                                                                                                                      memory/1640-18085-0x00007FFAABA60000-0x00007FFAABAEE000-memory.dmp

                                                                                                                                                                      memory/1640-18084-0x00007FFAAB3A0000-0x00007FFAAB40F000-memory.dmp

                                                                                                                                                                      memory/1640-18087-0x00007FFAABCE0000-0x00007FFAABDDB000-memory.dmp

                                                                                                                                                                      memory/1640-18086-0x00007FFAABBF0000-0x00007FFAABCD4000-memory.dmp

                                                                                                                                                                      memory/2732-19-0x0000000000970000-0x0000000000A74000-memory.dmp

                                                                                                                                                                      memory/2732-18025-0x0000000000970000-0x0000000000A74000-memory.dmp

                                                                                                                                                                      memory/2732-1-0x0000000000970000-0x0000000000A74000-memory.dmp

                                                                                                                                                                      memory/2872-18118-0x00007FFAAB3A0000-0x00007FFAAB40F000-memory.dmp

                                                                                                                                                                      memory/2872-18117-0x00007FFAAB070000-0x00007FFAAB39E000-memory.dmp

                                                                                                                                                                      memory/2872-18119-0x00007FFAABA60000-0x00007FFAABAEE000-memory.dmp

                                                                                                                                                                      memory/2872-18123-0x00007FFAABBF0000-0x00007FFAABCD4000-memory.dmp

                                                                                                                                                                      memory/2872-18124-0x00007FFAABCE0000-0x00007FFAABDDB000-memory.dmp

                                                                                                                                                                      memory/2872-18121-0x00007FFAABCE0000-0x00007FFAABDDB000-memory.dmp

                                                                                                                                                                      memory/3248-16696-0x0000000000D80000-0x000000000128E000-memory.dmp

                                                                                                                                                                      memory/3248-14021-0x0000000000D80000-0x000000000128E000-memory.dmp

                                                                                                                                                                      memory/3248-18000-0x0000000000D80000-0x000000000128E000-memory.dmp

                                                                                                                                                                      memory/3248-10817-0x0000000000D80000-0x000000000128E000-memory.dmp

                                                                                                                                                                      memory/3248-3941-0x0000000000D80000-0x000000000128E000-memory.dmp

                                                                                                                                                                      memory/3248-20-0x0000000000D80000-0x000000000128E000-memory.dmp

                                                                                                                                                                      memory/3248-21-0x0000000003460000-0x0000000003461000-memory.dmp

                                                                                                                                                                      memory/3248-6-0x0000000003460000-0x0000000003461000-memory.dmp

                                                                                                                                                                      memory/3248-17963-0x0000000000D80000-0x000000000128E000-memory.dmp

                                                                                                                                                                      memory/3248-14608-0x0000000000D80000-0x000000000128E000-memory.dmp

                                                                                                                                                                      memory/3248-216-0x0000000000D80000-0x000000000128E000-memory.dmp

                                                                                                                                                                      memory/3336-18042-0x00007FFAABA60000-0x00007FFAABAEE000-memory.dmp

                                                                                                                                                                      memory/3336-18033-0x00007FFAAC090000-0x00007FFAAC3BE000-memory.dmp

                                                                                                                                                                      memory/3336-18035-0x00007FFAAC050000-0x00007FFAAC0DE000-memory.dmp

                                                                                                                                                                      memory/3336-18037-0x00007FFAAC2D0000-0x00007FFAAC3CB000-memory.dmp

                                                                                                                                                                      memory/3336-18036-0x00007FFAAC0E0000-0x00007FFAAC1C4000-memory.dmp

                                                                                                                                                                      memory/3336-18040-0x00007FFAAC2D0000-0x00007FFAAC3CB000-memory.dmp

                                                                                                                                                                      memory/3336-18039-0x00007FFAAC1E0000-0x00007FFAAC2C4000-memory.dmp

                                                                                                                                                                      memory/3336-18038-0x00007FFAAC050000-0x00007FFAAC0DE000-memory.dmp

                                                                                                                                                                      memory/3336-18034-0x00007FFAAC3C0000-0x00007FFAAC42F000-memory.dmp

                                                                                                                                                                      memory/3336-18043-0x00007FFAABBF0000-0x00007FFAABCD4000-memory.dmp

                                                                                                                                                                      memory/3336-18044-0x00007FFAABCE0000-0x00007FFAABDDB000-memory.dmp

                                                                                                                                                                      memory/3336-18046-0x00007FFAAB3A0000-0x00007FFAAB40F000-memory.dmp

                                                                                                                                                                      memory/3336-18045-0x00007FFAAB070000-0x00007FFAAB39E000-memory.dmp

                                                                                                                                                                      memory/3336-18028-0x00007FFAAF1B0000-0x00007FFAAF85C000-memory.dmp

                                                                                                                                                                      memory/3336-18026-0x00007FF607790000-0x00007FF607E8D000-memory.dmp

                                                                                                                                                                      memory/3840-215-0x0000026183170000-0x0000026183801000-memory.dmp

                                                                                                                                                                      memory/3840-218-0x0000026183170000-0x0000026183801000-memory.dmp

                                                                                                                                                                      memory/3840-14573-0x0000026183170000-0x0000026183801000-memory.dmp

                                                                                                                                                                      memory/3840-17964-0x0000026183170000-0x0000026183801000-memory.dmp

                                                                                                                                                                      memory/4796-18141-0x00007FFAAD1A0000-0x00007FFAAD240000-memory.dmp

                                                                                                                                                                      memory/4860-18148-0x00007FFAAD1A0000-0x00007FFAAD240000-memory.dmp

                                                                                                                                                                      memory/5112-18108-0x00007FFAABBF0000-0x00007FFAABCD4000-memory.dmp

                                                                                                                                                                      memory/5112-18106-0x00007FFAAB3A0000-0x00007FFAAB40F000-memory.dmp

                                                                                                                                                                      memory/5112-18109-0x00007FFAABCE0000-0x00007FFAABDDB000-memory.dmp

                                                                                                                                                                      memory/5112-18105-0x00007FFAAB070000-0x00007FFAAB39E000-memory.dmp

                                                                                                                                                                      memory/5112-18107-0x00007FFAABA60000-0x00007FFAABAEE000-memory.dmp

                                                                                                                                                                      memory/5116-52-0x000001A403A30000-0x000001A403A50000-memory.dmp

                                                                                                                                                                      memory/5116-68-0x000001A404310000-0x000001A404330000-memory.dmp

                                                                                                                                                                      memory/5116-54-0x000001A403C70000-0x000001A403C90000-memory.dmp

                                                                                                                                                                      memory/5116-53-0x000001A403E90000-0x000001A403F90000-memory.dmp

                                                                                                                                                                      memory/5116-22-0x000001A4001E0000-0x000001A4002E0000-memory.dmp

                                                                                                                                                                      memory/5480-18096-0x00007FFAABCE0000-0x00007FFAABDDB000-memory.dmp

                                                                                                                                                                      memory/5480-18095-0x00007FFAABBF0000-0x00007FFAABCD4000-memory.dmp

                                                                                                                                                                      memory/5480-18093-0x00007FFAAB3A0000-0x00007FFAAB40F000-memory.dmp

                                                                                                                                                                      memory/5480-18094-0x00007FFAABA60000-0x00007FFAABAEE000-memory.dmp

                                                                                                                                                                      memory/5480-18092-0x00007FFAAB070000-0x00007FFAAB39E000-memory.dmp

                                                                                                                                                                      memory/5856-18129-0x00007FFAAB3A0000-0x00007FFAAB40F000-memory.dmp

                                                                                                                                                                      memory/5856-18134-0x00007FFAABBF0000-0x00007FFAABCD4000-memory.dmp

                                                                                                                                                                      memory/5856-18132-0x00007FFAABCE0000-0x00007FFAABDDB000-memory.dmp

                                                                                                                                                                      memory/5856-18128-0x00007FFAAB070000-0x00007FFAAB39E000-memory.dmp

                                                                                                                                                                      memory/5856-18130-0x00007FFAABA60000-0x00007FFAABAEE000-memory.dmp