Analysis

  • max time kernel
    179s
  • max time network
    182s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    09/09/2026, 07:56

General

  • Target
    gimp-3.2.4-setup.exe
  • Size 179.4MB
  • Sample260909-jsx9hatfpe
  • SHA256 ec31d757dd82831d201ffcf47ffeac4175df739e0c02d5122e89aeeadfb988cc
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Executes dropped EXE 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\gimp-3.2.4-setup.exe
    "C:\Users\Admin\AppData\Local\Temp\gimp-3.2.4-setup.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:3884
    • C:\Users\Admin\AppData\Local\Temp\is-3WXAT77LER.tmp\gimp-3.2.4-setup.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-3WXAT77LER.tmp\gimp-3.2.4-setup.tmp" /SL5="$80226,184011737,1004544,C:\Users\Admin\AppData\Local\Temp\gimp-3.2.4-setup.exe"
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      PID:2956

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        is-4532O62XFY.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\is-4532O62XFY.tmp
        • Size 6.9MB
        • SHA256 b4ea813a747ee419657bc3e1289ebbe79f90a28bdf6fbbd445f7c5b3fbe41e99
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-6MO0FISKZS.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\is-6MO0FISKZS.tmp
        • Size 3.3MB
        • SHA256 8dbb5502c69d63456ab53dc43b5c9baa8e435808a9fcad47d44c44a5e82fa3d4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-A6MDVM2HJO.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\is-A6MDVM2HJO.tmp
        • Size 94KB
        • SHA256 71729e4885ed5ddb0aace2eac16147ee77cccd8124a53f2bf36fc14f8e2cc8df
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-G6DYEVIHBN.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\is-G6DYEVIHBN.tmp
        • Size 89KB
        • SHA256 6d67066068d2341aaf9c03aab9acde92644ee54b1339c50d0ac5e529f3a7b83d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-SI4T4NWJ2X.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\bin\is-SI4T4NWJ2X.tmp
        • Size 82KB
        • SHA256 6242723eabddc8770e43116a3384ff7a076c935ae1f74c0d87bce8599e21c5f6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-29S5KLPR6P.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\babl-0.1\is-29S5KLPR6P.tmp
        • Size 196KB
        • SHA256 e0eb93a4c21368ac08363b79db77eca4d94a772052565deaa598b9b2f551306e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-4GWWZGFW3D.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\babl-0.1\is-4GWWZGFW3D.tmp
        • Size 200KB
        • SHA256 a15661827843d75e80d5d416765c69ce0fea56d63c8d2fba5b1b798920c7c160
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-6787ZYDCPK.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\babl-0.1\is-6787ZYDCPK.tmp
        • Size 220KB
        • SHA256 3a56e1c802c25b0665f51708be58a781555ee255877f21307655eeabc3a4582b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-CES1MIIOLG.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\babl-0.1\is-CES1MIIOLG.tmp
        • Size 204KB
        • SHA256 d63955c94474323c31379795e6d325a3e9749ce4f451113196d9eada87839f8d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-DFD7PSZ396.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\babl-0.1\is-DFD7PSZ396.tmp
        • Size 224KB
        • SHA256 819f22309543a28b85128471bb6290732c628bb97cb039920822caf9fad4e582
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-MH9H2ZRNIH.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\babl-0.1\is-MH9H2ZRNIH.tmp
        • Size 216KB
        • SHA256 fa66a0823052e1822c76a11932e1ba23dcbe2513f0adcb2eb55149842ff6572e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-MZ0MGDAV0A.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\babl-0.1\is-MZ0MGDAV0A.tmp
        • Size 212KB
        • SHA256 a89261141acd5cf0c4c13f538fccfcc105a1d0ef01b4b769e9d6877462443827
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-Q2260EPZ8X.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\babl-0.1\is-Q2260EPZ8X.tmp
        • Size 208KB
        • SHA256 8e647d4b9befce874019d4164d8bec9fa141646fd8747c1d6326698640dacb4f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-Q9JQ06QUBM.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\babl-0.1\is-Q9JQ06QUBM.tmp
        • Size 208KB
        • SHA256 a95e98a082cd2289f8bd37b334cbc54d25e787393a238c1cdaff3ae447bd4b71
        • MD5 SHA1 SHA512 SSDEEP TLSH

        x86-64-v2-simple.pdb

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\babl-0.1\x86-64-v2-simple.pdb
        • Size 212KB
        • SHA256 b2c0e133c42744197672f0b81e1b5816c61c1868d42cbe22f3291108f2016cd6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-GXVGJ9YELT.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gegl-0.4\is-GXVGJ9YELT.tmp
        • Size 248KB
        • SHA256 75723e82c615e284170992b19359e0505805500570f69e17aab72ec31a37820e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-YY5HK43KWL.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gegl-0.4\is-YY5HK43KWL.tmp
        • Size 236KB
        • SHA256 6e4e5b05d40f626ff3515b1235a64ee6978ed8a594ab5cff82567417caa626d0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-HL130CQHUI.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\extensions\org.gimp.extension.goat-exercises\locale\eu\LC_MESSAGES\is-HL130CQHUI.tmp
        • Size 291KB
        • SHA256 5b4dcf880ca4c7344ee507db131ae0cdd93d79605c6f40cdd74fd0262c59bc92
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-HXXQBDO14D.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\extensions\org.gimp.extension.goat-exercises\locale\sr\LC_MESSAGES\is-HXXQBDO14D.tmp
        • Size 362KB
        • SHA256 4e23db261597aaa1ed6eada9583b4829f15fa0c98b60eb92444892030c15dffe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-T5Y22U8W07.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\extensions\org.gimp.extension.goat-exercises\locale\tr\LC_MESSAGES\is-T5Y22U8W07.tmp
        • Size 294KB
        • SHA256 7ec67de14583695911c649ea6be116c8921cb577874043de41254bcac9147aa1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-44UXLCFLGN.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\modules\is-44UXLCFLGN.tmp
        • Size 232KB
        • SHA256 3440fa43d52551350690e2226cf41377b74de7a3997928ff33b8ff9a682ab1c5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-TB4U81AE6V.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\depth-merge\is-TB4U81AE6V.tmp
        • Size 340KB
        • SHA256 d469ddfbe2f0e63d413a31734676af8b917b573bb0573241876fed1690772a11
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-A2RJ1XQHUZ.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\destripe\is-A2RJ1XQHUZ.tmp
        • Size 336KB
        • SHA256 c78050b35b0d295ffa47faaffc90ead09f3f73296de154b58b6850efb457324c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-MC9R6J643T.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-farbfeld\is-MC9R6J643T.tmp
        • Size 328KB
        • SHA256 7320782c42b361f0e1a427b6d8da9f15b103d186877c1a94b5e1457bdc623946
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-OTD8UGPMYV.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-iff\is-OTD8UGPMYV.tmp
        • Size 336KB
        • SHA256 acfe778ffa198e22d7bf5b2dfade9f6f2b61781b7e8c80d60ae5ff0909e90049
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-K02K32X5XB.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-paa\is-K02K32X5XB.tmp
        • Size 316KB
        • SHA256 9b70f26587ac617c7875a46c532e84b68d54e16bdf46901a1ef0ce2b645bd2fb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-HGPG0RJS0O.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-pix\is-HGPG0RJS0O.tmp
        • Size 332KB
        • SHA256 8e7d377d40401aa78645a0757d36e291b5b7a8b0a94747c8584f02d6ed93a396
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-BRM7ZLXCJB.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-seattle-filmworks\is-BRM7ZLXCJB.tmp
        • Size 324KB
        • SHA256 9dbb517da327f1ae317ffb82842944ea2c5d16040f8aac8dd141b70378cec427
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-X8K23HUEOK.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-sunras\is-X8K23HUEOK.tmp
        • Size 364KB
        • SHA256 a879dce76d9a97fe45c15f0bbb6bc3869b138b83659e7681a99dc27f1bc7caff
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-OZHLBTV45G.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\help\is-OZHLBTV45G.tmp
        • Size 376KB
        • SHA256 fd28458e81d22f38f6c5615f04c176e983b71939d319c216878ea1ea1c37a3fe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-U7SROVXAY0.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\smooth-palette\is-U7SROVXAY0.tmp
        • Size 348KB
        • SHA256 4554e3d02d8c7ed63ce4541bafeb85bda6883dbff377b49028f30ce6eaa94687
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-D658V88M2Z.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\van-gogh-lic\is-D658V88M2Z.tmp
        • Size 344KB
        • SHA256 5c4ae07628774d3c3bbc8cf10543d4d1b2fd7a248afe73f9fca4defe7aea2571
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-M9D4J69HHC.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\python3.14\site-packages\packaging-26.1.dist-info\licenses\is-M9D4J69HHC.tmp
        • Size 9KB
        • SHA256 0d542e0c8804e39aa7f37eb00da5a762149dc682d7829451287e11b938e94594
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-O1VSOT0K88.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\python3.14\site-packages\pkg_resources\tests\data\my-test-package_unpacked-egg\my_test_package-1.0-py3.7.egg\EGG-INFO\is-O1VSOT0K88.tmp
        • Size 1B
        • SHA256 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
        • MD5 SHA1 SHA512

        is-9HY9AH42RJ.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\python3.14\site-packages\setuptools-81.0.0.dist-info\is-9HY9AH42RJ.tmp
        • Size 91B
        • SHA256 60b2577585d0d8543452a9f627eea21080bede239ecbc947df10adbc52e477c4
        • MD5 SHA1 SHA512 TLSH

        is-FE3HAJIE52.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\python3.14\site-packages\setuptools-81.0.0.dist-info\licenses\is-FE3HAJIE52.tmp
        • Size 1023B
        • SHA256 86da0f01aeae46348a3c3d465195dc1ceccde79f79e87769a64b8da04b2a4741
        • MD5 SHA1 SHA512 TLSH

        is-61S0NA1F0Z.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\python3.14\site-packages\setuptools\_vendor\importlib_metadata-8.7.1.dist-info\is-61S0NA1F0Z.tmp
        • Size 2B
        • SHA256 e6184ce10e266134fdcfa401e8f1a95005bcd4f18d16b62b757323e2833fe9a9
        • MD5 SHA1 SHA512

        is-QU6RLVY47S.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\python3.14\site-packages\setuptools\_vendor\jaraco_functools-4.4.0.dist-info\is-QU6RLVY47S.tmp
        • Size 91B
        • SHA256 ff309ddcdd65ebd02bc724dbf2bcc4a0ff53a5b61792a44548d383e4ebb19d3b
        • MD5 SHA1 SHA512 TLSH

        is-Z62PAM5LXL.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\python3.14\site-packages\setuptools\_vendor\jaraco_functools-4.4.0.dist-info\is-Z62PAM5LXL.tmp
        • Size 7B
        • SHA256 d099cddcb7d71f82c845f5cbf9014e18227341664edc42f1e11d5dfe5a2ea103
        • MD5 SHA1 SHA512

        is-UNSWOPS7U1.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\python3.14\site-packages\setuptools\_vendor\more_itertools-10.8.0.dist-info\is-UNSWOPS7U1.tmp
        • Size 82B
        • SHA256 1b68144734c4b66791f27add5d425f3620775585718a03d0f9b110ba3a4d88db
        • MD5 SHA1 SHA512 TLSH

        is-L7GDI4L7FT.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\python3.14\test\cjkencodings\is-L7GDI4L7FT.tmp
        • Size 1KB
        • SHA256 a6bbfb8ecb911d13581f7713391f8c0ceea1edd41537fdb300bbb4d62dd72e9b
        • MD5 SHA1 SHA512 TLSH

        is-7WVEH9QRYG.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\python3.14\test\test_importlib\builtin\is-7WVEH9QRYG.tmp
        • Size 58B
        • SHA256 cb9a3ce8f18e7d0a0cadb73cc9264772462de953499534736998d3c54f8c7c3c
        • MD5 SHA1 SHA512 TLSH

        is-J84CKB4NH5.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\python3.14\test\test_importlib\builtin\is-J84CKB4NH5.tmp
        • Size 142B
        • SHA256 8962a375442bddd8d49865f3bf601c2c7a741fe947d8ec667358bb640cd0d19b
        • MD5 SHA1 SHA512 TLSH

        is-CZXIERB9T6.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\python3.14\test\test_pydoc\is-CZXIERB9T6.tmp
        • Size 132B
        • SHA256 9b2cce72fa8c7a7e688a79d55e15ea4914078c81058b0289ceb80cd5b69821c9
        • MD5 SHA1 SHA512 TLSH

        is-TBJRHY3JV3.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\lib\python3.14\test\test_unittest\namespace_test_pkg\noop\is-TBJRHY3JV3.tmp
        • Size 110B
        • SHA256 ca0d1af9a86e0385990873c970af3f3729b44b9721fdd75a14de686475e7e52d
        • MD5 SHA1 SHA512 TLSH

        is-ES8MPUZ3IN.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\gimp\3.0\icons\Legacy\scalable\apps\is-ES8MPUZ3IN.tmp
        • Size 3KB
        • SHA256 6322b92ffce987312813cc2f3cf2e08086232aa9a8253c33115fdc7cd9bc51b4
        • MD5 SHA1 SHA512 TLSH

        is-IPSC9XD86G.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\gimp\3.0\icons\Legacy\scalable\apps\is-IPSC9XD86G.tmp
        • Size 3KB
        • SHA256 3b3407c2fa3fe4151689e132e07c19eadc6dcad9154bce69cec9be00f57bfdd5
        • MD5 SHA1 SHA512 TLSH

        is-W16KGNUCA8.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\gimp\3.0\icons\Legacy\scalable\apps\is-W16KGNUCA8.tmp
        • Size 3KB
        • SHA256 408e2b0429070d792cc7f9c8807060daa5231beef28a0d608cf3e33b22938f16
        • MD5 SHA1 SHA512 TLSH

        is-G5R5VKEW0Y.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\icons\Adwaita\16x16\places\is-G5R5VKEW0Y.tmp
        • Size 333B
        • SHA256 dc62059ee4fca7026c5f05a9a167aa95ab89266adc429548f290a648c3d5feaf
        • MD5 SHA1 SHA512 TLSH

        is-L7M2OJF48A.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\icons\Adwaita\scalable\places\is-L7M2OJF48A.tmp
        • Size 1KB
        • SHA256 1ad4aea2e388f553fd958fa0ce8120fb80d48319a004d48ce777d89e051c179d
        • MD5 SHA1 SHA512 TLSH

        is-2F0352CMY3.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\icons\Adwaita\symbolic\devices\is-2F0352CMY3.tmp
        • Size 629B
        • SHA256 400909b4e6008b6a90e83e5bac3338ca96b068a6e765b548ce8af87e090054b1
        • MD5 SHA1 SHA512 TLSH

        is-99HSYJV0EA.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\icons\Adwaita\symbolic\devices\is-99HSYJV0EA.tmp
        • Size 652B
        • SHA256 4901616f75ba2773b3cfcc738a22a153d71cc99ae2f83d0a2fe240338869ea54
        • MD5 SHA1 SHA512 TLSH

        is-GSUN9A3ESG.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\icons\Adwaita\symbolic\devices\is-GSUN9A3ESG.tmp
        • Size 543B
        • SHA256 edbcdcbca98efa81f57cdfda0ce01a03c324e27e1d224f82a3b640a5443cbe68
        • MD5 SHA1 SHA512 TLSH

        is-GX8SRC5EQM.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\icons\Adwaita\symbolic\status\is-GX8SRC5EQM.tmp
        • Size 1KB
        • SHA256 818f6738b6c21c6c09350a888dc73274e2411b221b70d5bfa11d9a45cc94d166
        • MD5 SHA1 SHA512 TLSH

        is-RQIR5YWFH9.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\icons\Adwaita\symbolic\status\is-RQIR5YWFH9.tmp
        • Size 1KB
        • SHA256 86ca7c95e67b5e593ea1a8b6810ee3f7f5c07369ff0bc98a08d28ab487144fbd
        • MD5 SHA1 SHA512 TLSH

        is-UK0FQ8DB55.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\icons\Adwaita\symbolic\status\is-UK0FQ8DB55.tmp
        • Size 457B
        • SHA256 1ae63c45551ac54158a0d5a8131feeb56f1055f9099dd2fb7a60cd8630ec7bae
        • MD5 SHA1 SHA512 TLSH

        is-YIODRFQEZQ.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\icons\Adwaita\symbolic\status\is-YIODRFQEZQ.tmp
        • Size 488B
        • SHA256 cdfb44e001493bbc89b85916f6a3b53e3acce6f91403d4df5332ab9b5ade9ce0
        • MD5 SHA1 SHA512 TLSH

        is-A4B8Y2FBVJ.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\ca\LC_MESSAGES\is-A4B8Y2FBVJ.tmp
        • Size 285KB
        • SHA256 e26f0d39d34955c7c5815d58c6cfe9970b8a8cfdc2c6b40737a93f60ffd12f04
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-IAXQ04VRP3.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\ca\LC_MESSAGES\is-IAXQ04VRP3.tmp
        • Size 108KB
        • SHA256 4b2cb2f579a78fc8ba3dc6814b6efcf74239ec09c1c5c89ffe467ac1b0d4b68c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-O77J5V1J2Y.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\cs\LC_MESSAGES\is-O77J5V1J2Y.tmp
        • Size 202KB
        • SHA256 41a0a401c49586cec84e8bb7b892bbbee28114231b2cf5664b93416f2d1cba6f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-YPJCN8YY6S.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\de\LC_MESSAGES\is-YPJCN8YY6S.tmp
        • Size 282KB
        • SHA256 2e1df2ae33f806c10ea014ef7606528e39af1aa1fcd7d6309fa3950d6057f2e4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-V2DVMO4KFY.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\el\LC_MESSAGES\is-V2DVMO4KFY.tmp
        • Size 281KB
        • SHA256 9b3039e00a18e6fe05f675078e1e2e4e10a0e3492e5c611894c4762350c27a6c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-VEXEAVX11Y.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\el\LC_MESSAGES\is-VEXEAVX11Y.tmp
        • Size 67KB
        • SHA256 54df64bc96081833e7639e199712b90c6f88bf032ded255286ef09c2e6ff327f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-48EYQAG5WP.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\es\LC_MESSAGES\is-48EYQAG5WP.tmp
        • Size 51KB
        • SHA256 e36d60d4132ea7d98476f1c71c3554937904890467bcb274a34a8ea2db9216c1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-WO4X21NL7N.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\hu\LC_MESSAGES\is-WO4X21NL7N.tmp
        • Size 398KB
        • SHA256 348b9ac6588103af89a9d1ae76e0b1e7a60a9db587df7a0fe2155dc9cdfd3971
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-HMNW8YGEIZ.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\it\LC_MESSAGES\is-HMNW8YGEIZ.tmp
        • Size 200KB
        • SHA256 c74f9a556ea5b981e145d183fe4b1715930750112fbb718b70ebd04736801960
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-UBOAVMTEYR.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\ja\LC_MESSAGES\is-UBOAVMTEYR.tmp
        • Size 586KB
        • SHA256 f8fd1c1e2d44feac43a068a9cfc2ebc5406fbf9a75c3843d4f356bbc9723e832
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-NODZ3D9DCY.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\kk\LC_MESSAGES\is-NODZ3D9DCY.tmp
        • Size 663KB
        • SHA256 60fe13461435afed2bf654167ba36f3fd85503f36feb0c4dbcc59e2c13d59bea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-8W1DDQP5P9.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\lt\LC_MESSAGES\is-8W1DDQP5P9.tmp
        • Size 531KB
        • SHA256 f0921ed7ea05fdf619cc60aca182becea0c324e9a20b3fdc593962ab2f8d68b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-L51VU0PPXF.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\nn\LC_MESSAGES\is-L51VU0PPXF.tmp
        • Size 192KB
        • SHA256 2432a8f739e5dd7da9d0fac78eed107bc8940b29ef7fdbba462f2cefee999bf8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-WXDKC9SKB6.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\pt\LC_MESSAGES\is-WXDKC9SKB6.tmp
        • Size 202KB
        • SHA256 c0df75cd97972a994ae46372bec49ce7fe479f49608c7f31addf17db0d857a71
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-29RBZBLRSV.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\ta\LC_MESSAGES\is-29RBZBLRSV.tmp
        • Size 104KB
        • SHA256 72caec8dbc81852c73f440e445b59007266922ca49f0cd7b7beb370d44313c13
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-0PVVRQNGMY.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\uk\LC_MESSAGES\is-0PVVRQNGMY.tmp
        • Size 500KB
        • SHA256 8528a15d82719cbe7a5cba335cb31391ef05b21a2c177ab8a21611860a7dfd9f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-VFXIJP1S1A.tmp

        • Path C:\Users\Admin\AppData\Local\Programs\GIMP 3\share\locale\zh_HK\LC_MESSAGES\is-VFXIJP1S1A.tmp
        • Size 169KB
        • SHA256 dceda1a517315c390902fe815b872498c0e7634034e590d75fbec9778cef95fd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gimp-3.2.4-setup.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-3WXAT77LER.tmp\gimp-3.2.4-setup.tmp
        • Size 4.9MB
        • SHA256 d707931d020ad49c98645bd680cceb3d86a648eb34490ae1d5ffe2afc0b06670
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/2956-18-0x00000000003C0000-0x00000000008CE000-memory.dmp

        memory/2956-12330-0x00000000003C0000-0x00000000008CE000-memory.dmp

        memory/2956-7248-0x00000000003C0000-0x00000000008CE000-memory.dmp

        memory/2956-2040-0x00000000003C0000-0x00000000008CE000-memory.dmp

        memory/2956-13950-0x00000000003C0000-0x00000000008CE000-memory.dmp

        memory/2956-19-0x0000000000E80000-0x0000000000E81000-memory.dmp

        memory/2956-5-0x0000000000E80000-0x0000000000E81000-memory.dmp

        memory/2956-15272-0x00000000003C0000-0x00000000008CE000-memory.dmp

        memory/2956-17748-0x00000000003C0000-0x00000000008CE000-memory.dmp

        memory/3884-0-0x0000000000F30000-0x0000000001034000-memory.dmp

        memory/3884-17-0x0000000000F30000-0x0000000001034000-memory.dmp

        memory/3884-17749-0x0000000000F30000-0x0000000001034000-memory.dmp