Overview

overview

7

Static

static

3

DOpusInsta...25.exe

windows10-2004-x64

7

DOpusInsta...25.exe

windows11-ltsc_2024-x64

7

_dopus_patcher.exe

windows10-2004-x64

3

_dopus_patcher.exe

windows11-ltsc_2024-x64

3

Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    25/09/2026, 08:32

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    DOpusInstall-13.25.exe
  • Size 28.1MB
  • Sample260925-kfb16scc46
  • SHA256 41fdf3c800f61aebdeec054ab3e43f176a1798cda23c2a953cfc8bff7e6c4975
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
adwaredefense_evasiondiscoveryinstallerpersistenceprivilege_escalationransomwarespywaretrojan

Malware Config

Signatures

  • Creates a file in the Startup directory 1 TTPs 1 IoCs

    A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.

    persistenceprivilege_escalation
  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Drops file in System32 directory 64 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 2 IoCs
  • Executes dropped EXE 24 IoCs
  • Loads dropped DLL 63 IoCs
  • Checks whether UAC is enabled 1 TTPs 3 IoCs
    defense_evasiontrojan
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

    installer
  • Modifies Control Panel 51 IoCs
    defense_evasion
  • Modifies Internet Explorer settings 1 TTPs 8 IoCs
    adwarespyware
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 3 IoCs
    defense_evasionspywaretrojan
  • NTFS ADS 5 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 12 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 7 IoCs
  • Suspicious use of FindShellTrayWindow 7 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 23 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\DOpusInstall-13.25.exe
    "C:\Users\Admin\AppData\Local\Temp\DOpusInstall-13.25.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:5872
    • C:\Users\Admin\AppData\Local\Temp\is-U7BYKCM7R9.tmp\DOpusInstall-13.25.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-U7BYKCM7R9.tmp\DOpusInstall-13.25.tmp" /SL5="$50270,27810859,924672,C:\Users\Admin\AppData\Local\Temp\DOpusInstall-13.25.exe"
      2⤵
      • Checks computer location settings
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:740
      • C:\Windows\system32\regsvr32.exe
        "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\GPSoftware\Directory Opus\dopushlp.dll"
        3⤵
        • Loads dropped DLL
        • Modifies registry class
        PID:3036
      • C:\Windows\system32\regsvr32.exe
        "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll"
        3⤵
        • Loads dropped DLL
        • Modifies Internet Explorer settings
        • Modifies registry class
        PID:3512
      • C:\Windows\SysWOW64\regsvr32.exe
        "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\GPSoftware\Directory Opus\dopuslib32.dll"
        3⤵
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Modifies Internet Explorer settings
        • Modifies registry class
        PID:3492
      • C:\Users\Admin\AppData\Local\Temp\is-V08IIOPF1R.tmp\SetAppUserModelId-x64.exe
        "C:\Users\Admin\AppData\Local\Temp\is-V08IIOPF1R.tmp\SetAppUserModelId-x64.exe" /cert2:0:655432 13100 "C:\Program Files\GPSoftware\Directory Opus"
        3⤵
        • Drops file in Program Files directory
        • Executes dropped EXE
        • NTFS ADS
        PID:532
      • C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe
        "C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe" /fixappname
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:3356
      • C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe
        "C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe" /runstd:"C:\Program Files\GPSoftware\Directory Opus\dopus.exe" /ignoresetup autolister=layout
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:2552
  • C:\Program Files\GPSoftware\Directory Opus\dopus.exe
    "C:\Program Files\GPSoftware\Directory Opus\dopus.exe" /ignoresetup autolister=layout
    1⤵
    • Creates a file in the Startup directory
    • Adds Run key to start application
    • Enumerates connected drives
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Executes dropped EXE
    • Loads dropped DLL
    • Checks whether UAC is enabled
    • Modifies Control Panel
    • Modifies registry class
    • Modifies system certificate store
    • NTFS ADS
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:952
    • C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe
      "C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe" /crashhandler:952
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:5476
    • C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe
      "C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe" /testdarkmode
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2724
    • C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe
      "C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe" /getsystemdpi
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2068
    • C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe
      "C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe" /crashhandler:952,restart
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2796
    • C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe
      "C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe" /crashhandler:952,restart
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2124
    • C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe
      "C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe" /crashhandler:952,restart
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2904
    • C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe
      "C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe" /crashhandler:952
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:328
    • C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe
      "C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe" /dblclk
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious use of SetWindowsHookEx
      PID:4272
    • C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe
      "C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe" /crashhandler:952
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:220
  • C:\Program Files\GPSoftware\Directory Opus\dopus.exe
    "C:\Program Files\GPSoftware\Directory Opus\dopus.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Checks whether UAC is enabled
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:4208
    • C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe
      "C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe" /crashhandler:4208,restart
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:548
    • C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe
      "C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe" /crashhandler:4208,restart
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:1952
    • C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe
      "C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe" /testdarkmode
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:4864
    • C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe
      "C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe" /crashhandler:4208,restart
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:5632
    • C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe
      "C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe" /crashhandler:4208,restart
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:5348
  • C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.1220_none_7e21bc567c7ed16b\TiWorker.exe
    C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.1220_none_7e21bc567c7ed16b\TiWorker.exe -Embedding
    1⤵
      PID:5476
    • C:\PROGRA~1\GPSOFT~1\DIRECT~1\dopus.exe
      C:\PROGRA~1\GPSOFT~1\DIRECT~1\dopus.exe
      1⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Checks whether UAC is enabled
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of WriteProcessMemory
      PID:2672
      • C:\PROGRA~1\GPSOFT~1\DIRECT~1\dopusrt.exe
        C:\PROGRA~1\GPSOFT~1\DIRECT~1\dopusrt.exe /crashhandler:2672,restart
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:4772
      • C:\PROGRA~1\GPSOFT~1\DIRECT~1\dopusrt.exe
        "C:\PROGRA~1\GPSOFT~1\DIRECT~1\dopusrt.exe" /testdarkmode
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:2160
    • C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe
      "C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe" /dblclk
      1⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:4572
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k LocalService -p -s fdPHost
      1⤵
        PID:2960

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            english.dll
            • Path C:\Program Files\GPSoftware\Directory Opus\Language\english.dll
            • Size 1.1MB
            • SHA256 8fbed57516e7f34ee46cb377fc66c242970dbdfed133c17262225cb40ca9fd7f
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            audiotags.dll
            • Path C:\Program Files\GPSoftware\Directory Opus\Viewers\audiotags.dll
            • Size 300KB
            • SHA256 af656d0a2eeeb7f80cd657142d0f886c9384a7e21e62d2dd3eae3b963232c0d8
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            dcrawrap.dll
            • Path C:\Program Files\GPSoftware\Directory Opus\Viewers\dcrawrap.dll
            • Size 2.3MB
            • SHA256 8942ec8e9b7199c6c24e779b7452d8bd4981665628893a039a0952cfd6a29126
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            docs.dll
            • Path C:\Program Files\GPSoftware\Directory Opus\Viewers\docs.dll
            • Size 569KB
            • SHA256 78fdd67b11eb9cd3f55ec96f87a8cd2565dd701d26579e89360c613e3d1a8b6c
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            gifanim.dll
            • Path C:\Program Files\GPSoftware\Directory Opus\Viewers\gifanim.dll
            • Size 374KB
            • SHA256 62dfb3e51c16b58b78c7c0d6ee404ba4f0e58afc869df2c1be12c9e032a1d50a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            dopus.exe
            • Path C:\Program Files\GPSoftware\Directory Opus\dopus.exe
            • Size 35.7MB
            • SHA256 fc27f6ea156c9569766ac38e138aedbfb7bf28bc37db85d9da6d5d3e68a5d3b9
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            dopushlp.dll
            • Path C:\Program Files\GPSoftware\Directory Opus\dopushlp.dll
            • Size 713KB
            • SHA256 15d2e7e98a9e8e4a25ecbab726134cb50d22fa231475c8a7d657a038a90d56c1
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            dopuslib.dll
            • Path C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll
            • Size 1.2MB
            • SHA256 8ad535bfe85f20acd6a5abc770bf5c0fc42dd28b654457362a5e497e7f9c231e
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            dopusrt.exe
            • Path C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe
            • Size 477KB
            • SHA256 62f91ea7e2e2844b9e1c96afbfc12dcd9b3309bb4058a6245a028011b7e86be5
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            stockcert.txt
            • Path C:\Program Files\GPSoftware\Directory Opus\stockcert.txt
            • Size 1KB
            • SHA256 083fa83a6d752048a36467cdc563cae0267d5a9e50b8704c8fd581f2a42cb65a
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            Applications.dop
            • Path C:\ProgramData\GPSoftware\Directory Opus\Buttons\Applications.dop
            • Size 2KB
            • SHA256 2cc1ad372e09c5e987291cd51ecfe95ca9d869bd3cbec824be68c7a8a9d75507
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            Drives.dop
            • Path C:\ProgramData\GPSoftware\Directory Opus\Buttons\Drives.dop
            • Size 988B
            • SHA256 3723b0053e362a269841b5be3cc4c80b48330ca01f8bf365adc14f7be825e988
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            Office.dop
            • Path C:\ProgramData\GPSoftware\Directory Opus\Buttons\Office.dop
            • Size 2KB
            • SHA256 c86149f85284c094c2388ba5b281dd19874c2cc131f9d6b3f19ecabdc356f7ff
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            Office365.dop
            • Path C:\ProgramData\GPSoftware\Directory Opus\Buttons\Office365.dop
            • Size 3KB
            • SHA256 9f6dba06f65cf1316f77e367107fa7c27b94154f8e0bb3cd4b06169169162704
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            OpenOffice.dop
            • Path C:\ProgramData\GPSoftware\Directory Opus\Buttons\OpenOffice.dop
            • Size 2KB
            • SHA256 21ca70e470967a4b5f6cbe3d1bffa087653a532bcd57a00c187ea745309b1b09
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            globaldata.omd
            • Path C:\ProgramData\GPSoftware\Directory Opus\Global Data\globaldata.omd
            • Size 348B
            • SHA256 c9003a178f6a5e8bc943a0052cd5b8232d33a02aa8cb0d1bdb599d9b17e5ec5f
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            globaldata.omd.tmp
            • Path C:\ProgramData\GPSoftware\Directory Opus\Global Data\globaldata.omd.tmp
            • Size 349B
            • SHA256 ab46ca339495dc1bf1b5692fb732b61af84d8ddcdc4e4897659435d6a3fb169f
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            DOpus9.dis
            • Path C:\ProgramData\GPSoftware\Directory Opus\Icons\DOpus9.dis
            • Size 408KB
            • SHA256 14b9c26913cb8d6e17e4f8c6f675678a7ef95fc9b3513cbbbf4425412161a6a6
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            windowstate.osd
            • Path C:\Users\Admin\AppData\Local\GPSoftware\Directory Opus\State Data\windowstate.osd
            • Size 364B
            • SHA256 2075385c1e5b59d143f02f9dac0c1ff6845ddb169615bb0c9f9e93aad1ab678c
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            windowstate.osd
            • Path C:\Users\Admin\AppData\Local\GPSoftware\Directory Opus\State Data\windowstate.osd
            • Size 662B
            • SHA256 227fa78a69f3febb0b7a805f5a9d3ba808f92ba5449af56baa5cbd3d65b6fe9a
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            windowstate.osd
            • Path C:\Users\Admin\AppData\Local\GPSoftware\Directory Opus\State Data\windowstate.osd
            • Size 1KB
            • SHA256 b5896313b9d4d48043ecd5e8e5f0768f73cdd5d19d54f9a25d55147452d93199
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            windowstate.osd.tmp
            • Path C:\Users\Admin\AppData\Local\GPSoftware\Directory Opus\State Data\windowstate.osd.tmp
            • Size 449B
            • SHA256 67a709447c916e9b87e3ee16fba45b3bdab75598c8e8510850f60efb9b16dc15
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            windowstate.osd.tmp
            • Path C:\Users\Admin\AppData\Local\GPSoftware\Directory Opus\State Data\windowstate.osd.tmp
            • Size 867B
            • SHA256 f1fb67afa0d1cdfbbf0008efc269ebf62393f759cad0239c92a20ab11b0ae0c9
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            windowstate.osd.tmp
            • Path C:\Users\Admin\AppData\Local\GPSoftware\Directory Opus\State Data\windowstate.osd.tmp
            • Size 1KB
            • SHA256 f957c5bf0e5c2828d8ffec4a63a2fdfe1fde00ab462132db593c693c035648fe
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            windowstate.osd.tmp
            • Path C:\Users\Admin\AppData\Local\GPSoftware\Directory Opus\State Data\windowstate.osd.tmp
            • Size 1KB
            • SHA256 4370c8c506c375be4a102e39340b6ccf041530d510e536ea5bd04de1a1cbf843
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            windowstate.osd.tmp
            • Path C:\Users\Admin\AppData\Local\GPSoftware\Directory Opus\State Data\windowstate.osd.tmp
            • Size 1KB
            • SHA256 ee04b201d97e5110435bc651df71fe96c9f03121cf6806f217a5fff7bb1aca48
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            windowstate.osd.tmp
            • Path C:\Users\Admin\AppData\Local\GPSoftware\Directory Opus\State Data\windowstate.osd.tmp
            • Size 1KB
            • SHA256 d9f289c3ae363fc5349c7e844b80bcd0ddfc6eaa294f5fe76f125fe5f7dca52a
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            windowstate.osd.tmp
            • Path C:\Users\Admin\AppData\Local\GPSoftware\Directory Opus\State Data\windowstate.osd.tmp
            • Size 1KB
            • SHA256 545b953204d9455df796a3542b35ec20cb557dc3ca8e9e5072696feedce9d388
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            windowstate.osd.tmp
            • Path C:\Users\Admin\AppData\Local\GPSoftware\Directory Opus\State Data\windowstate.osd.tmp
            • Size 1KB
            • SHA256 679c828087e7c5e0eafd5454810241dc9eba5d1ea8369228f2054e0be1649d80
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            windowstate.osd.tmp
            • Path C:\Users\Admin\AppData\Local\GPSoftware\Directory Opus\State Data\windowstate.osd.tmp
            • Size 1KB
            • SHA256 f206aeb4004e7091d6b80639fce903b0f56d023c6e70dee9bd91aab45a09c94f
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            windowstate.osd.tmp
            • Path C:\Users\Admin\AppData\Local\GPSoftware\Directory Opus\State Data\windowstate.osd.tmp
            • Size 2KB
            • SHA256 993031192ea7c33bfdd3a3daf787b43d9a0f71c245ea1a2e3bbabb5272d40da9
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            windowstate.osd.tmp
            • Path C:\Users\Admin\AppData\Local\GPSoftware\Directory Opus\State Data\windowstate.osd.tmp
            • Size 2KB
            • SHA256 d4606413f3167869e0aa4b9bcdb35f6c6779ce90ff5651dbf757c0c60fc155e2
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            windowstate.osd.tmp
            • Path C:\Users\Admin\AppData\Local\GPSoftware\Directory Opus\State Data\windowstate.osd.tmp
            • Size 2KB
            • SHA256 35bc95321da55f2e74706031b9c24837b948b2b30528b3c82399fa52a4961483
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            windowstate.osd.tmp
            • Path C:\Users\Admin\AppData\Local\GPSoftware\Directory Opus\State Data\windowstate.osd.tmp
            • Size 2KB
            • SHA256 e7ea2739384cb361ee72174577d0b16a96268062b487ecb857c3e73d12f42eba
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            windowstate.osd.tmp
            • Path C:\Users\Admin\AppData\Local\GPSoftware\Directory Opus\State Data\windowstate.osd.tmp
            • Size 2KB
            • SHA256 0ea02a23d5102dbb3833f5c1da6bf3471e20aa8879e6560ab8797e0d4fc033a2
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            windowstate.osd.tmp
            • Path C:\Users\Admin\AppData\Local\GPSoftware\Directory Opus\State Data\windowstate.osd.tmp
            • Size 2KB
            • SHA256 9da0a634abe30fea588c947a346e37723b4afcbd3d3a32e131d4379d8c0bce42
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            windowstate.osd.tmp
            • Path C:\Users\Admin\AppData\Local\GPSoftware\Directory Opus\State Data\windowstate.osd.tmp
            • Size 3KB
            • SHA256 a253d837582557efef385548e470ddec8f6b7f097f157fe1bfd064f5b7e92308
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            windowstate.osd.tmp
            • Path C:\Users\Admin\AppData\Local\GPSoftware\Directory Opus\State Data\windowstate.osd.tmp
            • Size 3KB
            • SHA256 f331307a5fc0439c57cb42c1225aa92a89f98e76f6cc5249098e6860d5b2fa30
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            windowstate.osd.tmp
            • Path C:\Users\Admin\AppData\Local\GPSoftware\Directory Opus\State Data\windowstate.osd.tmp
            • Size 3KB
            • SHA256 6ed4014c581d89f285c4cca153a90c3b5d01745e23bba6c0383d8eaf532144ed
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            windowstate.osd.tmp
            • Path C:\Users\Admin\AppData\Local\GPSoftware\Directory Opus\State Data\windowstate.osd.tmp
            • Size 3KB
            • SHA256 79b7d3e9e3389507612e846293d790850f65dc9f9a72927c1030ba218d52b5bc
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            windowstate.osd.tmp
            • Path C:\Users\Admin\AppData\Local\GPSoftware\Directory Opus\State Data\windowstate.osd.tmp
            • Size 3KB
            • SHA256 0fe120102508d687964d58c210a70c74611458e5b95ed3729dce7edea7c05ccb
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837040001.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837040001.tmp
            • Size 160B
            • SHA256 de94b5596d6aa23603b6c5a2bb1c4f3e99d2686cf8a468ff7ab3b975ab46c7d6
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837040110.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837040110.tmp
            • Size 160B
            • SHA256 035a6d74d23da6e3962887068ccb540a366e6a67d1a2a2a18ae7a1f2d139078a
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837040141.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837040141.tmp
            • Size 160B
            • SHA256 05393770f5d25da4b311b413b4dc4912110525a6332cd8860c42efcdd3418aef
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837040173.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837040173.tmp
            • Size 160B
            • SHA256 371231ebbfcf061975bb34c2471613d71e0b4462468c2ba16f31d2c9f3526938
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837040329.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837040329.tmp
            • Size 160B
            • SHA256 12d00dbbd4145f0c6da646d44d5411b2e793ca40b615c76680a57d6a01bbe767
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837040501.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837040501.tmp
            • Size 160B
            • SHA256 c4998818aa65af0a37a536ef696da5a33678b3e3c1654d25a4b520e0fcac12de
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837040626.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837040626.tmp
            • Size 160B
            • SHA256 bb26b17d3b9320f51c34ea2cea491893162aea3027ea96599d67a14774d9355e
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837040657.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837040657.tmp
            • Size 160B
            • SHA256 b3cd875bbc5f546006edbbed98b1373d2175f535af74efe7cd83a306b3d47494
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837040688.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837040688.tmp
            • Size 160B
            • SHA256 b7a3ac0783f70fb30afbe9f8d340f0c9f5265d8654380c65f7e9db98508ea7cd
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837040719.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837040719.tmp
            • Size 160B
            • SHA256 60d3425e36ab6c4f721e9832122ef33791196de85678cd11807e5cf43e639051
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837040751.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837040751.tmp
            • Size 160B
            • SHA256 bc05627bffe365a7df2fffe63f2d4606c85280e9d1cae31219c151ea4f69a122
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837040782.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837040782.tmp
            • Size 160B
            • SHA256 2b71b9b6bfc60f47c413f77b42436611279dab7b0716dc9ecf661b5bc974ecc8
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837040813.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837040813.tmp
            • Size 160B
            • SHA256 cc64ca1607932c87bd7d9fd5b5d26609213450114d9dfe0697a84ae461cfc8cb
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837040844.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837040844.tmp
            • Size 160B
            • SHA256 521030357b4c40649591e4875c0832ab36d799b33a736a6257f54d51e788bf59
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837040891.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837040891.tmp
            • Size 160B
            • SHA256 8637f4dbfa9a0bbadeed71de9ce46c0292a17d926de7a1170cee4d097729d16a
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837040923.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837040923.tmp
            • Size 160B
            • SHA256 02ec1bcc225893ac126010419687489c8f3c9af3fedb8904564b249102ac8861
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837040954.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837040954.tmp
            • Size 160B
            • SHA256 70b7d67c1945d6661ea3188fc5b4cb26b63a29e2888b71dbfa823c1d5d86719b
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837050001.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837050001.tmp
            • Size 160B
            • SHA256 6cf18b9962376c594aadbb66a3ef86153cecef7ebfd8680cf3c9a8216bee1889
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837050032.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837050032.tmp
            • Size 160B
            • SHA256 a466500f694bb59152cdf2eea102b29ec6bbf0fa283f6f5a3eb908cad5f46e84
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837050079.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837050079.tmp
            • Size 160B
            • SHA256 dec959ca5b24617d37bfde45d5e034a13d9970b1e4116385d897a79da99fca6a
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837050126.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837050126.tmp
            • Size 160B
            • SHA256 acb6fc03662c697094d329ba440c0d03f0e59bb578fce53f495c8b6927d2aff6
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837050157.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837050157.tmp
            • Size 160B
            • SHA256 f25d390a750adfca4cf73fc22b64785bfcd68e2f522639812f18eaaca45b9c94
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837050204.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837050204.tmp
            • Size 160B
            • SHA256 8c6b43390d28b1d2850670aa0f7316df588469b2992d17ce49171c98b1d887e8
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837050251.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837050251.tmp
            • Size 160B
            • SHA256 fa1dc7a646ccccecb58940a8234a396c78f2254fccefd61f98a0d0bc61aef057
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837050282.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837050282.tmp
            • Size 160B
            • SHA256 39792b980258d17d95c35523d2d3c1cc88ecd9ad50271cb991a26ca4c9d32c06
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837050329.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837050329.tmp
            • Size 160B
            • SHA256 f7c5388f5845da1a17986b71ced06ef15cf7a814964247c8ab2f27cd18838ee3
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837050376.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837050376.tmp
            • Size 160B
            • SHA256 676a7f64df3aed422865c1e5d856d642037c94b3189390ac7fb22eb6be3561aa
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837050423.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837050423.tmp
            • Size 160B
            • SHA256 76855bcf61e2b09313c3f4cd83ddacf83a0b505d39fd404f1f46e875057795da
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837050469.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837050469.tmp
            • Size 160B
            • SHA256 8e7833e5c4f482ed37db4b18bd19f7874c99c47bf457a9f021857863168ac686
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837050516.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837050516.tmp
            • Size 160B
            • SHA256 d3953b2ff3349e24fbad6a56f11a3f654e487c094c35595775446423e31af85a
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837050563.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837050563.tmp
            • Size 160B
            • SHA256 e0b02c3dc42f42b4092e681908d0bf7d3eb29c5d20fad9638aa4a8d36c0e2141
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837050626.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837050626.tmp
            • Size 160B
            • SHA256 6ca9c043442ffafcda18aeb9757d5530ad1266fc86e93763246ceed7439bb49d
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837050673.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837050673.tmp
            • Size 160B
            • SHA256 cf021fbcc7b0665e0bcc68c8c255d1c548f3c97975cd2914f06a11e615560153
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837050735.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837050735.tmp
            • Size 160B
            • SHA256 c5917490bde372405171bf21fd6f02f2d0a4782b0a44b780283eac534b427625
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837050813.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837050813.tmp
            • Size 160B
            • SHA256 f53e9b3c784bfe40309913f2aead4fa90af440fdb6dc3c022ecba71c17ad3f35
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837050969.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837050969.tmp
            • Size 160B
            • SHA256 f5e86b5664abdf16456a825f2fbb5f813f82df8062da09eb8858c801e2141fdf
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837060032.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837060032.tmp
            • Size 160B
            • SHA256 8c37a1ca28f1cbe88fdcf48a0eb34156744cc4b854a768ab58dab7b11c21d64d
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837060157.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837060157.tmp
            • Size 160B
            • SHA256 9de691fedef8872a5ae458d4cec73f7ed2d35afee9091720badbba530fa21631
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837060251.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837060251.tmp
            • Size 160B
            • SHA256 6c16b3630e45583f2f37e9e7b6ced32789051e4b6f55182c94b36165ec7bdd15
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837060407.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837060407.tmp
            • Size 160B
            • SHA256 a0e9e3023c8f5d63577b75fa595e4864a3c466cede05a36aadd737544b7a0c25
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837070173.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837070173.tmp
            • Size 160B
            • SHA256 f0aa50da9b8bfd2d24ea1abbd7f7b6e0975c91030b0e5e6422aa81853e4be36e
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837070282.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837070282.tmp
            • Size 160B
            • SHA256 e2e8ca86672124439d9a730b7144e36dd2ef4dd1913ebe572d80cbdd6ea1b6d3
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837070329.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837070329.tmp
            • Size 160B
            • SHA256 cf6d8290a4ca24b2a18228ab2a35ba79c34c996fc223211b6fed9d5b61b76a08
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837070407.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837070407.tmp
            • Size 160B
            • SHA256 678f056e312e8dfead376e2ffaf6b3c4b6b47cfea54f07104f0da666c6ec660b
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837070469.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837070469.tmp
            • Size 160B
            • SHA256 f3e574a47b19a4d793947f99e1b286f656217a686b46995152facbbdf7e8beb1
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837070594.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837070594.tmp
            • Size 160B
            • SHA256 8f12c7ef37beab77fdc3dc162b002353434af7d1d1e0c8923185073328a92b7d
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837580590.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837580590.tmp
            • Size 160B
            • SHA256 683ca3ea57674b3f2c1d218d1b787135a4b9d9a80c896dc1163c18881dc1d9dc
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837580652.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837580652.tmp
            • Size 160B
            • SHA256 161069b76a01dfa1099164ab51a8b1de6a4fff639b54529081e572ab73af0b4a
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            dop202609250837580762.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\dop202609250837580762.tmp
            • Size 160B
            • SHA256 abe69868d923f629b4a0a40b6c06c7ecae4d63384e61086b8a7c2a0226cd9f1c
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            DOpusInstall-13.25.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\is-U7BYKCM7R9.tmp\DOpusInstall-13.25.tmp
            • Size 4.8MB
            • SHA256 ba73881ff1dc109ba3f26344521e1b36a92abf19cb1a4a718ba87ffe7debe24e
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            SetAppUserModelId-x64.exe
            • Path C:\Users\Admin\AppData\Local\Temp\is-V08IIOPF1R.tmp\SetAppUserModelId-x64.exe
            • Size 188KB
            • SHA256 9d973eda38ec6bedbf95ef50db62cdd8c9109c453658999395bf1041e7db1649
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            dopuslib32.dll
            • Path C:\Users\Admin\AppData\Local\Temp\is-V08IIOPF1R.tmp\dopuslib32.dll
            • Size 1.1MB
            • SHA256 8033fb5eb915f01b62e4e75d2fc04de65cc3be986e0500d1fd71cf1127a4b675
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            innohelp.dll
            • Path C:\Users\Admin\AppData\Local\Temp\is-V08IIOPF1R.tmp\innohelp.dll
            • Size 167KB
            • SHA256 e9312b255ed7208585a12d42dee3304134b9e5da251481e14a66195f999c6c8d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            File Display.dop
            • Path C:\Users\Admin\AppData\Roaming\GPSoftware\Directory Opus\Buttons\File Display.dop
            • Size 6KB
            • SHA256 d3e0bc22242201eb43da0ea241939c452047f5da8464c12832540c4a5a6990d1
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Menu.dop
            • Path C:\Users\Admin\AppData\Roaming\GPSoftware\Directory Opus\Buttons\Menu.dop
            • Size 71KB
            • SHA256 f04087ba0ab86dd9697e1d52f05d6b9f702ed35cce129849e2311b0459ebc80b
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Operations.dop
            • Path C:\Users\Admin\AppData\Roaming\GPSoftware\Directory Opus\Buttons\Operations.dop
            • Size 33KB
            • SHA256 f4cc16cf193eafa05102e045cb375ca2e78081f76a31559668b1848395d1cbbd
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            favorites.ofv
            • Path C:\Users\Admin\AppData\Roaming\GPSoftware\Directory Opus\ConfigFiles\favorites.ofv
            • Size 105B
            • SHA256 83bc99282f82718b787c1df388fa1cf7c2e91e07a24cb8b694ee11a8abfad437
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            default.off
            • Path C:\Users\Admin\AppData\Roaming\GPSoftware\Directory Opus\Formats\default.off
            • Size 4KB
            • SHA256 315e53bad61c5de78a5141a4a0e6223695fef24c6510935d968a0e78acb94536
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            dopus.dat
            • Path C:\Users\Admin\AppData\Roaming\GPSoftware\Directory Opus\dopus.dat
            • Size 80B
            • SHA256 32822b7bbdf974a41114185f855504b577075fe27e670998b6cb41eb91ab807e
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            userdata.omd
            • Path C:\Users\Admin\AppData\Roaming\GPSoftware\Directory Opus\userdata.omd
            • Size 125B
            • SHA256 aba7722fedcea91eb29e7c6694152e38c1c829f087bdda09f879418042ddea89
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            userdata.omd.tmp
            • Path C:\Users\Admin\AppData\Roaming\GPSoftware\Directory Opus\userdata.omd.tmp
            • Size 152B
            • SHA256 92b1f86b6447cc80e120bbc5fff26ad5dee5cab1c5b4ae63043748d95fb15a0a
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            userdata.omd.tmp
            • Path C:\Users\Admin\AppData\Roaming\GPSoftware\Directory Opus\userdata.omd.tmp
            • Size 175B
            • SHA256 075fda7a865bce1bee0efb27b89e7922dd4ed4f91a5351016065732e11a86c30
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            userdata.omd.tmp
            • Path C:\Users\Admin\AppData\Roaming\GPSoftware\Directory Opus\userdata.omd.tmp
            • Size 130B
            • SHA256 5f873821e2e892bac6655e3e93ca1366b7f9062e7e185524956f5fb9045b5ced
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {027AFBD5-3065-4E87-9013-6B8642F67F68}
            • Path C:\Windows\System32\inf32\{027AFBD5-3065-4E87-9013-6B8642F67F68}
            • Size 80B
            • SHA256 b6687c9d5c804120cbced9176c6d47b9e3c86553f9fbb0afcbda4a4e0f380e25
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {09D5B211-3E13-445A-A273-1A079521DB7A}
            • Path C:\Windows\System32\inf32\{09D5B211-3E13-445A-A273-1A079521DB7A}
            • Size 80B
            • SHA256 e486bf39dd0450c3bfa35112b1b16f2726d91af5619cba255daac6e45a359f60
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {20E0B812-D10D-4FAB-9ED4-20EFD4FB22BA}
            • Path C:\Windows\System32\inf32\{20E0B812-D10D-4FAB-9ED4-20EFD4FB22BA}
            • Size 80B
            • SHA256 a06c3efbac4e5e72d28f2c79ecbe56b3bf3fcc31f4123d1577029e48c6cb2bc1
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {3BA3A7A0-FD32-4781-843C-929ACD9F074D}
            • Path C:\Windows\System32\inf32\{3BA3A7A0-FD32-4781-843C-929ACD9F074D}
            • Size 80B
            • SHA256 4d5e569f3ca9fb8c826a48b4cff6bee1a101c773a62778076c30da6aa759cbb2
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {418C0BB2-B4CA-49C8-8A73-D9B298623BCA}
            • Path C:\Windows\System32\inf32\{418C0BB2-B4CA-49C8-8A73-D9B298623BCA}
            • Size 80B
            • SHA256 4edb0fbc3b65620330e37f1fe5187c0032bc33f39351d2d4e291583091256a88
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {4AB3D95B-5231-4381-BD8C-0B680DC7169B}
            • Path C:\Windows\System32\inf32\{4AB3D95B-5231-4381-BD8C-0B680DC7169B}
            • Size 80B
            • SHA256 9d78b8253f94156feae11d775a53f88435b65eea00370c0e1c05db4cb47717f9
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {4C795B51-80CD-407B-9741-11FFB5E2A34E}
            • Path C:\Windows\System32\inf32\{4C795B51-80CD-407B-9741-11FFB5E2A34E}
            • Size 80B
            • SHA256 172c0bbf90c241efa0250527fabeee01661d412b5e8e9ff0e79b929d004037d3
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {506765DB-E568-4D2B-90E0-AA3A8CF637C9}
            • Path C:\Windows\System32\inf32\{506765DB-E568-4D2B-90E0-AA3A8CF637C9}
            • Size 80B
            • SHA256 b8c330bd8c568054159e77d211aa57f3826657f084a94cb9b8fc811fdf2fb6b8
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {54A6CCEF-EB9E-4B37-B774-F871592F3304}
            • Path C:\Windows\System32\inf32\{54A6CCEF-EB9E-4B37-B774-F871592F3304}
            • Size 80B
            • SHA256 8f95f3dd5a7767c54cef3fd3b8117040215dbaec23c0f072e4ffe3b26a748e1e
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {5544E114-8011-434D-A34B-789C953C8022}
            • Path C:\Windows\System32\inf32\{5544E114-8011-434D-A34B-789C953C8022}
            • Size 80B
            • SHA256 046c27461727dfdd1ccd3a814f5d8f7988f43c141cfc734a65e35c9e801fdca8
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {587BAEFE-12A7-4990-8DCF-34CF30C31D1B}
            • Path C:\Windows\System32\inf32\{587BAEFE-12A7-4990-8DCF-34CF30C31D1B}
            • Size 80B
            • SHA256 65885c59a11054527084d3245f5fc2f974924a9efc77c44c92dd88ddce7cfcae
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {6395B5BD-194F-49B2-9EDD-C9DDB23427B0}
            • Path C:\Windows\System32\inf32\{6395B5BD-194F-49B2-9EDD-C9DDB23427B0}
            • Size 80B
            • SHA256 3835fff5bef2e74b893be4fd3bd7f10ece5861248f22dce38a653c5b2382deff
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {67CE9B4A-410F-4D3A-8EC0-F6372A99D5AA}
            • Path C:\Windows\System32\inf32\{67CE9B4A-410F-4D3A-8EC0-F6372A99D5AA}
            • Size 80B
            • SHA256 4653dbfc194b23366c5b611d29b8a5f06135db052180a12a72b9f6e849383ec3
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {6B5D15FE-4FF9-4C77-A197-7F6FA2B3CB2A}
            • Path C:\Windows\System32\inf32\{6B5D15FE-4FF9-4C77-A197-7F6FA2B3CB2A}
            • Size 80B
            • SHA256 1436283fadd11db8c78c6bc0d48356f5549947f45da7c59da4d1f41e0e211231
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {7F5C6DD3-EE40-4D75-9FFA-0FF7F992C5A2}
            • Path C:\Windows\System32\inf32\{7F5C6DD3-EE40-4D75-9FFA-0FF7F992C5A2}
            • Size 80B
            • SHA256 24ffdeb958f966e7e9df532cb2c51c85e7a593e3e50a812caeb965f88aed4bfc
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {800074D1-7354-4280-94BD-AF41EA87E794}
            • Path C:\Windows\System32\inf32\{800074D1-7354-4280-94BD-AF41EA87E794}
            • Size 80B
            • SHA256 29d5d943bff0fbed742c8ef46f7b413e57a38b65fab2b46a2b8cce4186399ac7
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {806DE45C-88F2-4937-BF9C-D374B9E2B32E}
            • Path C:\Windows\System32\inf32\{806DE45C-88F2-4937-BF9C-D374B9E2B32E}
            • Size 80B
            • SHA256 2565cc9a8cb537f2f654f06ac91cbc6f10e09301f351435e496f4082c83d477c
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {818A96BD-A6EA-4EEC-B2EE-3C48703167E5}
            • Path C:\Windows\System32\inf32\{818A96BD-A6EA-4EEC-B2EE-3C48703167E5}
            • Size 80B
            • SHA256 1b111265c1ed5e89350d4b9633e6f604896a71d9b8ef655880c433cbe514b004
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {8283CE72-1DEF-452C-AD92-3BD42A259EB5}
            • Path C:\Windows\System32\inf32\{8283CE72-1DEF-452C-AD92-3BD42A259EB5}
            • Size 80B
            • SHA256 38b1fc9fc98bc5f8997b95bbbe054cae45d158728584156d6f5ca8f35432977c
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {82D76315-BFDF-40B5-ACC8-7CC2F4C26D86}
            • Path C:\Windows\System32\inf32\{82D76315-BFDF-40B5-ACC8-7CC2F4C26D86}
            • Size 80B
            • SHA256 886a2f5baedd325bae6c759ff4b20d542557c665a4911653620e3e0b01d12869
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {86C5705C-5CEE-48E0-AD5D-1AE9F5238E13}
            • Path C:\Windows\System32\inf32\{86C5705C-5CEE-48E0-AD5D-1AE9F5238E13}
            • Size 80B
            • SHA256 d5cd1b27f659856e3deb4096b122c5de317c0ab52be0d0a8d55ea676981a8b7f
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {87719B18-E879-4682-8253-7C3E2A09A521}
            • Path C:\Windows\System32\inf32\{87719B18-E879-4682-8253-7C3E2A09A521}
            • Size 80B
            • SHA256 22a93e96da46642380b77babb5d6749f011d8995f2828358638ababeb914aec3
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {883A5BE2-57D4-45FB-8174-30F3990CA630}
            • Path C:\Windows\System32\inf32\{883A5BE2-57D4-45FB-8174-30F3990CA630}
            • Size 80B
            • SHA256 837f4d3db1996841c33321f175d8f3d8a1293508651b9287ba9fa6d0a490738f
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {8FF74704-B653-4DEA-8F61-9C24CCA03EC2}
            • Path C:\Windows\System32\inf32\{8FF74704-B653-4DEA-8F61-9C24CCA03EC2}
            • Size 80B
            • SHA256 8256bbe89d755deae91eb005ac016972710c14943c1a547d50a692db78df6aa2
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {933433C7-1A5B-4AE5-B894-38BA5220761F}
            • Path C:\Windows\System32\inf32\{933433C7-1A5B-4AE5-B894-38BA5220761F}
            • Size 80B
            • SHA256 09a18ae4908d4cd2597f9d315e6457c6062661f6fbef744743e54538c3575fa8
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {949C4820-4B03-4B79-9E82-219AB1892C97}
            • Path C:\Windows\System32\inf32\{949C4820-4B03-4B79-9E82-219AB1892C97}
            • Size 80B
            • SHA256 56a808f67899038c9bbb4d2e914fae74d3460e4273076a4982c2e1d31e396637
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {9A7045B9-EF40-4750-8E45-E64F01A58239}
            • Path C:\Windows\System32\inf32\{9A7045B9-EF40-4750-8E45-E64F01A58239}
            • Size 80B
            • SHA256 c23f4dceb43330fbc4e81ea1365f99124d5fde95cfb5a8a3982780fd95c33e61
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {A54A8724-F125-4D1A-9740-D59392FAFAFA}
            • Path C:\Windows\System32\inf32\{A54A8724-F125-4D1A-9740-D59392FAFAFA}
            • Size 80B
            • SHA256 228a5f4c64059d944362a08784bb6f88f262a34670de610a559d702a0d8c2da0
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {AAAC156F-BD56-49BC-9593-F5451C8C823D}
            • Path C:\Windows\System32\inf32\{AAAC156F-BD56-49BC-9593-F5451C8C823D}
            • Size 80B
            • SHA256 df74f2be955be9902b6566fbfdb118b644620bfcb94709fb1896af2da9d053d2
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {AD09C2A8-9C5F-4312-8CCC-912BFD917723}
            • Path C:\Windows\System32\inf32\{AD09C2A8-9C5F-4312-8CCC-912BFD917723}
            • Size 80B
            • SHA256 6ec8cc2ae4ecd10cae8446e0e9c8f0ab8f29038511751cd013e3245985509ef3
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {ADD522A3-06F7-4023-A531-CFED0143D91B}
            • Path C:\Windows\System32\inf32\{ADD522A3-06F7-4023-A531-CFED0143D91B}
            • Size 80B
            • SHA256 120e0e81fda3a63643a4ae566f3a6c88843a2899760169ffd446627373685849
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {C2CE46CE-8B21-4BDE-8E82-37E8180E7CEB}
            • Path C:\Windows\System32\inf32\{C2CE46CE-8B21-4BDE-8E82-37E8180E7CEB}
            • Size 80B
            • SHA256 40342dbf049d6f217b84522fb710d26069799559b82a6b14c5640587a4cace52
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {C6F0E00C-E731-4167-987F-504EE0E93549}
            • Path C:\Windows\System32\inf32\{C6F0E00C-E731-4167-987F-504EE0E93549}
            • Size 80B
            • SHA256 b60be3a4b32dd657f3bce342c43d9ba607fb11406e6339722f58a7b3862c5d98
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {CA83ED1B-92CB-455B-95BC-A342FA1859BF}
            • Path C:\Windows\System32\inf32\{CA83ED1B-92CB-455B-95BC-A342FA1859BF}
            • Size 80B
            • SHA256 dfe9ef3937b71e0f035a1b5e0f82a0b4deb7e97409a2c71e516aadbf7aefd0ee
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {D6DC666A-8D88-4988-AB98-EE0DD9D2B394}
            • Path C:\Windows\System32\inf32\{D6DC666A-8D88-4988-AB98-EE0DD9D2B394}
            • Size 80B
            • SHA256 2c8e398905757432d0cb974a76a33942ae4bf419602b3ce7a3e8810c93ca6ec0
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {D9062CE0-8C34-4B2A-BD03-D913EF0D3947}
            • Path C:\Windows\System32\inf32\{D9062CE0-8C34-4B2A-BD03-D913EF0D3947}
            • Size 80B
            • SHA256 6eb73efa0a1b7a7bbb79a375907c6cda647579d68df657a124b37c09eca1bbc8
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {D95DE1F6-73C8-4C83-9A66-B765DB64143A}
            • Path C:\Windows\System32\inf32\{D95DE1F6-73C8-4C83-9A66-B765DB64143A}
            • Size 80B
            • SHA256 1179f01d9dae6c0a8971d9f8065dc937c4a4a0dc661c4f956c3a03620d406844
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {DB4D2987-8259-44CE-AEA3-E05F576DDDC0}
            • Path C:\Windows\System32\inf32\{DB4D2987-8259-44CE-AEA3-E05F576DDDC0}
            • Size 80B
            • SHA256 af6ea8b1cca38bf651f99ef438e6e763acd3378c753af794585108b3a98df677
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {DEF6B2EA-DFFB-4C2A-96CB-AF7FA2465CB6}
            • Path C:\Windows\System32\inf32\{DEF6B2EA-DFFB-4C2A-96CB-AF7FA2465CB6}
            • Size 80B
            • SHA256 f88d633478738e4fd0efce04e2d692c068b8e03b3063986343ad07fb877669ff
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {DFBA9B10-9A08-46E9-8A1E-F2179212ACB6}
            • Path C:\Windows\System32\inf32\{DFBA9B10-9A08-46E9-8A1E-F2179212ACB6}
            • Size 80B
            • SHA256 57ea1372784c5259a30aa49fca8521fda1e5710dd096cd4653c7c74ac9abe06b
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {E12030A5-C52B-452F-87A2-C77BF996A99F}
            • Path C:\Windows\System32\inf32\{E12030A5-C52B-452F-87A2-C77BF996A99F}
            • Size 80B
            • SHA256 e8f193b1c8ddad0bc5fc394a3a757ada03e6808fbaefa76b697ff87c2f8dca09
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {E6BF96C3-BC2E-4A78-8AE1-45AEFF7471F6}
            • Path C:\Windows\System32\inf32\{E6BF96C3-BC2E-4A78-8AE1-45AEFF7471F6}
            • Size 80B
            • SHA256 e19782b63698ec749a399ca7ddc7a12ef12f2a04a2fb1817cd92b67ad5f14b51
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {E7629E9E-BC7C-49A8-96E5-08757879EDB8}
            • Path C:\Windows\System32\inf32\{E7629E9E-BC7C-49A8-96E5-08757879EDB8}
            • Size 80B
            • SHA256 185dd599f967125fa0886abea06d207a4e030e5e2a784bf66ea521a3ed817ad1
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {EDC49AF7-B077-433C-B4C7-FDEA0F4655A3}
            • Path C:\Windows\System32\inf32\{EDC49AF7-B077-433C-B4C7-FDEA0F4655A3}
            • Size 80B
            • SHA256 3cf9567d7e779d16f7d41cd5e46ecd27edd1fe40505cd3a9003e7ec2af4374d2
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {EF23C40A-FDE4-4165-B600-0FE4A38E7F47}
            • Path C:\Windows\System32\inf32\{EF23C40A-FDE4-4165-B600-0FE4A38E7F47}
            • Size 80B
            • SHA256 7a4ade5322e08b8ac10ec8bb6c107d19356d7d6bb37253e2a06c6b5655ded2d8
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            {F35D3F59-EDC8-4DDB-96A1-472211370BBA}
            • Path C:\Windows\System32\inf32\{F35D3F59-EDC8-4DDB-96A1-472211370BBA}
            • Size 80B
            • SHA256 3f2bdfd736509a698020c9c9fda01368d59d396c5a3ca22d251cddd34ded4393
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            memory/740-18-0x0000000000F70000-0x000000000146A000-memory.dmp
            Download

            memory/740-209-0x0000000000F70000-0x000000000146A000-memory.dmp
            Download

            memory/740-5-0x00000000015F0000-0x00000000015F1000-memory.dmp
            Download

            memory/740-1979-0x0000000000F70000-0x000000000146A000-memory.dmp
            Download

            memory/740-19-0x00000000015F0000-0x00000000015F1000-memory.dmp
            Download

            memory/952-214-0x00007FF8C2F80000-0x00007FF8C2F90000-memory.dmp
            Download

            memory/952-2861-0x0000026015B90000-0x0000026015C25000-memory.dmp
            Download

            memory/952-217-0x00007FF8C2F80000-0x00007FF8C2F90000-memory.dmp
            Download

            memory/952-215-0x00007FF8C2F80000-0x00007FF8C2F90000-memory.dmp
            Download

            memory/952-2681-0x0000026015B90000-0x0000026015C25000-memory.dmp
            Download

            memory/2672-2839-0x0000019009F80000-0x000001900A015000-memory.dmp
            Download

            memory/4208-2680-0x000002ACE1660000-0x000002ACE16F5000-memory.dmp
            Download

            memory/5872-0-0x0000000000AC0000-0x0000000000BB0000-memory.dmp
            Download

            memory/5872-17-0x0000000000AC0000-0x0000000000BB0000-memory.dmp
            Download

            memory/5872-2090-0x0000000000AC0000-0x0000000000BB0000-memory.dmp
            Download