Edit tour

Windows Analysis Report
https://downloads.xrite.com/downloads/software/FM100_Scoring_SW/v4.0.7/FM100_HueTest_32-bit_v407.exe

Overview

General Information

Sample URL:	https://downloads.xrite.com/downloads/software/FM100_Scoring_SW/v4.0.7/FM100_HueTest_32-bit_v407.exe
Analysis ID:	1431062
Infos:

Detection

Score:	10
Range:	0 - 100
Whitelisted:	false
Confidence:	0%

Signatures

Contains functionality to call native functions

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to dynamically determine API calls

Contains functionality to open a port and listen for incoming connection (possibly a backdoor)

Contains functionality to query CPU information (cpuid)

Detected potential crypto function

Drops PE files

Extensive use of GetProcAddress (often used to hide API calls)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found potential string decryption / allocating functions

PE file contains executable resources (Code or Archives)

PE file contains sections with non-standard names

Queries keyboard layouts

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: Usage Of Web Request Commands And Cmdlets

Stores files to the Windows start menu directory

Uses code obfuscation techniques (call, push, ret)

Uses the keyboard layout for branch decision (may execute only for specific keyboard layouts)

Very long cmdline option found, this is very uncommon (may be encrypted or packed)

Classification

Analysis Advice

Sample drops PE files which have not been started, submit dropped PE samples for a secondary analysis to Joe Sandbox

Sample may be VM or Sandbox-aware, try analysis on a native machine

Sample tries to load a library which is not present or installed on the analysis machine, adding the library might reveal more behavior

Sample may offer command line options, please run it with the 'Execute binary with arguments' cookbook (it's possible that the command line switches require additional characters like: "-", "/", "--")

Sample monitors window changes (e.g. starting applications), analyze the sample with the 'Simulates keyboard and window changes' cookbook

Process Tree

System is w10x64

cmd.exe (PID: 3572 cmdline: C:\Windows\system32\cmd.exe /c wget -t 2 -v -T 60 -P "C:\Users\user\Desktop\download" --no-check-certificate --content-disposition --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko" "https://downloads.xrite.com/downloads/software/FM100_Scoring_SW/v4.0.7/FM100_HueTest_32-bit_v407.exe" > cmdline.out 2>&1 MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 4400 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

wget.exe (PID: 2892 cmdline: wget -t 2 -v -T 60 -P "C:\Users\user\Desktop\download" --no-check-certificate --content-disposition --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko" "https://downloads.xrite.com/downloads/software/FM100_Scoring_SW/v4.0.7/FM100_HueTest_32-bit_v407.exe" MD5: 3DADB6E2ECE9C4B3E1E322E617658B60)

FM100_HueTest_32-bit_v407.exe (PID: 4080 cmdline: "C:\Users\user\Desktop\download\FM100_HueTest_32-bit_v407.exe" MD5: D80F7F0B4F609526D80E7919A73C1EA0)

FM100_HueTest_32-bit_v407.tmp (PID: 2228 cmdline: "C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp" /SL5="$2048E,14043495,139776,C:\Users\user\Desktop\download\FM100_HueTest_32-bit_v407.exe" MD5: 7D11FE4182B8554D47DE2DF7F5AD3F23)

Farnsworth-Munsell 100 Hue Test.exe (PID: 1848 cmdline: "C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe" MD5: 37D045BEFB2167D772D5C234869304EE)

splwow64.exe (PID: 1288 cmdline: C:\Windows\splwow64.exe 12288 MD5: 77DE7761B037061C7C112FD3C5B91E73)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

Sigma detected: Usage Of Web Request Commands And Cmdlets

Source: Process started

Author: James Pemberton / @4A616D6573, Endgame, JHasenbusch, oscd.community, Austin Songer @austinsonger: Data: Command: C:\Windows\system32\cmd.exe /c wget -t 2 -v -T 60 -P "C:\Users\user\Desktop\download" --no-check-certificate --content-disposition --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko" "https://downloads.xrite.com/downloads/software/FM100_Scoring_SW/v4.0.7/FM100_HueTest_32-bit_v407.exe" > cmdline.out 2>&1, CommandLine: C:\Windows\system32\cmd.exe /c wget -t 2 -v -T 60 -P "C:\Users\user\Desktop\download" --no-check-certificate --content-disposition --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko" "https://downloads.xrite.com/downloads/software/FM100_Scoring_SW/v4.0.7/FM100_HueTest_32-bit_v407.exe" > cmdline.out 2>&1, CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\cmd.exe, NewProcessName: C:\Windows\SysWOW64\cmd.exe, OriginalFileName: C:\Windows\SysWOW64\cmd.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 5316, ProcessCommandLine: C:\Windows\system32\cmd.exe /c wget -t 2 -v -T 60 -P "C:\Users\user\Desktop\download" --no-check-certificate --content-disposition --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko" "https://downloads.xrite.com/downloads/software/FM100_Scoring_SW/v4.0.7/FM100_HueTest_32-bit_v407.exe" > cmdline.out 2>&1, ProcessId: 3572, ProcessName: cmd.exe

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown

HTTPS traffic detected: 18.154.206.90:443 -> 192.168.2.5:49705 version: TLS 1.2

Source:	Binary string: C:\Users\qt\work\qt\qtimageformats\plugins\imageformats\qtiff.pdbDD source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3341574654.000000006D10D000.00000002.00000001.01000000.00000019.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtsvg\plugins\imageformats\qsvg.pdb source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3342686574.000000006E483000.00000002.00000001.01000000.00000017.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\lib\Qt5Core.pdb source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3336788671.000000006B8A0000.00000002.00000001.01000000.0000000E.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\plugins\printsupport\windowsprintersupport.pdb"" source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3343378148.000000006E636000.00000002.00000001.01000000.00000011.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtimageformats\plugins\imageformats\qtiff.pdb source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3341574654.000000006D10D000.00000002.00000001.01000000.00000019.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\plugins\imageformats\qico.pdb source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3342958874.000000006E494000.00000002.00000001.01000000.00000015.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\plugins\imageformats\qgif.pdb source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3343959634.0000000073AF5000.00000002.00000001.01000000.00000013.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\plugins\printsupport\windowsprintersupport.pdb source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3343378148.000000006E636000.00000002.00000001.01000000.00000011.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtimageformats\plugins\imageformats\qtga.pdb source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3342444220.000000006E473000.00000002.00000001.01000000.00000018.sdmp
Source:	Binary string: *.pdbom source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3328580153.0000000003E40000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtsvg\lib\Qt5Svg.pdb source: FM100_HueTest_32-bit_v407.tmp, 00000005.00000003.2441887140.0000000006084000.00000004.00001000.00020000.00000000.sdmp, Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3340397822.000000006C377000.00000002.00000001.01000000.0000000A.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtimageformats\plugins\imageformats\qicns.pdb source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3343698383.000000006E646000.00000002.00000001.01000000.00000014.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\plugins\imageformats\qgif.pdb!! source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3343959634.0000000073AF5000.00000002.00000001.01000000.00000013.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\lib\Qt5Sql.pdb source: FM100_HueTest_32-bit_v407.tmp, 00000005.00000003.2441887140.0000000006084000.00000004.00001000.00020000.00000000.sdmp, Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3337858411.000000006B9A9000.00000002.00000001.01000000.0000000D.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\plugins\styles\qwindowsvistastyle.pdb%% source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3335932267.000000006B2E6000.00000002.00000001.01000000.00000010.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\plugins\styles\qwindowsvistastyle.pdb source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3335932267.000000006B2E6000.00000002.00000001.01000000.00000010.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\lib\Qt5PrintSupport.pdb44 source: FM100_HueTest_32-bit_v407.tmp, 00000005.00000003.2441887140.0000000006084000.00000004.00001000.00020000.00000000.sdmp, Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3340661810.000000006C3BC000.00000002.00000001.01000000.00000009.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtimageformats\plugins\imageformats\qwebp.pdb source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3341266574.000000006D0C3000.00000002.00000001.01000000.0000001B.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\plugins\imageformats\qico.pdb"" source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3342958874.000000006E494000.00000002.00000001.01000000.00000015.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\lib\Qt5Sql.pdb22 source: FM100_HueTest_32-bit_v407.tmp, 00000005.00000003.2441887140.0000000006084000.00000004.00001000.00020000.00000000.sdmp, Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3337858411.000000006B9A9000.00000002.00000001.01000000.0000000D.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\lib\Qt5Gui.pdb source: FM100_HueTest_32-bit_v407.tmp, 00000005.00000003.2441887140.0000000006084000.00000004.00001000.00020000.00000000.sdmp, Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3339507279.000000006C11B000.00000002.00000001.01000000.0000000B.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\plugins\sqldrivers\qsqlite.pdb source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3340982635.000000006D04F000.00000002.00000001.01000000.0000001F.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\lib\Qt5PrintSupport.pdb source: FM100_HueTest_32-bit_v407.tmp, 00000005.00000003.2441887140.0000000006084000.00000004.00001000.00020000.00000000.sdmp, Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3340661810.000000006C3BC000.00000002.00000001.01000000.00000009.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\plugins\imageformats\qjpeg.pdbTT source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3341849568.000000006E225000.00000002.00000001.01000000.00000016.sdmp
Source:	Binary string: <glob pattern="*.pdb"/> source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000003.2614217945.0000000003C19000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\plugins\sqldrivers\qsqlite.pdb!! source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3340982635.000000006D04F000.00000002.00000001.01000000.0000001F.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtsvg\lib\Qt5Svg.pdb,, source: FM100_HueTest_32-bit_v407.tmp, 00000005.00000003.2441887140.0000000006084000.00000004.00001000.00020000.00000000.sdmp, Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3340397822.000000006C377000.00000002.00000001.01000000.0000000A.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\lib\Qt5Widgets.pdb source: FM100_HueTest_32-bit_v407.tmp, 00000005.00000003.2441887140.0000000005F20000.00000004.00001000.00020000.00000000.sdmp, Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3338337083.000000006BC76000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\plugins\platforms\qwindows.pdb source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3336232454.000000006B3D2000.00000002.00000001.01000000.0000000F.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\plugins\imageformats\qjpeg.pdb source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3341849568.000000006E225000.00000002.00000001.01000000.00000016.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtimageformats\plugins\imageformats\qwbmp.pdb source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3342199429.000000006E463000.00000002.00000001.01000000.0000001A.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\lib\Qt5Core.pdbE source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3336788671.000000006B8A0000.00000002.00000001.01000000.0000000E.sdmp
Source:	Binary string: *.pdbA source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3329141458.0000000003FD9000.00000004.00000020.00020000.00000000.sdmp

Source: unknown

UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic

HTTP traffic detected: GET /downloads/software/FM100_Scoring_SW/v4.0.7/FM100_HueTest_32-bit_v407.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like GeckoAccept: */*Accept-Encoding: identityHost: downloads.xrite.comConnection: Keep-Alive

Source: global traffic

DNS traffic detected: DNS query: downloads.xrite.com

Source: wget.exe, 00000002.00000003.2085211195.0000000000BBE000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2085211195.0000000000BB6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: wget.exe, 00000002.00000003.2085211195.0000000000BBE000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2085211195.0000000000BB6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: wget.exe, 00000002.00000003.2085211195.0000000000BBE000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2085211195.0000000000BB6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: wget.exe, 00000002.00000003.2085211195.0000000000BBE000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2085211195.0000000000BB6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: wget.exe, 00000002.00000003.2085211195.0000000000BBE000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2085211195.0000000000BB6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3332138336.00000000044B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ns.adob
Source: wget.exe, 00000002.00000003.2085211195.0000000000BBE000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2085211195.0000000000BB6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: wget.exe, 00000002.00000003.2085211195.0000000000BBE000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2085211195.0000000000BB6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0A
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3332502972.0000000005EAF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://purl.or
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3332502972.0000000005EAF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://purl.ora
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3332502972.0000000005EAF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://purl.orc
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3332502972.0000000005EAF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://purl.ore
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3332502972.0000000005EAF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://purl.ori
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3332502972.0000000005EAF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://purl.orm
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3332502972.0000000005EAF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://purl.oro
Source: wget.exe, 00000002.00000003.2088683896.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2085211195.0000000000BBE000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000002.2089360796.0000000000BC5000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2085211195.0000000000BB6000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2088435716.0000000000BC1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://s.symcb.com/universal-root.crl0
Source: wget.exe, 00000002.00000003.2088683896.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2085211195.0000000000BBE000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000002.2089360796.0000000000BC5000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2085211195.0000000000BB6000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2088435716.0000000000BC1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://s.symcd.com06
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000003.2614217945.0000000003C19000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://schema.omg.org/spec/XMI/2.0
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000003.2614217945.0000000003C19000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://schema.omg.org/spec/XMI/2.1
Source: splwow64.exe, 00000008.00000003.2506250353.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2534302490.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2549917292.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2513415515.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2544933218.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2548147285.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2512905032.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2578310209.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2506796712.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2535982708.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2584655420.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2577835325.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2545567719.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2533562085.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2520330402.000000000294F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://schemas.mi
Source: splwow64.exe, 00000008.00000003.2579412835.00000000028F5000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2593636496.00000000028F3000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2579930612.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2597157108.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2535204974.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000002.3326083470.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2506250353.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2518682433.00000000028E4000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2506434588.00000000028E8000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2608306612.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2595746792.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2525603369.00000000028F3000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2513415515.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2544933218.00000000028F3000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2492316502.00000000028FD000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2609479214.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2493584348.00000000028FD000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2604952735.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2491268495.00000000028F3000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2512905032.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2545567719.00000000028F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://schemas.mic
Source: splwow64.exe, 00000008.00000003.2492316502.00000000028FD000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2491268495.00000000028F3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://schemas.mic(F
Source: splwow64.exe, 00000008.00000003.2579412835.00000000028F5000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2593636496.00000000028F3000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2579930612.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2597157108.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2535204974.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000002.3326083470.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2518682433.00000000028E4000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2506434588.00000000028E8000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2608306612.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2595746792.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2525603369.00000000028F3000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2544933218.00000000028F3000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2492316502.00000000028FD000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2609479214.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2493584348.00000000028FD000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2604952735.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2491268495.00000000028F3000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2545567719.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2577978016.00000000028F5000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2584588002.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2594479858.00000000028F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://schemas.mic9F
Source: splwow64.exe, 00000008.00000003.2492399926.00000000028EF000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2492788331.00000000028EF000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2491859868.00000000028EA000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2497392107.00000000028EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://schemas.micr
Source: splwow64.exe, 00000008.00000003.2611416572.0000000003063000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2611932827.0000000003063000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2537713024.0000000003063000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2552522173.000000000305F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2598304042.0000000003063000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2552797492.0000000003061000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2537146223.0000000003062000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2537211176.0000000003063000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2583177981.0000000003063000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2510833832.0000000002E93000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2510347400.0000000002E92000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2510408064.0000000002E93000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2582372266.0000000003063000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2597865510.0000000003063000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://schemas.micro
Source: splwow64.exe, 00000008.00000003.2492316502.00000000028FD000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2493584348.00000000028FD000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2491268495.00000000028F3000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2497392107.00000000028FD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://schemas.microso
Source: splwow64.exe, 00000008.00000003.2492399926.00000000028EF000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2491859868.00000000028EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://schemas.microsof
Source: splwow64.exe, 00000008.00000003.2549917292.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2548147285.000000000294F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://schemas.microsoft.indows/2015/02/printing/printschemakeywords/microsoftprinttopdf
Source: wget.exe, 00000002.00000003.2088683896.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2085211195.0000000000BBE000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000002.2089360796.0000000000BC5000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2085211195.0000000000BB6000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2088435716.0000000000BC1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ts-aia.ws.symantec.com/sha256-tss-ca.cer0(
Source: wget.exe, 00000002.00000003.2088683896.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2085211195.0000000000BBE000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000002.2089360796.0000000000BC5000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2085211195.0000000000BB6000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2088435716.0000000000BC1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ts-crl.ws.symantec.com/sha256-tss-ca.crl0
Source: wget.exe, 00000002.00000003.2088683896.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2085211195.0000000000BBE000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000002.2089360796.0000000000BC5000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2085211195.0000000000BB6000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2088435716.0000000000BC1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ts-ocsp.ws.symantec.com0;
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000003.2614217945.0000000003C19000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.abisource.com/awml.dtd
Source: FM100_HueTest_32-bit_v407.tmp, 00000005.00000003.2441887140.0000000006084000.00000004.00001000.00020000.00000000.sdmp, Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3339507279.000000006C11B000.00000002.00000001.01000000.0000000B.sdmp	String found in binary or memory: http://www.aiim.org/pdfa/ns/id/
Source: FM100_HueTest_32-bit_v407.tmp, 00000005.00000003.2441887140.0000000006084000.00000004.00001000.00020000.00000000.sdmp, Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3339507279.000000006C11B000.00000002.00000001.01000000.0000000B.sdmp	String found in binary or memory: http://www.color.org)
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000003.2614217945.0000000003C19000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.daa.com.au/~james/dia-shape-ns
Source: wget.exe, 00000002.00000003.2085211195.0000000000BBE000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2085211195.0000000000BB6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.digicert.com/CPS0
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3325569603.0000000001203000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.freedesktop.org/standards/sha
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000003.2614217945.0000000003C19000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.freedesktop.org/standards/shared-mime-info
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000003.2614217945.0000000003C19000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.gribuser.ru/xml/fictionbook/2.0
Source: FM100_HueTest_32-bit_v407.exe, 00000004.00000003.2107075735.0000000002520000.00000004.00001000.00020000.00000000.sdmp, FM100_HueTest_32-bit_v407.exe, 00000004.00000003.2107309173.000000007FD20000.00000004.00001000.00020000.00000000.sdmp, FM100_HueTest_32-bit_v407.tmp, 00000005.00000000.2108000988.0000000000401000.00000020.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.innosetup.com/
Source: FM100_HueTest_32-bit_v407.exe, 00000004.00000000.2105956847.0000000000401000.00000020.00000001.01000000.00000003.sdmp	String found in binary or memory: http://www.jrsoftware.org/ishelp/index.php?topic=setupcmdlineSetupU
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000003.2614217945.0000000003C19000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.lysator.liu.se/~alla/dia/
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000003.2614217945.0000000003C19000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.metalinker.org/
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000003.2614217945.0000000003C19000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000003.2614217945.0000000003C19000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.opengis.net/gml/3.2
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000003.2614217945.0000000003C19000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.opengis.net/kml/2.2
Source: FM100_HueTest_32-bit_v407.exe, 00000004.00000003.2107075735.0000000002520000.00000004.00001000.00020000.00000000.sdmp, FM100_HueTest_32-bit_v407.exe, 00000004.00000003.2107309173.000000007FD20000.00000004.00001000.00020000.00000000.sdmp, FM100_HueTest_32-bit_v407.tmp, 00000005.00000000.2108000988.0000000000401000.00000020.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.remobjects.com/ps
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000003.2614217945.0000000003C19000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.topografix.com/GPX/1/0
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000003.2614217945.0000000003C19000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.topografix.com/GPX/1/1
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3332138336.00000000044B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.w3.
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000003.2614217945.0000000003C19000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://xspf.org/ns/0/
Source: wget.exe, 00000002.00000003.2088683896.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2085211195.0000000000BBE000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000002.2089360796.0000000000BC5000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2085211195.0000000000BB6000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2088435716.0000000000BC1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://d.symcb.com/cps0%
Source: wget.exe, 00000002.00000003.2088683896.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2085211195.0000000000BBE000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000002.2089360796.0000000000BC5000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2085211195.0000000000BB6000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2088435716.0000000000BC1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://d.symcb.com/rpa0
Source: wget.exe, 00000002.00000003.2088683896.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2085211195.0000000000BBE000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000002.2089360796.0000000000BC5000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2085211195.0000000000BB6000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2088435716.0000000000BC1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://d.symcb.com/rpa0.
Source: wget.exe, 00000002.00000002.2089379637.0000000000CE8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://downloads.xrite.com/downloads/software/FM100_Scoring_SW/v4.0.7/FM100_H
Source: wget.exe, 00000002.00000002.2089509546.00000000013B5000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2088435716.0000000000BC1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://downloads.xrite.com/downloads/software/FM100_Scoring_SW/v4.0.7/FM100_HueTest_32-bit_v407.exe
Source: FM100_HueTest_32-bit_v407.tmp, 00000005.00000003.2109027993.00000000031B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.xrite.com/
Source: FM100_HueTest_32-bit_v407.exe, 00000004.00000003.2451203509.0000000002291000.00000004.00001000.00020000.00000000.sdmp, FM100_HueTest_32-bit_v407.tmp, 00000005.00000003.2446466511.00000000022BA000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.xrite.com/1
Source: FM100_HueTest_32-bit_v407.tmp, 00000005.00000003.2446466511.00000000022BA000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.xrite.com/q

Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705

Source: unknown

HTTPS traffic detected: 18.154.206.90:443 -> 192.168.2.5:49705 version: TLS 1.2

Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe

Code function: 7_2_6B336990 ??0?$QVector@VQPointF@@@@QAE@XZ,??4QString@@QAEAAV0@ABV0@@Z,??1QString@@QAE@XZ,?utf16@QString@@QBEPBGXZ,?load@QSystemLibrary@@SAPAUHINSTANCE__@@PB_W_N@Z,GetProcAddress,NtProtectVirtualMemory,

7_2_6B336990

Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00C81251	7_2_00C81251
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00C803F0	7_2_00C803F0
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00C97380	7_2_00C97380
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00C7B450	7_2_00C7B450
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00C76C50	7_2_00C76C50
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00C6FDB0	7_2_00C6FDB0
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00C97E00	7_2_00C97E00
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00C98E20	7_2_00C98E20
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B2E1AD0	7_2_6B2E1AD0
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B2D19E0	7_2_6B2D19E0
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B2E2C40	7_2_6B2E2C40
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B2D97F0	7_2_6B2D97F0
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B2E16F0	7_2_6B2E16F0
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B2D5408	7_2_6B2D5408
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B346B20	7_2_6B346B20
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B308B50	7_2_6B308B50
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B35E970	7_2_6B35E970
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B36C970	7_2_6B36C970
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B3C2967	7_2_6B3C2967
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B35C940	7_2_6B35C940
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B3969A0	7_2_6B3969A0
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B3C48B0	7_2_6B3C48B0
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B3748A0	7_2_6B3748A0
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B3A08C0	7_2_6B3A08C0
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B36EF00	7_2_6B36EF00
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B3A2F00	7_2_6B3A2F00
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B316FA0	7_2_6B316FA0
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B396FC0	7_2_6B396FC0
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B3C4E50	7_2_6B3C4E50
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B3B2ED0	7_2_6B3B2ED0
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B378D20	7_2_6B378D20
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B366C90	7_2_6B366C90

Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: String function: 00C8B540 appears 101 times
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: String function: 00C767F0 appears 104 times
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: String function: 00C7FB10 appears 60 times
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: String function: 00CA73C0 appears 70 times

Source: FM100_HueTest_32-bit_v407.tmp.4.dr	Static PE information: Resource name: RT_RCDATA type: PE32+ executable (console) x86-64, for MS Windows
Source: FM100_HueTest_32-bit_v407.tmp.4.dr	Static PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Source: is-HFNJP.tmp.5.dr	Static PE information: Resource name: RT_RCDATA type: PE32+ executable (console) x86-64, for MS Windows
Source: is-HFNJP.tmp.5.dr	Static PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Source: wget.exe, 00000002.00000002.2089379637.0000000000CE8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: XE;.BAT;.CMD;.VBppDB
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3336788671.000000006B770000.00000002.00000001.01000000.0000000E.sdmp	Binary or memory string: com.slnishinomiya.hyogo.jpkustanai.rucom.snpassenger-association.aerocom.sotsushima.nagasaki.jpcom.stuy.comx.seisa-geek.comcom.sv

Source: classification engine

Classification label: clean10.win@11/1265@1/1

Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe

Code function: 7_2_6B332B70 ?cleanPath@QDir@@SA?AVQString@@ABV2@@Z,??1QString@@QAE@XZ,??0?$QVector@VQPointF@@@@QAE@XZ,CoCreateInstance,?cleanPath@QDir@@SA?AVQString@@ABV2@@Z,??4QUrl@@QAEAAV0@$$QAV0@@Z,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??0?$QVector@VQPointF@@@@QAE@XZ,

7_2_6B332B70

Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp

File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test

Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe

File created: C:\Users\user\Desktop\cmdline.out

Jump to behavior

Source: C:\Windows\System32\conhost.exe

Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4400:120:WilError_03

Source: C:\Users\user\Desktop\download\FM100_HueTest_32-bit_v407.exe

File created: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp

Jump to behavior

Source: C:\Users\user\Desktop\download\FM100_HueTest_32-bit_v407.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp

File read: C:\Program Files (x86)\desktop.ini

Jump to behavior

Source: C:\Windows\SysWOW64\wget.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp

Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion RegisteredOrganization

Jump to behavior

Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3340982635.000000006D04F000.00000002.00000001.01000000.0000001F.sdmp	Binary or memory string: INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3340982635.000000006D04F000.00000002.00000001.01000000.0000001F.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3340982635.000000006D04F000.00000002.00000001.01000000.0000001F.sdmp	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3340982635.000000006D04F000.00000002.00000001.01000000.0000001F.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3340982635.000000006D04F000.00000002.00000001.01000000.0000001F.sdmp	Binary or memory string: UPDATE %Q.%s SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3340982635.000000006D04F000.00000002.00000001.01000000.0000001F.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3340982635.000000006D04F000.00000002.00000001.01000000.0000001F.sdmp	Binary or memory string: CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY,parentnode);

Source: Farnsworth-Munsell 100 Hue Test.exe	String found in binary or memory: :/Images/add.png
Source: Farnsworth-Munsell 100 Hue Test.exe	String found in binary or memory: :/Images/add-selected.png
Source: Farnsworth-Munsell 100 Hue Test.exe	String found in binary or memory: <!--StartFragment-->

Source: unknown	Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /c wget -t 2 -v -T 60 -P "C:\Users\user\Desktop\download" --no-check-certificate --content-disposition --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko" "https://downloads.xrite.com/downloads/software/FM100_Scoring_SW/v4.0.7/FM100_HueTest_32-bit_v407.exe" > cmdline.out 2>&1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\wget.exe wget -t 2 -v -T 60 -P "C:\Users\user\Desktop\download" --no-check-certificate --content-disposition --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko" "https://downloads.xrite.com/downloads/software/FM100_Scoring_SW/v4.0.7/FM100_HueTest_32-bit_v407.exe"
Source: unknown	Process created: C:\Users\user\Desktop\download\FM100_HueTest_32-bit_v407.exe "C:\Users\user\Desktop\download\FM100_HueTest_32-bit_v407.exe"
Source: C:\Users\user\Desktop\download\FM100_HueTest_32-bit_v407.exe	Process created: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp "C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp" /SL5="$2048E,14043495,139776,C:\Users\user\Desktop\download\FM100_HueTest_32-bit_v407.exe"
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Process created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe "C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe"
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Process created: C:\Windows\splwow64.exe C:\Windows\splwow64.exe 12288
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\wget.exe wget -t 2 -v -T 60 -P "C:\Users\user\Desktop\download" --no-check-certificate --content-disposition --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko" "https://downloads.xrite.com/downloads/software/FM100_Scoring_SW/v4.0.7/FM100_HueTest_32-bit_v407.exe"	Jump to behavior
Source: C:\Users\user\Desktop\download\FM100_HueTest_32-bit_v407.exe	Process created: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp "C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp" /SL5="$2048E,14043495,139776,C:\Users\user\Desktop\download\FM100_HueTest_32-bit_v407.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Process created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe "C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe"	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Process created: C:\Windows\splwow64.exe C:\Windows\splwow64.exe 12288	Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wget.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wget.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wget.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wget.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wget.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wget.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wget.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wget.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wget.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wget.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wget.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wget.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\download\FM100_HueTest_32-bit_v407.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\download\FM100_HueTest_32-bit_v407.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: msimg32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: msftedit.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: windows.globalization.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: globinputhost.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: windows.ui.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: windowmanagementapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: inputhost.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: sfc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Section loaded: netutils.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: qt5printsupport.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: qt5svg.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: qt5widgets.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: qt5gui.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: qt5sql.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: qt5core.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: qt5widgets.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: qt5gui.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: qt5core.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: qt5core.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: qt5core.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: qt5core.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: netprofm.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: npmproxy.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: d3d9.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: dataexchange.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Section loaded: wintypes.dll	Jump to behavior

Source: C:\Windows\SysWOW64\wget.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{56FDF344-FD6D-11d0-958A-006097C9A090}\InProcServer32

Jump to behavior

Source: Farnsworth-Munsell 100 Hue Test.lnk.5.dr

LNK file: ..\..\..\..\..\..\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe

Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp

Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion RegisteredOwner

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp

Window found: window name: TSelectLanguageForm

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Automated click: OK
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Automated click: Next >
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Automated click: I accept the agreement
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Automated click: Next >
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Automated click: Next >
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Automated click: I accept the agreement
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Automated click: Next >
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Automated click: I accept the agreement
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Automated click: Install
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Automated click: I accept the agreement
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Automated click: Next >

Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp

File opened: C:\Windows\SysWOW64\MSFTEDIT.DLL

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:	Binary string: C:\Users\qt\work\qt\qtimageformats\plugins\imageformats\qtiff.pdbDD source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3341574654.000000006D10D000.00000002.00000001.01000000.00000019.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtsvg\plugins\imageformats\qsvg.pdb source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3342686574.000000006E483000.00000002.00000001.01000000.00000017.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\lib\Qt5Core.pdb source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3336788671.000000006B8A0000.00000002.00000001.01000000.0000000E.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\plugins\printsupport\windowsprintersupport.pdb"" source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3343378148.000000006E636000.00000002.00000001.01000000.00000011.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtimageformats\plugins\imageformats\qtiff.pdb source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3341574654.000000006D10D000.00000002.00000001.01000000.00000019.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\plugins\imageformats\qico.pdb source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3342958874.000000006E494000.00000002.00000001.01000000.00000015.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\plugins\imageformats\qgif.pdb source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3343959634.0000000073AF5000.00000002.00000001.01000000.00000013.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\plugins\printsupport\windowsprintersupport.pdb source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3343378148.000000006E636000.00000002.00000001.01000000.00000011.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtimageformats\plugins\imageformats\qtga.pdb source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3342444220.000000006E473000.00000002.00000001.01000000.00000018.sdmp
Source:	Binary string: *.pdbom source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3328580153.0000000003E40000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtsvg\lib\Qt5Svg.pdb source: FM100_HueTest_32-bit_v407.tmp, 00000005.00000003.2441887140.0000000006084000.00000004.00001000.00020000.00000000.sdmp, Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3340397822.000000006C377000.00000002.00000001.01000000.0000000A.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtimageformats\plugins\imageformats\qicns.pdb source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3343698383.000000006E646000.00000002.00000001.01000000.00000014.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\plugins\imageformats\qgif.pdb!! source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3343959634.0000000073AF5000.00000002.00000001.01000000.00000013.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\lib\Qt5Sql.pdb source: FM100_HueTest_32-bit_v407.tmp, 00000005.00000003.2441887140.0000000006084000.00000004.00001000.00020000.00000000.sdmp, Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3337858411.000000006B9A9000.00000002.00000001.01000000.0000000D.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\plugins\styles\qwindowsvistastyle.pdb%% source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3335932267.000000006B2E6000.00000002.00000001.01000000.00000010.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\plugins\styles\qwindowsvistastyle.pdb source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3335932267.000000006B2E6000.00000002.00000001.01000000.00000010.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\lib\Qt5PrintSupport.pdb44 source: FM100_HueTest_32-bit_v407.tmp, 00000005.00000003.2441887140.0000000006084000.00000004.00001000.00020000.00000000.sdmp, Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3340661810.000000006C3BC000.00000002.00000001.01000000.00000009.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtimageformats\plugins\imageformats\qwebp.pdb source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3341266574.000000006D0C3000.00000002.00000001.01000000.0000001B.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\plugins\imageformats\qico.pdb"" source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3342958874.000000006E494000.00000002.00000001.01000000.00000015.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\lib\Qt5Sql.pdb22 source: FM100_HueTest_32-bit_v407.tmp, 00000005.00000003.2441887140.0000000006084000.00000004.00001000.00020000.00000000.sdmp, Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3337858411.000000006B9A9000.00000002.00000001.01000000.0000000D.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\lib\Qt5Gui.pdb source: FM100_HueTest_32-bit_v407.tmp, 00000005.00000003.2441887140.0000000006084000.00000004.00001000.00020000.00000000.sdmp, Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3339507279.000000006C11B000.00000002.00000001.01000000.0000000B.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\plugins\sqldrivers\qsqlite.pdb source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3340982635.000000006D04F000.00000002.00000001.01000000.0000001F.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\lib\Qt5PrintSupport.pdb source: FM100_HueTest_32-bit_v407.tmp, 00000005.00000003.2441887140.0000000006084000.00000004.00001000.00020000.00000000.sdmp, Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3340661810.000000006C3BC000.00000002.00000001.01000000.00000009.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\plugins\imageformats\qjpeg.pdbTT source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3341849568.000000006E225000.00000002.00000001.01000000.00000016.sdmp
Source:	Binary string: <glob pattern="*.pdb"/> source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000003.2614217945.0000000003C19000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\plugins\sqldrivers\qsqlite.pdb!! source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3340982635.000000006D04F000.00000002.00000001.01000000.0000001F.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtsvg\lib\Qt5Svg.pdb,, source: FM100_HueTest_32-bit_v407.tmp, 00000005.00000003.2441887140.0000000006084000.00000004.00001000.00020000.00000000.sdmp, Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3340397822.000000006C377000.00000002.00000001.01000000.0000000A.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\lib\Qt5Widgets.pdb source: FM100_HueTest_32-bit_v407.tmp, 00000005.00000003.2441887140.0000000005F20000.00000004.00001000.00020000.00000000.sdmp, Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3338337083.000000006BC76000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\plugins\platforms\qwindows.pdb source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3336232454.000000006B3D2000.00000002.00000001.01000000.0000000F.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\plugins\imageformats\qjpeg.pdb source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3341849568.000000006E225000.00000002.00000001.01000000.00000016.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtimageformats\plugins\imageformats\qwbmp.pdb source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3342199429.000000006E463000.00000002.00000001.01000000.0000001A.sdmp
Source:	Binary string: C:\Users\qt\work\qt\qtbase\lib\Qt5Core.pdbE source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3336788671.000000006B8A0000.00000002.00000001.01000000.0000000E.sdmp
Source:	Binary string: *.pdbA source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3329141458.0000000003FD9000.00000004.00000020.00020000.00000000.sdmp

Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe

Code function: 7_2_6B33CDF0 ?window@QPlatformWindow@@QBEPAVQWindow@@XZ,?qgetenv@@YA?AVQByteArray@@PBD@Z,??4QByteArray@@QAEAAV0@ABV0@@Z,?toLower@QByteArray@@QGBE?AV1@XZ,??4QUrl@@QAEAAV0@$$QAV0@@Z,??1QByteArray@@QAE@XZ,?isDebugEnabled@QLoggingCategory@@QBE_NXZ,??0QMessageLogger@@QAE@PBDH00@Z,?debug@QMessageLogger@@QBE?AVQDebug@@XZ,??6QDebug@@QAEAAV0@PBD@Z,??6QDebug@@QAEAAV0@ABVQByteArray@@@Z,??1QDebug@@QAE@XZ,??BQByteArray@@QBEPBDXZ,LoadLibraryA,LoadLibraryA,??BQByteArray@@QBEPBDXZ,GetLastError,?qErrnoWarning@@YAXHPBDZZ,??1QByteArray@@QAE@XZ,??1QByteArray@@QAE@XZ,??1QByteArray@@QAE@XZ,LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

7_2_6B33CDF0

Source: is-NNQ02.tmp.5.dr	Static PE information: section name: .qtmetad
Source: is-VE6RN.tmp.5.dr	Static PE information: section name: .qtmetad
Source: is-26ESB.tmp.5.dr	Static PE information: section name: .qtmetad
Source: is-V75EJ.tmp.5.dr	Static PE information: section name: .qtmetad
Source: is-E76M3.tmp.5.dr	Static PE information: section name: .qtmetad
Source: is-80S1U.tmp.5.dr	Static PE information: section name: _RDATA
Source: is-0OA6J.tmp.5.dr	Static PE information: section name: .qtmetad
Source: is-LLB6R.tmp.5.dr	Static PE information: section name: .qtmetad
Source: is-4RL8F.tmp.5.dr	Static PE information: section name: .qtmetad
Source: is-RD8HQ.tmp.5.dr	Static PE information: section name: .qtmetad
Source: is-N8M6P.tmp.5.dr	Static PE information: section name: .qtmetad
Source: is-HH4ER.tmp.5.dr	Static PE information: section name: .qtmetad
Source: is-SV5JB.tmp.5.dr	Static PE information: section name: .qtmetad
Source: is-OSKN4.tmp.5.dr	Static PE information: section name: .qtmetad
Source: is-SPNC8.tmp.5.dr	Static PE information: section name: .qtmetad
Source: is-76014.tmp.5.dr	Static PE information: section name: .qtmetad
Source: is-76014.tmp.5.dr	Static PE information: section name: _RDATA
Source: is-1JAHE.tmp.5.dr	Static PE information: section name: .qtmetad
Source: is-2SSH6.tmp.5.dr	Static PE information: section name: .qtmetad

Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00C7A102 push dword ptr [ecx+ebx-75h]; iretd	7_2_00C7A119
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00CACC76 push ecx; ret	7_2_00CACC89
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00C7DD22 push esp; retf	7_2_00C7DD23
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00C68FFD push dword ptr [ebp+edx-75h]; iretd	7_2_00C6900B
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00C79FFC push es; retf	7_2_00C79FFD
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B2E38D0 push ecx; mov dword ptr [esp], 00000000h	7_2_6B2E38D1
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B2E50F6 push ecx; ret	7_2_6B2E5109
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B312801 pushad ; ret	7_2_6B312803

Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-DU63R.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-OSKN4.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Qt5Core.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-76014.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-HH4ER.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\qsqlodbc.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qjpeg.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Qt5Gui.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qwebp.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\printsupport\is-2SSH6.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-4RL8F.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\qsqlmysql.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qgif.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\is-VE6RN.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qtiff.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Qt5Sql.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-J5JNS.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-OIKVU.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qicns.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\printsupport\windowsprintersupport.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-IHB33.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-SPRN6.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Qt5Widgets.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-N8M6P.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-CSRRK.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Qt5PrintSupport.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\opengl32sw.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Users\user\AppData\Local\Temp\is-0R3CD.tmp\_isetup\_setup64.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qsvg.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\qsqlite.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\iconengines\is-0OA6J.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\iconengines\qsvgicon.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\libEGL.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\styles\qwindowsvistastyle.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\d3dcompiler_47.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-SPNC8.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-HFNJP.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\qsqlpsql.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Users\user\AppData\Local\Temp\is-0R3CD.tmp\_isetup\_shfoldr.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\styles\is-E76M3.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\libGLESV2.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-LLB6R.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\platforms\qwindows.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Qt5Svg.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-INFOL.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-SV5JB.tmp	Jump to dropped file
Source: C:\Users\user\Desktop\download\FM100_HueTest_32-bit_v407.exe	File created: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\platforms\is-1JAHE.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-QSTCC.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qtga.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-5HL0H.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-RD8HQ.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\is-NNQ02.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\is-26ESB.tmp	Jump to dropped file
Source: C:\Windows\SysWOW64\wget.exe	File created: C:\Users\user\Desktop\download\FM100_HueTest_32-bit_v407.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qico.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qwbmp.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\unins000.exe (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-3PPH8.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-80S1U.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\is-V75EJ.tmp	Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Farnsworth-Munsell 100 Hue Test			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	File created: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.lnk			Jump to behavior

Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe

7_2_6B33CDF0

Source: C:\Users\user\Desktop\download\FM100_HueTest_32-bit_v407.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Window / User API: foregroundWindowGot 1520	Jump to behavior
Source: C:\Windows\splwow64.exe	Window / User API: threadDelayed 5141	Jump to behavior
Source: C:\Windows\splwow64.exe	Window / User API: threadDelayed 4681	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-DU63R.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-OSKN4.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-76014.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-HH4ER.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\qsqlodbc.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qjpeg.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qwebp.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\printsupport\is-2SSH6.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-4RL8F.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\qsqlmysql.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qgif.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\is-VE6RN.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qtiff.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-OIKVU.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qicns.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\printsupport\windowsprintersupport.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-IHB33.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-SPRN6.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-N8M6P.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-CSRRK.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\opengl32sw.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\is-0R3CD.tmp\_isetup\_setup64.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qsvg.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\qsqlite.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\iconengines\is-0OA6J.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\iconengines\qsvgicon.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\libEGL.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\styles\qwindowsvistastyle.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\d3dcompiler_47.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-SPNC8.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-HFNJP.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\qsqlpsql.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\is-0R3CD.tmp\_isetup\_shfoldr.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\styles\is-E76M3.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\libGLESV2.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-LLB6R.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\platforms\qwindows.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-INFOL.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-SV5JB.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\platforms\is-1JAHE.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-QSTCC.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-5HL0H.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qtga.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-RD8HQ.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\is-NNQ02.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\is-26ESB.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qico.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\unins000.exe (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qwbmp.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-80S1U.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-3PPH8.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\is-V75EJ.tmp	Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\08070809			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\04070809			Jump to behavior

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\splwow64.exe	Last function: Thread delayed
Source: C:\Windows\splwow64.exe	Last function: Thread delayed

Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B30BBB0 GetKeyboardLayoutList followed by cmp: cmp ecx, 59h and CTI: jnbe 6B30BD32h		7_2_6B30BBB0
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B30BBB0 GetKeyboardLayoutList followed by cmp: cmp eax, ebx and CTI: jl 6B30BD14h		7_2_6B30BBB0

Source: C:\Windows\splwow64.exe	Thread delayed: delay time: 120000			Jump to behavior
Source: C:\Windows\splwow64.exe	Thread delayed: delay time: 120000			Jump to behavior

Source: FM100_HueTest_32-bit_v407.tmp, 00000005.00000003.2447738077.00000000005F0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
Source: Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3340182729.000000006C318000.00000004.00000001.01000000.0000000B.sdmp	Binary or memory string: l.?AVQEmulationPaintEngine@@
Source: wget.exe, 00000002.00000002.2089379637.0000000000CE8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: FM100_HueTest_32-bit_v407.tmp, 00000005.00000003.2447738077.00000000005F0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}ms
Source: FM100_HueTest_32-bit_v407.tmp, 00000005.00000003.2441887140.0000000006084000.00000004.00001000.00020000.00000000.sdmp, Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3340182729.000000006C318000.00000004.00000001.01000000.0000000B.sdmp	Binary or memory string: .?AVQEmulationPaintEngine@@

Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe

Code function: 7_2_00CACA47 IsProcessorFeaturePresent,memset,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

7_2_00CACA47

Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe

7_2_6B33CDF0

Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00CAC670 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	7_2_00CAC670
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00CACA47 IsProcessorFeaturePresent,memset,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	7_2_00CACA47
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00CACBDC SetUnhandledExceptionFilter,	7_2_00CACBDC
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B2E4F78 IsProcessorFeaturePresent,memset,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	7_2_6B2E4F78
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B2E512E SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	7_2_6B2E512E
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_6B3D0E08 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	7_2_6B3D0E08

Source: unknown	Process created: C:\Windows\SysWOW64\cmd.exe c:\windows\system32\cmd.exe /c wget -t 2 -v -t 60 -p "c:\users\user\desktop\download" --no-check-certificate --content-disposition --user-agent="mozilla/5.0 (windows nt 6.1; wow64; trident/7.0; as; rv:11.0) like gecko" "https://downloads.xrite.com/downloads/software/fm100_scoring_sw/v4.0.7/fm100_huetest_32-bit_v407.exe" > cmdline.out 2>&1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\wget.exe wget -t 2 -v -t 60 -p "c:\users\user\desktop\download" --no-check-certificate --content-disposition --user-agent="mozilla/5.0 (windows nt 6.1; wow64; trident/7.0; as; rv:11.0) like gecko" "https://downloads.xrite.com/downloads/software/fm100_scoring_sw/v4.0.7/fm100_huetest_32-bit_v407.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\wget.exe wget -t 2 -v -t 60 -p "c:\users\user\desktop\download" --no-check-certificate --content-disposition --user-agent="mozilla/5.0 (windows nt 6.1; wow64; trident/7.0; as; rv:11.0) like gecko" "https://downloads.xrite.com/downloads/software/fm100_scoring_sw/v4.0.7/fm100_huetest_32-bit_v407.exe"	Jump to behavior

Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe

Code function: 7_2_00CAC89D cpuid

7_2_00CAC89D

Source: C:\Windows\SysWOW64\wget.exe	Queries volume information: C:\Users\user\Desktop\download VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Queries volume information: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\platforms\qwindows.dll VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Queries volume information: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\styles\qwindowsvistastyle.dll VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Queries volume information: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\printsupport\windowsprintersupport.dll VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Queries volume information: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\iconengines\qsvgicon.dll VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Queries volume information: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qgif.dll VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Queries volume information: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qicns.dll VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Queries volume information: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qico.dll VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Queries volume information: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qwbmp.dll VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Queries volume information: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qwebp.dll VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Queries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Queries volume information: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\qsqlite.dll VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Queries volume information: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\qsqlmysql.dll VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Queries volume information: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\qsqlodbc.dll VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Queries volume information: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\qsqlpsql.dll VolumeInformation	Jump to behavior

Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe

Code function: 7_2_00CACCAE GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter,

7_2_00CACCAE

Source: C:\Windows\SysWOW64\wget.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00C94080 ?text@QLineEdit@@QBE?AVQString@@XZ,?currentText@QComboBox@@QBE?AVQString@@XZ,?number@QString@@SA?AV1@HH@Z,?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z,??0QSqlQuery@@QAE@VQSqlDatabase@@@Z,??1QString@@QAE@XZ,??0QString@@QAE@XZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QA	7_2_00C94080
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00C92140 ?append@QString@@QAEAAV1@ABV1@@Z,?number@QString@@SA?AV1@HH@Z,?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z,??0QSqlQuery@@QAE@VQSqlDatabase@@@Z,??1QString@@QAE@XZ,??0QString@@QAE@XZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,??0QVariant@@QAE@ABVQString@@@Z,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,?exec@QSqlQuery@@QAE_NXZ,?exec@QSqlQuery@@QAE_NXZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,?exec@QSqlQuery@@QAE_NXZ,?next@QSqlQuery@@QAE_NXZ,?toInt@QVariant@@QBEHPA_N@Z,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toInt@QVariant@@QBEHPA_N@Z,??1QVariant@@QAE@XZ,?next@QSqlQuery@@QAE_NXZ,??1QString@@QAE@XZ,??1QS	7_2_00C92140
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00C93140 ??0QString@@QAE@XZ,?number@QString@@SA?AV1@HH@Z,?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z,??0QSqlQuery@@QAE@VQSqlDatabase@@@Z,??1QString@@QAE@XZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,?exec@QSqlQuery@@QAE_NXZ,??1QSqlQuery@@QAE@XZ,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??1QString@@QAE@XZ,	7_2_00C93140
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00C90250 ?number@QString@@SA?AV1@HH@Z,?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z,??0QSqlQuery@@QAE@VQSqlDatabase@@@Z,??1QString@@QAE@XZ,??0QString@@QAE@XZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,??0QVariant@@QAE@H@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,?exec@QSqlQuery@@QAE_NXZ,??1QString@@QAE@XZ,??1QSqlQuery@@QAE@XZ,	7_2_00C90250
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00C90360 ?number@QString@@SA?AV1@HH@Z,?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z,??0QSqlQuery@@QAE@VQSqlDatabase@@@Z,??1QString@@QAE@XZ,??0QString@@QAE@XZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,?exec@QSqlQuery@@QAE_NXZ,??1QString@@QAE@XZ,??1QSqlQuery@@QAE@XZ,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??1QString@@QAE@XZ,	7_2_00C90360
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00C93320 ??0QString@@QAE@XZ,?number@QString@@SA?AV1@HH@Z,?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z,??0QSqlQuery@@QAE@VQSqlDatabase@@@Z,??1QString@@QAE@XZ,??4QString@@QAEAAV0@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,??0QVariant@@QAE@H@Z,??0QVariant@@QAE@H@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@H@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@H@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@H@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@H@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@H@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@H@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@H@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@H@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@H@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@H@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@H@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@H	7_2_00C93320
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00C91410 ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?number@QString@@SA?AV1@HH@Z,?addDatabase@QSqlDatabase@@SA?AV1@ABVQString@@0@Z,??1QString@@QAE@XZ,??1QString@@QAE@XZ,?setDatabaseName@QSqlDatabase@@QAEXABVQString@@@Z,?open@QSqlDatabase@@QAE_NXZ,??0QSqlDatabase@@QAE@ABV0@@Z,??0QSqlQuery@@QAE@VQSqlDatabase@@@Z,??0QString@@QAE@XZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,?exec@QSqlQuery@@QAE_NXZ,?exec@QSqlQuery@@QAE_NXZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,?exec@QSqlQuery@@QAE_NXZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,?exec@QSqlQuery@@QAE_NXZ,??4QString@@QAEAAV0@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,?exec@QSqlQuery@@QAE_NXZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,?exec@QSqlQuery@@QAE_NXZ,?next@QSqlQuery@@QAE_NXZ,??4QString@@QAEAAV0@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,??0QVariant@@QAE@H@Z,??0QVariant@@QAE@H@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@H@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@H@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@H@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@H@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@H@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@H@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$	7_2_00C91410
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00C8F5D0 ?shared_null@QMapDataBase@@2U1@B,??0QString@@QAE@XZ,?number@QString@@SA?AV1@HH@Z,?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z,??0QSqlQuery@@QAE@VQSqlDatabase@@@Z,??1QString@@QAE@XZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,?exec@QSqlQuery@@QAE_NXZ,??1QSqlQuery@@QAE@XZ,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??1QString@@QAE@XZ,	7_2_00C8F5D0
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00C906F0 ?number@QString@@SA?AV1@HH@Z,?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z,??0QSqlQuery@@QAE@VQSqlDatabase@@@Z,??1QString@@QAE@XZ,??0QString@@QAE@XZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,?exec@QSqlQuery@@QAE_NXZ,?next@QSqlQuery@@QAE_NXZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,??0QChar@@QAE@H@Z,?indexOf@QString@@QBEHVQChar@@HW4CaseSensitivity@Qt@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,??0QChar@@QAE@H@Z,?replace@QString@@QAEAAV1@VQChar@@ABV1@W4CaseSensitivity@Qt@@@Z,??1QString@@QAE@XZ,??0QString@@QAE@$$QAV0@@Z,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??1QSqlQuery@@QAE@XZ,??1QString@@QAE@XZ,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,??1QString@@QAE@XZ,??1QSqlQuery@@QAE@XZ,??1QString@@QAE@XZ,	7_2_00C906F0
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00C92700 ??0QString@@QAE@XZ,?number@QString@@SA?AV1@HH@Z,?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z,??0QSqlQuery@@QAE@VQSqlDatabase@@@Z,??1QString@@QAE@XZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,?exec@QSqlQuery@@QAE_NXZ,??1QSqlQuery@@QAE@XZ,??1QString@@QAE@XZ,??1QString@@QAE@XZ,	7_2_00C92700
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00C8F800 ??8QString@@QBE_NPBD@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?number@QString@@SA?AV1@HH@Z,?addDatabase@QSqlDatabase@@SA?AV1@ABVQString@@0@Z,??1QString@@QAE@XZ,??1QString@@QAE@XZ,?setDatabaseName@QSqlDatabase@@QAEXABVQString@@@Z,?open@QSqlDatabase@@QAE_NXZ,??4QString@@QAEAAV0@ABV0@@Z,??0QSqlDatabase@@QAE@ABV0@@Z,??0QSqlQuery@@QAE@VQSqlDatabase@@@Z,??0QString@@QAE@XZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,?exec@QSqlQuery@@QAE_NXZ,?exec@QSqlQuery@@QAE_NXZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,?exec@QSqlQuery@@QAE_NXZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,?exec@QSqlQuery@@QAE_NXZ,??4QString@@QAEAAV0@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,?exec@QSqlQuery@@QAE_NXZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,?exec@QSqlQuery@@QAE_NXZ,?next@QSqlQuery@@QAE_NXZ,??4QString@@QAEAAV0@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?append@QString@@QAEAAV1@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,??0QVariant@@QAE@H@Z,??0QVariant@@QAE@H@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@H@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@H@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@H@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@H@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@H@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@H@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4	7_2_00C8F800
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00C93C10 ?currentText@QComboBox@@QBE?AVQString@@XZ,?number@QString@@SA?AV1@HH@Z,?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z,??0QSqlQuery@@QAE@VQSqlDatabase@@@Z,??1QString@@QAE@XZ,??0QString@@QAE@XZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,??0QVariant@@QAE@H@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,?exec@QSqlQuery@@QAE_NXZ,??1QString@@QAE@XZ,??1QSqlQuery@@QAE@XZ,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??1QString@	7_2_00C93C10
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00C7DDB7 ?text@QLineEdit@@QBE?AVQString@@XZ,??4QString@@QAEAAV0@ABV0@@Z,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??1QString@@QAE@XZ,?currentText@QComboBox@@QBE?AVQString@@XZ,??8@YA_NABVQString@@0@Z,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?currentText@QComboBox@@QBE?AVQString@@XZ,??8@YA_NABVQString@@0@Z,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,?exec@QSqlQuery@@QAE_NXZ,?exec@QSqlQuery@@QAE_NXZ,?currentText@QComboBox@@QBE?AVQString@@XZ,??8@YA_NABVQString@@0@Z,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?currentText@QComboBox@@QBE?AVQString@@XZ,??8@YA_NABVQString@@0@Z,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?currentText@QComboBox@@QBE?AVQString@@XZ,??8@YA_NABVQString@@0@Z,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?currentText@QComboBox@@QBE?AVQString@@XZ,??8@YA_NABVQString@@0@Z,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?currentText@QComboBox@@QBE?AVQString@@XZ,??8@YA_NABVQString@@0@Z,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?currentText@QComboBox@@QBE?AVQString@@XZ,??8@YA_NABVQString@@0@Z,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?currentText@QComboBox@@QBE?AVQString@@XZ,??8@YA_NABVQString@@0@Z,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU	7_2_00C7DDB7
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00C7DE98 ?currentText@QComboBox@@QBE?AVQString@@XZ,??8@YA_NABVQString@@0@Z,??1QString@@QAE@XZ,??1QString@@QAE@XZ,?text@QLineEdit@@QBE?AVQString@@XZ,?currentText@QComboBox@@QBE?AVQString@@XZ,??8@YA_NABVQString@@0@Z,??1QString@@QAE@XZ,??1QString@@QAE@XZ,?text@QLineEdit@@QBE?AVQString@@XZ,??4QString@@QAEAAV0@ABV0@@Z,??1QString@@QAE@XZ,??1QString@@QAE@XZ,?currentText@QComboBox@@QBE?AVQString@@XZ,??8@YA_NABVQString@@0@Z,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,?exec@QSqlQuery@@QAE_NXZ,?exec@QSqlQuery@@QAE_NXZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,?exec@QSqlQuery@@QAE_NXZ,?shared_null@QListData@@2UData@1@B,?next@QSqlQuery@@QAE_NXZ,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,??0QString@@QAE@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??4	7_2_00C7DE98
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00C7DE66 ?text@QLineEdit@@QBE?AVQString@@XZ,??4QString@@QAEAAV0@$$QAV0@@Z,??1QString@@QAE@XZ,?currentText@QComboBox@@QBE?AVQString@@XZ,??8@YA_NABVQString@@0@Z,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,?exec@QSqlQuery@@QAE_NXZ,?exec@QSqlQuery@@QAE_NXZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,?exec@QSqlQuery@@QAE_NXZ,?shared_null@QListData@@2UData@1@B,?next@QSqlQuery@@QAE_NXZ,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,?value@QSqlQuery@@QBE?AVQVariant@@H@Z,?toString@QVariant@@QBE?AVQString@@XZ,??1QVariant@@QAE@XZ,??0QString@@QAE@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??4QString@@QAEAAV0@ABV0@@Z,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??1QString@@QAE@XZ	7_2_00C7DE66
Source: C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe	Code function: 7_2_00C91E20 ?append@QString@@QAEAAV1@ABV1@@Z,?number@QString@@SA?AV1@HH@Z,?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z,??0QSqlQuery@@QAE@VQSqlDatabase@@@Z,??1QString@@QAE@XZ,??0QString@@QAE@XZ,??4QString@@QAEAAV0@PBD@Z,?prepare@QSqlQuery@@QAE_NABVQString@@@Z,??0QVariant@@QAE@H@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,??0QVariant@@QAE@ABVQString@@@Z,?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z,?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z,??1QString@@QAE@XZ,??1QVariant@@QAE@XZ,?exec@QSqlQuery@@QAE_NXZ,??1QString@@QAE@XZ,??1QSqlQuery@@QAE@XZ,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??1QString@@QAE@XZ,??1QString@@QAE@XZ,	7_2_00C91E20

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	12 Command and Scripting Interpreter	1 Registry Run Keys / Startup Folder	1 Process Injection	2 Masquerading	OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Native API	1 DLL Side-Loading	1 Registry Run Keys / Startup Folder	2 Virtualization/Sandbox Evasion	LSASS Memory	11 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	1 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	1 Process Injection	Security Account Manager	1 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Deobfuscate/Decode Files or Information	NTDS	2 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	3 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	2 Obfuscated Files or Information	LSA Secrets	1 Application Window Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	2 System Owner/User Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	Compile After Delivery	DCSync	1 File and Directory Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	43 System Information Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://downloads.xrite.com/downloads/software/FM100_Scoring_SW/v4.0.7/FM100_HueTest_32-bit_v407.exe	0%	Avira URL Cloud	safe

Dropped Files

Source	Detection	Scanner	Link
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe (copy)	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe (copy)	0%	Virustotal	Browse
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Qt5Core.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Qt5Core.dll (copy)	0%	Virustotal	Browse
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Qt5Gui.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Qt5Gui.dll (copy)	0%	Virustotal	Browse
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Qt5PrintSupport.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Qt5PrintSupport.dll (copy)	0%	Virustotal	Browse
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Qt5Sql.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Qt5Sql.dll (copy)	0%	Virustotal	Browse
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Qt5Svg.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Qt5Widgets.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\d3dcompiler_47.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\iconengines\is-0OA6J.tmp	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\iconengines\qsvgicon.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-4RL8F.tmp	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-76014.tmp	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-HH4ER.tmp	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-LLB6R.tmp	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-N8M6P.tmp	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-OSKN4.tmp	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-RD8HQ.tmp	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-SPNC8.tmp	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-SV5JB.tmp	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qgif.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qicns.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qico.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qjpeg.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qsvg.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qtga.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qtiff.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qwbmp.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qwebp.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-3PPH8.tmp	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-5HL0H.tmp	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-80S1U.tmp	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-CSRRK.tmp	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-DU63R.tmp	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-HFNJP.tmp	3%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-IHB33.tmp	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-INFOL.tmp	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-J5JNS.tmp	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-OIKVU.tmp	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-QSTCC.tmp	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-SPRN6.tmp	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\libEGL.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\libGLESV2.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\opengl32sw.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\platforms\is-1JAHE.tmp	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\platforms\qwindows.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\printsupport\is-2SSH6.tmp	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\printsupport\windowsprintersupport.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\is-26ESB.tmp	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\is-NNQ02.tmp	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\is-V75EJ.tmp	0%	ReversingLabs
C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\is-VE6RN.tmp	0%	ReversingLabs

Source	Detection	Scanner	Label	Link
http://schemas.mi	0%	URL Reputation	safe
http://schemas.micr	0%	URL Reputation	safe
http://schemas.micro	0%	URL Reputation	safe
http://ns.adob	0%	URL Reputation	safe
http://www.innosetup.com/	0%	Avira URL Cloud	safe
http://purl.or	0%	Avira URL Cloud	safe
http://schemas.mic9F	0%	Avira URL Cloud	safe
http://www.remobjects.com/ps	0%	URL Reputation	safe
http://schemas.mic	0%	Avira URL Cloud	safe
http://xspf.org/ns/0/	0%	Avira URL Cloud	safe
http://www.metalinker.org/	0%	Avira URL Cloud	safe
http://www.daa.com.au/~james/dia-shape-ns	0%	Avira URL Cloud	safe
http://www.color.org)	0%	Avira URL Cloud	safe
http://schemas.microso	0%	Avira URL Cloud	safe
http://www.innosetup.com/	2%	Virustotal		Browse
http://www.metalinker.org/	0%	Virustotal		Browse
http://purl.ore	0%	Avira URL Cloud	safe
http://www.gribuser.ru/xml/fictionbook/2.0	0%	Avira URL Cloud	safe
http://purl.ora	0%	Avira URL Cloud	safe
http://www.topografix.com/GPX/1/1	0%	Avira URL Cloud	safe
http://purl.orc	0%	Avira URL Cloud	safe
http://www.gribuser.ru/xml/fictionbook/2.0	0%	Virustotal		Browse
http://www.topografix.com/GPX/1/0	0%	Avira URL Cloud	safe
http://xspf.org/ns/0/	0%	Virustotal		Browse
http://www.topografix.com/GPX/1/1	0%	Virustotal		Browse
http://purl.orm	0%	Avira URL Cloud	safe
http://www.daa.com.au/~james/dia-shape-ns	0%	Virustotal		Browse
http://purl.oro	0%	Avira URL Cloud	safe
http://www.abisource.com/awml.dtd	0%	Avira URL Cloud	safe
http://www.topografix.com/GPX/1/0	0%	Virustotal		Browse
http://schemas.microsoft.indows/2015/02/printing/printschemakeywords/microsoftprinttopdf	0%	Avira URL Cloud	safe
http://purl.ori	0%	Avira URL Cloud	safe
http://schemas.mic(F	0%	Avira URL Cloud	safe
http://schemas.microsof	0%	Avira URL Cloud	safe
http://www.abisource.com/awml.dtd	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
ddw46c9gijmcm.cloudfront.net	18.154.206.90	true	false		high
downloads.xrite.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://downloads.xrite.com/downloads/software/FM100_Scoring_SW/v4.0.7/FM100_HueTest_32-bit_v407.exe	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.innosetup.com/	FM100_HueTest_32-bit_v407.exe, 00000004.00000003.2107075735.0000000002520000.00000004.00001000.00020000.00000000.sdmp, FM100_HueTest_32-bit_v407.exe, 00000004.00000003.2107309173.000000007FD20000.00000004.00001000.00020000.00000000.sdmp, FM100_HueTest_32-bit_v407.tmp, 00000005.00000000.2108000988.0000000000401000.00000020.00000001.01000000.00000004.sdmp	false	2%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://xspf.org/ns/0/	Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000003.2614217945.0000000003C19000.00000004.00000020.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://schemas.mi	splwow64.exe, 00000008.00000003.2506250353.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2534302490.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2549917292.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2513415515.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2544933218.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2548147285.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2512905032.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2578310209.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2506796712.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2535982708.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2584655420.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2577835325.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2545567719.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2533562085.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2520330402.000000000294F000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schema.omg.org/spec/XMI/2.1	Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000003.2614217945.0000000003C19000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schemas.mic	splwow64.exe, 00000008.00000003.2579412835.00000000028F5000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2593636496.00000000028F3000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2579930612.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2597157108.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2535204974.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000002.3326083470.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2506250353.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2518682433.00000000028E4000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2506434588.00000000028E8000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2608306612.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2595746792.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2525603369.00000000028F3000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2513415515.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2544933218.00000000028F3000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2492316502.00000000028FD000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2609479214.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2493584348.00000000028FD000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2604952735.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2491268495.00000000028F3000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2512905032.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2545567719.00000000028F9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schema.omg.org/spec/XMI/2.0	Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000003.2614217945.0000000003C19000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schemas.mic9F	splwow64.exe, 00000008.00000003.2579412835.00000000028F5000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2593636496.00000000028F3000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2579930612.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2597157108.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2535204974.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000002.3326083470.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2518682433.00000000028E4000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2506434588.00000000028E8000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2608306612.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2595746792.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2525603369.00000000028F3000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2544933218.00000000028F3000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2492316502.00000000028FD000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2609479214.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2493584348.00000000028FD000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2604952735.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2491268495.00000000028F3000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2545567719.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2577978016.00000000028F5000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2584588002.00000000028F9000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2594479858.00000000028F9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.aiim.org/pdfa/ns/id/	FM100_HueTest_32-bit_v407.tmp, 00000005.00000003.2441887140.0000000006084000.00000004.00001000.00020000.00000000.sdmp, Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3339507279.000000006C11B000.00000002.00000001.01000000.0000000B.sdmp	false		high
http://purl.or	Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3332502972.0000000005EAF000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.jrsoftware.org/ishelp/index.php?topic=setupcmdlineSetupU	FM100_HueTest_32-bit_v407.exe, 00000004.00000000.2105956847.0000000000401000.00000020.00000001.01000000.00000003.sdmp	false		high
https://www.xrite.com/	FM100_HueTest_32-bit_v407.tmp, 00000005.00000003.2109027993.00000000031B0000.00000004.00001000.00020000.00000000.sdmp	false		high
http://www.daa.com.au/~james/dia-shape-ns	Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000003.2614217945.0000000003C19000.00000004.00000020.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://www.lysator.liu.se/~alla/dia/	Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000003.2614217945.0000000003C19000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.freedesktop.org/standards/sha	Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3325569603.0000000001203000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.metalinker.org/	Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000003.2614217945.0000000003C19000.00000004.00000020.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://schemas.micr	splwow64.exe, 00000008.00000003.2492399926.00000000028EF000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2492788331.00000000028EF000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2491859868.00000000028EA000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2497392107.00000000028EA000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.micro	splwow64.exe, 00000008.00000003.2611416572.0000000003063000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2611932827.0000000003063000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2537713024.0000000003063000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2552522173.000000000305F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2598304042.0000000003063000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2552797492.0000000003061000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2537146223.0000000003062000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2537211176.0000000003063000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2583177981.0000000003063000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2510833832.0000000002E93000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2510347400.0000000002E92000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2510408064.0000000002E93000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2582372266.0000000003063000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2597865510.0000000003063000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.color.org)	FM100_HueTest_32-bit_v407.tmp, 00000005.00000003.2441887140.0000000006084000.00000004.00001000.00020000.00000000.sdmp, Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3339507279.000000006C11B000.00000002.00000001.01000000.0000000B.sdmp	false	Avira URL Cloud: safe	low
http://ns.adob	Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3332138336.00000000044B0000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.xrite.com/1	FM100_HueTest_32-bit_v407.exe, 00000004.00000003.2451203509.0000000002291000.00000004.00001000.00020000.00000000.sdmp, FM100_HueTest_32-bit_v407.tmp, 00000005.00000003.2446466511.00000000022BA000.00000004.00001000.00020000.00000000.sdmp	false		high
https://www.xrite.com/q	FM100_HueTest_32-bit_v407.tmp, 00000005.00000003.2446466511.00000000022BA000.00000004.00001000.00020000.00000000.sdmp	false		high
http://schemas.microso	splwow64.exe, 00000008.00000003.2492316502.00000000028FD000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2493584348.00000000028FD000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2491268495.00000000028F3000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2497392107.00000000028FD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://purl.ore	Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3332502972.0000000005EAF000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.gribuser.ru/xml/fictionbook/2.0	Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000003.2614217945.0000000003C19000.00000004.00000020.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://www.w3.	Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3332138336.00000000044B0000.00000004.00000020.00020000.00000000.sdmp	false		high
http://purl.ora	Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3332502972.0000000005EAF000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.topografix.com/GPX/1/1	Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000003.2614217945.0000000003C19000.00000004.00000020.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://purl.orc	Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3332502972.0000000005EAF000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.topografix.com/GPX/1/0	Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000003.2614217945.0000000003C19000.00000004.00000020.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://downloads.xrite.com/downloads/software/FM100_Scoring_SW/v4.0.7/FM100_H	wget.exe, 00000002.00000002.2089379637.0000000000CE8000.00000004.00000020.00020000.00000000.sdmp	false		high
http://purl.orm	Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3332502972.0000000005EAF000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.abisource.com/awml.dtd	Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000003.2614217945.0000000003C19000.00000004.00000020.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://purl.oro	Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3332502972.0000000005EAF000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.freedesktop.org/standards/shared-mime-info	Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000003.2614217945.0000000003C19000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schemas.microsoft.indows/2015/02/printing/printschemakeywords/microsoftprinttopdf	splwow64.exe, 00000008.00000003.2549917292.000000000294F000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2548147285.000000000294F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://purl.ori	Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000002.3332502972.0000000005EAF000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.opengis.net/gml/3.2	Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000003.2614217945.0000000003C19000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.opengis.net/kml/2.2	Farnsworth-Munsell 100 Hue Test.exe, 00000007.00000003.2614217945.0000000003C19000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.remobjects.com/ps	FM100_HueTest_32-bit_v407.exe, 00000004.00000003.2107075735.0000000002520000.00000004.00001000.00020000.00000000.sdmp, FM100_HueTest_32-bit_v407.exe, 00000004.00000003.2107309173.000000007FD20000.00000004.00001000.00020000.00000000.sdmp, FM100_HueTest_32-bit_v407.tmp, 00000005.00000000.2108000988.0000000000401000.00000020.00000001.01000000.00000004.sdmp	false	URL Reputation: safe	unknown
http://schemas.mic(F	splwow64.exe, 00000008.00000003.2492316502.00000000028FD000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2491268495.00000000028F3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://schemas.microsof	splwow64.exe, 00000008.00000003.2492399926.00000000028EF000.00000004.00000020.00020000.00000000.sdmp, splwow64.exe, 00000008.00000003.2491859868.00000000028EA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
18.154.206.90	ddw46c9gijmcm.cloudfront.net	United States		16509	AMAZON-02US	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431062
Start date and time:	2024-04-24 14:26:28 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 8m 58s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	urldownload.jbs
Sample URL:	https://downloads.xrite.com/downloads/software/FM100_Scoring_SW/v4.0.7/FM100_HueTest_32-bit_v407.exe
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean10.win@11/1265@1/1
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 39 Number of non-executed functions: 194

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded domains from analysis (whitelisted): www.bing.com, fs.microsoft.com, ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

Time	Type	Description
14:27:59	API Interceptor	224749x Sleep call for process: splwow64.exe modified
14:28:16	API Interceptor	387x Sleep call for process: Farnsworth-Munsell 100 Hue Test.exe modified

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3560960
Entropy (8bit):	7.748509866135479
Encrypted:	false
SSDEEP:	49152:IiSzhrWhrJhrSdDdmduQoGUVyOf/+LUxHtC5hGhhudDdmjuQoGUVyOfojioV:IttmdJRUVhf/+LUNtUhOSmjJRUVhfy
MD5:	37D045BEFB2167D772D5C234869304EE
SHA1:	D1FE03A6B0BF746C6456C209884734A17A4A1C9C
SHA-256:	B0B45A18FBF25B142D447C734DDD5FD84AD2CA6E22E1027737247FD26D43F1BC
SHA-512:	12430A1023C9A963619D85020CF8244F21E037E59CB7C2880A266D5201D2F198CBB5A3849A832A4395D0D1D1B2706AF4E20DFC2D5591170A94F61ADE9EA71F45
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......4f^Np.0.p.0.p.0.y...\|.0.KY3.r.0.KY5.j.0.KY4.}.0.KY1.t.0..Y1.}.0..u1.t.0.p.1...0..Y5.T.0..Y..q.0.p...q.0..Y2.q.0.Richp.0.........PE..L...xi.d.................f....0.....f.............@..........................p6.....>.6...@.................................4v,.T.....-..............66.. ....5.....0.+.............................P.+.@............................................text....e.......f.................. ..`.rdata....'.......'..j..............@..@.data...@....p-......P-.............@....gfids..H.....-......Z-.............@..@.rsrc.........-......\-.............@..@.reloc........5......v5.............@..B................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm0001.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	417
Entropy (8bit):	5.368072804887997
Encrypted:	false
SSDEEP:	6:B8FQk+Hryft1q2Q8EevWR0NNEXW0Yf1J3R90M0iNMeql201gr1L4cgCSnGcgU29I:BMQkzLq2Q8Eepfn0M0sMeqRqr1IA6
MD5:	DE5B06A0AA5A9AB8E2D816942493C781
SHA1:	3A7D7E698C6DB16A5BAA47A31167359C4C004005
SHA-256:	A287C3779354F2DC8C843D9948580C945DB8584774E1D9B4574910E91EFA35F2
SHA-512:	8BFC2FA9BDDB25494CD1B64F15C760E795217207C9F14F104CA1CB6F300E056BBF9D661893538FF4B3D3691F16C203906F7D4CEDA5BE4769D73D2D710AEDC29D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Contents</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H1>Contents</H1>..<P><A HREF="fm34xa.htm">Color Vision</A></P>..<P><A HREF="fm4eus.htm">The FM Hue Test</A></P>..<P><A HREF="fm00c1.htm">The FM Hue Test Scoring Software</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm00c1.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	636
Entropy (8bit):	5.400055084866752
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfPNj0sMeq629MIWjd8RMAUBj9vjJCB:WlSZ6Nj23MIWj2RML97JM
MD5:	4732EBBE27066917BCB1809B84AC84E3
SHA1:	1DB014BCCD50109BEEAB3332BD41864C04EA6197
SHA-256:	A6EEE3CE49B685160C8FA9E6004C92EFB8FEA625F4A56A93C0035C522FB8E3C2
SHA-512:	E19384CAC6BC6557DBF4EBEEF03C257D09FFAB0FCA74A8F547EDF5224A2B063E4C79EAFDEA9FCA0F03E5E27405452C586F3E61EE8B8EE80B880785D5F981AD84
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>The FM Hue Test Program</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="n_46v1"></A>The FM Hue Test Scoring Software</H3>..<P><A HREF="fm3rcn.htm">Overview</A></P>..<P><A HREF="fm36re.htm">Entering data</A></P>..<P><A HREF="fm4eox.htm">Displaying data</A></P>..<P><A HREF="fm7n8x.htm">Printing data</A></P>..<P><A HREF="fm23fl.htm">Interpreting data</A></P>..<P><A HREF="fm31o3.htm">Menus</A></P>..<P><A HREF="fm3ueq.htm">The Toolbar</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm043d.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1077
Entropy (8bit):	5.1138748666165785
Encrypted:	false
SSDEEP:	24:WlSZ6OXHeJDSpojCshHMDyiGH+fJbPTyGco:qSZ6WuSeOy/HQJbrIo
MD5:	D9799E3994DEB308C66C76EEC0FD0FF3
SHA1:	BF086284DC622DB5437D3CD121253B049386D638
SHA-256:	872E06F30F56D065D2027B2F237D968491A5D09C8B6FDCBA4149BC582766B843
SHA-512:	575642E2272E3A6F47F1273303874902A36242D9E4782CEBCAEE5648BB549BE39BFAB46EEB4925325DA277592DB02060D5DA7D8D60ADB323C561669CBF14C67D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Export Name and Analysis (File Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="fm94h9"></A><I>File menu - Export Name and Analysis </I></P>..<P>The current Name and Analysis can be saved separately as Text files. This provides an easy method for exporting this information to other Windows programs.</P>..<P>Select Export Name and Analysis from the File Menu. The Save As dialog box is then displayed, allowing a path and filename to be specified.</P>..<P>The data entered as Personal Information is saved together with the analysis of the results. The information included is dependent on the Analysis options currently selected</P>..<P>This information can now be imported by most Windows wordprocessors and spreadsheet programs.</P>..<P>Name and Analysis can also be pasted directly into other Windows programs usin

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm05rb.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	840
Entropy (8bit):	5.247957805853096
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfLZsMeq6xFWVcUGQeynlMBiBdgVrfQIT8deF9K1LnS+J5TNT+x3:WlSZ6jRHmULeICIBArIPdeur7nT+d
MD5:	3D745C989EFF06AAF457C127B12455F5
SHA1:	9C8A5FB5B4E198C0829441EBFD15DAC599F6B073
SHA-256:	6D626DDD4EA1FC1CC1E12290AC8DDF1F8385C5AC259872AE63D18D75CCAAEE93
SHA-512:	DC5A1479CA2E334566C3BDEB1E6FDDDD6407125C95A5373A173E3CFCE4C49126DC1B0E855B069091A5E8B603DFA6300B1D320AD90F82DDBD7B13E27749B8DC2C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Protan confusion axes</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="ps49gg"></A><I>View color confusions for protan defects</I></P>..<P>This option is selected from the View menu of the computer program.</P>..<P>A color representation of CIE color space is displayed with isochromatic confusion lines superimposed. Colors lying along the confusion lines will tend to be confused by individuals with a protan (red) defect.</P>..<P>For more information see <A HREF="fm8siz.htm">Defective Color Vision</A></P>..<P>N.B. The colors displayed are only approximate and will vary according to the color capabilities of the monitor and display card.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm0bdx.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	575
Entropy (8bit):	5.336010030955101
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepfn0sMeqyEnA2Qg26C/ZG7RMD:WlSZ6+yEnnQQkN
MD5:	2CE217ADDD150CE9D26EDFE8DAFA2357
SHA1:	93C6FB1989AA5A93F1815E002C7671EF99F5BC4E
SHA-256:	ACAFD88794D25EC359CDC4A0DC22C78912446F5B023FBCF20E56E39A90BEBFCF
SHA-512:	1A3C62A181EF93609F1D6EE11B4D78C6D972F72B1D12AEF694438CA3F28602F6CEC3691072F4106541FC96365612033ECF8C394C120A3AA72394A35E384DB3BE
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Examples database</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="examples_database"></A><I>Examples database</I></P>..<P>A database of example results is included with this program. To view the examples:</P>..<P>Select Open Existing Database from the File menu</P>..<P>Select Example from the list of databases</P>..<P>Select the required example from the View Database Window</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm0f1q.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (1003)
Category:	dropped
Size (bytes):	3245
Entropy (8bit):	4.7739869790053175
Encrypted:	false
SSDEEP:	48:qSZ6jZWFe1Lqa+SkQJwA9Y6c3ikc8CiJxAcgKkpNyU41vCo2bwN+NzY4eGBEmlb0:r3FEeSkQJBucpiJCpZdK+NQaFAVMU
MD5:	B3F1AFC2CC8CE4D9EC8D22CE78A3DD1B
SHA1:	ED01770AD84052F85311BC5A709EBCB832FE69D6
SHA-256:	5DC0CF499A8C51C752E0BCB5FB50F061893DD4C85720ABB426C9E9CE163488CC
SHA-512:	97D8131C9D72506373573373B7EFABD703E5420E3C54F17B25B40F735D94A096D4B10F588775D78C82180B76A93B7B351DAE085CDF64F4627470A2790A8BBEF8
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Principles of Construction</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="principles_of_construction"></A>Principles of Construction</H3>..<P>An understanding of the material in this section is not necessary for the practical use of this test. However, the information is important if the test is used in connection with research in color vision.</P>..<P><I>Perceptible Color Differences</I></P>..<P>Imagine a chart made up of all possible discriminable hues - reds, greens, blues, etc., in all strengths from neutral to high purity, but all of the same brightness. If these colors were organized systematically, they would form a color array similar to that shown below. Equal distances on this diagram represent equal differences of color to the normal eye.</P>..<P><IMG SRC="../images/bm5.gif" ALT="" BORDER=0></P>..<P>

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm0j5b.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	447
Entropy (8bit):	5.323337674890775
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepf3eK0sMeqFM9GQhE2Kquz7G4e:WlSZ6foFM9Lm2sPA
MD5:	7C5DC0CB784B4B43AB8747E3F55ECE1C
SHA1:	2AF65D1460E99E57A1D056E6BF1925256A7CA392
SHA-256:	486D8A4589D88901ABAF55FA12A3248F3185039DA1797D2033259AE387EE3EFD
SHA-512:	6CE64010DFDF2184CA842F6FB776C85631571A3F368820D87CC4ADB9859A1F38E8EDD913D60EA289CB85F70B14917CF62AD1A928AEA3D7FE5D7D1A133952F4B2
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Undo (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="edit_menu_undo"></A><I>Edit menu - Undo </I></P>..<P>This option undoes the last data entry, i.e. it returns the caps to the position that they were in prior to the last cap movement. </P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm0llx.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (544)
Category:	dropped
Size (bytes):	1944
Entropy (8bit):	4.838318020960845
Encrypted:	false
SSDEEP:	48:qSZ6jNTcHSoyz6tc3gJ0RXF/FG9cdUCwk20ZAFaUX:ruYyoyOmjRXFOcp1SFaU
MD5:	5BF473CD8F8E4B2FC9EF7758AB5A2AA4
SHA1:	19216144BAB032238B0BC870AD264B387A67D9D0
SHA-256:	752764B703F1339A905831BEDB5D5246BD49F99BCD41FF091EFD0C2499467A21
SHA-512:	5D02768A4A820827EF1B8F31F10394BE7FE0594742BBFEC5B8CE5073268DD30029DDDAB3E2F186930CCFD47A40B6AE55268DDFD2942B2507428B1E94F5BB6200
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Procedure</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="procedure"></A><I>Procedure</I></P>..<P>1.Open one case lengthwise in front of the subject so that the empty, inclined panel to which the pilot caps are fixed, is nearer the subject. The cases may be given in any order. Before being presented to the subject, the caps should be arranged in random order. A good practice to follow is to rearrange the caps after each test is administered. To do so, after the arrangement of the caps has been recorded, transfer them to the opposite panel in random order. Then close the case and turn it over. It is now ready for future testing.</P>..<P>2.Instruct the subject as follows:</P>..<P><I>The object of the test is to arrange the caps in order according to color. Please transfer them from this panel (indicate) to this pan

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm120e.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	677
Entropy (8bit):	5.328663374099687
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfXNr50sMeq7p5rhGQeynlJTv7k9K1LnS+J5TNT+x3:WlSZ6/f2NLeIDAsr7nT+d
MD5:	05B017E05F9FEFC2F641E0FB97323A1F
SHA1:	B7F68148D267AA727F1BD08849D2360D3422BD77
SHA-256:	BF7A69D6E9B4AEA73A5D9E84B521CFA07B577BC52BAB20E5C4FFF7699E0E2634
SHA-512:	55D07E73EE99C5BE327F3AA8D52084654838A23FCABC459175ED7B3E33CCBBA7B570AED8FEB45374A120DD228FFAEC95FD76C744373FF8AC41A664C5018B36E7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>CIE Chromaticity Diagram</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="3o1s_zn"></A><I>View CIE Chromaticity Diagram</I></P>..<P>This option is selected from the View menu of the computer program.</P>..<P>A color representation of CIE color space is displayed.</P>..<P>For more information see <A HREF="fm1nug.htm">Color discrimination</A></P>..<P>N.B. The colors displayed are only approximate and will vary according to the color capabilities of the monitor and display card.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm1nug.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (335)
Category:	dropped
Size (bytes):	923
Entropy (8bit):	5.294460497061449
Encrypted:	false
SSDEEP:	24:WlSZ6/mAaCMZurAF3lPoKTJkRI88pVxu2s:qSZ6+AVMZurAF3lPfJkQxu2s
MD5:	697EABBD397BCB3F0E518CC5D71F8665
SHA1:	79DDEC0A5E0B8AC160E44080744D6DA0E2DAB6FA
SHA-256:	2745476DC843A0631F14A4554D36EA5986CA947A2E1F018D3511F3D185D57BC9
SHA-512:	243CB0ABA5C40911C652D3E9D22A2BAAE2B1B968D0B34E6D871B38BF0E91D174C7E9BFE62E268BCAC8DBA52E511360302D53A01552F4121C9C18F5CDF352CEF8
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Color discrimination - Basics</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="3i08098"></A>Color Discrimination Basics</H3>..<P>Before considering the various forms of color deficiency, it is necessary to understand the basics of color discrimination.</P>..<P>In order to discriminate between different wavelengths, two or more photoreceptors with different but overlapping spectral absorption are required. To understand why this is so, consider the situation for individuals with one, two and three types of photopigment - known as monochromats, dichromats and trichromats respectively.</P>..<P><A HREF="fm7lkj.htm">Monochromats</A></P>..<P><A HREF="fm4r8z.htm">Dichromats</A></P>..<P><A HREF="fm7243.htm">Trichromats</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm1oxg.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (765)
Category:	dropped
Size (bytes):	3135
Entropy (8bit):	4.693350362602618
Encrypted:	false
SSDEEP:	48:qSZ62i0MKM4E/6ugJl81SIeXAenAeb58KYv17ZzVj3jtX4aGUOESP:rRjbM4xkS3XAenAecZFhIa9SP
MD5:	C3A78B42905BD2A6A610B253FDEEF4C8
SHA1:	6908EFB6662DC972F0CB7BC1B4E7CEA3A370B900
SHA-256:	EC543C234BD8824D19802FA63A8FD04E9F4EF24C225BE88B513D2E076A23D889
SHA-512:	01F2F2E4DF713D03444CB9BB2DFE1D07AE6A8FBAF8D4BC91864F9FC7AA2F45A846239A2F8C7EB86D97F1E94629E90CE815C50798CF77709A00348CF20A85174D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>How do color defectives see the world?</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="9ov7m4"></A><I>How do color defectives see the world?</I></P>..<P>The effects of a color deficiency on visual performance in the real world depends on the type and severity of the defect. A person with slight deuteranomaly may have some difficulty differentiating between certain colors, particularly when they are pale or desaturated, but the condition is unlikely to be a significant handicap. In contrast, dichromats have significant problems differentiatiating between a wide range of colors and any tasks which involve choosing between these colors will be difficult or impossible to carry out.</P>..<P>Protans and deutans (both anomalous trichromats and dichromats) share a common difficulty with the red-orange-yellow-green range

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm1xf2.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	936
Entropy (8bit):	5.2263641952779745
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfQK0sMeqOib+FwuW/96hTMtnyVpRRet3RFCOTE4k+yUdU3Ty5b0:WlSZ6iOpqbUpojCOg+3kTyQBco
MD5:	B14F7D134FCA742BFF10511E8CACD851
SHA1:	378B018F1992715FBEF1B939A2AFDFE574A828AA
SHA-256:	9AFC217EE065D34FCE92381DAD8B74BA468D732C31C1EEA62671FDDDA1C3DDCA
SHA-512:	C260657BAE77E8D0776E165F97EAC5326F62E31224603FC8C4E1FF605A407D2B752EE3CBAD08A277752DEE3DDCE21C5D9E3598A5E99D8D504A4E17597C495562
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Export Graph (File Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="0x.kg."></A><I>File menu - Export Graph </I></P>..<P>Polar and linear graphs can be saved individually as Bitmap (BMP) files. This provides an easy method for including plots in reports prepared using other Windows programs.</P>..<P>Select Export Graph from the File Menu and then select Polar or Linear from the sub menu. The Save As dialog box is then displayed, allowing a path and filename to be specified.</P>..<P>The graph can now be viewed and edited using most Bitmap editors (e.g. Paintbrush) and imported by most Windows wordprocessors.</P>..<P>Graphs can also be pasted directly into other Windows programs using the Copy Graph option from the Edit Menu.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm1zg9.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (725)
Category:	dropped
Size (bytes):	1610
Entropy (8bit):	5.268377430514314
Encrypted:	false
SSDEEP:	24:WlSZ6WoN61vB6OpxoTpHR42GBlhw88tVkTgTGz+XymidQ1ZXidc9Nidw9idg+:qSZ6ovIOpxoTpVGbybirQec9swcg+
MD5:	2D77A45149481A8EC3A96F07AD680BB4
SHA1:	C034CCE21CBF3476321F5BE199602FFB9BEEE6A4
SHA-256:	9DD621E79484281AA3254A76C649B61322077EDEBFB72F7C44E74462045A0744
SHA-512:	971514B584A074F8996E8367BFF105D38A54CDC699102B6A94380A798D1E745D6865C309A71652297859531E472C64E829A62492AF872F6A666037E9F4F97FF7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Anomalous Trichromacy</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="anomalous_trichromacy"></A><I>Anomalous trichromacy</I></P>..<P>Anomalous trichromats have three cone photopigments and like normal trichromats, require three colors to match all spectral hues. However, the relative proportions of the three primaries required to make a color match are anomalous implying that one or more of the cone photopigments has abnormal absorption characteristics. The terms used are protanomalous, deuteranomalous and tritanomalous to describe the presence of abnormal 'red', 'green' and 'blue' photopigment respectively. Anomalous trichromats do not accept color matches made by normal trichromats and may not accept matches made by other anomalous trichromats in the same category. The severity of the defect also varies signif

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm23fl.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	680
Entropy (8bit):	5.3881807823176375
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfRfdsMeqJGXdmfElVHc4d9XLYjkdJAtYX3HMyl:WlSZ6/Yt9V8iLYodStuXjl
MD5:	04E3F9E6409D85862B06CB1F025DBF7E
SHA1:	D02CB6EAA0EE42B13CAC5064504799F783CB6C3A
SHA-256:	B4AC799F1725E4A46B396F10757CDDB93498D3E0DD63A24A4BD30B7F140D0327
SHA-512:	B2C519126A2F6C1F4FBAE33BBBD557660E267209862D583F3342E4B2F56D08335A4B228434FB7E756FF388673C9945B44207E5F588DAD1689DECDC7D4E5E17CB
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Interpreting Data</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="interpreting_data"></A><I>Interpreting Data</I></P>..<P>After the pattern has been plotted, there are various methods of interpreting the results, depending upon the information wanted from the test.</P>..<P><A HREF="fm2xpq.htm">Classification</A></P>..<P><A HREF="fm4c81.htm">Normative Data</A></P>..<P><A HREF="fm7z8q.htm">Identifying Color Vision Deficiencies</A></P>..<P><A HREF="fm9sfm.htm">Analysis Options</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm26k5.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	587
Entropy (8bit):	5.294553446122531
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepfc01jsMeqPAiL14F0x21yGoNlJqjy/Y17WDbTjsET:WlSZ6f1ft1IP1yGoPJwp176bTBT
MD5:	E44592203D952AFCEB6061CED401D71D
SHA1:	45A2B20E34265662B78497EDF9ED13D2596CE54E
SHA-256:	C721733B3E4DCDB5A90B840A5DDA15D475E172BF9645906698D0B9D22CB13E7A
SHA-512:	787C3F3370EE83AA8883EF8E7D36156D6A9CAF3549616273370B0A8DFF9529311AF61104F033F74B0CEEFD1D2D2D4E824DB71A7FB9BEA0FA818EB52D8B2DD368
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Square Root Total Error Score</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="euxqgu"></A><I>Square Root of Total Error Score</I></P>..<P>The distribution of Total Error Scores in a population tends to be skewed. However, by taking the Square Root of the Total Error Score a more symmetrical distribution is obtained. For this reason, the square root is often used in statistical analyses.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm29bn.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (325)
Category:	dropped
Size (bytes):	893
Entropy (8bit):	5.201736125486845
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfnpsMeqHTIwAZgyYEbnta/JtL+2RQVv0fZFRAEVqNp1E3JErkFk:WlSZ6/BzIw8glEbnWzQVv0f7RAE+kJ6
MD5:	192678FC93132D6D07FF49536B8606BC
SHA1:	752224EFC3C46404545EAEF9980BA0968A425FF1
SHA-256:	404CC56C64E1509993930094858A2CE320F480827F897DBF8FA7F50BB94CAAE7
SHA-512:	66940366BD203AF8910A9114C061EA44AECC724EB0DD21840D9F3BCFC963E224DD917C01FFAF42357A647DA0F7E0615990F778D02B2AA3893DE926312AB27DDA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Confusion axes</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H4><A NAME="confusion_axes"></A><I>Displaying Confusion Axes</I></H4>..<P>Data obtained for color defective individuals will show a clustering of maximum errors in two regions which are nearly opposite on the hue circle. A line drawn through these two points is referred to as the confusion axis. The orientation of the confusion axis can be used to identify the type of color defectiveness.</P>..<P>To aid diagnosis, typical confusion axes for protan deutan and tritan defects can be superimposed on the polar graph by selecting the Show Confusion Axes option.</P>..<P>See Also <A HREF="fm7z8q.htm">Identifying Color Vision Deficiencies</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm2bco.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	991
Entropy (8bit):	5.1381954562896235
Encrypted:	false
SSDEEP:	24:WlSZ6/7o1JiO9twCs6RMDyiagn2MPX3A9E:qSZ6GtZOy5gnLt
MD5:	B4C7F34EF15643AE3DB55B82472C1A89
SHA1:	8BB72A34C9DDD88817121F0F1DE97FBF5EF52393
SHA-256:	F31AF4296AB4000E34916CD3C7EB954FB9A7F2FE72D64759619BC729194A42B3
SHA-512:	00640C44B5B72CBB4C06902ECE2E43EE294F8A58D1A80E81DC08115BAE0ED2B10F4B5E4408EED16E05D3FF5A7B979850B821748D5280F73F7A4779FBDAE9CE52
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Copy Name and Analysis (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="19vjcs8"></A><I>Edit menu - Copy Name and Analysis </I></P>..<P>The current Name and Analysis can be copied to the Windows clipboard and pasted into other Windows programs.</P>..<P>Select Copy Name and Analysis from the Edit Menu.</P>..<P>The data entered as Personal Information is copied together with the analysis of the results. The information included is dependent on the Analysis options currently selected.</P>..<P>Having placed the information in the clipboard it may be copied into a Word document for example, by loading Word, placing the cursor at the desired position in the document and then selecting PASTE. This allows analysis information to be readily incorporated into pro-forma reports etc.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm2k85.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	462
Entropy (8bit):	5.32741393975773
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfP21jsMeq1u14F01YBgpoTJYW1rH:WlSZ621fA1I01CgpoTd1L
MD5:	BB6E47AEDDACFE400564D79C9F8C29F5
SHA1:	B85A393974C834DB90B53D5548272C6966646604
SHA-256:	DFA41452998146C979C9E983051F4333D9AEB2C8F0912DC524AC7FF2237EF753
SHA-512:	454758206789882233ACDF96247AB7B068FF14DAE5199832F5757254DB8E18A939A7FED04CE02872507F322DD9F937D75B317ECACC9BA058C4F545B75FD206B3
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Total Error Score</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="total_error_score"></A><I>Total Error Score</I></P>..<P>The Total Error Score is obtained by summing the (error score - 2) for each cap. Thus a perfect sequence produces a Total Error Score of zero</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm2kms.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (587)
Category:	dropped
Size (bytes):	903
Entropy (8bit):	5.155251943022798
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfHDWsMeqdCjLfwl5cZEE+EBTDB1MFtoiexMFOe9JvmKzxyWE5ix:WlSZ6vIdTBE9BTDB1Mg7MrOKzgXsQ+V
MD5:	106866B6492A36360F159961EEE2305D
SHA1:	284307C43A818C4D0F54A1EECB527BECA713C093
SHA-256:	2BB321A3622686AA758F77A180CF69BD03BBA387E248B79C498D742C1F44426A
SHA-512:	E1312B1B93E860C95239E9A333939C29271F5E64FB59E58BE863373591318C51B473A83125B45629EA3B9D93D13BC9107CB6A93AD6810087B3DB0BF6C99500BA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Opponent Theory</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="opponent"></A><I>Opponent Theory of Color Vision</I></P>..<P>In 1870, Ewald Hering, a German psychologist / physiologist proposed an alternative theory of color vision. Based on a series of subjective observations of color appearance, Hering proposed that color vision was derived from three mechanisms; one responding positively to red light and negatively to green, one responding positively to yellow and negatively to blue and a <I>brightness</I> mechanism which responds positively to light and negatively to the absence of light. This theory became known as <B>Hering</B>'<B>s theory</B> or the <B>opponent theory of color vision</B>.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm2ldj.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	923
Entropy (8bit):	5.146237749023851
Encrypted:	false
SSDEEP:	24:WlSZ6jh3KO9b7FSKvwTrumMfftGJ2Tgib49QLPx+Te:qSZ6jIVKvyrumMQsTjIQ1l
MD5:	C0E7D7EAF88C97D45D659ECF353FC18A
SHA1:	1203C792EC5D7DF2C093CFDA77AF8D25B11BC672
SHA-256:	27E7E9B41BD0563F161B52C00A24AD8AD9A941F9F7401736FCCCBE65081A5B36
SHA-512:	97F85D3D2D1FF20D3971DBD36D13CB55C1FA4BDDB62E70F72B37A75D877292A9997CDE33F45AF60F52C2491DD8F76A2CE4BA5009B9076FF8B2A2D4C001A84A5A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Print Dialog Window</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="print_dialog_window"></A><I>Print Dialog Window</I></P>..<P>The print dialog window allows the following print options to be set:</P>..<P>Number of copies - Sets the number of copies of each page to be printed.</P>..<P>Print in color - When selected, the data points are printed in color (color printers only).</P>..<P>Header - When the corresponding check box is ticked, the text contained in the text box is printed as a header at the top of each printed page. Header text is automatically saved in the program's <I>ini</I> file so does not need to be re-entered each time the program is run.</P>..<P>Setup - Allows various printer options to be modified.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm2lyr.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	805
Entropy (8bit):	5.3227461689215865
Encrypted:	false
SSDEEP:	24:WlSZ6D1qK0qC6ihT5uzk0S1nPbHkqexU0fo:qSZ6D1M75uz5S1nTEqWUEo
MD5:	40C0793E0B18A2CB53BDFD9F180B5946
SHA1:	255BBC92314FC8E93422AEDBF567EBAFF89E62B8
SHA-256:	D32B91DACC3D5CE473A20453E4F9892281A7617D005D36074D95728FCF85B43E
SHA-512:	C26530E6166E98F3CE35D69F53FBB0BAEC3F2B78161D811590EFE5A8E930CA307A4B29A0377A3DEAD6EEB7A0BD6A1DEF7F3DB8201B85B197B4931CB749587175
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Displaying Error Scores</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="displaying_error_scores"></A><I>Displaying Error Scores <IMG SRC="../images/bm18.gif" ALT="" BORDER=0></I></P>..<P>The error score for each cap is calculated from the sum of the difference between the cap number and the numbers of the caps on either side. It is these error score which are plotted on the graphs. </P>..<P>Although there is normally no need to view the error scores individually, they can be displayed by clicking on the <IMG SRC="../images/bm19.gif" ALT="" BORDER=0> icon or selecting Error Scores from the View menu.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm2u5h.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ISO-8859 text, with very long lines (390)
Category:	dropped
Size (bytes):	2172
Entropy (8bit):	4.91400865988998
Encrypted:	false
SSDEEP:	48:qSZ6jueAtTY9YLAF7mDo87vGw1mbi7mqbmImhm4LtmZNTcGVJ3I03AC:rrD+7YvGwJxbnGzGJ3Q0b
MD5:	A74F5396FE4153AA1C19002524D41A5C
SHA1:	8C7495F7D0BC6CAB889C3BCF37A8E97D97CF3C70
SHA-256:	364634A2564FFF9AEBB41EE58DD26DF5F106DE0C617EC3A3B57A6028475DCB57
SHA-512:	AAD7267E950F2C52DEB6462B16BD7084C3D2AE901A624394BCE574C7E27BB28BE51152DF1E660CC8A2A5B57F6A0FC8AE6E6460FEE3DA1DE3F1CEAF7404D2341D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Purpose of FM Hue test</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H2><A NAME="purpose"></A>Purpose of the FM Hue Test</H2>..<P><I>Primary Usage</I></P>..<P>The Farnsworth-Munsell Hue Test offers a simple method for testing color discrimination. It yields data which can be applied to many psychological and industrial problems in color vision. Its primary uses are to:</P>..<P>.Separate persons with normal color vision into classes of superior, average and low color discrimination.</P>..<P></P>..<P>.To measure the zones of color confusion of color defective persons.</P>..<P><I>Examples of Uses</I></P>..<P>.Examination of inspectors of color goods, of color graders, and of color matchers.</P>..<P>.Testing for type and degree of color defectiveness.</P>..<P></P>..<P>.Detection of poor color vision in salespeople.</P>..<P></

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm2x5t.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	863
Entropy (8bit):	5.396304068142892
Encrypted:	false
SSDEEP:	24:WlSZ6GV1lYjKvSAnwFFvoVJ7iRcKjWJlV6SfVwu:qSZ6GjlmKlnwXoH7JKCJlIYwu
MD5:	0E3BBCE46B535C167F4052B61FD5AB3E
SHA1:	A94E47F1D2AA79CFE6075F61A9755BFE270D821C
SHA-256:	CF290E1B1E012C3F4D2CBF1E4419E1248D57B7B036035434C28EA7773FFD6DFE
SHA-512:	E406103ECB688350D787262BB279BF12F9AE1E0040F49E650E559BD65880CCDD8EE936B9A361454FF7E85BF5B2F85ADE3D5B2A1D0CE65EB17674D316D2A5A823
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Filtering Data</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="filtering_data"></A><I>Filtering Data</I></P>..<P>Data can be smoothed by clicking on the Filter check box. The program uses a simple averaging algorithm described by Dain and Birch (1987). Filtering can be helpful for interpreting 'noisy' data and determining an axis of confusion for color defectives.</P>..<P>Filtering is turned off by deselecting the check box.</P>..<P><U>Refererence</U></P>..<P>Dain, S.J. and Birch, J. (1987) An averaging method for the interpretation of the Farnsworth-Munsell 100-Hue Test - I. Congenital colour vision defects. Ophthal. Physiol.Opt., Vol 7, No. 3, pp 267-280.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm2xpq.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (615)
Category:	dropped
Size (bytes):	2145
Entropy (8bit):	4.939382033556128
Encrypted:	false
SSDEEP:	48:qSZ61wjaXKAF3jUX3AFQjhXVRde9QtJHYRnBqARAfAkABAF3:ruMaXnTUX0shXV3r/HYRnB23
MD5:	72A0276B97DD44DA53691CEB2CBC6F8F
SHA1:	F90E0A1915ADE2DB6479CBD0D31F09F81C77E808
SHA-256:	C859C0B1B1890C6C10C53E0EB2377DDAE01371074356737555BC15B5A2541167
SHA-512:	1D9E9211E17806016725533CB4D03B8B5DD126CBD30C286E3B3097D7555E726267DA93347875D9E93DE16636F80B7AE5F7C1514CFB4C715513760C8CB855C77E
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Classification</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="classification"></A><I>Classification</I></P>..<P>Subjects with 'normal' color vision can be classified as follows:</P>..<P><U>Superior Discrimination</U></P>..<P>About 16% of the population (exclusive of color defectives) has been found to make 0 to 4 transpositions on first test, or total error score of zero to 16. This is the range of superior competence for color discrimination.</P>..<P><U>Average Discrimination</U></P>..<P>About 68% of the population (exclusive of color defectives) make a total error score between 20 and 100 on first tests. This is the range of normal competence for color discrimination.</P>..<P><U>Low Discrimination</U></P>..<P>About 16% of the population (exclusive of color defectives) has been found to make total error scores

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm2y9i.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	636
Entropy (8bit):	5.4145390192545175
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepf9uK0sMeqmpvMwFClLRn5wR7aZSM6SMyl:WlSZ6G5wCll5wRWZSHSjl
MD5:	441616208AA2FD5E02A9F6ED4FC67EB7
SHA1:	82792470239CE4DB05BDBDD7D0AE4106E52756C9
SHA-256:	0DBFE3BEDDF32492936675AC4B71DDC957341BA85BBB276CC6BAC47FA7BAC329
SHA-512:	5CF6A8856E47295F3E941282188D4DD5AF7A2B6E87CCE55E9F9A6C072DAA5F2561CC0391D509195B336BF67C3F75204F77BF8D1ECBFA859933B88649B3450009
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Set preferences (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME=".g2gy6"></A><I>Edit menu - Preferences</I></P>..<P>Various program options can be set by selecting Preferences from the Edit menu.</P>..<P>The Preferences form allows the program to be customised in a number of ways:</P>..<P><A HREF="fm5a7n.htm">Color Options</A></P>..<P><A HREF="fm6i4a.htm">Scoring Options</A></P>..<P><A HREF="fm9sfm.htm">Analysis Options</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm31o3.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	442
Entropy (8bit):	5.324339252115576
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfssMeqqWZyWv9XRQB9BS5U:WlSZ6WqWwYmjB8U
MD5:	ADC2880842CAB455463FBD1072E97458
SHA1:	AAAE0A8FE1C60DE08018F8AF9DB0A86FDE07FAF1
SHA-256:	4076DB50196D5AB5DB815D6612CD99B4253BD395EA1FDA3912B7BE631A1664F6
SHA-512:	035178E7F24350BC37CE9279C66C0C0EC83BC753993C024FC4D525EF53C64ED6902F25C94FBB18E74F563686B1BE1C6954DEEBD0EE60EB5C62E0930FD3CF9400
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Menus</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="menus"></A>Menus</H3>..<P><A HREF="fm8igl.htm">File menu</A></P>..<P><A HREF="fm57n9.htm">Edit menu</A></P>..<P><A HREF="fm3ncl.htm">View menu</A></P>..<P><A HREF="fm5sol.htm">Help menu</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm34xa.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	510
Entropy (8bit):	5.3959573376704855
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfnEFssMeq1+SF3qt+TI2xJCk1uZKhndeF/:WlSZ6/1pBqt+TFJP8gndeh
MD5:	89F360D3917E16DB4038FBD5F6A0F8FE
SHA1:	71E396A9BC0F5635C58A34593A2F35FF17A72F07
SHA-256:	EBCC651951C84400F6558A51ADE53178BA89EA065ED6B6F20CAB7ABCA3B9633D
SHA-512:	0BCC4D58CAE9CEFC9937707C2F83E14A5A85D0DF3EB3598D695AC7293D309FBC8A6626D85933B9EFACF97B5DADBBA74BD6F7F8883C9F170F67D33949E16C4ED2
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Color Vision</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H1><A NAME="colorvision"></A>Color Vision</H1>..<P><A HREF="fm83zi.htm">Color Perception</A></P>..<P><A HREF="fm5l0u.htm">Color Vision Theory</A></P>..<P><A HREF="fm1nug.htm">Color Discrimination BASICS</A></P>..<P><A HREF="fm8siz.htm">Defective Color Vision</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm359j.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	710
Entropy (8bit):	5.261019547793298
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepf7aWsMeqBfRSUtKJ0FjBRadpOaeNIUcOY7aPxjGf4u:WlSZ6XL/WKIPQ6f4u
MD5:	8757FE967B3B2016702801F7DFD956FE
SHA1:	2C7895603A296B7F74AC68B0CBB75A01BA998E53
SHA-256:	E47A9E1AA87B8A6CF1A2E170AE26C1AB788E896C77DF4D9D82FBFDC88D7A2C7E
SHA-512:	F4C01326DCE5D7DA776FA0ABE7BA4FA374E291D9B39210A89EDD9F74AE58C7419A00F01FEB8429BE2D930FB9AD56E42D2CAB945334C2A2EA25121F01B159FB9E
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Scoring</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="scoring"></A><I>Scoring</I></P>..<P>Scoring the FM Hue Test manually is time-consuming and somewhat tedious. The computer program has been developed to simplify and speed up the scoring process. For information on using the computer program, go to the section on the <A HREF="fm00c1.htm">FM Hue Test Scoring Software</A></P>..<P>If you do not have a PC and need to score the test manually, please contact Macbeth for a set of instructions and score sheets.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm36re.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (602), with CR line terminators
Category:	dropped
Size (bytes):	1410
Entropy (8bit):	5.14490057467229
Encrypted:	false
SSDEEP:	24:WlloCZ609xzehIDs0htrKC2DS1VWKcOVbGi62y39oG347VRyveUDDVl3eeJaZOK:qloCZ6Oz8qsatrKC8eDXdGi62Cb8A/3s
MD5:	C10886CD5FECD22821B239DF51ACFEE0
SHA1:	6F1A0DA1C6A4458962FE35B2FE0A04E5E0C5F4AE
SHA-256:	7633A224B1710353AFB3A1F7EE18622F58E392823B17606F5C74F245FE8484D0
SHA-512:	809B5FAF868EE7E5BF58E73A1696D7731F327D5E3D8C55A11ADDED37B0BA614F7B183AB00AB0A4CDB23190E46E82367608805BE383BCD6A6C022D4336BF835F9
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Entering Cap Order</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="2keizvz"></A><I>Entering Data (View/Arrange) <IMG SRC="../images/bm8.gif" ALT="" BORDER=0></I></P>..<P>The input screen is displayed by clicking on <IMG SRC="../images/bm8.gif" ALT="" BORDER=0> or selecting Data Entry Screen from the View menu.</P>..<P>The input screen shows a schematic representation of the FM-Hue test with caps arranged in four boxes.</P>..<P>Initially caps are shown in the correct numerical order. To score and analyze data obtained with the FM Hue test, the order of caps set by the subject is transferred onto the screen by simply <I>dragging</I> and <I>dropping</I> the caps on the screen. This is a standard Windows method and involves moving the mouse cursor over the cap to be moved, pressing the left mouse button and holding i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm3be6.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (1625)
Category:	dropped
Size (bytes):	2433
Entropy (8bit):	4.923089130355738
Encrypted:	false
SSDEEP:	48:qSZ60YOQquZ/JBL0EHMgh+KCoxGh6Aj2keoJ+dMtll4N99R3F:riOA/JB0CAaotlyHF
MD5:	F54225B56AD7DA48538385472CA4E2D3
SHA1:	4FD2DF530E47A3C7183DA8A0E5631E0554596A79
SHA-256:	024CE65D864FA810308156E82C27101FC1F9E3F89B2022C0FEADEFEB0DDC6A94
SHA-512:	CD8D18C22E61BE7EF527FE166D222FA059B9CF9C439E051155B260815802B58AF62B52550FA89222B4C472CA869203E8EC35103DE664F80E0992F3FADBB84550
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Modern Day Theories of Color Vision</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="modern"></A><I>Modern Day Understanding of Color Vision</I></P>..<P>It was not until almost 100 years after Young and Helmoltz originally proposed the trichromatic theory that the existence of three kinds of photopigment in cones was confirmed (Brown and Wald, 1964). Using a technique known as microspectrophotometry, evidence has been found for a short-wave receptor (blue) which absorbs light best at 419 nm, a medium-wave receptor (green) which absorbs best at 531 nm and a long-wave receptor (red) which absorbs best at 558nm (Dartnall et al, 1983). The three types of cones differ in their overall numbers and their distribution over the retina. It is estimated that the normal retina contains 54 percent medium-wavelength sensitive c

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm3fjn.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1406
Entropy (8bit):	5.087519906127907
Encrypted:	false
SSDEEP:	24:WlSZ6MaaHU2OvlToCuz0mXVRliSiRr3jxLIyLU5eYM5LeLPSMG/:qSZ6O9MlToPjFRziRrFLImgB4LgSMG/
MD5:	133C2D1C5DB25D3BA0AD7F5C3DFFC318
SHA1:	700297C8E1102561B2EF9B5968FFCBDFEC1198A5
SHA-256:	18EB93BA9F896DE2A51446353F01F1745643907FB2ED9744D20C65D40584B8C8
SHA-512:	7006F5D962E9769044B3A01C3843332A752F849A05D931D5E4F63F951A0AED650139FA121A53A0E0E2A1097391FCC12C75E8D3A2FAD11A49A9665C43D2FF6533
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>View Records</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="view_records"></A><I>Viewing records stored in the database <IMG SRC="../images/bm20.gif" ALT="" BORDER=0></I></P>..<P>Data saved in the database can be retrieved, edited and displayed by simply clicking on the database icon <IMG SRC="../images/bm21.gif" ALT="" BORDER=0> or selecting Database from the View menu. A list of the records currently held in the database will be displayed.</P>..<P>Records may be sorted according to Name, Reference, Date of Birth, Date of test, File number or Comments by clicking on the appropriate option button in the <I>Sort by</I> panel.</P>..<P>To select a patient record, click on the required record so that is highlighted and then click on the Select button. The data for the selected record will then be displayed on th

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm3ncl.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	824
Entropy (8bit):	5.398231046189484
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfMsMeqpJp2F9IDAnLEnMEI5OK5hu0sSWf1hZhhKR1s:WlSZ6GpbcIKLrrOCk0NWfPZrH
MD5:	90B964A224FF78F94A4F4F0AE9F96547
SHA1:	D664CD27287FBFAEFB1F0AC86FFA78C08348DE47
SHA-256:	F3859DCBD06528AA7AD645B9233436864F4675625633A487D8C097D5D89EA849
SHA-512:	83F4344BFC3E3978C0F10983816942D9677EFA58885F204D7BF66D47AA32FFBAFEC9D9EC42407561925FA7FC199AC12EB2FD6511AB7BC4575848463E14EF5CF4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>View Menu</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="view_menu"></A>View menu</H3>..<P><A HREF="fm36re.htm">Data entry screen</A></P>..<P><A HREF="fm2lyr.htm">Error scores</A></P>..<P><A HREF="fm6d0t.htm">Personal Information</A></P>..<P><A HREF="fm3fjn.htm">Database</A></P>..<P><A HREF="fm4two.htm">Polar graph (usual format)</A></P>..<P><A HREF="fm7560.htm">Linear graph</A></P>..<P><A HREF="fm120e.htm">Show CIE Chromaticity diagram</A></P>..<P><A HREF="fm05rb.htm">Show Protan confusion loci</A></P>..<P><A HREF="fm4srr.htm">Show Deutan confusion loci</A></P>..<P><A HREF="fm4b3b.htm">Show Tritan confusion loci</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm3rcn.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	733
Entropy (8bit):	5.257828609022488
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepfb7sMeqdzb8AFqBRcsfwS1/znULScSzMc8ITeaPZg9NbOQjEKf:WlSZ6DndzbPqkv22SOtePo0Qjjf
MD5:	BBA47CBAD6547DCF402EF5899922FB97
SHA1:	691DF9B44970B13D100BE3B73DFA69F9E8C7A5FF
SHA-256:	CE61489CC6711B7B355E92237C32D475604719288B1D16B377C3B01AA8AD14E8
SHA-512:	CCF35F758B8BA2DA49A638B68822737E179FEE732FD3757D153F5E4E2437816B2A9106D92F5C48E5C1268D124E9F1CAF15C1411E4B6651B63FF3CCBC28891216
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Overview</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="overview"></A><I>Overview</I></P>..<P>The FM Hue Test Scoring Software has been developed to speed up and simplify FM Hue Test data input (cap order) and to provide a powerful set of analytical and administrative tools.</P>..<P>Results can be saved on disc, displayed in polar or linear format and filtered / analysed according to a variety of algorithms. The program is also capable of producing high quality graphical output on a wide range of displays, printers and plotters.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm3ueq.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	951
Entropy (8bit):	5.463654319767326
Encrypted:	false
SSDEEP:	24:WlloCZ65rX4Os2BJvCQWPEk0Uq4w2kI+h1dNbHCVd:qloCZ6FIOWPZkIkt1dxCVd
MD5:	EF17225EDD4AD11E9DE39B38BA2979FA
SHA1:	F50E4CCE88AC680AA47C13E5DF2DE0669BD50B0E
SHA-256:	1128E54A905B883E3FA96C823D9519C699371D5305055BAC31955EFCEDF1B1B2
SHA-512:	8FB1133EF976AFF50016CA2CC3484AAD3359ADBE7FC52C0BE1B03143590ED83A511F90F26209FC60089FE2ECD654572569BBD6926EBC1EBBD9483878676B8399
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Toolbar</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="toolbar"></A>The toolbar</H3>..<P>The toolbar displayed at the top of the screen is designed to allow easy access to the most frequently used functions.</P>..<P><IMG SRC="../images/bm22.gif" ALT="" BORDER=0>Display help</P>..<P><A HREF="fm7n8x.htm"><IMG SRC="../images/bm14.gif" ALT="" BORDER=0>Print results</A></P>..<P><A HREF="fm3fjn.htm"><IMG SRC="../images/bm26.gif" ALT="" BORDER=0>View records stored in the database</A></P>..<P><A HREF="fm36re.htm"><IMG SRC="../images/bm8.gif" ALT="" BORDER=0>Entering data</A></P>..<P><A HREF="fm4two.htm"><IMG SRC="../images/bm10.gif" ALT="" BORDER=0>Analyze and Plot Data</A></P>..<P>All of these functions are also available from the pull down menus.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm4b3b.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	834
Entropy (8bit):	5.228525446711539
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfPPsMeqMxFWVuUGQeynlMBiBdgVXRWeT8deF9K1LnS+J5TNT+x3:WlSZ6LZUULeICIBABWZdeur7nT+d
MD5:	080B5C6E3694538856784FD9B2E059F6
SHA1:	45491F405F18C07815C11875E7C7E7E562A9204B
SHA-256:	24054D217FCEC0EB368FA6825BF718B4906A02C475E78BFF9E84116ED9F54493
SHA-512:	A2ADD9D018CADF4FC18BF0460BF929D525D63E8D31601C7DDE51022C218752626FD48B90C4A44D9EA7EED2F161783DFE8F7B9FB707A4E30BCF58E57B0F6882F5
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Tritan confusion axes</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="try9gg"></A><I>View color confusions for tritan defects</I></P>..<P>This option is selected from the View menu of the computer program.</P>..<P>A color representation of CIE color space is displayed with isochromatic confusion lines superimposed. Colors lying along the confusion lines will tend to be confused by individuals with a tritan defect.</P>..<P>For more information see <A HREF="fm8siz.htm">Defective Color Vision</A></P>..<P>N.B. The colors displayed are only approximate and will vary according to the color capabilities of the monitor and display card.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm4c81.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ISO-8859 text, with very long lines (840)
Category:	dropped
Size (bytes):	5098
Entropy (8bit):	5.261947726103011
Encrypted:	false
SSDEEP:	96:rHQmssTVeX1Kw7UBT7OmRGShMIXZgSk8XzCLzlyk0UFVBOlCWvaR4:rwKTVeX1R74USjkDaCR4
MD5:	273828C98BCBBCE9497AC68156F595A0
SHA1:	FB6075A0DFF9208309EB26FA48DAA74A02132FEF
SHA-256:	7683EDEE111B40B3E2D10430AEB6E0456D82CF923774B477E863427E7A4AF5A9
SHA-512:	5EB5833C48CA116511B1FC06D06A922DA2A13B9975DA68624B31428C2F0A9C98A5BB3576922A8EA408CF3CF481AB63A58142CE8C4BD4E68ADF78B952B264F1E3
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Normative Data</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="normative_data"></A><I>Normative Data</I></P>..<P><B><U>Distribution of Total Error Scores</U></B></P>..<P>The distribution of initial error scores which may be anticipated from particular populations is indicated in the following table. The <B>unselected</B> column shows the errors which may be expected from each percentile of an unselected group of people aged 15 to 45. The next column, '<B>in-plant</B>'<B> applicants</B>, was drawn from 300 tests of employed personnel applying for promotion to color control positions (shader trainees, laboratory testers and laboratory technicians) in a paint manufacturing plant. The last column, <B>experienced</B>, is accumulated from tests on 150 personnel with three to twenty years experience in the color control

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm4eox.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (454), with CR line terminators
Category:	dropped
Size (bytes):	2921
Entropy (8bit):	5.067136786531387
Encrypted:	false
SSDEEP:	48:qloCZ6A14E52NYvwQVvABgsMX2JwbvCVHs7picwMDjFyAoK6zl9Nxris/HkWDRfB:CAo7tuwzCVHCbkK6znLrisUy
MD5:	EF362738E6E276AA44561432CAE06953
SHA1:	9DA5FAEA290925BBAFF5CB396580BB3B08B17286
SHA-256:	BE8D6B17605DE4E8FE74197737F334555A37BF6905B2BA10439D7674BA616FF2
SHA-512:	8D0F280BF64EAC7960E5027BD98745B273F97FD383F87A63D0E70CDC091685BA2473F469C7B44A05A3806EA382C1515725A2FE08F30059D356F96281699159F1
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Displaying Data</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="displaying_data"></A><I>Displaying Data</I></P>..<P>Data may be plotted in two formats: Polar Graph or Linear Graph</P>.<P>These can be accessed by clicking the analysis button <IMG SRC="../images/bm10.gif" ALT="" BORDER=0> in the toolbar, or by selecting. or selecting Polar Graph or Linear Graph from the View Menu.</P>. .<P><A NAME="polar_graph"></A><I>Polar Graph </I></P>..<P>The cap numbers (1-85) are represented by the radial lines. (Note - the angular spacing of the radial lines is not uniform - this is intentional).</P>..<P>The Error Scores are plotted for each cap, with the inner circle representing a score of 2 (caps in correct order). The circles corresponding to error scores of 5, 10 etc. are darker to assist with the interpretation of the

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm4eus.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	511
Entropy (8bit):	5.378824446452878
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfLsMeq1yLR6yiffVTTZC0:WlSZ6PgLR65ffVTTw0
MD5:	5C44E32EEFFC400F2C7009E891834EB0
SHA1:	4BB88D2E2DAF7DC3F1D6D396F5C6D867AF69C37F
SHA-256:	0CF79794940790A88EB589A0F2C07697A21C3A6DDBC9D83C30A6EEB7468F8AC5
SHA-512:	FAB0E7DD8798A3DC5FE977FF65F1F8F427E1803674C7343C16F6B8980EA15191B3D120EFDA59FC9ED1E737B320721BA0885ACFEEE316C1317CEF19246910A927
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>FM Hue Test</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H1><A NAME="fm_hue_test"></A>The FM Hue Test</H1>..<P><A HREF="fm2u5h.htm">Purpose of the FM Hue Test</A></P>..<P><A HREF="fm52sz.htm">Materials</A></P>..<P><A HREF="fm97vy.htm">Administering the Test</A></P>..<P><A HREF="fm0f1q.htm">Principles of Construction</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm4ndz.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (486)
Category:	dropped
Size (bytes):	1433
Entropy (8bit):	5.013375871434199
Encrypted:	false
SSDEEP:	24:WlSZ60zshc2m65O21W/FhIakRUj8LQacthcg13nET9akMFazvy5o5qaPR2ohx:qSZ64J2etwjQZMCY1MFazhR2ohx
MD5:	E1042B5BAAC321D04FB489C93341DD10
SHA1:	0FF564B97CF591D603792C456C39DCFC7423DD4A
SHA-256:	3D9954039957F8CB4FE9D5E0C5CBC1219753D178396CD3AAEAD90C8E1CF1185A
SHA-512:	0D4022719BC97B9BF5510782A56D1F94375078CA9FFE1E3E235A94E19D802DB83FD62EB6727AF29608746C1E1D057509D32FCA32C2D46EF0B4A34DD93EBB555E
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Lighting</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="lighting"></A><I>Lighting</I></P>..<P>Reliable results cannot be expected from this test unless standard illumination is used. The illumination should approximate 6,740 degrees Kelvin (Standard Illuminant C or average daylight) preferably at 25 foot candles or more. Equivalent results can be achieved with using a tungsten halogen daylight source at 6,500 degrees K, such as the one found in the SpectraLight II and SolSource manufactured by Macbeth. </P>..<P>If natural daylight is used, the test should be given near a window illuminated chiefly from the north sky, lightly to moderately overcast. Daylight Fluorescent (6500 degrees) may be used if necessary such as the one found in the Judge II from Macbeth. Since natural daylight is variable, the results cann

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm4qex.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (312)
Category:	dropped
Size (bytes):	1398
Entropy (8bit):	5.353935142547625
Encrypted:	false
SSDEEP:	24:WlSZ6d6N6D77B+d2Zm4ZrZ8xySvidQiid3Oid5QdidfoB3ur+H8DJyYtCMx:qSZ6lvu2M4JxvQfTC8gxurpbwMx
MD5:	ED6EBC4FE72232406C961D3CF127D3E1
SHA1:	B46E178DE8637F1BA0E42E6F307F5F044288F9A0
SHA-256:	2CE912E585D45494DCE71142BFB84E3843F1E728CD1AFCC2761B053DA9AA02F0
SHA-512:	1F0E4BB6DD1F83A04FCE843A5F6B4252555723A65FFD758AD46121DBC1E058371749B6C569F59A0FB07CBAF4266CB65874086DF0E747EBB321E47A6C9A78DD92
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Dichromacy</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="dichromacy"></A><I>Dichromacy</I></P>..<P>Dichromats have two cone photopigments instead of three and are able to match all spectral hues using a mixture of just two colors. They are further classified as protanope (long-wavelength pigment missing), deuteranope (medium-wavelength pigment missing) and tritanope (short-wavelength pigment missing).</P>..<P>The prevalence of the various forms of dichromacy are as follows:</P>..<TABLE cols=3 width=303>..<TR VALIGN="top">.<TD width=37%><B>Type</B></TD>.<TD width=31%><B>Men %</B></TD>.<TD width=32%><B>Women %</B></TD>.</TR>..<TR VALIGN="top">.<TD width=37%> Protanopia</TD>.<TD width=31%>1.0</TD>.<TD width=32%>0.02</TD>.</TR>..<TR VALIGN="top">.<TD width=37%>Deuteranopia</TD>.<TD width=31%>1.1</TD>.<TD width=32%>

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm4r8z.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (774)
Category:	dropped
Size (bytes):	2060
Entropy (8bit):	4.995219875919159
Encrypted:	false
SSDEEP:	24:WlSZ65257t5kNMyJgYaJUYREDWpGq1UdgfO0XWKsQesuw8hW1eQou3BJUBke/T+e:qSZ68AayJ2hNG8WV7s2w3v8iee9yMje
MD5:	D484198175B8133EE69F56E16DFE1E28
SHA1:	E319B3123F09B6F470923DFCDB041AAF5F616F04
SHA-256:	4158779C1EC75B8E8F266390DC1EE4381B33B11D4604531E45F565348525BB74
SHA-512:	7FB5C48DF3E69C02C46529DE8FE4202A62FB48CD9562D7E23F2A9C5BD972BFFB9F4B525B25CA5E7CF3F3E3439AB26F3D88E49169258DF0A09D1902B4BEB24490
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Dichromats</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="dichromats"></A><I>Dichromats</I></P>..<P><IMG SRC="../images/bm3.gif" ALT="" BORDER=0></P>..<P>An individual who has two photopigments is called a <B>dichromat.</B> The absorption spectra of the two photopigments (P1 and P2) peak at different wavelengths but overlap over a considerable portion of the spectrum. If the subject is shown two patches of light, one patch consisting of <I>A</I> and the other <I>B</I>, it is now impossible to adjust the intensity of <I>B</I> so that it will match <I>A</I>. This is because the number of quanta absorbed by the two photopigments for <I>A</I> never equals the number absorbed by these same photopigments for <I>B</I>. No matter how the intensity of <I>A</I> and <I>B</I> are changed, they never have identical effects o

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm4s11.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	700
Entropy (8bit):	5.334701284674859
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfzdK0sMeqvRZBaFtUZJ6eFuQMH963Jii/3DL4KJoczg:WlSZ6tvRZAPQQeKH4ii/Ygbzg
MD5:	16E8C949E498069540E1A79A75630C97
SHA1:	B770D32276F1814477419C9697A8C8045CF4FF2C
SHA-256:	0B99E1F2C854276DC118F380E552C8BBBC581ADD633A91F24936522E25D1774C
SHA-512:	2E2CCDB95D4834231867A9E8ECE08C32E45F78713A369A806BF11B03611C16E9C077A52530CFC06A893397C584B5F140F36EF520FC88B99E26136BE484D3C5B3
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>New Record (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="5igc0ze"></A><I>Edit menu - New Record </I></P>..<P>Selecting New Record from the File Menu resets the order of the caps to the correct numerical order.</P>..<P>This can also be achieved by clicking on the <IMG SRC="../images/bm15.gif" ALT="" BORDER=0> icon in the toolbar.</P>..<P>If the current data has not yet been saved, a warning message will be shown asking if the current data should be saved before the cap order is reset.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm4srr.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	842
Entropy (8bit):	5.249181144618396
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepff2sMeqpxFWVNUGQeynlMBiBdgVD8PT8deF9K1LnS+J5TNT+x3:WlSZ68s/ULeICIBA4Ideur7nT+d
MD5:	78EEC1C5F83E5AE595AB570AC3451D63
SHA1:	7B8645B048D8C95E60C1821403E3D83AEF99DCD7
SHA-256:	DED660D563AF4F8542F9C6AFBFDA1C615B3CB521BE66EC346935807F387FAC98
SHA-512:	C4BB4C2FA4055719057890733C950235FDB816DB87B5BB0923D443CF538DE29FF4473B8939EA470B33E51FB7D04D949DECD2E10006EC41CF64F544C4ABCAD9E2
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Deutan confusion axes</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="df09gg"></A><I>View color confusions for deutan defects</I></P>..<P>This option is selected from the View menu of the computer program.</P>..<P>A color representation of CIE color space is displayed with isochromatic confusion lines superimposed. Colors lying along the confusion lines will tend to be confused by individuals with a deutan (green) defect.</P>..<P>For more information see <A HREF="fm8siz.htm">Defective Color Vision</A></P>..<P>N.B. The colors displayed are only approximate and will vary according to the color capabilities of the monitor and display card.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm4two.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (454)
Category:	dropped
Size (bytes):	2382
Entropy (8bit):	5.089178054796509
Encrypted:	false
SSDEEP:	48:qSZ6j8HOSjzWBgsMX2J9EbvCVHa7picwMDjFyGoKpis9HSMDRdWZSkji2:rFHO8tumzCVHIb6Kpisuf
MD5:	FB8D980999A670389F45E47869989DC0
SHA1:	A9C27FC93979436C648EFACD19C1F6DA0DAE41A8
SHA-256:	F7DDECF60F51CC761001D2821DD71156B584A02FADE19EE1E8BB334FA4C759C6
SHA-512:	CA906DC7DD4B8BFC1AF18183FA0453BA2CDB3E01A204103249A4F1A4D7AA59861E34DAD3C3649E73B7C7084A013C1AA7B29F5FC89A148D667CB7AFA8DC2DA19A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Polar graph</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="polar_graph"></A><I>Polar Graph <IMG SRC="../images/bm10.gif" ALT="" BORDER=0></I></P>..<P>A graphical representation of the data can be displayed on a polar graph by clicking on the <IMG SRC="../images/bm11.gif" ALT="" BORDER=0> icon in the toolbar or selecting Polar Graph from the View Menu.</P>..<P>The cap numbers (1-85) are represented by the radial lines. (Note - the angular spacing of the radial lines is not uniform - this is intentional).</P>..<P>The Error Scores are plotted for each cap, with the inner circle representing a score of 2 (caps in correct order). The circles corresponding to error scores of 5, 10 etc. are darker to assist with the interpretation of the graph.</P>..<P>A subject with 'perfect' hue discrimination would be able to put

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm52sz.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (420)
Category:	dropped
Size (bytes):	1478
Entropy (8bit):	4.927547647151434
Encrypted:	false
SSDEEP:	24:WlSZ6VSmVuqt4yy4QWa1i5ymCIanMO/FGQ6W5HfEEdBDzI974J2Nv4rNdF54l35:qSZ6VjrhyIa1eJNONGlidRW7u2Nqdn4f
MD5:	1598F67139DD4BB4A27356A6F6F8A6CF
SHA1:	13176535BDFD3C18807C55DDEC8D60F3B50D9C93
SHA-256:	58375FB674DF4A7D4C8DE7A588E7A7E63F9374739CD02EED231EF73B4F660B26
SHA-512:	5E1D4C0693424A10DD5A7B16D704D5EB5DC2C2719500F87E7BAA3A14AC7F06B01855006ADE8396B1C21DEDB28D58CE82DF8AA584C91466BCFF17696BF76E309D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Materials</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="materials"></A>Materials</H3>..<P>The FM Hue Test includes a total of ninety-three colors mounted in plastic caps, housed in four separate cases. Each case consists of two hinged panels which contain a quarter of the eighty-five numbered, removable color caps. (Two caps are repeated and fixed as pilot colors at either end of one panel in each case, making a total of ninety-three caps.) </P>..<P>Pigments in the color caps are made from the most stable materials available. However since no chemical is absolutely permanent, the caps should not be unduly exposed to light.</P>..<P>The matt surface of the color caps is necessary in order to give the same spectral characteristics from any angle, but it is sensitive to fingerprints. It has been found that slight

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm549z.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (389)
Category:	dropped
Size (bytes):	953
Entropy (8bit):	5.147696898037409
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepf7gKMWsMeqBTKGFW1gyyHypVDMomENSkYvu2VFGjuDklCoSpeJz:WlSZ67hPigyyHKPhoZvERIR67OI14RY
MD5:	AC590A27C6E958A26D468E6C1FD3EB8A
SHA1:	10F38E91D6003EF55DC0DD3ECC79BBA9FE815599
SHA-256:	29D6A5D95D203DAA09D30FE8A0B55324ACC9916F3AE0ABECC944765264750B27
SHA-512:	CD6FC4862F1D10BC217B06751358560A2985FC712D2E2768351AB729F096C1220219B4CD7D28208D15D23B0FB07BB3F684D28ED1053762CE43722AA855F43D7D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Scaling</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="scaling"></A><I>Scaling</I></P>..<P>The standard FM Hue chart has a scale maximum of 14. While this is suitable for most purposes, error scores for individuals with very poor hue discrimination may exceed 14 and will therefore extend beyond the graph. </P>..<P>The current scale maximum is shown in the Scaling Panel. The scale maximum can be changed by simply entering a new number into this box or by selecting Auto. When the Auto option is selected the scale maximum will be set automatically to the maximum error score for the current set of data. The scale maximum can be reset to the standard value (14) by selecting the Standard option.</P>..<P>The scale maximum must be in the range 4 to 50.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm57n9.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	701
Entropy (8bit):	5.402047491130126
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfxsMeqxy9JSHY6ckZSLzQ05umSsjrOzCC:WlSZ6B4JSHYHk8vQ05fzvuD
MD5:	023A9031812E8F672145F20FDB063568
SHA1:	DB67545547E7EB5F4E2266E780718D582FD2A08F
SHA-256:	8EF2C4C2CA4F0920DBCDB28DE2FCFC1F66258491C1DD21E2496385E5E1B0BCE4
SHA-512:	1552C04118E84251A8B7992A4A774BD0D543F08C450738EF4CC154ADD45BDFEA03B4642C9F7205FF4DB9F3A112080E8842D684237E5E9DA9854AC7B66101FD44
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Edit menu</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="edit_menu"></A>Edit menu</H3>..<P><A HREF="fm0j5b.htm">Undo</A></P>..<P><A HREF="fm6q01.htm">Copy graph</A></P>..<P><A HREF="fm5tbb.htm">Copy scores</A></P>..<P><A HREF="fm2bco.htm">Copy Name and Analysis</A></P>..<P><A HREF="fm4s11.htm">New Record</A></P>..<P><A HREF="fm6rj8.htm">Select Record</A></P>..<P><A HREF="fm68mt.htm">Delete Record</A></P>..<P><A HREF="fm59v4.htm">Save Current Record</A></P>..<P><A HREF="fm2y9i.htm">Preferences</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm59da.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	605
Entropy (8bit):	5.279621065676119
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepf9sNK0sMeqruvBIs2/qs5FRrv+w+:WlSZ6Yr4b2HMp
MD5:	D9F1F9370FDD2C27C03087A2AD04550A
SHA1:	6DB338CA74391F89A302DC0E8DA1E3D1720E400A
SHA-256:	643492C97D20FC8BF8E511BB5E19A8A9778044BEA2CE449C2FD724737575C93D
SHA-512:	DFB82AEE127CDFD6D4CBC5B4C9D514184CCE29850E349F2DAF8998B5D4DB3EDB41C7CC4F4B5CCB00B314CAE0B957B441570C65CCC29E652F4BFD5E59A5115BC3
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Open (File Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="file_menu_open"></A><I>File menu - Open </I></P>..<P>To open an existing database, select the Open option from the File menu. Select the database from the list displayed. The name of new database will be displayed in the title bar of the main form. </P>..<P>New records can now be added to this database and existing records can be retrieved.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm59v4.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (601)
Category:	dropped
Size (bytes):	1127
Entropy (8bit):	5.148762765260473
Encrypted:	false
SSDEEP:	24:WlSZ6IVZWdF2C7t2JH8OvIib+3KJ0XZQeb85KvmDRS:qSZ6ILWd0CxMjIkX0pQeYKQS
MD5:	B8EE54072D8DB4CBA36743CD59E351A6
SHA1:	EFE9F8075CB5A457259224D7BA3657D5F00F151F
SHA-256:	D3AC5DAFFC69644AFF5867B05EE0315A37ECB7D9C9BCD019E5A7E8606B239E9B
SHA-512:	4A91AE46006DF0058FDA2B0E066251119292C640DC72E3B1254739E227DA69C2C6CA8553881E76C4A2C3DEEC7C56BAC43497D2585B3C6BFFCF497F0FDC0EB399
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Save Current Record Record (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="2xz83ip"></A><I>Edit menu - Save Current Record</I></P>..<P>The program incorporates a simple database to allow easy access and reference to previous records. The name of the active database is displayed in the Title Bar of the main form. </P>..<P>Having arranged the order of the 'caps' on the screen so that it matches the order of the FM Hue Test caps, data is added to the database by either clicking on <IMG SRC="../images/bm17.gif" ALT="" BORDER=0> in the toolbar or selecting Save Current Record from the Edit menu. You will then be required to enter the subject's name, reference number etc. When this is completed, clicking on OK causes the data and the subject's personal information to be added to the database. This informat

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm5a7n.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (321)
Category:	dropped
Size (bytes):	857
Entropy (8bit):	5.170457077506571
Encrypted:	false
SSDEEP:	24:WlSZ6/Pe7LVP4H+u3KzGBLCZmaj66DHd3d3:qSZ6ON4H1K65CZmaj66D9t3
MD5:	F2B50273A38B8754901B04DCC4E6BBD8
SHA1:	583A49979F59B85D00483A10D6CF00AEBA7BE5C4
SHA-256:	BC465108CD0D46B8DA044C878B5705D519A2C3898CAEA9382AE415B466737F17
SHA-512:	AAB4FF204C9CC0711E49F61C3D7A2CF513B19257F9D0416FFA6D059688DC567C0BDAB86D6388281D80843D02367CC3802EF71E9377C51F9DC338B63A842BAD7A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Color Options</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="color_options"></A><I>Color Options</I></P>..<P>The color used by the FM Hue Test is reproduced (approximately) on the screen to aid data input and the analysis of polar and linear graphs. However, if the computer being used is unable to display all the colors, color dithering is used. This can reduce the legibility of the cap numbers on the data entry screen.</P>..<P>If this occurs, color can be disabled from the<A HREF="fm2y9i.htm"> Preferences option</A> which is accessed from the Edit menu. The caps on the input screen are then displayed in grey and color labels are added to the graphs.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm5asz.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (792)
Category:	dropped
Size (bytes):	1098
Entropy (8bit):	5.0141340803092485
Encrypted:	false
SSDEEP:	24:WlSZ6ysHGmF6gv5VduIF9e/So4LVcFzeYac:qSZ6JVd/Fe4Sac
MD5:	718315A67420BD174A72DBDE54EAE703
SHA1:	825CC820696A72DBC09BEC15A7D733EAAC828E5C
SHA-256:	8CDA48100A9C7D439A39C649DB4314DB89F2C37C1DD8535D576A70CFAE5B1917
SHA-512:	8128353CD6DC51898C1ED1457D14B25C83EBE65CDD67BB9B6470D72744BBFDDB39867821342F3D8882FA0591CE55051EC8B4B97D29ED08741B75D4DDFF84805D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Newtons Experiment</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="newtons"></A><I>Newton's Experiment</I></P>..<P>The first insights into the nature of color vision came from Isaac Newton. In his room at Cambridge University, he placed a prism so that sunlight shining through a hole in the shutter of his window entered the prism. He observed that the sunlight became transformed by its passage through the prism into a spectrum of colors. He also noted that the sunlight could be reconstituted by recombining the spectral colors. Newton concluded that sunlight is made up of each of the spectral colors. Later work showed that these spectral colors differed in wavelength thus demonstrating for the first time the link between wavelength and color. However, it was clear to Newton that <I>... the rays ... are not colored

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm5dgl.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (330)
Category:	dropped
Size (bytes):	916
Entropy (8bit):	5.268497665890047
Encrypted:	false
SSDEEP:	24:WlSZ6t3u/guja8PW6TNh+BF/RUeUnnMuV5oW:qSZ6VCtO6+j/RdUFj
MD5:	7ED51437F8EC2173768AD7DFF0E580E2
SHA1:	9185C0F227232BDE8D8C25D283E8822E877D93F6
SHA-256:	DCA96AB3FEEA5D59CA3D2D240EDED15033B6C14602F2DD25B5902708DB75637E
SHA-512:	507187BFD03E642E03EF5FC3E2292ABE261914F29FCB7821CEA9EF204336B90E19C808D68113BF514305CDC984D31077342D542B02681C0E05FDCB04B514E4C9
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Zone Theory</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="zone"></A><I>Zone Theory</I></P>..<P>Both the Young-Helmholtz theory and Hering's theory could be supported experimentally and while both theories explained certain color phenomena, neither provided an adequate explanation for all subjective color experiences. The two theories were reconciled by the <B>zone theory</B>, originally proposed by Donders in 1881.</P>..<P>According to this theory, color information is processed in a series of zones in the visual pathway; trichromacy occurring at one level and opponency at another (see below). This concept forms the basis of modern color vision theories.</P>..<P><IMG SRC="../images/bm0.gif" ALT="" BORDER=0></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm5fw3.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1236
Entropy (8bit):	5.205746040930025
Encrypted:	false
SSDEEP:	24:WlSZ6mJiySKp1GHRE0vFnHzxDFhLA1ZciDl8HFXdvkPiDF3UgQnWF7BKu4R2hr0d:qSZ6QSwExFnWDciyXdSi9QWF1KPAOP8o
MD5:	78A9D9EE7E2BAC30E1D4981B3B0E5B37
SHA1:	4BA4FC7857EE5CB5CF092405D57617EC627D79B5
SHA-256:	55AC012EB532EE6B4D182EC6F446439638405FB226B0CBFCFDECB8C539795193
SHA-512:	3917087D7451FC8D1D1C2B5F2723B3F59504D6287E62FA8D86EC316AE1868FC07628DF1ABDB1190E9289072B5D603A3A631CBA6CBF9F1CFB3C29D91440D087B6
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Vingrys Analysis</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="vingrys_analysis"></A><I>Vingrys Analysis</I></P>..<P>The Vingrys Analysis performs a vector analysis of the data and provides a series of indices describing the orientation, magnitude and polarity of the data.</P>..<P>The Confusion index (C-index) describes the severity of a color loss. A perfect arrangement of caps will give a C-index of 1.0.</P>..<P>The Scatter index (S-index) quantifies the specificity (polarity or randomness) of a cap arrangement. A perfect arrangement of caps gives an S-index of 1.28.</P>..<P>The Angle identifies the orientation of the cap arrangement. </P>..<P>The results of the Vingrys analysis are used to determine a provisional diagnosis.</P>..<P><U>Reference</U></P>..<P>For more information on the derivation and applicat

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm5l0u.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	948
Entropy (8bit):	5.389985607836416
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfnEFgzsMeqAgy5m9HJ+4m1k9pWm13R9XF3t766twt+IBHSbyIlO:WlSZ6/BV4894m13vrWt++H+1C7D
MD5:	90B240063D7DD2DF17DCDB1E9C88CDBA
SHA1:	836D8E4620E04C843451E3EC52DE9D94319260A6
SHA-256:	833B48F68273E7BA7A813852621CA42B235FA2ABCB4FA68B200EA78D4A62FAFE
SHA-512:	8D5F6D4196548940D2C943F19B9BB1CCDD6F573A1DD1AD3C89A1294E026B21749E7B78A6BBFADF2842EC70E01E7B46A8DCEE563350C1F0BA640FE8FD6488539F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Color Vision - Theories</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="30j5h."></A>Color Vision - Theory</H3>..<P>Human color vision is exquisitely sensitive. It has been estimated that an individual with normal color vision can discriminate over 7 million colors and shades. Through the years, many experiments have been conducted which contribute to our current understanding of color vision.</P>..<P><A HREF="fm5asz.htm">Newton's experiment</A></P>..<P><A HREF="fm7rub.htm">Young's Trichromatic Theory</A></P>..<P><A HREF="fm8vi2.htm">Young-Helmholtz Theory</A></P>..<P><A HREF="fm2kms.htm">Opponent Theory of Color Vision</A></P>..<P><A HREF="fm5dgl.htm">Zone Theory</A></P>..<P><A HREF="fm3be6.htm">Modern Day Understanding of Color Vision</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm5sol.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	351
Entropy (8bit):	5.446691573408966
Encrypted:	false
SSDEEP:	6:B8FQk+Hryft1q2Q8EevWR0NNEXW0Yf1J3RtsvIALjiNMeqlxMZDALejz6ACi4MmS:BMQkzLq2Q8EepfT+/sMeqicajV4ezqE
MD5:	8AB3976F88A285EB5056A5CF9F4E92B8
SHA1:	96297612E348F76D31BD21DBF1B1285984600D3F
SHA-256:	1D3437C60A5CE189863A41E2431B392879CF0A1380E409BE41E160EAA47A171C
SHA-512:	A77F2397BF8211B0A04166C8137A0B1EEAC27871EF6D3C4F4393CECC29B7D3D5C7E494E8E5546433F9E0C1C3D55FB822A15AACD1A64B407E57413F20686A8A2A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Help menu</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="help_menu"></A>Help menu</H3>..<P>Displays help files and gives information about the program.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm5tbb.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1108
Entropy (8bit):	5.095816593016971
Encrypted:	false
SSDEEP:	24:WlSZ6/ocZAfpTyA+tE621y7+q2CXQAa87Xk+P:qSZ6zZod+tEEylAvrkk
MD5:	D8B33E4915AE868F0A6002EDBB46068C
SHA1:	603FFA51805E3630347D1F6DB59303C2318D9708
SHA-256:	22CA976D4A0E2CF72CAB1C3947DC68C62C8A61FEA8F3ACEF8D0BBD5241B6125E
SHA-512:	2F07E976FECF9DE17B2618AD215D2BB70C9FF8A9E52E827F8F2B445D6DF07851CB56A6C94097E447DA6756FF7ACE74BACDE64A595144DF7FD904B660340E28B4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Copy Scores (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="2mwdzwg"></A><I>Edit menu - Copy Scores</I></P>..<P>Data (cap order) can be placed in the Windows clipboard and pasted directly into other Windows programs.</P>..<P>To copy data to the clipboard select Copy Scores from the<B> </B>Edit menu. If you wish to copy the actual error scores then select Raw Error Scores from the sub menu. Alternatively, the scores can be copied as actual scores minus 2 by selecting the Error Scores minus 2 option.</P>..<P>Having placed the data into the clipboard it may be pasted into an Excel spreadsheet for example, by loading Excel, placing the cursor at the desired place in the sheet and then selecting PASTE. Error scores will be entered into each cell in the selected column sequentially.</P>..<P>This facility al

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm68mt.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	722
Entropy (8bit):	5.189539237283799
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepffgS4dK0sMeqswFI7BkJQalZvRzSylZLMBQ7X2y0pCf56BI:WlSZ6w/tXy8ZJz4Uy0oC
MD5:	236FF059BADB24D9CA507E169D7D78DE
SHA1:	E0E11161367933B252035E505BB3DF9F42EED0A2
SHA-256:	88269A3304769019DF67B1CE3C5F3DA25814878BC8800653F8F11D84895E6716
SHA-512:	B69C0BF86AD0920A5E9C426DEDF3344708C54F7E95786A2427FAD9D5F5F4798B67A861704E3C4EFF6BB5A48196E774FE3641D8FF3F8EE401E1A79EF4F76CAD6A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Delete Record (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="3bic_yu"></A><I>Edit menu - Delete Record </I></P>..<P>A record saved in the database can be deleted by selecting Delete Record from the Edit menu. </P>..<P>Firstly a list of names currently held in the database will be displayed.To delete a record, click on the appropriate name so that it is highlighted and then click on the Delete button.</P>..<P>You may delete multiple records by selecting more than one name then clicking on the Delete button.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm6d0t.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	620
Entropy (8bit):	5.274736574478381
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfL7nlJRWsMeqNU1awn25GWJcdwnFI2CwT0dJivkRiFYOEo:WlSZ6jZMu1ahGWe4I2LAELFYON
MD5:	83E1AE5BDB9119BFE9326E731A2A3B28
SHA1:	EB2D68BE25D2D333B0F65D19F6FEB2BB20037655
SHA-256:	1D3D83603FD8FAA5B7717B885B195168535904E7F7D5C9D704E295DD3FECA98C
SHA-512:	CEAC6769D13D4BD27C955E3F7922D7C7B4879C9984D168F7B119A8C050451F59839C8969125BAE2A012E25DC1C2EC8E3339289794FA9FE19133C92979390D9E4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Personal Information Form</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="personal_information_form"></A><I>Viewing Personal Information</I></P>..<P>Personal details relating to each record is viewed by selecting Personal Information from the View Menu. The form is read only and shows details of the current record including Name, Initials, Reference, Date of Birth, Date of Test, Duration of test and any other Comments.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm6i4a.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	789
Entropy (8bit):	5.253043780386524
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfEu0sMeqdSJ9C0F2oDyMoJw4BXFuu/3okbbgWOo:WlSZ6kIXpTyMGB9okpOo
MD5:	1193395B83108C929B13329928E34FA9
SHA1:	1BDC9AB2DAC5E46FFB9FDC70EBBEAD349BB67664
SHA-256:	C90F2F401EEC80C7C2E8B7F798D628961013802A7D9657C788D5C42AB353FA1D
SHA-512:	2FEE3B549F3201FF41BEAD34C097BF1F221F53F0B37F59A0C22194749B29CA116F1D3DDC71EA048469DEAEFD37CBA8FCBB7C0F887B1E60798DF52395A76DA2EA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Standard;Kinnear;Plotting methods</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="bye5mz"></A><I>Scoring Options</I></P>..<P>There are two methods for plotting error scores:</P>..<P>The Standard method involves plotting the error score against the<B> corresponding cap number</B>. This is the preferred method for most applications.</P>..<P>The Kinnear method involves plotting the error score against the <B>position</B> of the cap. This method is rarely used.</P>..<P>Plotting method can be changed from the <A HREF="fm2y9i.htm">Preferences Option</A> which is accessed from the Edit menu.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm6m3u.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	960
Entropy (8bit):	5.198714447067879
Encrypted:	false
SSDEEP:	24:WlSZ6/hg5hikepojCbx73uCz+fJbcTyxco:qSZ6UWxNQJb2Zo
MD5:	D0B410F24B23DABD32B8D2F948F45E71
SHA1:	35D636FFBD71F213F3AC02A3C0BB76651803D108
SHA-256:	C14D9A0523C002EAC6753511EADFBE2A38269008F12DB48E0CA6280EB9697F4C
SHA-512:	EBDE9BDCCA0F590447C24D4117F49E37C09C59F4A5BE02FC2296E90092C1A44C4D34B65A8A313C9414E340810B7172DA4E33ABE2A9BE6A2AE2BFFA286B7B0468
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Export Scores (File Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="1mx2ojj"></A><I>File menu - Export Scores </I></P>..<P>Error scores can be saved separately as Text files. This provides an easy method for exporting data to other Windows programs.</P>..<P>Select Export Scores from the File Menu and then select Error Scores minus 2 or Raw Error Scores from the sub menu. The Save As dialog box is then displayed, allowing a path and filename to be specified.</P>..<P>The data is saved in the format:</P>..<P>Cap position , Error score (CR)</P>..<P>The data can now be imported by most Windows wordprocessors and spreadsheet programs.</P>..<P>Scores can also be pasted directly into other Windows programs using the Copy Scores option from the Edit Menu.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm6q01.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1148
Entropy (8bit):	5.150931772291609
Encrypted:	false
SSDEEP:	24:WlSZ6/3PpTyAIVoSKaDTNIBsvZn2MPXpA9E:qSZ6JdIVlKaWKZnL3
MD5:	B30B94D1CE5EFC033EC60C9080459BAA
SHA1:	DFCB8F5D49FD64A66A7482FFADE87FCABCC414AC
SHA-256:	4DD0654A19F8C58FBADE2D2B9547CE2B58D52FEB153DED136068179B1ECCC85E
SHA-512:	2AE912ADB5675833514B930E1CC2BAE8116DA3685DEE7F963FDD3FBE6A6DC2CAC11375C93E393F6E36B1CF598343C7237D98F180F6C63A72C523D65FD138F1B0
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Copy Graph (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="3.ne_qa"></A><I>Edit menu - Copy Graph </I></P>..<P>Polar and linear graphs can be copied into the Windows clipboard and pasted directly into other Windows programs.</P>..<P>To place a graph into the clipboard, first display the graph in the required format (linear or polar) on the screen then select Copy Graph from the<B> </B>Edit menu. Select Bitmap or<B> </B>Metafile format from the sub menu.</P>..<P><I>The bitmap format can be edited using packages such as Paintbrush.</I></P>..<P><I>The metafile format takes considerably less memory and will allow editing by object-based drawing packages.</I></P>..<P>Having placed the plot into the clipboard it may be copied into a Word document for example, by loading Word, placing the cursor at the desir

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm6rj8.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1358
Entropy (8bit):	5.054147959173274
Encrypted:	false
SSDEEP:	24:WlSZ6nN7g4wZqCmnmXVRlieL3jxLIyLU5eYM5LeLPSMG/:qSZ6n+4yqOFRhLFLImgB4LgSMG/
MD5:	7F7AC70B50CEC86D2CA55180A736C385
SHA1:	77EF42BEDC142CFBD6D852E6ED750BF1305313E6
SHA-256:	85E0256CA7B879880B3CAC64B8050DC1A4C523614B04D80D89B52043554D7501
SHA-512:	35C2EE3519740160FC827D894D77839F71D4E58C3FD65CBA5D8D373BF6D50325E5D568E650647D87F75B33B83C604487E7CFCC7372A9A62AC057FE03635B0582
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Select Record (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="11cfrtd"></A><I>Edit menu - Select Record </I></P>..<P>A record saved in the database can be retrieved, edited and displayed by selecting Select Record from the Edit menu or clicking on the database icon <IMG SRC="../images/bm16.gif" ALT="" BORDER=0> in the toolbar. A list of records currently held in the database will be displayed.</P>..<P>Records may be sorted according to Name, Reference, Date of Birth, Date of test, File number or Comments by clicking on the appropriate option button in the <I>Sort by</I> panel.</P>..<P>To select a record, click on the appropriate name so that is highlighted and then click on the Select button. The data for the selected record will then be displayed on the screen.</P>..<P>You may select multiple record

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm7243.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (891)
Category:	dropped
Size (bytes):	1752
Entropy (8bit):	4.971275634042893
Encrypted:	false
SSDEEP:	48:qSZ6kWNf0R3PB1DWMmPhHU9BEx4s486Yv:rf/BgMmPhHU+d
MD5:	A7052BED1A574EEC9FD1794C9E532DC8
SHA1:	7F65CFD50110F7B8CC9FEA773E8495F541BC6296
SHA-256:	1FA8B7AA2386AE1FF39F70FE55A1999654C9C44CF914A48FFEACA2ED57A77C79
SHA-512:	D5688B49098B396143499D84F7E98C3172E33C01CDDB05864351CDE93C781E51CA947C4665D2794A8517DBC32EC94E1D42C26AE70EE0697305DADBCD96DCEFE6
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Trichromats</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="trichromats"></A><I>Trichromats</I></P>..<P>From psychophysical, physiological and anatomical investigations, we know that cones in the normal human retina contain one of <B>three</B> types of photopigment. An individual with normal color vision is therefore called a <B>trichromat</B>. From the discussion above it follows that a trichromat requires a mixture of three wavelengths to match any other wavelength.</P>..<P>The ability to match colors using a mixture of just three primaries forms the basis of a powerful method for describing colors. In 1931, the Committee Internationale de l'Eclairage (CIE) devised a standard system for specifying colors based on the trichromatic color matching characteristics of a 'standard observer'. For technical reasons th

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm7560.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (350)
Category:	dropped
Size (bytes):	1091
Entropy (8bit):	5.3957870405139525
Encrypted:	false
SSDEEP:	24:WlSZ6xce4SzeI6J59NxisiscwRHSMDRdWZSEjiW:qSZ6yfSzo59NxZis9HSMDRdWZSEjiW
MD5:	B2A3DCE3407EED58530ADB71B3DCCE6E
SHA1:	F76FE79384BC38E584D207B9DDAEB4489BAD337A
SHA-256:	355E70B0603CD28E44B44826F14EE9F7B486528E8C431F503E2183DE088B2018
SHA-512:	0D7675AA7CA523D37F61676739C40AE1AEE2202C164832F66C2B14B8929698B0CA52168D1E4E8992F8680AE4F37F0D7C50424F0EF84DFBA632BD180FF83A1643
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Linear graph</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="linear_graph"></A><I>Linear Graph <IMG SRC="../images/bm12.gif" ALT="" BORDER=0></I></P>..<P>A graphical representation of the data can be displayed on a linear graph by clicking on the <IMG SRC="../images/bm13.gif" ALT="" BORDER=0> icon in the toolbar or selecting Linear Graph from the View Menu. The cap numbers (1-85) are represented along the x-axis and the error scores are plotted against the y-axis. This format is rarely used.</P>..<P>The format of the display and the presentation of data can be customized in a number of ways:</P>..<P><A HREF="fm6i4a.htm">Scoring Options</A></P>..<P><A HREF="fm549z.htm">Scaling</A></P>..<P><A HREF="fm29bn.htm">Displaying confusion axes</A></P>..<P><A HREF="fm5a7n.htm">Color Options</A></P>..<P><A HREF="fm2x5t.ht

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm760n.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (323)
Category:	dropped
Size (bytes):	1036
Entropy (8bit):	5.079220047740994
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepfd9KK0sMeqrfbiaPH5hjTmK10hdyjZOei/SAqs1gQ5FRr9PxgIm:WlSZ60rfbTvx10ethiqAB1hfJyd
MD5:	A76D4404E2A605FB93444DF4F1534406
SHA1:	21D91C83F4FF40DE50456596B8D9AE0486249330
SHA-256:	F936B85232AD7FE72DC94A1FFFE14978098D9D840069F7643F7C428ADBE2B177
SHA-512:	528E8A55103F3EC8B0F38A3E05128D22DB156F2116D6F0A6CB0AB7E0C408F9D06C71DAA3EB5AD782FE8800DC62495A622E359F2A48D47FF37D15EC99F85A661C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>New (File Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="file_menu_new"></A><I>File menu - New </I></P>..<P>In some circumstances it may be desirable to maintain more than one database. For example, in a large company, separate databases could be kept for each department or division. Within a hospital, it may be desirable to segregate records according to various criteria e.g. diabetics, inherited color deficiencies etc.</P>..<P>To open a new database, select New from the File menu. Enter a name for the new database in the standard dialogue box. The name of the new database will be displayed in the title bar of the main form. </P>..<P>CAUTION - Giving the new database the same name as an existing database will erase all records in the old database.</P>..<P>Database files are given an extension of <I>.hdb</

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm7dgf.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	310
Entropy (8bit):	5.395522024555973
Encrypted:	false
SSDEEP:	6:B8FQk+Hryft1q2Q8EevWR0NNEXW0Yf1J3RoNqx0iNMeqlnKJyTZy0yEMoVCRWvQT:BMQkzLq2Q8Eepf6N3sMeqkJyT40uooqE
MD5:	0C803F3DE7AA2B9DEE685041365725FF
SHA1:	1E43BECC5907218634B4AE177F2A4E9EE02EB561
SHA-256:	A06BD536E900A3A789EA761F028DC1E5B80BA1BB4BAA6A767A8A9B6D1BC1588A
SHA-512:	EE6F5D75CD971F3FF50521FB7380569FAF68323CACE88DCA76BC959C0E87C9ABA26747C3DDCEAE6C5E625176CBA6F1B025DC42006365C4318446EACBC88B2EE4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>(Untitled)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">..<P><A NAME="0_olb_"></A><I>Exit</I></P>..<P>Terminates the program.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm7hf5.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	835
Entropy (8bit):	5.273411342898745
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfLqeCyGsMeqW0RFY912Yx21R5eEQUgRR2lBVW91b2FJJzTOLius:WlSZ6jzY/jg12b1Rg7h12DzTOLius
MD5:	2C611641208A5D079D9BEE5D1C9473CA
SHA1:	C686F787D7367CBFCDBC531DDBC0F8EE5C61CD39
SHA-256:	77CF7B99A5C540E19426D4C73E39838492017BD79B1110F8AAFD41221228834A
SHA-512:	FC5689E393C892DA4741B162B5DC317C3C164EC6C553551AA4298C963766A5EB1F0F0CEFF25CBAADFE7E0273E365246759C580751051F991DBAB3AA4C0262374
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Percentile - first test</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="percentile_1"></A><I>Percentile (first test - unselected sample)</I></P>..<P>The percentile for the current Total Error Score with respect to a distribution of Total Error Scores obtained from an 'unselected' group of subjects aged 15 to 45 for their first attempt at the test.</P>..<P>For example, a figure of 90% means that the current Total Error Score would be in the top 10% for subjects with no previous experience of color matching.</P>..<P>The analysis is based on results for 494 'unselected' subjects.</P>..<P>See <A HREF="fm4c81.htm">Industrial Norms</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm7hf6.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	977
Entropy (8bit):	5.1795973943265405
Encrypted:	false
SSDEEP:	24:WlSZ6jzORnGg12b1RKv19DzTOCOAFtZqhus:qSZ6j6FPCHKvn6CPfqhus
MD5:	379CE855E1766D9A3CBD2A89C04810A0
SHA1:	E82BC97596F6B545FED31A138240580AE584235E
SHA-256:	1B3F9FFBEE77A3B4FE257050720E80309F92278C08737949FCF6068819B5C4AC
SHA-512:	554D286D606964E825A6AC5FC994B7473ACE16955D873071274D780F23DE4DA46465BDECBD1D130783F098A5F76A7A4A0E55AFAB6573198D591ABAFFC4380CA9
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Percentile - some experience</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="percentile_2"></A><I>Percentile (some experience of color matching)</I></P>..<P>The percentile for the current Total Error Score with respect to a distribution of Total Error Scores obtained from a group of subjects with some experience of color matching.</P>..<P>For example, a figure of 90% means that the current Total Error Score would be in the top 10% for subjects with some previous experience of color matching.</P>..<P>The analysis is based on results for 300 employed personnel making application for promotion to positions of color control in a paint manufacturing plant - shader trainees, laboratory testers and laboratory technicians.</P>..<P>See <A HREF="fm4c81.htm">Industrial Norms</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm7hf7.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	879
Entropy (8bit):	5.2068248724886885
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfLqel8sMeqW+OFY912Yx21RjlBVW91qFJJzTOjW50DX5e2Dr9Y6:WlSZ6jzoog12b1Rg1+DzTO6qDc4rPTus
MD5:	694B7AD80535DC431F2BADD11DF08920
SHA1:	955794123963237623E72014E201567DD9A67103
SHA-256:	F2F5801A3284BD3086D741A7EF2DA9B3EEDDF60DC4A2F5CAB842605E3A62EAD0
SHA-512:	9DDB259B33AEF9C6EB8D0246F0DA3F8EDD858073D0197657203B4BB8F85D30DFE1E082011118A46A095C9D351B858733DD64D7AD9E4E7089404DD67D6713C590
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Percentile - experienced</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="percentile_3"></A><I>Percentile (Experienced color matchers)</I></P>..<P>The percentile for the current Total Error Score with respect to a distribution of Total Error Scores obtained from a group of experienced color matchers.</P>..<P>For example, a figure of 90% means that the current Total Error Score would be in the top 10% for experienced color matchers.</P>..<P>The analysis is based on results for 150 personnel of three to twenty years experience in the color control laboratories of manufacturers of dyes, rugs, plastics, textiles and paints.</P>..<P>See <A HREF="fm4c81.htm">Industrial Norms</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm7kqh.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (355)
Category:	dropped
Size (bytes):	1058
Entropy (8bit):	5.111341093157474
Encrypted:	false
SSDEEP:	24:WlSZ6dWv+QRIgK5EM5aN6oESXo5hjipvN6moxI:qSZ6RQRIZGMj1nyIy
MD5:	42F95F795FFAD4722410BBBDE1D277CD
SHA1:	B7D7F81058E89186268CA588B455275C14105FB8
SHA-256:	33AFF1B12ABBAE564FE0DC38DDDBE0E839D8F71933C8D8B1CE1A82FC9B7094D8
SHA-512:	3B5AA0DF34B14200056F959B1D712EF20489D9B47B631D189028C0E4F9D96D2031D4EC836CDB0492272CCC46FCDF225BE60E1B27D66495F57C85F61FCF5930AA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Monochromacy</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="monochromacy"></A><I>Monochromacy</I></P>..<P>Monochromats are able to match all spectral colors using just one color. These individuals are unable to discriminate solely on the basis of wavelength and are therefore truly color <I>blind</I>.</P>..<P>There are two types of monochromacy. Rod monochromats have normal rods but have no functioning cone receptors. As a result, their vision at night is normal but under photopic (daylight) conditions, visual acuity is poor and affected individuals tend to suffer from photophobia and nystagmus. Rod monochromacy affects about 0.001% of men and women.</P>..<P>Cone monochromats have one type of cone (normally blue). As a result, they often have poor acuity but in general, are less handicapped than rod monochromat

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm7lkj.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (995)
Category:	dropped
Size (bytes):	1425
Entropy (8bit):	5.073228911182896
Encrypted:	false
SSDEEP:	24:WlSZ652WBJj0CCu7sOv2Aibd98hiZjz3MR5rfHZZ0QFSqrXTlCG8M6m1VMCjMUw5:qSZ69JXeOuA0/gh5cQTXxn80SzSMx
MD5:	BCB3E4826A8D931040D797B6A6AC8223
SHA1:	A7A12EF094835903C0956C9BF7ACBDA8C47A8BBB
SHA-256:	85DD9A67EF62A66A7014E8043B71B5A25178E5CEAC864926537C4A828E9EDDB6
SHA-512:	A3ACE85A5C1C328C5B4673D36E042166C360622B814D70108ED138B287974292D14A18371790AACD25ED8ED84249B61051429A5010F712E12CAD5B7CC8BF8EDB
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Monochromats</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="monochromats"></A><I>Monochromats</I></P>..<P>A person with only one photopigment is known as a <B>monochromat</B>.</P>..<P><IMG SRC="../images/bm2.gif" ALT="" BORDER=0></P>..<P>The graph above shows an absorption spectrum for a hypothetical photopigment. A quantum of light with a wavelength of <I>A</I> has the highest probability of being absorbed by the photopigment, whereas a quantum with a wavelength of <I>B</I> has half the probability of being absorbed. Although <I>A</I> is twice as likely to be absorbed than <I>B</I>, the photopigment has no way of <I>knowing</I> which wavelength it absorbed. For a given amount of light energy, <I>A</I> would look brighter than light <I>B</I>. However, the subject would have no way of telling if the difference

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm7n8x.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (356), with CR line terminators
Category:	dropped
Size (bytes):	1216
Entropy (8bit):	5.1266684822349635
Encrypted:	false
SSDEEP:	24:WlloCZ6gdXhX0/WoCEBkDFqmOh/+VXseiDCkxRVU8d2PU6icUCHmNIR4KQT9Fci8:qloCZ6gdxX0unRqh2m/CoRVSbiemSR40
MD5:	AAB7C94999BFBF3AA51A5BB19F06935E
SHA1:	B262390D024FEFAAD6EEBFE3EB567C3C8D11A1F8
SHA-256:	BA27345882DD1193E458D4C02DBE5F0E8F3DC0D89B1D1CD1FAE6941CAED522AD
SHA-512:	74737B7082BFDFF1D3C08849C9EE5E6740F7B938057934A147D08523E3B005123937BA77D5AF97DC880C20BC468700C5E1D891013BA60A236E5BA31C0F7767AD
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Printing Graphs</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="7k9r.q"></A><I>Printing Data <IMG SRC="../images/bm14.gif" ALT="" BORDER=0></I></P>..<P>Results can be printed using any printer (with graphics capability) supported by your operating system. Printing is initiated by clicking on the printer icon on the toolbar or by selecting Print from the file menu. Alternatively, data or graphics may be exported as a PDF from the File/Export menu or copied to the clipboard from the Edit menu. </P>..<P>Results will be plotted in the same format as the current screen display (i.e. linear / polar, filtered / unfiltered etc.). Subject details and statistical information is printed below the graph when printing.The user can choose which statistical information to include using the Preferences option from the Applicati

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm7ppd.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	726
Entropy (8bit):	5.280595375772896
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfkMWsMeq7sxkz8St+k9GrwJsgPJenxv6s3stefH4IViXAgF:WlSZ6s17t8uGB2MxiE329F
MD5:	60AAD2DBE3B012707422BA569275EFA2
SHA1:	2AA71D2FEE0A2D7312842A66EA35942EF7B15BFE
SHA-256:	12EDF682ECB09B000BAD399CE38EA7657E93F7537E0A48F97B679A798AB37782
SHA-512:	5FA7CB65C59DEB0473B0F2593BA9B3C1FC15381D5B1661E698260D893D03DCE199C8C9F162F3CA6DEE357850800084719481924881FAD5080C6ED8EBD3783E8B
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Averaging</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="averaging_data"></A><I>Averaging Data</I></P>..<P>It is sometimes helpful to average several sets of data to establish an underlying pattern.</P>..<P>Multiple data sets can be averaged by selecting the records you wish to average from the database and clicking on the Average option.</P>..<P><I>Note: The average option will only be enabled when two or more records have been selected</I>.</P>..<P>See Also <A HREF="fm3fjn.htm">Viewing Records Stored in the Database</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm7rub.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (394)
Category:	dropped
Size (bytes):	1016
Entropy (8bit):	5.14617600546358
Encrypted:	false
SSDEEP:	24:WlSZ6zjEYFPeCNQ4BTo/OK3NspSW8bTIjycYExG:qSZ6vHZY0oV3HbTlSxG
MD5:	C9B9D2D4A315E728DC3F2C01B1E0619F
SHA1:	F0CEB44093E813511788B9890CBADE12EB49783E
SHA-256:	FFE07EC780B8772DF43E38A2A161344079338AD60616067CD44A8E92AF31BC53
SHA-512:	0D5732BD157E86C509CA17F61A0CAF0A09F813255023E0A7428A25F6B8CE4A482118AD3566C54347E275A99CE7306FE11EBA03D589D2CF59A72E25AEECC848FC
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Youngs Trichromatic Theory</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="youngs"></A><I>Young's Trichromatic Theory</I></P>..<P>The next major contribution to the understanding of color vision came from Thomas Young (1773-1829). Young thought it unlikely that the eye possessed a different receptor for every visible color and proposed that color vision was derived from the relative stimulation of just three receptors.</P>..<P>Young's trichromatic theory was not confirmed experimentally until almost fifty years later when Maxwell carried out an elegant series of experiments in which he used a spinning disc to produce additive mixtures of various combinations of colors. These experiments showed that virtually any color could be produced by simply adding together three primary colors in different proportions.</P>..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm7z8q.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (349)
Category:	dropped
Size (bytes):	2139
Entropy (8bit):	4.980346573596465
Encrypted:	false
SSDEEP:	48:qSZ6KnOzcHHNVcAFXvAq82i6rG5p3HRKJfuAKp:r2cHHP1XV82iY+FRKJ/Kp
MD5:	308D530AD7A93204C43AB98237AA4E79
SHA1:	DA9CE7FD93D93E996CE08E187EA2639670C97D8E
SHA-256:	0488413A4B324C3D1216FD1E78B48E9D15ECCFF063C68A318CFEE45E469986A5
SHA-512:	C3ECFFE606E16C2B9567DB22F45B1187FE889D6EF096074E10E9A9BD0795102869F213947B3B8F03A12F0B72D8B8AD80C67D445E71B59CEAA4F440C45B259FAC
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Identidying Color defectiveness using the FM Hue Test</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="3h_y_oj"></A><I>Identifying Color Defectiveness Using the FM Hue Test</I></P>..<P>The pattern of color defectiveness is identified using the FM Hue Test by bi-polarity, a clustering of maximum errors in two regions which are nearly opposite. The regions in which the errors are made can also be used to identify the type of color defectiveness. </P>..<P>Typical examples of patterns made by types of color-defective persons is given in the database of examples (<A HREF="fm0bdx.htm">Example.hdb</A>) which accompanies this program.</P>..<P>The severity of the defect can be gauged by the extent of the 'bulge', a severe degree of defect showing clear bipolarity with high error scores; moderate cases show small 'bulges' a

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm83zi.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (490)
Category:	dropped
Size (bytes):	1898
Entropy (8bit):	4.853458026897586
Encrypted:	false
SSDEEP:	48:qSZ6Ht3z+t0MQYNXV8X6rgCsAjfNN1+favedN8humB5:rZf/goH4ivedN8045
MD5:	58B18C881BAAA2DC434F00CCEACE5025
SHA1:	5EC19D03DECDD4539BD12377D1A9D397041F4334
SHA-256:	EB4D46EE025778E1A7FD224C4C4562569675199531F0E306AE5D768331D11C10
SHA-512:	0275223753F484198774F49C564F43354EB43220279126C4A23FE8B7A92261E3CCD777ED868FD32091DD98024058DB75354585B96EA0985531D077D6822F6CC6
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Color Perception</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="color_perception"></A><I>Color Perception</I></H3>..<P>Color is one of the most obvious and pervasive qualities of human visual perception. While it is possible to recognize objects and perform most visual tasks without chromatic information, color adds another dimension to perception. After watching a black and white film on television, one is often struck by the <I>richness </I>of perception when a colored image is restored. Similarly, a black and white photograph of a natural scene, seldom conveys the full beauty of the original.</P>..<P>Color plays an important role in many different areas of our lives. Important messages are often conveyed by colored signals - red usually meaning <I>danger</I> or <I>stop </I>and green, <I>go</I> or <I>all cl

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm8igl.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	626
Entropy (8bit):	5.374428216383203
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfzsMeqQ0A9/fgjef0UZXhKmQ5HxAUfSSvs:WlSZ6HQB/oif0UztOYSk
MD5:	B75BAC3B5A1E60F837F55946F634B2A4
SHA1:	1923238A06CBD72576AE0533C47AA63F3D3621C8
SHA-256:	87F62E10ECEBFF3EA49A9EF2B8DBE12A6B1C971D02432D06520F86C4B539D9FE
SHA-512:	DF66C481D27FE010983CD9950C388E796862EFF5A3CC6EE02E3B83C0B9D51DEC3E04EA0EC54D69DB06FBDA2D5FF04B42A711BD8B64C2AE0CB3BC1E1BFFE5F81C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>File Menu</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="file_menu"></A>File menu</H3>..<P><A HREF="fm760n.htm">New</A></P>..<P><A HREF="fm59da.htm">Open</A></P>..<P><A HREF="fm9i7k.htm">Save As</A></P>..<P><A HREF="fm1xf2.htm">Export Graph</A></P>..<P><A HREF="fm6m3u.htm">Export Scores</A></P>..<P><A HREF="fm043d.htm">Export Name and Analysis</A></P>..<P><A HREF="fm7n8x.htm">Print</A></P>..<P><A HREF="fm7dgf.htm">Exit</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm8iie.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	608
Entropy (8bit):	5.3987448449430975
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepf+sMeqe2jS13Ux21TaxLKt1QOLsQ1QYsYu:WlSZ6MDjS13o21+ut15QQ1QYsx
MD5:	2BBEE43DA0881ADF39FAE81F8E87FED0
SHA1:	661544071BF7649A5E027AAC016196761274761C
SHA-256:	BDDE91901D280A0D3FA07A5DF92355E04B39AE37A51953E2CB970EE2CA511F8E
SHA-512:	E2D4571ED13ED0DFBE83E070829EB54D6CEBB5E527241FE1110CE00FB5C86379A8610AED54743DD336163CBD21BC26B90C00AA6DF417C6990BDFD3A0C4A41C80
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Classification</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="146r.h6"></A><I>Classification</I></P>..<P>Results are classified into Superior, Average or Low on the basis of the Total Error Score.</P>..<P>Superior : Total Error Score < 16</P>..<P>Average : Total Error Score 16 to 100</P>..<P>Low : Total Error Score > 100</P>..<P>This classification is based on <A HREF="fm4c81.htm">Normative Data</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm8siz.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (827)
Category:	dropped
Size (bytes):	2139
Entropy (8bit):	4.985907315227886
Encrypted:	false
SSDEEP:	48:qSZ6jbKoS9p+4mUVU2VRwhBZ02WC7HTruO4I8M4mPFIruL64I:rsKPpdfVU23wG2WCL3p4I8reCP
MD5:	2A3D3316CD6E700F97B4242892A1F0E6
SHA1:	D33B6A16F0250460338253AE5CF0AC0DCB8D2BE6
SHA-256:	CBFAF0A53797679590B617BBC86155AD2F23876D808D39802C6C23B99C056438
SHA-512:	FDB44AE445D3AA26B675983F50AC91D024A62E106B1438F5A5E1DD30C62508EA051BE91BB3C20C216C7D46416058F286B7A20891DFC086ACA7C61F178C5D3C2B
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Color Vision - Defective</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="2p8e2k"></A>Defective Color Vision</H3>..<P>John Dalton carried out the first serious investigation of color deficiency in 1794. He became aware that his own color vision differed to that of other people, in particular he was unable to distinguish between certain colors and was unable to see deep red colors. Dalton found similar defects among his brothers and started to investigate the prevalence of the condition using a series of colored ribbons. Dalton believed that the cause of his condition lay in a blue coloration in the vitreous humour of his eye. This explanation was subsequently disproved by a<I> post mortem</I> examination carried out at his own request. However, the term 'Daltonism' has persisted to describe this form of color def

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm8vi2.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (448)
Category:	dropped
Size (bytes):	769
Entropy (8bit):	5.247197737120789
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfgIWsMeqv7B0N4BMMkAQrCnK9qWmPf8OQFT1oyCyEaB7:WlSZ6IxFo467trCKEzsOQFTHCi7
MD5:	DFF17E2AD89987F638D634C1B0FFF54F
SHA1:	C6C04485AF47361679CEFF98AD6CA273C250F87E
SHA-256:	31F4A71216271F30389A979C158A4131B7D895AD244A12DFCE117D10DCA0B634
SHA-512:	0E018638EA93449125E6DB324331EBCAF824BD23952A881B4ABBEC6AACF24099F37EE2AB95301331AB7593ED6CAB28885028B16758AE870405F4333D9A33F206
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Young Helmholtz Theory</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="young_helmholtz"></A><I>Young-Helmholtz Theory</I></P>..<P>Hermann von Helmholtz carried out similar color mixing experiments but at first rejected Young's theory because he was unable to match all spectral colors with trichromatic (three color) mixtures. He later realized that this result could be explained by the three retinal receptors having overlapping spectral sensitivities. Helmholtz went on to champion the trichromatic theory which later became known as the<B> Young-Helmholtz theory</B>.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm97vy.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	431
Entropy (8bit):	5.408686600061125
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepfu4ksMeq5p49d4khM+SS:WlSZ62nTsdBLSS
MD5:	3CF442E57B99570D31853ED83ECF1E7D
SHA1:	2FDE1B5269BA41A60EB51B8A988736BD42FD1700
SHA-256:	24D208BDC3ACEADB25547AF3E235C6D80BC856A818CD79ED2F6AEE1CD78B3CAC
SHA-512:	27204C9206C8C185BD83A70BD1F1F6BB97DF360059AACBD3B354AF6E93C10ADCE8254D204BA3FD8964BF71525B1D70F2DA158D57D477ECEE999E198435C0B1EE
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Administration</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="administration"></A>Administering the test</H3>..<P><A HREF="fm4ndz.htm">Lighting</A></P>..<P><A HREF="fm0llx.htm">Procedure</A></P>..<P><A HREF="fm359j.htm">Scoring</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm9i7k.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	612
Entropy (8bit):	5.3295965535806085
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfQgK0sMeqfBGQbZWJChfQ0T/Kce4hx8ll:WlSZ6xfBLbCCY0ed
MD5:	A66F36002B88660174CF8C6F7B19C4F9
SHA1:	4F4C2C8AAC87687F1BE35A43E13678922F57C9EB
SHA-256:	9CF6E0AF7AA5D8B0F263FA6BED5877373B3762FCFF1E31044D41292B6B0B9836
SHA-512:	AA81624F6D92EC098DC92A7D24DF67E7369561F7C5AF3692BBBF4219E56A16C08BA58598ECC82AEF7F25E3BA0BF3070EB59A40F2D3F04504286F70F34110659D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Save As (File Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="3_gii4p"></A><I>File menu - Save As </I></P>..<P>This option saves the current database under a different filename then makes the new database current. This is a useful way of keeping backup copies of your databases.</P>..<P>CAUTION - Saving the database with the same name as an existing database will erase all records in the existing database.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm9p4j.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (498)
Category:	dropped
Size (bytes):	1053
Entropy (8bit):	5.033782561959998
Encrypted:	false
SSDEEP:	24:WlSZ6MQ2xQHHNMW7OSBf5eGqwOEUBqdCY:qSZ6/Nx9t5eG87BqdP
MD5:	4E4EA2AA8DEF4E3D1FAFD3FA367CF0F8
SHA1:	5BCFE9D9AE45E1130F0E0BF23A01F30F6749B124
SHA-256:	A4D8411E1B655606417346688126F14401276D4793B317380D29CA26BF7B79DC
SHA-512:	5F86230841AAE79F82346F8359670B7094F93C9A381DAA2D40C2ACF6BAA0130E3387268B9D03FFFDDFB61FCB4A356DCEE8F40342AA6061ADC901CF75833DD4EC
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Acquired Defects</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="acquired_defects"></A><I>Acquired color deficiency</I></P>..<P>Some changes in color vision occur throughout life even in healthy individuals. These changes can be explained in terms of yellowing of the ocular media and perhaps changes in retinal sensitivity. Color vision deficiencies can arise at any time throughout life as a result of general or ocular disease, trauma, medication or as a result of exposure to toxic substances. Unlike congenital color deficiencies, acquired defects commonly affect one eye only and affect males and females equally.</P>..<P>The effects of various diseases on color vision has only been fully recognised in recent years. This is partly because acquired defects often affect blue perception and most color vision tests onl

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm9sfm.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1096
Entropy (8bit):	5.322074942718442
Encrypted:	false
SSDEEP:	24:WlSZ6We7LoBEUBNFDwhOwsp91No1N8jkZBrX3W:qSZ6iqUBNtwhOTp9DoDk2BrX3W
MD5:	193E2B281F654EEA18A9120206D27BAB
SHA1:	C49FEBDF7CE90002D00B30D73E0D3BA1B4BF2D99
SHA-256:	A228DC18DEF8C349C50F0D9C77403D5F6BB5D5D4D81F95A7D1710D18973A1F41
SHA-512:	54A2C9E9AD0290A88FE223815604A8740EF39F57BDC49DA8C56C33BFDBFD732A5F82466955BE7D585BEB6D641FB421B097ACB55B40ADDB3A034DC5E27E560897
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Analysis</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="6wkrur"></A><I>Analysis Options</I></P>..<P>The program includes a powerful set of analytical tools. The results of the analysis is displayed in the Analysis window and is printed out with the graphs.</P>..<P>The user may select which analysis information to display by means of the Preferences form which is accessed from the Edit menu.</P>..<P>The following analysis information is available:</P>..<P><A HREF="fm2k85.htm">Total Error Score</A></P>..<P><A HREF="fm26k5.htm">Square Root of the Total Error Score</A></P>..<P><A HREF="fm5fw3.htm">Vingrys Analysis</A></P>..<P><A HREF="fm8iie.htm">Classification</A></P>..<P><A HREF="fm7hf5.htm">Percentile (first test unselected sample)</A></P>..<P><A HREF="fm7hf6.htm">Percentile (some experience of color matching)</A

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\index.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	652
Entropy (8bit):	5.1462435476545885
Encrypted:	false
SSDEEP:	12:BMQEdOaA9zp6QclfVISLDxPDwAhHL91DwmxRLwAhbFAtT87w1qgPC:WnAZpsq4DxzpL4mxVA878PC
MD5:	9433A81C9FD156FA8D4D90C7B62E7557
SHA1:	C4C8C3A13EE0B45E1AD623BE40DC10DF0B7AA437
SHA-256:	01F71092AE64BA43B4F4E4283BD35F4A560F2AF505C092E23CB5A73A05212AA0
SHA-512:	A20C8B64F74E5EC08AA74C4B6DA6AC9A0A5578F63784EFF118E28466C4C408A9C995C65F235AB76FD9B84DEE28E7121D3CCF172F99C13D3434A0E6019F7E2A5C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Farnsworth-Munsell 100 Hue Scoring Software: Help</title>.</head>..<frameset rows="" cols="200," frameborder="yes" border="2" framespacing="2">. <frame src="indexList.htm" name="leftFrame" noresize>. <frameset rows="80,*" frameborder="yes" border="2" framespacing="2">. <frame src="nav.htm" name="topFrame" scrolling="NO" noresize>. <frame src="fm0001.htm" name="mainFrame">. </frameset>.</frameset>.<noframes><body>.</body></noframes>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\indexCIE.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	1403
Entropy (8bit):	4.972646287022937
Encrypted:	false
SSDEEP:	24:WLZpsqgwhUDIcd/NVxonOLm0yTPhH0FmeqdEj9BFek/hoOrjpBppfW4SXai9DC:KMqgKOV1DwMmPhH8t9BEYSsjTpPbsDC
MD5:	C2B113694C6A2C6C04A3734D98BBFD05
SHA1:	69A74E1521C986B6D7046A4C6F6FB9C45B0A6038
SHA-256:	47CC985EDEE5A47B6E4DFC2891215E0B986B854198670C7526AFBDBFD26CB4C3
SHA-512:	27B129CB72EA766DA23AF95827CF82BBAA3B4DA0B349C8CEB6DF532957FE1FBBA54CEBCB99C9EA400E61817A082F5B3DF682F87937822D20519BE38ADBCED1D8
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Untitled Document</title>.</head>..<body>.<p> </p>.<p>CIE CHROMATICITY DIAGRAM</p>.<p>The ability to match colors using a mixture of just three primaries forms the basis of a powerful method for describing colors.</p>.<p>In 1931, the Committee Internationale de l'Eclairage (CIE) devised a standard system for specifying colors based on the trichromatic color matching characteristics of a 'standard observer.'</p>.<p>For technical reasons the CIE adopted imaginary primary colors (rather than red, green, blue) which were designated X,Y, and Z.</p>.<p>The relative amounts of X, Y, Z required in a color match are represented by the lower case letters x, y, z.</p>.<p>Since the sum of x+y+z is equal to unity, the value of z can be ascertained from the values of x and y.</p>.<p>Therefore, all per

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\indexCV.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	620
Entropy (8bit):	5.116566131884742
Encrypted:	false
SSDEEP:	12:BMQEdOaA9zp6QclfVIgb8RxPDwAhHL91DwmxRLwAhbFAt0Ic87w1qgPC:WnAZpsqgwRxzpL4mxVrt878PC
MD5:	C8828E36B6CB9FE7F9AEBAA4E1F56A16
SHA1:	50FF09FB952BD1D54D3C0D6738DB343EA79863A8
SHA-256:	2F84B8B9A955C9D98FA7D0CCA825EF11A0F1C9CFD08A486961CE486CF208B56F
SHA-512:	754F0D54CE302512694118F7643C532A54AD16AAA1F96B74959DB5705BB05BF96B79503285D8E67CD62A184A6BDC20051437CD94765DD47AB7D1ABA3BC25D49C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Untitled Document</title>.</head>..<frameset rows="" cols="200," frameborder="yes" border="2" framespacing="2">. <frame src="indexList.htm" name="leftFrame" noresize>. <frameset rows="80,*" frameborder="yes" border="2" framespacing="2">. <frame src="nav.htm" name="topFrame" scrolling="NO" noresize>. <frame src="fm5l0u.htm" name="mainFrame">. </frameset>.</frameset>.<noframes><body>.</body></noframes>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\indexDT.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	1117
Entropy (8bit):	4.903867197791394
Encrypted:	false
SSDEEP:	24:WLZpsqgwaEtJo6uwDK88ZftlBAeNBAehxQy1SsYREX0tC:KMqgCy6u8781lAenAe7Qy8sYI0tC
MD5:	9FEC8D6A1FF2EE28339621718E15BD1D
SHA1:	1D0560941F2A18E7A3C5B6AD26059A0227ACB3FA
SHA-256:	B2376A2C01A60D4CE99052C088E7C0907819F29D0FCEB18A6BBB4A1892C00442
SHA-512:	7DFD6019908E8751CEF442E15FB4FD1174934B61F46CC572C3CD3E450A8CBACF8C8DEC8480F5D09855EA0DFD8D8F2236DAA8172AB89DE136954F20A74B393A9D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Untitled Document</title>.</head>..<body>.<p>DEUTAN CONFUSION LOCI</p>.<p>The easiest way of representing the combinations of colors which are confused by color deficient people is with reference to the CIE chromaticity diagram.</p>.<p>The colors which dichromats confuse lie along straight lines when plotted on a chromaticity diagram.</p>.<p>The lines radiate from different points according to the type of defect. These lines are called isochromatic confusion loci.</p>.<p>Dichromats will tend to confuse colors over the whole length of the confusion loci, whereas anomalous trichromats will tend to confuse colors over a more limited ranger.</p>.<p>The line which passes through the whole point and intersects the spectral locaus, indicates the wavelength which will appear "white" or neut

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\indexFM.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	620
Entropy (8bit):	5.107866666885297
Encrypted:	false
SSDEEP:	12:BMQEdOaA9zp6QclfVIgb8RxPDwAhHL91DwmxRLwAhbFAtj87w1qgPC:WnAZpsqgwRxzpL4mxVk878PC
MD5:	ACD8635BB244F2711A1BDEB81D6935A9
SHA1:	2C6C33CCB87AB60F39E6ED5C86070408D7F5CE09
SHA-256:	D8258D977A80DA38AADE434F2B6FDCD5C4D224BBF7EB01A6F7DCB8CFEAAB58C5
SHA-512:	993F89D2517B991109920ECADE2C3B8036E3003110C58DBC4ECCCC3ED2645691B6FDF8EED0C0F739A8D14915676F1E0455CBB0499A09CA5066ED13776B256325
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Untitled Document</title>.</head>..<frameset rows="" cols="200," frameborder="yes" border="2" framespacing="2">. <frame src="indexList.htm" name="leftFrame" noresize>. <frameset rows="80,*" frameborder="yes" border="2" framespacing="2">. <frame src="nav.htm" name="topFrame" scrolling="NO" noresize>. <frame src="fm4eus.htm" name="mainFrame">. </frameset>.</frameset>.<noframes><body>.</body></noframes>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\indexFS.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	620
Entropy (8bit):	5.113713229977671
Encrypted:	false
SSDEEP:	12:BMQEdOaA9zp6QclfVIgb8RxPDwAhHL91DwmxRLwAhbFAts87w1qgPC:WnAZpsqgwRxzpL4mxVX878PC
MD5:	D98C6A1A5CA178C807EF61EEEA70AB88
SHA1:	8C496EDE53C990802B7296B6B07A179F09097E17
SHA-256:	1AD26B7BA2935536FFFC2B10A3EF100D186AB68CB895BCCB4727B54148D9EC1E
SHA-512:	7E56A3BF92659491E170B31A861880AA10701E094FF6C701F81C003F59BAE8E5FBB063E85206CE0C3846CD688C3660DB8862C7E5D0EF80AD743424851E800B56
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Untitled Document</title>.</head>..<frameset rows="" cols="200," frameborder="yes" border="2" framespacing="2">. <frame src="indexList.htm" name="leftFrame" noresize>. <frameset rows="80,*" frameborder="yes" border="2" framespacing="2">. <frame src="nav.htm" name="topFrame" scrolling="NO" noresize>. <frame src="fm00c1.htm" name="mainFrame">. </frameset>.</frameset>.<noframes><body>.</body></noframes>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\indexList.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ISO-8859 text, with CR line terminators
Category:	dropped
Size (bytes):	19412
Entropy (8bit):	4.825244600394692
Encrypted:	false
SSDEEP:	384:KhH1eeeMueMuPMuxBeMuxuWuxAMusMux9MuxlmeMuwMuxwMuxYMuxMeMuqMuxkMI:KhgeeMueMuPMuxBeMuxuWuxAMusMux9m
MD5:	675CA9892EC326FF4259F4022D3575BE
SHA1:	FD532ED462C8D287310CB207D5BDE3A417C6A58A
SHA-256:	4AEAE69D75DDAB2BEB5988CC96EBCFA99B8CE5A8FC800FE0D7E00B0196055419
SHA-512:	FB82B26560040DC17BB810E12F3D03ED97E1B2E626987D28EEB16AD6D2450213C9B4B0694556140AD82D53D3D39CFE468965FE8C67A7F63E2D431A34CCAB89FB
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Farnsworth-Munsell 100 Hue Scoring Software: Help</title>.<style type="text/css">. .span.s3 {color: #000000}.table.t1 {border-collapse: collapse}. td.td1 {border-style: solid; border-width: 1.0px 1.0px 1.0px 1.0px;.. border-color: #bfbfbf #bfbfbf #bfbfbf #bfbfbf; .. padding: 0.0px 0.0px 0.0px 0.0px.. }.. p.p1 {margin: 0.0px 0.0px 0.0px 0.0px; font: 10.0px Arial; color: #0000ff}. p.p2 {margin: 0.0px 0.0px 0.0px 0.0px; font: 10.0px Arial}. p.p3 {margin: 0.0px 0.0px 0.0px 0.0px; font: 10.0px Arial; color: #008000}. p.p4 {margin: 0.0px 0.0px 0.0px 0.0px; font: 10.0px Arial; min-height: 11.0px}. p.p5 {margin: 0.0px 0.0px 0.0px 0.0px; font: 36.0px Arial; color: #0000ff}. p.p6 {margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Arial}. p.p7 {margin: 12.0px 0.0px 3.0px 0.0px; font:

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\indexPR.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	1132
Entropy (8bit):	4.916068132865607
Encrypted:	false
SSDEEP:	24:WLZpsqgw+tJo6uwDK88ZftlBAeNBAehxQy1SsYREXBrC:KMqgfy6u8781lAenAe7Qy8sYIBrC
MD5:	87645DFC88532C01899AB9BFDCDD2B9A
SHA1:	11ED1DF917A28160527E3B60C38FC8C44DE5B2CF
SHA-256:	988E5D9A88ED374E09EA2841A1606CF5276C36512EC6A86A70D8FC9D728B5739
SHA-512:	087E0766AE43447746BD963AF124FE5CD6059044168AAB98EE599CE90309B8A4619E3A93F172F22770581B2D24F7FB043E5CF3629681E13F515BB175297F899C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Untitled Document</title>.</head>..<body>.<p>PROTAN CONFUSION LOCI</p>.<p>The easiest way of representing the combinations of colors which are confused by color deficient people is with reference to the CIE chromaticity diagram.</p>.<p>The colors which dichromats confuse lie along straight lines when plotted on a chromaticity diagram.</p>.<p>The lines radiate from different points according to the type of defect. These lines are called isochromatic confusion loci.</p>.<p>Dichromats will tend to confuse colors over the whole length of the confusion loci, whereas anomalous trichromats will tend to confuse colors over a more limited ranger.</p>.<p>The line which passes through the whole point and intersects the spectral locaus, indicates the wavelength which will appear "white" or neut

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\indexTR.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	1103
Entropy (8bit):	4.832787464154585
Encrypted:	false
SSDEEP:	24:WLZpsqgwvtJo6uwDK88ZfqZBAeNBAehxQy1SsYREXrC:KMqgsy6u8781q7AenAe7Qy8sYIrC
MD5:	3DFCA87387FA5E7E1176E988681CEAC9
SHA1:	9D429FFD97C4B5BA7FDE07E8CA1BBC5B9EAF08A1
SHA-256:	29F60861DB960BFA97F66D6082AF07C9D27350E5E0BF9176E164A1C25FB2D3EC
SHA-512:	0DF65BD35AE170D1F429267BFF8E8FA5260AA93AAC33BC113DAADB366F6A84CEBD3D60016F3385D8379376A6003535D7DB25FB6D27E5B4B02B02D1FF975880B5
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Untitled Document</title>.</head>..<body>.<p>The easiest way of representing the combinations of colors which are confused by color deficient people is with reference to the CIE chromaticity diagram.</p>.<p>The colors which dichromats confuse lie along straight lines when plotted on a chromaticity diagram.</p>.<p>The lines radiate from different points according to the type of defect. These lines are called isochromatic confusion loci.</p>.<p align="center">Dichromats will tend to confuse colors over the whole length of the confusion loci, whereas anomalous trichromats will tend to confuse colors over a more limited ranger.</p>.<p>The line which passes through the whole point and intersects the spectral locaus, indicates the wavelength which will appear "white" or neutral to the col

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-05S33.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (615)
Category:	dropped
Size (bytes):	2145
Entropy (8bit):	4.939382033556128
Encrypted:	false
SSDEEP:	48:qSZ61wjaXKAF3jUX3AFQjhXVRde9QtJHYRnBqARAfAkABAF3:ruMaXnTUX0shXV3r/HYRnB23
MD5:	72A0276B97DD44DA53691CEB2CBC6F8F
SHA1:	F90E0A1915ADE2DB6479CBD0D31F09F81C77E808
SHA-256:	C859C0B1B1890C6C10C53E0EB2377DDAE01371074356737555BC15B5A2541167
SHA-512:	1D9E9211E17806016725533CB4D03B8B5DD126CBD30C286E3B3097D7555E726267DA93347875D9E93DE16636F80B7AE5F7C1514CFB4C715513760C8CB855C77E
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Classification</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="classification"></A><I>Classification</I></P>..<P>Subjects with 'normal' color vision can be classified as follows:</P>..<P><U>Superior Discrimination</U></P>..<P>About 16% of the population (exclusive of color defectives) has been found to make 0 to 4 transpositions on first test, or total error score of zero to 16. This is the range of superior competence for color discrimination.</P>..<P><U>Average Discrimination</U></P>..<P>About 68% of the population (exclusive of color defectives) make a total error score between 20 and 100 on first tests. This is the range of normal competence for color discrimination.</P>..<P><U>Low Discrimination</U></P>..<P>About 16% of the population (exclusive of color defectives) has been found to make total error scores

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-0CT6C.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1236
Entropy (8bit):	5.205746040930025
Encrypted:	false
SSDEEP:	24:WlSZ6mJiySKp1GHRE0vFnHzxDFhLA1ZciDl8HFXdvkPiDF3UgQnWF7BKu4R2hr0d:qSZ6QSwExFnWDciyXdSi9QWF1KPAOP8o
MD5:	78A9D9EE7E2BAC30E1D4981B3B0E5B37
SHA1:	4BA4FC7857EE5CB5CF092405D57617EC627D79B5
SHA-256:	55AC012EB532EE6B4D182EC6F446439638405FB226B0CBFCFDECB8C539795193
SHA-512:	3917087D7451FC8D1D1C2B5F2723B3F59504D6287E62FA8D86EC316AE1868FC07628DF1ABDB1190E9289072B5D603A3A631CBA6CBF9F1CFB3C29D91440D087B6
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Vingrys Analysis</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="vingrys_analysis"></A><I>Vingrys Analysis</I></P>..<P>The Vingrys Analysis performs a vector analysis of the data and provides a series of indices describing the orientation, magnitude and polarity of the data.</P>..<P>The Confusion index (C-index) describes the severity of a color loss. A perfect arrangement of caps will give a C-index of 1.0.</P>..<P>The Scatter index (S-index) quantifies the specificity (polarity or randomness) of a cap arrangement. A perfect arrangement of caps gives an S-index of 1.28.</P>..<P>The Angle identifies the orientation of the cap arrangement. </P>..<P>The results of the Vingrys analysis are used to determine a provisional diagnosis.</P>..<P><U>Reference</U></P>..<P>For more information on the derivation and applicat

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-0HNLI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (725)
Category:	dropped
Size (bytes):	1610
Entropy (8bit):	5.268377430514314
Encrypted:	false
SSDEEP:	24:WlSZ6WoN61vB6OpxoTpHR42GBlhw88tVkTgTGz+XymidQ1ZXidc9Nidw9idg+:qSZ6ovIOpxoTpVGbybirQec9swcg+
MD5:	2D77A45149481A8EC3A96F07AD680BB4
SHA1:	C034CCE21CBF3476321F5BE199602FFB9BEEE6A4
SHA-256:	9DD621E79484281AA3254A76C649B61322077EDEBFB72F7C44E74462045A0744
SHA-512:	971514B584A074F8996E8367BFF105D38A54CDC699102B6A94380A798D1E745D6865C309A71652297859531E472C64E829A62492AF872F6A666037E9F4F97FF7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Anomalous Trichromacy</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="anomalous_trichromacy"></A><I>Anomalous trichromacy</I></P>..<P>Anomalous trichromats have three cone photopigments and like normal trichromats, require three colors to match all spectral hues. However, the relative proportions of the three primaries required to make a color match are anomalous implying that one or more of the cone photopigments has abnormal absorption characteristics. The terms used are protanomalous, deuteranomalous and tritanomalous to describe the presence of abnormal 'red', 'green' and 'blue' photopigment respectively. Anomalous trichromats do not accept color matches made by normal trichromats and may not accept matches made by other anomalous trichromats in the same category. The severity of the defect also varies signif

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-0VVLP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (335)
Category:	dropped
Size (bytes):	923
Entropy (8bit):	5.294460497061449
Encrypted:	false
SSDEEP:	24:WlSZ6/mAaCMZurAF3lPoKTJkRI88pVxu2s:qSZ6+AVMZurAF3lPfJkQxu2s
MD5:	697EABBD397BCB3F0E518CC5D71F8665
SHA1:	79DDEC0A5E0B8AC160E44080744D6DA0E2DAB6FA
SHA-256:	2745476DC843A0631F14A4554D36EA5986CA947A2E1F018D3511F3D185D57BC9
SHA-512:	243CB0ABA5C40911C652D3E9D22A2BAAE2B1B968D0B34E6D871B38BF0E91D174C7E9BFE62E268BCAC8DBA52E511360302D53A01552F4121C9C18F5CDF352CEF8
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Color discrimination - Basics</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="3i08098"></A>Color Discrimination Basics</H3>..<P>Before considering the various forms of color deficiency, it is necessary to understand the basics of color discrimination.</P>..<P>In order to discriminate between different wavelengths, two or more photoreceptors with different but overlapping spectral absorption are required. To understand why this is so, consider the situation for individuals with one, two and three types of photopigment - known as monochromats, dichromats and trichromats respectively.</P>..<P><A HREF="fm7lkj.htm">Monochromats</A></P>..<P><A HREF="fm4r8z.htm">Dichromats</A></P>..<P><A HREF="fm7243.htm">Trichromats</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-11R3F.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1358
Entropy (8bit):	5.054147959173274
Encrypted:	false
SSDEEP:	24:WlSZ6nN7g4wZqCmnmXVRlieL3jxLIyLU5eYM5LeLPSMG/:qSZ6n+4yqOFRhLFLImgB4LgSMG/
MD5:	7F7AC70B50CEC86D2CA55180A736C385
SHA1:	77EF42BEDC142CFBD6D852E6ED750BF1305313E6
SHA-256:	85E0256CA7B879880B3CAC64B8050DC1A4C523614B04D80D89B52043554D7501
SHA-512:	35C2EE3519740160FC827D894D77839F71D4E58C3FD65CBA5D8D373BF6D50325E5D568E650647D87F75B33B83C604487E7CFCC7372A9A62AC057FE03635B0582
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Select Record (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="11cfrtd"></A><I>Edit menu - Select Record </I></P>..<P>A record saved in the database can be retrieved, edited and displayed by selecting Select Record from the Edit menu or clicking on the database icon <IMG SRC="../images/bm16.gif" ALT="" BORDER=0> in the toolbar. A list of records currently held in the database will be displayed.</P>..<P>Records may be sorted according to Name, Reference, Date of Birth, Date of test, File number or Comments by clicking on the appropriate option button in the <I>Sort by</I> panel.</P>..<P>To select a record, click on the appropriate name so that is highlighted and then click on the Select button. The data for the selected record will then be displayed on the screen.</P>..<P>You may select multiple record

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-1APM7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	587
Entropy (8bit):	5.294553446122531
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepfc01jsMeqPAiL14F0x21yGoNlJqjy/Y17WDbTjsET:WlSZ6f1ft1IP1yGoPJwp176bTBT
MD5:	E44592203D952AFCEB6061CED401D71D
SHA1:	45A2B20E34265662B78497EDF9ED13D2596CE54E
SHA-256:	C721733B3E4DCDB5A90B840A5DDA15D475E172BF9645906698D0B9D22CB13E7A
SHA-512:	787C3F3370EE83AA8883EF8E7D36156D6A9CAF3549616273370B0A8DFF9529311AF61104F033F74B0CEEFD1D2D2D4E824DB71A7FB9BEA0FA818EB52D8B2DD368
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Square Root Total Error Score</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="euxqgu"></A><I>Square Root of Total Error Score</I></P>..<P>The distribution of Total Error Scores in a population tends to be skewed. However, by taking the Square Root of the Total Error Score a more symmetrical distribution is obtained. For this reason, the square root is often used in statistical analyses.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-3CA97.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (995)
Category:	dropped
Size (bytes):	1425
Entropy (8bit):	5.073228911182896
Encrypted:	false
SSDEEP:	24:WlSZ652WBJj0CCu7sOv2Aibd98hiZjz3MR5rfHZZ0QFSqrXTlCG8M6m1VMCjMUw5:qSZ69JXeOuA0/gh5cQTXxn80SzSMx
MD5:	BCB3E4826A8D931040D797B6A6AC8223
SHA1:	A7A12EF094835903C0956C9BF7ACBDA8C47A8BBB
SHA-256:	85DD9A67EF62A66A7014E8043B71B5A25178E5CEAC864926537C4A828E9EDDB6
SHA-512:	A3ACE85A5C1C328C5B4673D36E042166C360622B814D70108ED138B287974292D14A18371790AACD25ED8ED84249B61051429A5010F712E12CAD5B7CC8BF8EDB
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Monochromats</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="monochromats"></A><I>Monochromats</I></P>..<P>A person with only one photopigment is known as a <B>monochromat</B>.</P>..<P><IMG SRC="../images/bm2.gif" ALT="" BORDER=0></P>..<P>The graph above shows an absorption spectrum for a hypothetical photopigment. A quantum of light with a wavelength of <I>A</I> has the highest probability of being absorbed by the photopigment, whereas a quantum with a wavelength of <I>B</I> has half the probability of being absorbed. Although <I>A</I> is twice as likely to be absorbed than <I>B</I>, the photopigment has no way of <I>knowing</I> which wavelength it absorbed. For a given amount of light energy, <I>A</I> would look brighter than light <I>B</I>. However, the subject would have no way of telling if the difference

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-3ECGV.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (356), with CR line terminators
Category:	dropped
Size (bytes):	1216
Entropy (8bit):	5.1266684822349635
Encrypted:	false
SSDEEP:	24:WlloCZ6gdXhX0/WoCEBkDFqmOh/+VXseiDCkxRVU8d2PU6icUCHmNIR4KQT9Fci8:qloCZ6gdxX0unRqh2m/CoRVSbiemSR40
MD5:	AAB7C94999BFBF3AA51A5BB19F06935E
SHA1:	B262390D024FEFAAD6EEBFE3EB567C3C8D11A1F8
SHA-256:	BA27345882DD1193E458D4C02DBE5F0E8F3DC0D89B1D1CD1FAE6941CAED522AD
SHA-512:	74737B7082BFDFF1D3C08849C9EE5E6740F7B938057934A147D08523E3B005123937BA77D5AF97DC880C20BC468700C5E1D891013BA60A236E5BA31C0F7767AD
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Printing Graphs</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="7k9r.q"></A><I>Printing Data <IMG SRC="../images/bm14.gif" ALT="" BORDER=0></I></P>..<P>Results can be printed using any printer (with graphics capability) supported by your operating system. Printing is initiated by clicking on the printer icon on the toolbar or by selecting Print from the file menu. Alternatively, data or graphics may be exported as a PDF from the File/Export menu or copied to the clipboard from the Edit menu. </P>..<P>Results will be plotted in the same format as the current screen display (i.e. linear / polar, filtered / unfiltered etc.). Subject details and statistical information is printed below the graph when printing.The user can choose which statistical information to include using the Preferences option from the Applicati

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-3KMPE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (1625)
Category:	dropped
Size (bytes):	2433
Entropy (8bit):	4.923089130355738
Encrypted:	false
SSDEEP:	48:qSZ60YOQquZ/JBL0EHMgh+KCoxGh6Aj2keoJ+dMtll4N99R3F:riOA/JB0CAaotlyHF
MD5:	F54225B56AD7DA48538385472CA4E2D3
SHA1:	4FD2DF530E47A3C7183DA8A0E5631E0554596A79
SHA-256:	024CE65D864FA810308156E82C27101FC1F9E3F89B2022C0FEADEFEB0DDC6A94
SHA-512:	CD8D18C22E61BE7EF527FE166D222FA059B9CF9C439E051155B260815802B58AF62B52550FA89222B4C472CA869203E8EC35103DE664F80E0992F3FADBB84550
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Modern Day Theories of Color Vision</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="modern"></A><I>Modern Day Understanding of Color Vision</I></P>..<P>It was not until almost 100 years after Young and Helmoltz originally proposed the trichromatic theory that the existence of three kinds of photopigment in cones was confirmed (Brown and Wald, 1964). Using a technique known as microspectrophotometry, evidence has been found for a short-wave receptor (blue) which absorbs light best at 419 nm, a medium-wave receptor (green) which absorbs best at 531 nm and a long-wave receptor (red) which absorbs best at 558nm (Dartnall et al, 1983). The three types of cones differ in their overall numbers and their distribution over the retina. It is estimated that the normal retina contains 54 percent medium-wavelength sensitive c

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-433IF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ISO-8859 text, with very long lines (390)
Category:	dropped
Size (bytes):	2172
Entropy (8bit):	4.91400865988998
Encrypted:	false
SSDEEP:	48:qSZ6jueAtTY9YLAF7mDo87vGw1mbi7mqbmImhm4LtmZNTcGVJ3I03AC:rrD+7YvGwJxbnGzGJ3Q0b
MD5:	A74F5396FE4153AA1C19002524D41A5C
SHA1:	8C7495F7D0BC6CAB889C3BCF37A8E97D97CF3C70
SHA-256:	364634A2564FFF9AEBB41EE58DD26DF5F106DE0C617EC3A3B57A6028475DCB57
SHA-512:	AAD7267E950F2C52DEB6462B16BD7084C3D2AE901A624394BCE574C7E27BB28BE51152DF1E660CC8A2A5B57F6A0FC8AE6E6460FEE3DA1DE3F1CEAF7404D2341D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Purpose of FM Hue test</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H2><A NAME="purpose"></A>Purpose of the FM Hue Test</H2>..<P><I>Primary Usage</I></P>..<P>The Farnsworth-Munsell Hue Test offers a simple method for testing color discrimination. It yields data which can be applied to many psychological and industrial problems in color vision. Its primary uses are to:</P>..<P>.Separate persons with normal color vision into classes of superior, average and low color discrimination.</P>..<P></P>..<P>.To measure the zones of color confusion of color defective persons.</P>..<P><I>Examples of Uses</I></P>..<P>.Examination of inspectors of color goods, of color graders, and of color matchers.</P>..<P>.Testing for type and degree of color defectiveness.</P>..<P></P>..<P>.Detection of poor color vision in salespeople.</P>..<P></

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-5A7QD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1148
Entropy (8bit):	5.150931772291609
Encrypted:	false
SSDEEP:	24:WlSZ6/3PpTyAIVoSKaDTNIBsvZn2MPXpA9E:qSZ6JdIVlKaWKZnL3
MD5:	B30B94D1CE5EFC033EC60C9080459BAA
SHA1:	DFCB8F5D49FD64A66A7482FFADE87FCABCC414AC
SHA-256:	4DD0654A19F8C58FBADE2D2B9547CE2B58D52FEB153DED136068179B1ECCC85E
SHA-512:	2AE912ADB5675833514B930E1CC2BAE8116DA3685DEE7F963FDD3FBE6A6DC2CAC11375C93E393F6E36B1CF598343C7237D98F180F6C63A72C523D65FD138F1B0
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Copy Graph (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="3.ne_qa"></A><I>Edit menu - Copy Graph </I></P>..<P>Polar and linear graphs can be copied into the Windows clipboard and pasted directly into other Windows programs.</P>..<P>To place a graph into the clipboard, first display the graph in the required format (linear or polar) on the screen then select Copy Graph from the<B> </B>Edit menu. Select Bitmap or<B> </B>Metafile format from the sub menu.</P>..<P><I>The bitmap format can be edited using packages such as Paintbrush.</I></P>..<P><I>The metafile format takes considerably less memory and will allow editing by object-based drawing packages.</I></P>..<P>Having placed the plot into the clipboard it may be copied into a Word document for example, by loading Word, placing the cursor at the desir

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-5DMOI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (394)
Category:	dropped
Size (bytes):	1016
Entropy (8bit):	5.14617600546358
Encrypted:	false
SSDEEP:	24:WlSZ6zjEYFPeCNQ4BTo/OK3NspSW8bTIjycYExG:qSZ6vHZY0oV3HbTlSxG
MD5:	C9B9D2D4A315E728DC3F2C01B1E0619F
SHA1:	F0CEB44093E813511788B9890CBADE12EB49783E
SHA-256:	FFE07EC780B8772DF43E38A2A161344079338AD60616067CD44A8E92AF31BC53
SHA-512:	0D5732BD157E86C509CA17F61A0CAF0A09F813255023E0A7428A25F6B8CE4A482118AD3566C54347E275A99CE7306FE11EBA03D589D2CF59A72E25AEECC848FC
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Youngs Trichromatic Theory</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="youngs"></A><I>Young's Trichromatic Theory</I></P>..<P>The next major contribution to the understanding of color vision came from Thomas Young (1773-1829). Young thought it unlikely that the eye possessed a different receptor for every visible color and proposed that color vision was derived from the relative stimulation of just three receptors.</P>..<P>Young's trichromatic theory was not confirmed experimentally until almost fifty years later when Maxwell carried out an elegant series of experiments in which he used a spinning disc to produce additive mixtures of various combinations of colors. These experiments showed that virtually any color could be produced by simply adding together three primary colors in different proportions.</P>..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-5U7KO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	951
Entropy (8bit):	5.463654319767326
Encrypted:	false
SSDEEP:	24:WlloCZ65rX4Os2BJvCQWPEk0Uq4w2kI+h1dNbHCVd:qloCZ6FIOWPZkIkt1dxCVd
MD5:	EF17225EDD4AD11E9DE39B38BA2979FA
SHA1:	F50E4CCE88AC680AA47C13E5DF2DE0669BD50B0E
SHA-256:	1128E54A905B883E3FA96C823D9519C699371D5305055BAC31955EFCEDF1B1B2
SHA-512:	8FB1133EF976AFF50016CA2CC3484AAD3359ADBE7FC52C0BE1B03143590ED83A511F90F26209FC60089FE2ECD654572569BBD6926EBC1EBBD9483878676B8399
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Toolbar</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="toolbar"></A>The toolbar</H3>..<P>The toolbar displayed at the top of the screen is designed to allow easy access to the most frequently used functions.</P>..<P><IMG SRC="../images/bm22.gif" ALT="" BORDER=0>Display help</P>..<P><A HREF="fm7n8x.htm"><IMG SRC="../images/bm14.gif" ALT="" BORDER=0>Print results</A></P>..<P><A HREF="fm3fjn.htm"><IMG SRC="../images/bm26.gif" ALT="" BORDER=0>View records stored in the database</A></P>..<P><A HREF="fm36re.htm"><IMG SRC="../images/bm8.gif" ALT="" BORDER=0>Entering data</A></P>..<P><A HREF="fm4two.htm"><IMG SRC="../images/bm10.gif" ALT="" BORDER=0>Analyze and Plot Data</A></P>..<P>All of these functions are also available from the pull down menus.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-69USB.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (454)
Category:	dropped
Size (bytes):	2382
Entropy (8bit):	5.089178054796509
Encrypted:	false
SSDEEP:	48:qSZ6j8HOSjzWBgsMX2J9EbvCVHa7picwMDjFyGoKpis9HSMDRdWZSkji2:rFHO8tumzCVHIb6Kpisuf
MD5:	FB8D980999A670389F45E47869989DC0
SHA1:	A9C27FC93979436C648EFACD19C1F6DA0DAE41A8
SHA-256:	F7DDECF60F51CC761001D2821DD71156B584A02FADE19EE1E8BB334FA4C759C6
SHA-512:	CA906DC7DD4B8BFC1AF18183FA0453BA2CDB3E01A204103249A4F1A4D7AA59861E34DAD3C3649E73B7C7084A013C1AA7B29F5FC89A148D667CB7AFA8DC2DA19A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Polar graph</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="polar_graph"></A><I>Polar Graph <IMG SRC="../images/bm10.gif" ALT="" BORDER=0></I></P>..<P>A graphical representation of the data can be displayed on a polar graph by clicking on the <IMG SRC="../images/bm11.gif" ALT="" BORDER=0> icon in the toolbar or selecting Polar Graph from the View Menu.</P>..<P>The cap numbers (1-85) are represented by the radial lines. (Note - the angular spacing of the radial lines is not uniform - this is intentional).</P>..<P>The Error Scores are plotted for each cap, with the inner circle representing a score of 2 (caps in correct order). The circles corresponding to error scores of 5, 10 etc. are darker to assist with the interpretation of the graph.</P>..<P>A subject with 'perfect' hue discrimination would be able to put

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-6TPFE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (321)
Category:	dropped
Size (bytes):	857
Entropy (8bit):	5.170457077506571
Encrypted:	false
SSDEEP:	24:WlSZ6/Pe7LVP4H+u3KzGBLCZmaj66DHd3d3:qSZ6ON4H1K65CZmaj66D9t3
MD5:	F2B50273A38B8754901B04DCC4E6BBD8
SHA1:	583A49979F59B85D00483A10D6CF00AEBA7BE5C4
SHA-256:	BC465108CD0D46B8DA044C878B5705D519A2C3898CAEA9382AE415B466737F17
SHA-512:	AAB4FF204C9CC0711E49F61C3D7A2CF513B19257F9D0416FFA6D059688DC567C0BDAB86D6388281D80843D02367CC3802EF71E9377C51F9DC338B63A842BAD7A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Color Options</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="color_options"></A><I>Color Options</I></P>..<P>The color used by the FM Hue Test is reproduced (approximately) on the screen to aid data input and the analysis of polar and linear graphs. However, if the computer being used is unable to display all the colors, color dithering is used. This can reduce the legibility of the cap numbers on the data entry screen.</P>..<P>If this occurs, color can be disabled from the<A HREF="fm2y9i.htm"> Preferences option</A> which is accessed from the Edit menu. The caps on the input screen are then displayed in grey and color labels are added to the graphs.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-713JH.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	923
Entropy (8bit):	5.146237749023851
Encrypted:	false
SSDEEP:	24:WlSZ6jh3KO9b7FSKvwTrumMfftGJ2Tgib49QLPx+Te:qSZ6jIVKvyrumMQsTjIQ1l
MD5:	C0E7D7EAF88C97D45D659ECF353FC18A
SHA1:	1203C792EC5D7DF2C093CFDA77AF8D25B11BC672
SHA-256:	27E7E9B41BD0563F161B52C00A24AD8AD9A941F9F7401736FCCCBE65081A5B36
SHA-512:	97F85D3D2D1FF20D3971DBD36D13CB55C1FA4BDDB62E70F72B37A75D877292A9997CDE33F45AF60F52C2491DD8F76A2CE4BA5009B9076FF8B2A2D4C001A84A5A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Print Dialog Window</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="print_dialog_window"></A><I>Print Dialog Window</I></P>..<P>The print dialog window allows the following print options to be set:</P>..<P>Number of copies - Sets the number of copies of each page to be printed.</P>..<P>Print in color - When selected, the data points are printed in color (color printers only).</P>..<P>Header - When the corresponding check box is ticked, the text contained in the text box is printed as a header at the top of each printed page. Header text is automatically saved in the program's <I>ini</I> file so does not need to be re-entered each time the program is run.</P>..<P>Setup - Allows various printer options to be modified.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-7A43J.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (602), with CR line terminators
Category:	dropped
Size (bytes):	1410
Entropy (8bit):	5.14490057467229
Encrypted:	false
SSDEEP:	24:WlloCZ609xzehIDs0htrKC2DS1VWKcOVbGi62y39oG347VRyveUDDVl3eeJaZOK:qloCZ6Oz8qsatrKC8eDXdGi62Cb8A/3s
MD5:	C10886CD5FECD22821B239DF51ACFEE0
SHA1:	6F1A0DA1C6A4458962FE35B2FE0A04E5E0C5F4AE
SHA-256:	7633A224B1710353AFB3A1F7EE18622F58E392823B17606F5C74F245FE8484D0
SHA-512:	809B5FAF868EE7E5BF58E73A1696D7731F327D5E3D8C55A11ADDED37B0BA614F7B183AB00AB0A4CDB23190E46E82367608805BE383BCD6A6C022D4336BF835F9
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Entering Cap Order</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="2keizvz"></A><I>Entering Data (View/Arrange) <IMG SRC="../images/bm8.gif" ALT="" BORDER=0></I></P>..<P>The input screen is displayed by clicking on <IMG SRC="../images/bm8.gif" ALT="" BORDER=0> or selecting Data Entry Screen from the View menu.</P>..<P>The input screen shows a schematic representation of the FM-Hue test with caps arranged in four boxes.</P>..<P>Initially caps are shown in the correct numerical order. To score and analyze data obtained with the FM Hue test, the order of caps set by the subject is transferred onto the screen by simply <I>dragging</I> and <I>dropping</I> the caps on the screen. This is a standard Windows method and involves moving the mouse cursor over the cap to be moved, pressing the left mouse button and holding i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-7U8I7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	511
Entropy (8bit):	5.378824446452878
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfLsMeq1yLR6yiffVTTZC0:WlSZ6PgLR65ffVTTw0
MD5:	5C44E32EEFFC400F2C7009E891834EB0
SHA1:	4BB88D2E2DAF7DC3F1D6D396F5C6D867AF69C37F
SHA-256:	0CF79794940790A88EB589A0F2C07697A21C3A6DDBC9D83C30A6EEB7468F8AC5
SHA-512:	FAB0E7DD8798A3DC5FE977FF65F1F8F427E1803674C7343C16F6B8980EA15191B3D120EFDA59FC9ED1E737B320721BA0885ACFEEE316C1317CEF19246910A927
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>FM Hue Test</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H1><A NAME="fm_hue_test"></A>The FM Hue Test</H1>..<P><A HREF="fm2u5h.htm">Purpose of the FM Hue Test</A></P>..<P><A HREF="fm52sz.htm">Materials</A></P>..<P><A HREF="fm97vy.htm">Administering the Test</A></P>..<P><A HREF="fm0f1q.htm">Principles of Construction</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-7UUF4.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (587)
Category:	dropped
Size (bytes):	903
Entropy (8bit):	5.155251943022798
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfHDWsMeqdCjLfwl5cZEE+EBTDB1MFtoiexMFOe9JvmKzxyWE5ix:WlSZ6vIdTBE9BTDB1Mg7MrOKzgXsQ+V
MD5:	106866B6492A36360F159961EEE2305D
SHA1:	284307C43A818C4D0F54A1EECB527BECA713C093
SHA-256:	2BB321A3622686AA758F77A180CF69BD03BBA387E248B79C498D742C1F44426A
SHA-512:	E1312B1B93E860C95239E9A333939C29271F5E64FB59E58BE863373591318C51B473A83125B45629EA3B9D93D13BC9107CB6A93AD6810087B3DB0BF6C99500BA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Opponent Theory</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="opponent"></A><I>Opponent Theory of Color Vision</I></P>..<P>In 1870, Ewald Hering, a German psychologist / physiologist proposed an alternative theory of color vision. Based on a series of subjective observations of color appearance, Hering proposed that color vision was derived from three mechanisms; one responding positively to red light and negatively to green, one responding positively to yellow and negatively to blue and a <I>brightness</I> mechanism which responds positively to light and negatively to the absence of light. This theory became known as <B>Hering</B>'<B>s theory</B> or the <B>opponent theory of color vision</B>.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-8DMGM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	700
Entropy (8bit):	5.334701284674859
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfzdK0sMeqvRZBaFtUZJ6eFuQMH963Jii/3DL4KJoczg:WlSZ6tvRZAPQQeKH4ii/Ygbzg
MD5:	16E8C949E498069540E1A79A75630C97
SHA1:	B770D32276F1814477419C9697A8C8045CF4FF2C
SHA-256:	0B99E1F2C854276DC118F380E552C8BBBC581ADD633A91F24936522E25D1774C
SHA-512:	2E2CCDB95D4834231867A9E8ECE08C32E45F78713A369A806BF11B03611C16E9C077A52530CFC06A893397C584B5F140F36EF520FC88B99E26136BE484D3C5B3
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>New Record (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="5igc0ze"></A><I>Edit menu - New Record </I></P>..<P>Selecting New Record from the File Menu resets the order of the caps to the correct numerical order.</P>..<P>This can also be achieved by clicking on the <IMG SRC="../images/bm15.gif" ALT="" BORDER=0> icon in the toolbar.</P>..<P>If the current data has not yet been saved, a warning message will be shown asking if the current data should be saved before the cap order is reset.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-8F1TV.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	977
Entropy (8bit):	5.1795973943265405
Encrypted:	false
SSDEEP:	24:WlSZ6jzORnGg12b1RKv19DzTOCOAFtZqhus:qSZ6j6FPCHKvn6CPfqhus
MD5:	379CE855E1766D9A3CBD2A89C04810A0
SHA1:	E82BC97596F6B545FED31A138240580AE584235E
SHA-256:	1B3F9FFBEE77A3B4FE257050720E80309F92278C08737949FCF6068819B5C4AC
SHA-512:	554D286D606964E825A6AC5FC994B7473ACE16955D873071274D780F23DE4DA46465BDECBD1D130783F098A5F76A7A4A0E55AFAB6573198D591ABAFFC4380CA9
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Percentile - some experience</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="percentile_2"></A><I>Percentile (some experience of color matching)</I></P>..<P>The percentile for the current Total Error Score with respect to a distribution of Total Error Scores obtained from a group of subjects with some experience of color matching.</P>..<P>For example, a figure of 90% means that the current Total Error Score would be in the top 10% for subjects with some previous experience of color matching.</P>..<P>The analysis is based on results for 300 employed personnel making application for promotion to positions of color control in a paint manufacturing plant - shader trainees, laboratory testers and laboratory technicians.</P>..<P>See <A HREF="fm4c81.htm">Industrial Norms</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-8JA0C.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	834
Entropy (8bit):	5.228525446711539
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfPPsMeqMxFWVuUGQeynlMBiBdgVXRWeT8deF9K1LnS+J5TNT+x3:WlSZ6LZUULeICIBABWZdeur7nT+d
MD5:	080B5C6E3694538856784FD9B2E059F6
SHA1:	45491F405F18C07815C11875E7C7E7E562A9204B
SHA-256:	24054D217FCEC0EB368FA6825BF718B4906A02C475E78BFF9E84116ED9F54493
SHA-512:	A2ADD9D018CADF4FC18BF0460BF929D525D63E8D31601C7DDE51022C218752626FD48B90C4A44D9EA7EED2F161783DFE8F7B9FB707A4E30BCF58E57B0F6882F5
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Tritan confusion axes</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="try9gg"></A><I>View color confusions for tritan defects</I></P>..<P>This option is selected from the View menu of the computer program.</P>..<P>A color representation of CIE color space is displayed with isochromatic confusion lines superimposed. Colors lying along the confusion lines will tend to be confused by individuals with a tritan defect.</P>..<P>For more information see <A HREF="fm8siz.htm">Defective Color Vision</A></P>..<P>N.B. The colors displayed are only approximate and will vary according to the color capabilities of the monitor and display card.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-8TIVS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (420)
Category:	dropped
Size (bytes):	1478
Entropy (8bit):	4.927547647151434
Encrypted:	false
SSDEEP:	24:WlSZ6VSmVuqt4yy4QWa1i5ymCIanMO/FGQ6W5HfEEdBDzI974J2Nv4rNdF54l35:qSZ6VjrhyIa1eJNONGlidRW7u2Nqdn4f
MD5:	1598F67139DD4BB4A27356A6F6F8A6CF
SHA1:	13176535BDFD3C18807C55DDEC8D60F3B50D9C93
SHA-256:	58375FB674DF4A7D4C8DE7A588E7A7E63F9374739CD02EED231EF73B4F660B26
SHA-512:	5E1D4C0693424A10DD5A7B16D704D5EB5DC2C2719500F87E7BAA3A14AC7F06B01855006ADE8396B1C21DEDB28D58CE82DF8AA584C91466BCFF17696BF76E309D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Materials</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="materials"></A>Materials</H3>..<P>The FM Hue Test includes a total of ninety-three colors mounted in plastic caps, housed in four separate cases. Each case consists of two hinged panels which contain a quarter of the eighty-five numbered, removable color caps. (Two caps are repeated and fixed as pilot colors at either end of one panel in each case, making a total of ninety-three caps.) </P>..<P>Pigments in the color caps are made from the most stable materials available. However since no chemical is absolutely permanent, the caps should not be unduly exposed to light.</P>..<P>The matt surface of the color caps is necessary in order to give the same spectral characteristics from any angle, but it is sensitive to fingerprints. It has been found that slight

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-8VDTM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	789
Entropy (8bit):	5.253043780386524
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfEu0sMeqdSJ9C0F2oDyMoJw4BXFuu/3okbbgWOo:WlSZ6kIXpTyMGB9okpOo
MD5:	1193395B83108C929B13329928E34FA9
SHA1:	1BDC9AB2DAC5E46FFB9FDC70EBBEAD349BB67664
SHA-256:	C90F2F401EEC80C7C2E8B7F798D628961013802A7D9657C788D5C42AB353FA1D
SHA-512:	2FEE3B549F3201FF41BEAD34C097BF1F221F53F0B37F59A0C22194749B29CA116F1D3DDC71EA048469DEAEFD37CBA8FCBB7C0F887B1E60798DF52395A76DA2EA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Standard;Kinnear;Plotting methods</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="bye5mz"></A><I>Scoring Options</I></P>..<P>There are two methods for plotting error scores:</P>..<P>The Standard method involves plotting the error score against the<B> corresponding cap number</B>. This is the preferred method for most applications.</P>..<P>The Kinnear method involves plotting the error score against the <B>position</B> of the cap. This method is rarely used.</P>..<P>Plotting method can be changed from the <A HREF="fm2y9i.htm">Preferences Option</A> which is accessed from the Edit menu.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-98KHQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (490)
Category:	dropped
Size (bytes):	1898
Entropy (8bit):	4.853458026897586
Encrypted:	false
SSDEEP:	48:qSZ6Ht3z+t0MQYNXV8X6rgCsAjfNN1+favedN8humB5:rZf/goH4ivedN8045
MD5:	58B18C881BAAA2DC434F00CCEACE5025
SHA1:	5EC19D03DECDD4539BD12377D1A9D397041F4334
SHA-256:	EB4D46EE025778E1A7FD224C4C4562569675199531F0E306AE5D768331D11C10
SHA-512:	0275223753F484198774F49C564F43354EB43220279126C4A23FE8B7A92261E3CCD777ED868FD32091DD98024058DB75354585B96EA0985531D077D6822F6CC6
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Color Perception</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="color_perception"></A><I>Color Perception</I></H3>..<P>Color is one of the most obvious and pervasive qualities of human visual perception. While it is possible to recognize objects and perform most visual tasks without chromatic information, color adds another dimension to perception. After watching a black and white film on television, one is often struck by the <I>richness </I>of perception when a colored image is restored. Similarly, a black and white photograph of a natural scene, seldom conveys the full beauty of the original.</P>..<P>Color plays an important role in many different areas of our lives. Important messages are often conveyed by colored signals - red usually meaning <I>danger</I> or <I>stop </I>and green, <I>go</I> or <I>all cl

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-A12G4.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	605
Entropy (8bit):	5.279621065676119
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepf9sNK0sMeqruvBIs2/qs5FRrv+w+:WlSZ6Yr4b2HMp
MD5:	D9F1F9370FDD2C27C03087A2AD04550A
SHA1:	6DB338CA74391F89A302DC0E8DA1E3D1720E400A
SHA-256:	643492C97D20FC8BF8E511BB5E19A8A9778044BEA2CE449C2FD724737575C93D
SHA-512:	DFB82AEE127CDFD6D4CBC5B4C9D514184CCE29850E349F2DAF8998B5D4DB3EDB41C7CC4F4B5CCB00B314CAE0B957B441570C65CCC29E652F4BFD5E59A5115BC3
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Open (File Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="file_menu_open"></A><I>File menu - Open </I></P>..<P>To open an existing database, select the Open option from the File menu. Select the database from the list displayed. The name of new database will be displayed in the title bar of the main form. </P>..<P>New records can now be added to this database and existing records can be retrieved.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-ADLOV.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (454), with CR line terminators
Category:	dropped
Size (bytes):	2921
Entropy (8bit):	5.067136786531387
Encrypted:	false
SSDEEP:	48:qloCZ6A14E52NYvwQVvABgsMX2JwbvCVHs7picwMDjFyAoK6zl9Nxris/HkWDRfB:CAo7tuwzCVHCbkK6znLrisUy
MD5:	EF362738E6E276AA44561432CAE06953
SHA1:	9DA5FAEA290925BBAFF5CB396580BB3B08B17286
SHA-256:	BE8D6B17605DE4E8FE74197737F334555A37BF6905B2BA10439D7674BA616FF2
SHA-512:	8D0F280BF64EAC7960E5027BD98745B273F97FD383F87A63D0E70CDC091685BA2473F469C7B44A05A3806EA382C1515725A2FE08F30059D356F96281699159F1
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Displaying Data</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="displaying_data"></A><I>Displaying Data</I></P>..<P>Data may be plotted in two formats: Polar Graph or Linear Graph</P>.<P>These can be accessed by clicking the analysis button <IMG SRC="../images/bm10.gif" ALT="" BORDER=0> in the toolbar, or by selecting. or selecting Polar Graph or Linear Graph from the View Menu.</P>. .<P><A NAME="polar_graph"></A><I>Polar Graph </I></P>..<P>The cap numbers (1-85) are represented by the radial lines. (Note - the angular spacing of the radial lines is not uniform - this is intentional).</P>..<P>The Error Scores are plotted for each cap, with the inner circle representing a score of 2 (caps in correct order). The circles corresponding to error scores of 5, 10 etc. are darker to assist with the interpretation of the

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-AF9TM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ISO-8859 text, with CR line terminators
Category:	dropped
Size (bytes):	19412
Entropy (8bit):	4.825244600394692
Encrypted:	false
SSDEEP:	384:KhH1eeeMueMuPMuxBeMuxuWuxAMusMux9MuxlmeMuwMuxwMuxYMuxMeMuqMuxkMI:KhgeeMueMuPMuxBeMuxuWuxAMusMux9m
MD5:	675CA9892EC326FF4259F4022D3575BE
SHA1:	FD532ED462C8D287310CB207D5BDE3A417C6A58A
SHA-256:	4AEAE69D75DDAB2BEB5988CC96EBCFA99B8CE5A8FC800FE0D7E00B0196055419
SHA-512:	FB82B26560040DC17BB810E12F3D03ED97E1B2E626987D28EEB16AD6D2450213C9B4B0694556140AD82D53D3D39CFE468965FE8C67A7F63E2D431A34CCAB89FB
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Farnsworth-Munsell 100 Hue Scoring Software: Help</title>.<style type="text/css">. .span.s3 {color: #000000}.table.t1 {border-collapse: collapse}. td.td1 {border-style: solid; border-width: 1.0px 1.0px 1.0px 1.0px;.. border-color: #bfbfbf #bfbfbf #bfbfbf #bfbfbf; .. padding: 0.0px 0.0px 0.0px 0.0px.. }.. p.p1 {margin: 0.0px 0.0px 0.0px 0.0px; font: 10.0px Arial; color: #0000ff}. p.p2 {margin: 0.0px 0.0px 0.0px 0.0px; font: 10.0px Arial}. p.p3 {margin: 0.0px 0.0px 0.0px 0.0px; font: 10.0px Arial; color: #008000}. p.p4 {margin: 0.0px 0.0px 0.0px 0.0px; font: 10.0px Arial; min-height: 11.0px}. p.p5 {margin: 0.0px 0.0px 0.0px 0.0px; font: 36.0px Arial; color: #0000ff}. p.p6 {margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Arial}. p.p7 {margin: 12.0px 0.0px 3.0px 0.0px; font:

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-AH61V.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (1003)
Category:	dropped
Size (bytes):	3245
Entropy (8bit):	4.7739869790053175
Encrypted:	false
SSDEEP:	48:qSZ6jZWFe1Lqa+SkQJwA9Y6c3ikc8CiJxAcgKkpNyU41vCo2bwN+NzY4eGBEmlb0:r3FEeSkQJBucpiJCpZdK+NQaFAVMU
MD5:	B3F1AFC2CC8CE4D9EC8D22CE78A3DD1B
SHA1:	ED01770AD84052F85311BC5A709EBCB832FE69D6
SHA-256:	5DC0CF499A8C51C752E0BCB5FB50F061893DD4C85720ABB426C9E9CE163488CC
SHA-512:	97D8131C9D72506373573373B7EFABD703E5420E3C54F17B25B40F735D94A096D4B10F588775D78C82180B76A93B7B351DAE085CDF64F4627470A2790A8BBEF8
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Principles of Construction</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="principles_of_construction"></A>Principles of Construction</H3>..<P>An understanding of the material in this section is not necessary for the practical use of this test. However, the information is important if the test is used in connection with research in color vision.</P>..<P><I>Perceptible Color Differences</I></P>..<P>Imagine a chart made up of all possible discriminable hues - reds, greens, blues, etc., in all strengths from neutral to high purity, but all of the same brightness. If these colors were organized systematically, they would form a color array similar to that shown below. Equal distances on this diagram represent equal differences of color to the normal eye.</P>..<P><IMG SRC="../images/bm5.gif" ALT="" BORDER=0></P>..<P>

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-ANS5F.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	447
Entropy (8bit):	5.323337674890775
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepf3eK0sMeqFM9GQhE2Kquz7G4e:WlSZ6foFM9Lm2sPA
MD5:	7C5DC0CB784B4B43AB8747E3F55ECE1C
SHA1:	2AF65D1460E99E57A1D056E6BF1925256A7CA392
SHA-256:	486D8A4589D88901ABAF55FA12A3248F3185039DA1797D2033259AE387EE3EFD
SHA-512:	6CE64010DFDF2184CA842F6FB776C85631571A3F368820D87CC4ADB9859A1F38E8EDD913D60EA289CB85F70B14917CF62AD1A928AEA3D7FE5D7D1A133952F4B2
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Undo (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="edit_menu_undo"></A><I>Edit menu - Undo </I></P>..<P>This option undoes the last data entry, i.e. it returns the caps to the position that they were in prior to the last cap movement. </P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-AU15O.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ISO-8859 text, with very long lines (840)
Category:	dropped
Size (bytes):	5098
Entropy (8bit):	5.261947726103011
Encrypted:	false
SSDEEP:	96:rHQmssTVeX1Kw7UBT7OmRGShMIXZgSk8XzCLzlyk0UFVBOlCWvaR4:rwKTVeX1R74USjkDaCR4
MD5:	273828C98BCBBCE9497AC68156F595A0
SHA1:	FB6075A0DFF9208309EB26FA48DAA74A02132FEF
SHA-256:	7683EDEE111B40B3E2D10430AEB6E0456D82CF923774B477E863427E7A4AF5A9
SHA-512:	5EB5833C48CA116511B1FC06D06A922DA2A13B9975DA68624B31428C2F0A9C98A5BB3576922A8EA408CF3CF481AB63A58142CE8C4BD4E68ADF78B952B264F1E3
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Normative Data</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="normative_data"></A><I>Normative Data</I></P>..<P><B><U>Distribution of Total Error Scores</U></B></P>..<P>The distribution of initial error scores which may be anticipated from particular populations is indicated in the following table. The <B>unselected</B> column shows the errors which may be expected from each percentile of an unselected group of people aged 15 to 45. The next column, '<B>in-plant</B>'<B> applicants</B>, was drawn from 300 tests of employed personnel applying for promotion to color control positions (shader trainees, laboratory testers and laboratory technicians) in a paint manufacturing plant. The last column, <B>experienced</B>, is accumulated from tests on 150 personnel with three to twenty years experience in the color control

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-B5OHA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	722
Entropy (8bit):	5.189539237283799
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepffgS4dK0sMeqswFI7BkJQalZvRzSylZLMBQ7X2y0pCf56BI:WlSZ6w/tXy8ZJz4Uy0oC
MD5:	236FF059BADB24D9CA507E169D7D78DE
SHA1:	E0E11161367933B252035E505BB3DF9F42EED0A2
SHA-256:	88269A3304769019DF67B1CE3C5F3DA25814878BC8800653F8F11D84895E6716
SHA-512:	B69C0BF86AD0920A5E9C426DEDF3344708C54F7E95786A2427FAD9D5F5F4798B67A861704E3C4EFF6BB5A48196E774FE3641D8FF3F8EE401E1A79EF4F76CAD6A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Delete Record (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="3bic_yu"></A><I>Edit menu - Delete Record </I></P>..<P>A record saved in the database can be deleted by selecting Delete Record from the Edit menu. </P>..<P>Firstly a list of names currently held in the database will be displayed.To delete a record, click on the appropriate name so that it is highlighted and then click on the Delete button.</P>..<P>You may delete multiple records by selecting more than one name then clicking on the Delete button.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-B962R.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (389)
Category:	dropped
Size (bytes):	953
Entropy (8bit):	5.147696898037409
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepf7gKMWsMeqBTKGFW1gyyHypVDMomENSkYvu2VFGjuDklCoSpeJz:WlSZ67hPigyyHKPhoZvERIR67OI14RY
MD5:	AC590A27C6E958A26D468E6C1FD3EB8A
SHA1:	10F38E91D6003EF55DC0DD3ECC79BBA9FE815599
SHA-256:	29D6A5D95D203DAA09D30FE8A0B55324ACC9916F3AE0ABECC944765264750B27
SHA-512:	CD6FC4862F1D10BC217B06751358560A2985FC712D2E2768351AB729F096C1220219B4CD7D28208D15D23B0FB07BB3F684D28ED1053762CE43722AA855F43D7D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Scaling</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="scaling"></A><I>Scaling</I></P>..<P>The standard FM Hue chart has a scale maximum of 14. While this is suitable for most purposes, error scores for individuals with very poor hue discrimination may exceed 14 and will therefore extend beyond the graph. </P>..<P>The current scale maximum is shown in the Scaling Panel. The scale maximum can be changed by simply entering a new number into this box or by selecting Auto. When the Auto option is selected the scale maximum will be set automatically to the maximum error score for the current set of data. The scale maximum can be reset to the standard value (14) by selecting the Standard option.</P>..<P>The scale maximum must be in the range 4 to 50.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-BFPIE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	960
Entropy (8bit):	5.198714447067879
Encrypted:	false
SSDEEP:	24:WlSZ6/hg5hikepojCbx73uCz+fJbcTyxco:qSZ6UWxNQJb2Zo
MD5:	D0B410F24B23DABD32B8D2F948F45E71
SHA1:	35D636FFBD71F213F3AC02A3C0BB76651803D108
SHA-256:	C14D9A0523C002EAC6753511EADFBE2A38269008F12DB48E0CA6280EB9697F4C
SHA-512:	EBDE9BDCCA0F590447C24D4117F49E37C09C59F4A5BE02FC2296E90092C1A44C4D34B65A8A313C9414E340810B7172DA4E33ABE2A9BE6A2AE2BFFA286B7B0468
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Export Scores (File Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="1mx2ojj"></A><I>File menu - Export Scores </I></P>..<P>Error scores can be saved separately as Text files. This provides an easy method for exporting data to other Windows programs.</P>..<P>Select Export Scores from the File Menu and then select Error Scores minus 2 or Raw Error Scores from the sub menu. The Save As dialog box is then displayed, allowing a path and filename to be specified.</P>..<P>The data is saved in the format:</P>..<P>Cap position , Error score (CR)</P>..<P>The data can now be imported by most Windows wordprocessors and spreadsheet programs.</P>..<P>Scores can also be pasted directly into other Windows programs using the Copy Scores option from the Edit Menu.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-BH3E4.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1077
Entropy (8bit):	5.1138748666165785
Encrypted:	false
SSDEEP:	24:WlSZ6OXHeJDSpojCshHMDyiGH+fJbPTyGco:qSZ6WuSeOy/HQJbrIo
MD5:	D9799E3994DEB308C66C76EEC0FD0FF3
SHA1:	BF086284DC622DB5437D3CD121253B049386D638
SHA-256:	872E06F30F56D065D2027B2F237D968491A5D09C8B6FDCBA4149BC582766B843
SHA-512:	575642E2272E3A6F47F1273303874902A36242D9E4782CEBCAEE5648BB549BE39BFAB46EEB4925325DA277592DB02060D5DA7D8D60ADB323C561669CBF14C67D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Export Name and Analysis (File Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="fm94h9"></A><I>File menu - Export Name and Analysis </I></P>..<P>The current Name and Analysis can be saved separately as Text files. This provides an easy method for exporting this information to other Windows programs.</P>..<P>Select Export Name and Analysis from the File Menu. The Save As dialog box is then displayed, allowing a path and filename to be specified.</P>..<P>The data entered as Personal Information is saved together with the analysis of the results. The information included is dependent on the Analysis options currently selected</P>..<P>This information can now be imported by most Windows wordprocessors and spreadsheet programs.</P>..<P>Name and Analysis can also be pasted directly into other Windows programs usin

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-BJ68R.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (774)
Category:	dropped
Size (bytes):	2060
Entropy (8bit):	4.995219875919159
Encrypted:	false
SSDEEP:	24:WlSZ65257t5kNMyJgYaJUYREDWpGq1UdgfO0XWKsQesuw8hW1eQou3BJUBke/T+e:qSZ68AayJ2hNG8WV7s2w3v8iee9yMje
MD5:	D484198175B8133EE69F56E16DFE1E28
SHA1:	E319B3123F09B6F470923DFCDB041AAF5F616F04
SHA-256:	4158779C1EC75B8E8F266390DC1EE4381B33B11D4604531E45F565348525BB74
SHA-512:	7FB5C48DF3E69C02C46529DE8FE4202A62FB48CD9562D7E23F2A9C5BD972BFFB9F4B525B25CA5E7CF3F3E3439AB26F3D88E49169258DF0A09D1902B4BEB24490
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Dichromats</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="dichromats"></A><I>Dichromats</I></P>..<P><IMG SRC="../images/bm3.gif" ALT="" BORDER=0></P>..<P>An individual who has two photopigments is called a <B>dichromat.</B> The absorption spectra of the two photopigments (P1 and P2) peak at different wavelengths but overlap over a considerable portion of the spectrum. If the subject is shown two patches of light, one patch consisting of <I>A</I> and the other <I>B</I>, it is now impossible to adjust the intensity of <I>B</I> so that it will match <I>A</I>. This is because the number of quanta absorbed by the two photopigments for <I>A</I> never equals the number absorbed by these same photopigments for <I>B</I>. No matter how the intensity of <I>A</I> and <I>B</I> are changed, they never have identical effects o

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-BOGJJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	835
Entropy (8bit):	5.273411342898745
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfLqeCyGsMeqW0RFY912Yx21R5eEQUgRR2lBVW91b2FJJzTOLius:WlSZ6jzY/jg12b1Rg7h12DzTOLius
MD5:	2C611641208A5D079D9BEE5D1C9473CA
SHA1:	C686F787D7367CBFCDBC531DDBC0F8EE5C61CD39
SHA-256:	77CF7B99A5C540E19426D4C73E39838492017BD79B1110F8AAFD41221228834A
SHA-512:	FC5689E393C892DA4741B162B5DC317C3C164EC6C553551AA4298C963766A5EB1F0F0CEFF25CBAADFE7E0273E365246759C580751051F991DBAB3AA4C0262374
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Percentile - first test</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="percentile_1"></A><I>Percentile (first test - unselected sample)</I></P>..<P>The percentile for the current Total Error Score with respect to a distribution of Total Error Scores obtained from an 'unselected' group of subjects aged 15 to 45 for their first attempt at the test.</P>..<P>For example, a figure of 90% means that the current Total Error Score would be in the top 10% for subjects with no previous experience of color matching.</P>..<P>The analysis is based on results for 494 'unselected' subjects.</P>..<P>See <A HREF="fm4c81.htm">Industrial Norms</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-BS7UJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	612
Entropy (8bit):	5.3295965535806085
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfQgK0sMeqfBGQbZWJChfQ0T/Kce4hx8ll:WlSZ6xfBLbCCY0ed
MD5:	A66F36002B88660174CF8C6F7B19C4F9
SHA1:	4F4C2C8AAC87687F1BE35A43E13678922F57C9EB
SHA-256:	9CF6E0AF7AA5D8B0F263FA6BED5877373B3762FCFF1E31044D41292B6B0B9836
SHA-512:	AA81624F6D92EC098DC92A7D24DF67E7369561F7C5AF3692BBBF4219E56A16C08BA58598ECC82AEF7F25E3BA0BF3070EB59A40F2D3F04504286F70F34110659D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Save As (File Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="3_gii4p"></A><I>File menu - Save As </I></P>..<P>This option saves the current database under a different filename then makes the new database current. This is a useful way of keeping backup copies of your databases.</P>..<P>CAUTION - Saving the database with the same name as an existing database will erase all records in the existing database.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-BVND9.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	462
Entropy (8bit):	5.32741393975773
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfP21jsMeq1u14F01YBgpoTJYW1rH:WlSZ621fA1I01CgpoTd1L
MD5:	BB6E47AEDDACFE400564D79C9F8C29F5
SHA1:	B85A393974C834DB90B53D5548272C6966646604
SHA-256:	DFA41452998146C979C9E983051F4333D9AEB2C8F0912DC524AC7FF2237EF753
SHA-512:	454758206789882233ACDF96247AB7B068FF14DAE5199832F5757254DB8E18A939A7FED04CE02872507F322DD9F937D75B317ECACC9BA058C4F545B75FD206B3
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Total Error Score</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="total_error_score"></A><I>Total Error Score</I></P>..<P>The Total Error Score is obtained by summing the (error score - 2) for each cap. Thus a perfect sequence produces a Total Error Score of zero</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-CJF93.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	636
Entropy (8bit):	5.400055084866752
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfPNj0sMeq629MIWjd8RMAUBj9vjJCB:WlSZ6Nj23MIWj2RML97JM
MD5:	4732EBBE27066917BCB1809B84AC84E3
SHA1:	1DB014BCCD50109BEEAB3332BD41864C04EA6197
SHA-256:	A6EEE3CE49B685160C8FA9E6004C92EFB8FEA625F4A56A93C0035C522FB8E3C2
SHA-512:	E19384CAC6BC6557DBF4EBEEF03C257D09FFAB0FCA74A8F547EDF5224A2B063E4C79EAFDEA9FCA0F03E5E27405452C586F3E61EE8B8EE80B880785D5F981AD84
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>The FM Hue Test Program</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="n_46v1"></A>The FM Hue Test Scoring Software</H3>..<P><A HREF="fm3rcn.htm">Overview</A></P>..<P><A HREF="fm36re.htm">Entering data</A></P>..<P><A HREF="fm4eox.htm">Displaying data</A></P>..<P><A HREF="fm7n8x.htm">Printing data</A></P>..<P><A HREF="fm23fl.htm">Interpreting data</A></P>..<P><A HREF="fm31o3.htm">Menus</A></P>..<P><A HREF="fm3ueq.htm">The Toolbar</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-CVPL7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (448)
Category:	dropped
Size (bytes):	769
Entropy (8bit):	5.247197737120789
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfgIWsMeqv7B0N4BMMkAQrCnK9qWmPf8OQFT1oyCyEaB7:WlSZ6IxFo467trCKEzsOQFTHCi7
MD5:	DFF17E2AD89987F638D634C1B0FFF54F
SHA1:	C6C04485AF47361679CEFF98AD6CA273C250F87E
SHA-256:	31F4A71216271F30389A979C158A4131B7D895AD244A12DFCE117D10DCA0B634
SHA-512:	0E018638EA93449125E6DB324331EBCAF824BD23952A881B4ABBEC6AACF24099F37EE2AB95301331AB7593ED6CAB28885028B16758AE870405F4333D9A33F206
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Young Helmholtz Theory</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="young_helmholtz"></A><I>Young-Helmholtz Theory</I></P>..<P>Hermann von Helmholtz carried out similar color mixing experiments but at first rejected Young's theory because he was unable to match all spectral colors with trichromatic (three color) mixtures. He later realized that this result could be explained by the three retinal receptors having overlapping spectral sensitivities. Helmholtz went on to champion the trichromatic theory which later became known as the<B> Young-Helmholtz theory</B>.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-D27BB.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	608
Entropy (8bit):	5.3987448449430975
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepf+sMeqe2jS13Ux21TaxLKt1QOLsQ1QYsYu:WlSZ6MDjS13o21+ut15QQ1QYsx
MD5:	2BBEE43DA0881ADF39FAE81F8E87FED0
SHA1:	661544071BF7649A5E027AAC016196761274761C
SHA-256:	BDDE91901D280A0D3FA07A5DF92355E04B39AE37A51953E2CB970EE2CA511F8E
SHA-512:	E2D4571ED13ED0DFBE83E070829EB54D6CEBB5E527241FE1110CE00FB5C86379A8610AED54743DD336163CBD21BC26B90C00AA6DF417C6990BDFD3A0C4A41C80
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Classification</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="146r.h6"></A><I>Classification</I></P>..<P>Results are classified into Superior, Average or Low on the basis of the Total Error Score.</P>..<P>Superior : Total Error Score < 16</P>..<P>Average : Total Error Score 16 to 100</P>..<P>Low : Total Error Score > 100</P>..<P>This classification is based on <A HREF="fm4c81.htm">Normative Data</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-E3R8H.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	417
Entropy (8bit):	5.368072804887997
Encrypted:	false
SSDEEP:	6:B8FQk+Hryft1q2Q8EevWR0NNEXW0Yf1J3R90M0iNMeql201gr1L4cgCSnGcgU29I:BMQkzLq2Q8Eepfn0M0sMeqRqr1IA6
MD5:	DE5B06A0AA5A9AB8E2D816942493C781
SHA1:	3A7D7E698C6DB16A5BAA47A31167359C4C004005
SHA-256:	A287C3779354F2DC8C843D9948580C945DB8584774E1D9B4574910E91EFA35F2
SHA-512:	8BFC2FA9BDDB25494CD1B64F15C760E795217207C9F14F104CA1CB6F300E056BBF9D661893538FF4B3D3691F16C203906F7D4CEDA5BE4769D73D2D710AEDC29D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Contents</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H1>Contents</H1>..<P><A HREF="fm34xa.htm">Color Vision</A></P>..<P><A HREF="fm4eus.htm">The FM Hue Test</A></P>..<P><A HREF="fm00c1.htm">The FM Hue Test Scoring Software</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-EEEHI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (349)
Category:	dropped
Size (bytes):	2139
Entropy (8bit):	4.980346573596465
Encrypted:	false
SSDEEP:	48:qSZ6KnOzcHHNVcAFXvAq82i6rG5p3HRKJfuAKp:r2cHHP1XV82iY+FRKJ/Kp
MD5:	308D530AD7A93204C43AB98237AA4E79
SHA1:	DA9CE7FD93D93E996CE08E187EA2639670C97D8E
SHA-256:	0488413A4B324C3D1216FD1E78B48E9D15ECCFF063C68A318CFEE45E469986A5
SHA-512:	C3ECFFE606E16C2B9567DB22F45B1187FE889D6EF096074E10E9A9BD0795102869F213947B3B8F03A12F0B72D8B8AD80C67D445E71B59CEAA4F440C45B259FAC
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Identidying Color defectiveness using the FM Hue Test</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="3h_y_oj"></A><I>Identifying Color Defectiveness Using the FM Hue Test</I></P>..<P>The pattern of color defectiveness is identified using the FM Hue Test by bi-polarity, a clustering of maximum errors in two regions which are nearly opposite. The regions in which the errors are made can also be used to identify the type of color defectiveness. </P>..<P>Typical examples of patterns made by types of color-defective persons is given in the database of examples (<A HREF="fm0bdx.htm">Example.hdb</A>) which accompanies this program.</P>..<P>The severity of the defect can be gauged by the extent of the 'bulge', a severe degree of defect showing clear bipolarity with high error scores; moderate cases show small 'bulges' a

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-EOJD0.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	1403
Entropy (8bit):	4.972646287022937
Encrypted:	false
SSDEEP:	24:WLZpsqgwhUDIcd/NVxonOLm0yTPhH0FmeqdEj9BFek/hoOrjpBppfW4SXai9DC:KMqgKOV1DwMmPhH8t9BEYSsjTpPbsDC
MD5:	C2B113694C6A2C6C04A3734D98BBFD05
SHA1:	69A74E1521C986B6D7046A4C6F6FB9C45B0A6038
SHA-256:	47CC985EDEE5A47B6E4DFC2891215E0B986B854198670C7526AFBDBFD26CB4C3
SHA-512:	27B129CB72EA766DA23AF95827CF82BBAA3B4DA0B349C8CEB6DF532957FE1FBBA54CEBCB99C9EA400E61817A082F5B3DF682F87937822D20519BE38ADBCED1D8
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Untitled Document</title>.</head>..<body>.<p> </p>.<p>CIE CHROMATICITY DIAGRAM</p>.<p>The ability to match colors using a mixture of just three primaries forms the basis of a powerful method for describing colors.</p>.<p>In 1931, the Committee Internationale de l'Eclairage (CIE) devised a standard system for specifying colors based on the trichromatic color matching characteristics of a 'standard observer.'</p>.<p>For technical reasons the CIE adopted imaginary primary colors (rather than red, green, blue) which were designated X,Y, and Z.</p>.<p>The relative amounts of X, Y, Z required in a color match are represented by the lower case letters x, y, z.</p>.<p>Since the sum of x+y+z is equal to unity, the value of z can be ascertained from the values of x and y.</p>.<p>Therefore, all per

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-EQTAD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	1132
Entropy (8bit):	4.916068132865607
Encrypted:	false
SSDEEP:	24:WLZpsqgw+tJo6uwDK88ZftlBAeNBAehxQy1SsYREXBrC:KMqgfy6u8781lAenAe7Qy8sYIBrC
MD5:	87645DFC88532C01899AB9BFDCDD2B9A
SHA1:	11ED1DF917A28160527E3B60C38FC8C44DE5B2CF
SHA-256:	988E5D9A88ED374E09EA2841A1606CF5276C36512EC6A86A70D8FC9D728B5739
SHA-512:	087E0766AE43447746BD963AF124FE5CD6059044168AAB98EE599CE90309B8A4619E3A93F172F22770581B2D24F7FB043E5CF3629681E13F515BB175297F899C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Untitled Document</title>.</head>..<body>.<p>PROTAN CONFUSION LOCI</p>.<p>The easiest way of representing the combinations of colors which are confused by color deficient people is with reference to the CIE chromaticity diagram.</p>.<p>The colors which dichromats confuse lie along straight lines when plotted on a chromaticity diagram.</p>.<p>The lines radiate from different points according to the type of defect. These lines are called isochromatic confusion loci.</p>.<p>Dichromats will tend to confuse colors over the whole length of the confusion loci, whereas anomalous trichromats will tend to confuse colors over a more limited ranger.</p>.<p>The line which passes through the whole point and intersects the spectral locaus, indicates the wavelength which will appear "white" or neut

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-FM03U.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1096
Entropy (8bit):	5.322074942718442
Encrypted:	false
SSDEEP:	24:WlSZ6We7LoBEUBNFDwhOwsp91No1N8jkZBrX3W:qSZ6iqUBNtwhOTp9DoDk2BrX3W
MD5:	193E2B281F654EEA18A9120206D27BAB
SHA1:	C49FEBDF7CE90002D00B30D73E0D3BA1B4BF2D99
SHA-256:	A228DC18DEF8C349C50F0D9C77403D5F6BB5D5D4D81F95A7D1710D18973A1F41
SHA-512:	54A2C9E9AD0290A88FE223815604A8740EF39F57BDC49DA8C56C33BFDBFD732A5F82466955BE7D585BEB6D641FB421B097ACB55B40ADDB3A034DC5E27E560897
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Analysis</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="6wkrur"></A><I>Analysis Options</I></P>..<P>The program includes a powerful set of analytical tools. The results of the analysis is displayed in the Analysis window and is printed out with the graphs.</P>..<P>The user may select which analysis information to display by means of the Preferences form which is accessed from the Edit menu.</P>..<P>The following analysis information is available:</P>..<P><A HREF="fm2k85.htm">Total Error Score</A></P>..<P><A HREF="fm26k5.htm">Square Root of the Total Error Score</A></P>..<P><A HREF="fm5fw3.htm">Vingrys Analysis</A></P>..<P><A HREF="fm8iie.htm">Classification</A></P>..<P><A HREF="fm7hf5.htm">Percentile (first test unselected sample)</A></P>..<P><A HREF="fm7hf6.htm">Percentile (some experience of color matching)</A

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-FPRLT.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	351
Entropy (8bit):	5.446691573408966
Encrypted:	false
SSDEEP:	6:B8FQk+Hryft1q2Q8EevWR0NNEXW0Yf1J3RtsvIALjiNMeqlxMZDALejz6ACi4MmS:BMQkzLq2Q8EepfT+/sMeqicajV4ezqE
MD5:	8AB3976F88A285EB5056A5CF9F4E92B8
SHA1:	96297612E348F76D31BD21DBF1B1285984600D3F
SHA-256:	1D3437C60A5CE189863A41E2431B392879CF0A1380E409BE41E160EAA47A171C
SHA-512:	A77F2397BF8211B0A04166C8137A0B1EEAC27871EF6D3C4F4393CECC29B7D3D5C7E494E8E5546433F9E0C1C3D55FB822A15AACD1A64B407E57413F20686A8A2A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Help menu</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="help_menu"></A>Help menu</H3>..<P>Displays help files and gives information about the program.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-G9HCT.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1406
Entropy (8bit):	5.087519906127907
Encrypted:	false
SSDEEP:	24:WlSZ6MaaHU2OvlToCuz0mXVRliSiRr3jxLIyLU5eYM5LeLPSMG/:qSZ6O9MlToPjFRziRrFLImgB4LgSMG/
MD5:	133C2D1C5DB25D3BA0AD7F5C3DFFC318
SHA1:	700297C8E1102561B2EF9B5968FFCBDFEC1198A5
SHA-256:	18EB93BA9F896DE2A51446353F01F1745643907FB2ED9744D20C65D40584B8C8
SHA-512:	7006F5D962E9769044B3A01C3843332A752F849A05D931D5E4F63F951A0AED650139FA121A53A0E0E2A1097391FCC12C75E8D3A2FAD11A49A9665C43D2FF6533
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>View Records</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="view_records"></A><I>Viewing records stored in the database <IMG SRC="../images/bm20.gif" ALT="" BORDER=0></I></P>..<P>Data saved in the database can be retrieved, edited and displayed by simply clicking on the database icon <IMG SRC="../images/bm21.gif" ALT="" BORDER=0> or selecting Database from the View menu. A list of the records currently held in the database will be displayed.</P>..<P>Records may be sorted according to Name, Reference, Date of Birth, Date of test, File number or Comments by clicking on the appropriate option button in the <I>Sort by</I> panel.</P>..<P>To select a patient record, click on the required record so that is highlighted and then click on the Select button. The data for the selected record will then be displayed on th

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-GE5AF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (827)
Category:	dropped
Size (bytes):	2139
Entropy (8bit):	4.985907315227886
Encrypted:	false
SSDEEP:	48:qSZ6jbKoS9p+4mUVU2VRwhBZ02WC7HTruO4I8M4mPFIruL64I:rsKPpdfVU23wG2WCL3p4I8reCP
MD5:	2A3D3316CD6E700F97B4242892A1F0E6
SHA1:	D33B6A16F0250460338253AE5CF0AC0DCB8D2BE6
SHA-256:	CBFAF0A53797679590B617BBC86155AD2F23876D808D39802C6C23B99C056438
SHA-512:	FDB44AE445D3AA26B675983F50AC91D024A62E106B1438F5A5E1DD30C62508EA051BE91BB3C20C216C7D46416058F286B7A20891DFC086ACA7C61F178C5D3C2B
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Color Vision - Defective</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="2p8e2k"></A>Defective Color Vision</H3>..<P>John Dalton carried out the first serious investigation of color deficiency in 1794. He became aware that his own color vision differed to that of other people, in particular he was unable to distinguish between certain colors and was unable to see deep red colors. Dalton found similar defects among his brothers and started to investigate the prevalence of the condition using a series of colored ribbons. Dalton believed that the cause of his condition lay in a blue coloration in the vitreous humour of his eye. This explanation was subsequently disproved by a<I> post mortem</I> examination carried out at his own request. However, the term 'Daltonism' has persisted to describe this form of color def

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-GOC41.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	863
Entropy (8bit):	5.396304068142892
Encrypted:	false
SSDEEP:	24:WlSZ6GV1lYjKvSAnwFFvoVJ7iRcKjWJlV6SfVwu:qSZ6GjlmKlnwXoH7JKCJlIYwu
MD5:	0E3BBCE46B535C167F4052B61FD5AB3E
SHA1:	A94E47F1D2AA79CFE6075F61A9755BFE270D821C
SHA-256:	CF290E1B1E012C3F4D2CBF1E4419E1248D57B7B036035434C28EA7773FFD6DFE
SHA-512:	E406103ECB688350D787262BB279BF12F9AE1E0040F49E650E559BD65880CCDD8EE936B9A361454FF7E85BF5B2F85ADE3D5B2A1D0CE65EB17674D316D2A5A823
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Filtering Data</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="filtering_data"></A><I>Filtering Data</I></P>..<P>Data can be smoothed by clicking on the Filter check box. The program uses a simple averaging algorithm described by Dain and Birch (1987). Filtering can be helpful for interpreting 'noisy' data and determining an axis of confusion for color defectives.</P>..<P>Filtering is turned off by deselecting the check box.</P>..<P><U>Refererence</U></P>..<P>Dain, S.J. and Birch, J. (1987) An averaging method for the interpretation of the Farnsworth-Munsell 100-Hue Test - I. Congenital colour vision defects. Ophthal. Physiol.Opt., Vol 7, No. 3, pp 267-280.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-H2MH8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	948
Entropy (8bit):	5.389985607836416
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfnEFgzsMeqAgy5m9HJ+4m1k9pWm13R9XF3t766twt+IBHSbyIlO:WlSZ6/BV4894m13vrWt++H+1C7D
MD5:	90B240063D7DD2DF17DCDB1E9C88CDBA
SHA1:	836D8E4620E04C843451E3EC52DE9D94319260A6
SHA-256:	833B48F68273E7BA7A813852621CA42B235FA2ABCB4FA68B200EA78D4A62FAFE
SHA-512:	8D5F6D4196548940D2C943F19B9BB1CCDD6F573A1DD1AD3C89A1294E026B21749E7B78A6BBFADF2842EC70E01E7B46A8DCEE563350C1F0BA640FE8FD6488539F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Color Vision - Theories</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="30j5h."></A>Color Vision - Theory</H3>..<P>Human color vision is exquisitely sensitive. It has been estimated that an individual with normal color vision can discriminate over 7 million colors and shades. Through the years, many experiments have been conducted which contribute to our current understanding of color vision.</P>..<P><A HREF="fm5asz.htm">Newton's experiment</A></P>..<P><A HREF="fm7rub.htm">Young's Trichromatic Theory</A></P>..<P><A HREF="fm8vi2.htm">Young-Helmholtz Theory</A></P>..<P><A HREF="fm2kms.htm">Opponent Theory of Color Vision</A></P>..<P><A HREF="fm5dgl.htm">Zone Theory</A></P>..<P><A HREF="fm3be6.htm">Modern Day Understanding of Color Vision</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-H4HA7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	1103
Entropy (8bit):	4.832787464154585
Encrypted:	false
SSDEEP:	24:WLZpsqgwvtJo6uwDK88ZfqZBAeNBAehxQy1SsYREXrC:KMqgsy6u8781q7AenAe7Qy8sYIrC
MD5:	3DFCA87387FA5E7E1176E988681CEAC9
SHA1:	9D429FFD97C4B5BA7FDE07E8CA1BBC5B9EAF08A1
SHA-256:	29F60861DB960BFA97F66D6082AF07C9D27350E5E0BF9176E164A1C25FB2D3EC
SHA-512:	0DF65BD35AE170D1F429267BFF8E8FA5260AA93AAC33BC113DAADB366F6A84CEBD3D60016F3385D8379376A6003535D7DB25FB6D27E5B4B02B02D1FF975880B5
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Untitled Document</title>.</head>..<body>.<p>The easiest way of representing the combinations of colors which are confused by color deficient people is with reference to the CIE chromaticity diagram.</p>.<p>The colors which dichromats confuse lie along straight lines when plotted on a chromaticity diagram.</p>.<p>The lines radiate from different points according to the type of defect. These lines are called isochromatic confusion loci.</p>.<p align="center">Dichromats will tend to confuse colors over the whole length of the confusion loci, whereas anomalous trichromats will tend to confuse colors over a more limited ranger.</p>.<p>The line which passes through the whole point and intersects the spectral locaus, indicates the wavelength which will appear "white" or neutral to the col

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-HLHJJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (765)
Category:	dropped
Size (bytes):	3135
Entropy (8bit):	4.693350362602618
Encrypted:	false
SSDEEP:	48:qSZ62i0MKM4E/6ugJl81SIeXAenAeb58KYv17ZzVj3jtX4aGUOESP:rRjbM4xkS3XAenAecZFhIa9SP
MD5:	C3A78B42905BD2A6A610B253FDEEF4C8
SHA1:	6908EFB6662DC972F0CB7BC1B4E7CEA3A370B900
SHA-256:	EC543C234BD8824D19802FA63A8FD04E9F4EF24C225BE88B513D2E076A23D889
SHA-512:	01F2F2E4DF713D03444CB9BB2DFE1D07AE6A8FBAF8D4BC91864F9FC7AA2F45A846239A2F8C7EB86D97F1E94629E90CE815C50798CF77709A00348CF20A85174D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>How do color defectives see the world?</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="9ov7m4"></A><I>How do color defectives see the world?</I></P>..<P>The effects of a color deficiency on visual performance in the real world depends on the type and severity of the defect. A person with slight deuteranomaly may have some difficulty differentiating between certain colors, particularly when they are pale or desaturated, but the condition is unlikely to be a significant handicap. In contrast, dichromats have significant problems differentiatiating between a wide range of colors and any tasks which involve choosing between these colors will be difficult or impossible to carry out.</P>..<P>Protans and deutans (both anomalous trichromats and dichromats) share a common difficulty with the red-orange-yellow-green range

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-HVGDF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	824
Entropy (8bit):	5.398231046189484
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfMsMeqpJp2F9IDAnLEnMEI5OK5hu0sSWf1hZhhKR1s:WlSZ6GpbcIKLrrOCk0NWfPZrH
MD5:	90B964A224FF78F94A4F4F0AE9F96547
SHA1:	D664CD27287FBFAEFB1F0AC86FFA78C08348DE47
SHA-256:	F3859DCBD06528AA7AD645B9233436864F4675625633A487D8C097D5D89EA849
SHA-512:	83F4344BFC3E3978C0F10983816942D9677EFA58885F204D7BF66D47AA32FFBAFEC9D9EC42407561925FA7FC199AC12EB2FD6511AB7BC4575848463E14EF5CF4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>View Menu</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="view_menu"></A>View menu</H3>..<P><A HREF="fm36re.htm">Data entry screen</A></P>..<P><A HREF="fm2lyr.htm">Error scores</A></P>..<P><A HREF="fm6d0t.htm">Personal Information</A></P>..<P><A HREF="fm3fjn.htm">Database</A></P>..<P><A HREF="fm4two.htm">Polar graph (usual format)</A></P>..<P><A HREF="fm7560.htm">Linear graph</A></P>..<P><A HREF="fm120e.htm">Show CIE Chromaticity diagram</A></P>..<P><A HREF="fm05rb.htm">Show Protan confusion loci</A></P>..<P><A HREF="fm4srr.htm">Show Deutan confusion loci</A></P>..<P><A HREF="fm4b3b.htm">Show Tritan confusion loci</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-I1VN1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (891)
Category:	dropped
Size (bytes):	1752
Entropy (8bit):	4.971275634042893
Encrypted:	false
SSDEEP:	48:qSZ6kWNf0R3PB1DWMmPhHU9BEx4s486Yv:rf/BgMmPhHU+d
MD5:	A7052BED1A574EEC9FD1794C9E532DC8
SHA1:	7F65CFD50110F7B8CC9FEA773E8495F541BC6296
SHA-256:	1FA8B7AA2386AE1FF39F70FE55A1999654C9C44CF914A48FFEACA2ED57A77C79
SHA-512:	D5688B49098B396143499D84F7E98C3172E33C01CDDB05864351CDE93C781E51CA947C4665D2794A8517DBC32EC94E1D42C26AE70EE0697305DADBCD96DCEFE6
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Trichromats</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="trichromats"></A><I>Trichromats</I></P>..<P>From psychophysical, physiological and anatomical investigations, we know that cones in the normal human retina contain one of <B>three</B> types of photopigment. An individual with normal color vision is therefore called a <B>trichromat</B>. From the discussion above it follows that a trichromat requires a mixture of three wavelengths to match any other wavelength.</P>..<P>The ability to match colors using a mixture of just three primaries forms the basis of a powerful method for describing colors. In 1931, the Committee Internationale de l'Eclairage (CIE) devised a standard system for specifying colors based on the trichromatic color matching characteristics of a 'standard observer'. For technical reasons th

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-IASAG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	473
Entropy (8bit):	5.384635953507603
Encrypted:	false
SSDEEP:	12:BMQbwMC9zp6QclfVISLrvZMNEqhZMN+HybP0qqUC:WLZpsq4VXqhZJHHkC
MD5:	7728EEBF5A93BDA4B9CC421920A5C8F9
SHA1:	67EB2D44A2A8FC0309340BC328EE2948B61F1349
SHA-256:	5E3020F8EFC4D9618E22329F866622CC3D69CBF0194CDF3FD817A571F7F6A01F
SHA-512:	1317128FC73B11B0CD3627B4D38810CBD3D83B2759E2258D2E30E5D372DD311351AAC71DE1510DEFF27728A865B09D40CD280EC95EC250616F5B8D9D713D07EA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Farnsworth-Munsell 100 Hue Test Scoring Software: Help</title>.</head>..<body>.<HTML>.<HEAD>..<BODY>..<form>..<input type="button" value="Back" onclick="history.back()">.<input type="button" value="Forward" onclick="history.forward()">.FM 100 Hue Help.</form>.</body>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-IBQJT.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	652
Entropy (8bit):	5.1462435476545885
Encrypted:	false
SSDEEP:	12:BMQEdOaA9zp6QclfVISLDxPDwAhHL91DwmxRLwAhbFAtT87w1qgPC:WnAZpsq4DxzpL4mxVA878PC
MD5:	9433A81C9FD156FA8D4D90C7B62E7557
SHA1:	C4C8C3A13EE0B45E1AD623BE40DC10DF0B7AA437
SHA-256:	01F71092AE64BA43B4F4E4283BD35F4A560F2AF505C092E23CB5A73A05212AA0
SHA-512:	A20C8B64F74E5EC08AA74C4B6DA6AC9A0A5578F63784EFF118E28466C4C408A9C995C65F235AB76FD9B84DEE28E7121D3CCF172F99C13D3434A0E6019F7E2A5C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Farnsworth-Munsell 100 Hue Scoring Software: Help</title>.</head>..<frameset rows="" cols="200," frameborder="yes" border="2" framespacing="2">. <frame src="indexList.htm" name="leftFrame" noresize>. <frameset rows="80,*" frameborder="yes" border="2" framespacing="2">. <frame src="nav.htm" name="topFrame" scrolling="NO" noresize>. <frame src="fm0001.htm" name="mainFrame">. </frameset>.</frameset>.<noframes><body>.</body></noframes>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-IJHTC.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	991
Entropy (8bit):	5.1381954562896235
Encrypted:	false
SSDEEP:	24:WlSZ6/7o1JiO9twCs6RMDyiagn2MPX3A9E:qSZ6GtZOy5gnLt
MD5:	B4C7F34EF15643AE3DB55B82472C1A89
SHA1:	8BB72A34C9DDD88817121F0F1DE97FBF5EF52393
SHA-256:	F31AF4296AB4000E34916CD3C7EB954FB9A7F2FE72D64759619BC729194A42B3
SHA-512:	00640C44B5B72CBB4C06902ECE2E43EE294F8A58D1A80E81DC08115BAE0ED2B10F4B5E4408EED16E05D3FF5A7B979850B821748D5280F73F7A4779FBDAE9CE52
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Copy Name and Analysis (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="19vjcs8"></A><I>Edit menu - Copy Name and Analysis </I></P>..<P>The current Name and Analysis can be copied to the Windows clipboard and pasted into other Windows programs.</P>..<P>Select Copy Name and Analysis from the Edit Menu.</P>..<P>The data entered as Personal Information is copied together with the analysis of the results. The information included is dependent on the Analysis options currently selected.</P>..<P>Having placed the information in the clipboard it may be copied into a Word document for example, by loading Word, placing the cursor at the desired position in the document and then selecting PASTE. This allows analysis information to be readily incorporated into pro-forma reports etc.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-JDEHQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	805
Entropy (8bit):	5.3227461689215865
Encrypted:	false
SSDEEP:	24:WlSZ6D1qK0qC6ihT5uzk0S1nPbHkqexU0fo:qSZ6D1M75uz5S1nTEqWUEo
MD5:	40C0793E0B18A2CB53BDFD9F180B5946
SHA1:	255BBC92314FC8E93422AEDBF567EBAFF89E62B8
SHA-256:	D32B91DACC3D5CE473A20453E4F9892281A7617D005D36074D95728FCF85B43E
SHA-512:	C26530E6166E98F3CE35D69F53FBB0BAEC3F2B78161D811590EFE5A8E930CA307A4B29A0377A3DEAD6EEB7A0BD6A1DEF7F3DB8201B85B197B4931CB749587175
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Displaying Error Scores</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="displaying_error_scores"></A><I>Displaying Error Scores <IMG SRC="../images/bm18.gif" ALT="" BORDER=0></I></P>..<P>The error score for each cap is calculated from the sum of the difference between the cap number and the numbers of the caps on either side. It is these error score which are plotted on the graphs. </P>..<P>Although there is normally no need to view the error scores individually, they can be displayed by clicking on the <IMG SRC="../images/bm19.gif" ALT="" BORDER=0> icon or selecting Error Scores from the View menu.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-JFKEL.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	677
Entropy (8bit):	5.328663374099687
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfXNr50sMeq7p5rhGQeynlJTv7k9K1LnS+J5TNT+x3:WlSZ6/f2NLeIDAsr7nT+d
MD5:	05B017E05F9FEFC2F641E0FB97323A1F
SHA1:	B7F68148D267AA727F1BD08849D2360D3422BD77
SHA-256:	BF7A69D6E9B4AEA73A5D9E84B521CFA07B577BC52BAB20E5C4FFF7699E0E2634
SHA-512:	55D07E73EE99C5BE327F3AA8D52084654838A23FCABC459175ED7B3E33CCBBA7B570AED8FEB45374A120DD228FFAEC95FD76C744373FF8AC41A664C5018B36E7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>CIE Chromaticity Diagram</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="3o1s_zn"></A><I>View CIE Chromaticity Diagram</I></P>..<P>This option is selected from the View menu of the computer program.</P>..<P>A color representation of CIE color space is displayed.</P>..<P>For more information see <A HREF="fm1nug.htm">Color discrimination</A></P>..<P>N.B. The colors displayed are only approximate and will vary according to the color capabilities of the monitor and display card.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-JPLCF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	733
Entropy (8bit):	5.257828609022488
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepfb7sMeqdzb8AFqBRcsfwS1/znULScSzMc8ITeaPZg9NbOQjEKf:WlSZ6DndzbPqkv22SOtePo0Qjjf
MD5:	BBA47CBAD6547DCF402EF5899922FB97
SHA1:	691DF9B44970B13D100BE3B73DFA69F9E8C7A5FF
SHA-256:	CE61489CC6711B7B355E92237C32D475604719288B1D16B377C3B01AA8AD14E8
SHA-512:	CCF35F758B8BA2DA49A638B68822737E179FEE732FD3757D153F5E4E2437816B2A9106D92F5C48E5C1268D124E9F1CAF15C1411E4B6651B63FF3CCBC28891216
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Overview</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="overview"></A><I>Overview</I></P>..<P>The FM Hue Test Scoring Software has been developed to speed up and simplify FM Hue Test data input (cap order) and to provide a powerful set of analytical and administrative tools.</P>..<P>Results can be saved on disc, displayed in polar or linear format and filtered / analysed according to a variety of algorithms. The program is also capable of producing high quality graphical output on a wide range of displays, printers and plotters.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-JSQLJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	442
Entropy (8bit):	5.324339252115576
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfssMeqqWZyWv9XRQB9BS5U:WlSZ6WqWwYmjB8U
MD5:	ADC2880842CAB455463FBD1072E97458
SHA1:	AAAE0A8FE1C60DE08018F8AF9DB0A86FDE07FAF1
SHA-256:	4076DB50196D5AB5DB815D6612CD99B4253BD395EA1FDA3912B7BE631A1664F6
SHA-512:	035178E7F24350BC37CE9279C66C0C0EC83BC753993C024FC4D525EF53C64ED6902F25C94FBB18E74F563686B1BE1C6954DEEBD0EE60EB5C62E0930FD3CF9400
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Menus</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="menus"></A>Menus</H3>..<P><A HREF="fm8igl.htm">File menu</A></P>..<P><A HREF="fm57n9.htm">Edit menu</A></P>..<P><A HREF="fm3ncl.htm">View menu</A></P>..<P><A HREF="fm5sol.htm">Help menu</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-KU9ER.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (486)
Category:	dropped
Size (bytes):	1433
Entropy (8bit):	5.013375871434199
Encrypted:	false
SSDEEP:	24:WlSZ60zshc2m65O21W/FhIakRUj8LQacthcg13nET9akMFazvy5o5qaPR2ohx:qSZ64J2etwjQZMCY1MFazhR2ohx
MD5:	E1042B5BAAC321D04FB489C93341DD10
SHA1:	0FF564B97CF591D603792C456C39DCFC7423DD4A
SHA-256:	3D9954039957F8CB4FE9D5E0C5CBC1219753D178396CD3AAEAD90C8E1CF1185A
SHA-512:	0D4022719BC97B9BF5510782A56D1F94375078CA9FFE1E3E235A94E19D802DB83FD62EB6727AF29608746C1E1D057509D32FCA32C2D46EF0B4A34DD93EBB555E
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Lighting</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="lighting"></A><I>Lighting</I></P>..<P>Reliable results cannot be expected from this test unless standard illumination is used. The illumination should approximate 6,740 degrees Kelvin (Standard Illuminant C or average daylight) preferably at 25 foot candles or more. Equivalent results can be achieved with using a tungsten halogen daylight source at 6,500 degrees K, such as the one found in the SpectraLight II and SolSource manufactured by Macbeth. </P>..<P>If natural daylight is used, the test should be given near a window illuminated chiefly from the north sky, lightly to moderately overcast. Daylight Fluorescent (6500 degrees) may be used if necessary such as the one found in the Judge II from Macbeth. Since natural daylight is variable, the results cann

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-L3JO1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (350)
Category:	dropped
Size (bytes):	1091
Entropy (8bit):	5.3957870405139525
Encrypted:	false
SSDEEP:	24:WlSZ6xce4SzeI6J59NxisiscwRHSMDRdWZSEjiW:qSZ6yfSzo59NxZis9HSMDRdWZSEjiW
MD5:	B2A3DCE3407EED58530ADB71B3DCCE6E
SHA1:	F76FE79384BC38E584D207B9DDAEB4489BAD337A
SHA-256:	355E70B0603CD28E44B44826F14EE9F7B486528E8C431F503E2183DE088B2018
SHA-512:	0D7675AA7CA523D37F61676739C40AE1AEE2202C164832F66C2B14B8929698B0CA52168D1E4E8992F8680AE4F37F0D7C50424F0EF84DFBA632BD180FF83A1643
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Linear graph</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="linear_graph"></A><I>Linear Graph <IMG SRC="../images/bm12.gif" ALT="" BORDER=0></I></P>..<P>A graphical representation of the data can be displayed on a linear graph by clicking on the <IMG SRC="../images/bm13.gif" ALT="" BORDER=0> icon in the toolbar or selecting Linear Graph from the View Menu. The cap numbers (1-85) are represented along the x-axis and the error scores are plotted against the y-axis. This format is rarely used.</P>..<P>The format of the display and the presentation of data can be customized in a number of ways:</P>..<P><A HREF="fm6i4a.htm">Scoring Options</A></P>..<P><A HREF="fm549z.htm">Scaling</A></P>..<P><A HREF="fm29bn.htm">Displaying confusion axes</A></P>..<P><A HREF="fm5a7n.htm">Color Options</A></P>..<P><A HREF="fm2x5t.ht

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-L6P90.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	620
Entropy (8bit):	5.107866666885297
Encrypted:	false
SSDEEP:	12:BMQEdOaA9zp6QclfVIgb8RxPDwAhHL91DwmxRLwAhbFAtj87w1qgPC:WnAZpsqgwRxzpL4mxVk878PC
MD5:	ACD8635BB244F2711A1BDEB81D6935A9
SHA1:	2C6C33CCB87AB60F39E6ED5C86070408D7F5CE09
SHA-256:	D8258D977A80DA38AADE434F2B6FDCD5C4D224BBF7EB01A6F7DCB8CFEAAB58C5
SHA-512:	993F89D2517B991109920ECADE2C3B8036E3003110C58DBC4ECCCC3ED2645691B6FDF8EED0C0F739A8D14915676F1E0455CBB0499A09CA5066ED13776B256325
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Untitled Document</title>.</head>..<frameset rows="" cols="200," frameborder="yes" border="2" framespacing="2">. <frame src="indexList.htm" name="leftFrame" noresize>. <frameset rows="80,*" frameborder="yes" border="2" framespacing="2">. <frame src="nav.htm" name="topFrame" scrolling="NO" noresize>. <frame src="fm4eus.htm" name="mainFrame">. </frameset>.</frameset>.<noframes><body>.</body></noframes>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-L85HS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (792)
Category:	dropped
Size (bytes):	1098
Entropy (8bit):	5.0141340803092485
Encrypted:	false
SSDEEP:	24:WlSZ6ysHGmF6gv5VduIF9e/So4LVcFzeYac:qSZ6JVd/Fe4Sac
MD5:	718315A67420BD174A72DBDE54EAE703
SHA1:	825CC820696A72DBC09BEC15A7D733EAAC828E5C
SHA-256:	8CDA48100A9C7D439A39C649DB4314DB89F2C37C1DD8535D576A70CFAE5B1917
SHA-512:	8128353CD6DC51898C1ED1457D14B25C83EBE65CDD67BB9B6470D72744BBFDDB39867821342F3D8882FA0591CE55051EC8B4B97D29ED08741B75D4DDFF84805D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Newtons Experiment</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="newtons"></A><I>Newton's Experiment</I></P>..<P>The first insights into the nature of color vision came from Isaac Newton. In his room at Cambridge University, he placed a prism so that sunlight shining through a hole in the shutter of his window entered the prism. He observed that the sunlight became transformed by its passage through the prism into a spectrum of colors. He also noted that the sunlight could be reconstituted by recombining the spectral colors. Newton concluded that sunlight is made up of each of the spectral colors. Later work showed that these spectral colors differed in wavelength thus demonstrating for the first time the link between wavelength and color. However, it was clear to Newton that <I>... the rays ... are not colored

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-LBM7R.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	701
Entropy (8bit):	5.402047491130126
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfxsMeqxy9JSHY6ckZSLzQ05umSsjrOzCC:WlSZ6B4JSHYHk8vQ05fzvuD
MD5:	023A9031812E8F672145F20FDB063568
SHA1:	DB67545547E7EB5F4E2266E780718D582FD2A08F
SHA-256:	8EF2C4C2CA4F0920DBCDB28DE2FCFC1F66258491C1DD21E2496385E5E1B0BCE4
SHA-512:	1552C04118E84251A8B7992A4A774BD0D543F08C450738EF4CC154ADD45BDFEA03B4642C9F7205FF4DB9F3A112080E8842D684237E5E9DA9854AC7B66101FD44
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Edit menu</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="edit_menu"></A>Edit menu</H3>..<P><A HREF="fm0j5b.htm">Undo</A></P>..<P><A HREF="fm6q01.htm">Copy graph</A></P>..<P><A HREF="fm5tbb.htm">Copy scores</A></P>..<P><A HREF="fm2bco.htm">Copy Name and Analysis</A></P>..<P><A HREF="fm4s11.htm">New Record</A></P>..<P><A HREF="fm6rj8.htm">Select Record</A></P>..<P><A HREF="fm68mt.htm">Delete Record</A></P>..<P><A HREF="fm59v4.htm">Save Current Record</A></P>..<P><A HREF="fm2y9i.htm">Preferences</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-MTOI3.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	842
Entropy (8bit):	5.249181144618396
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepff2sMeqpxFWVNUGQeynlMBiBdgVD8PT8deF9K1LnS+J5TNT+x3:WlSZ68s/ULeICIBA4Ideur7nT+d
MD5:	78EEC1C5F83E5AE595AB570AC3451D63
SHA1:	7B8645B048D8C95E60C1821403E3D83AEF99DCD7
SHA-256:	DED660D563AF4F8542F9C6AFBFDA1C615B3CB521BE66EC346935807F387FAC98
SHA-512:	C4BB4C2FA4055719057890733C950235FDB816DB87B5BB0923D443CF538DE29FF4473B8939EA470B33E51FB7D04D949DECD2E10006EC41CF64F544C4ABCAD9E2
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Deutan confusion axes</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="df09gg"></A><I>View color confusions for deutan defects</I></P>..<P>This option is selected from the View menu of the computer program.</P>..<P>A color representation of CIE color space is displayed with isochromatic confusion lines superimposed. Colors lying along the confusion lines will tend to be confused by individuals with a deutan (green) defect.</P>..<P>For more information see <A HREF="fm8siz.htm">Defective Color Vision</A></P>..<P>N.B. The colors displayed are only approximate and will vary according to the color capabilities of the monitor and display card.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-MTRNA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	680
Entropy (8bit):	5.3881807823176375
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfRfdsMeqJGXdmfElVHc4d9XLYjkdJAtYX3HMyl:WlSZ6/Yt9V8iLYodStuXjl
MD5:	04E3F9E6409D85862B06CB1F025DBF7E
SHA1:	D02CB6EAA0EE42B13CAC5064504799F783CB6C3A
SHA-256:	B4AC799F1725E4A46B396F10757CDDB93498D3E0DD63A24A4BD30B7F140D0327
SHA-512:	B2C519126A2F6C1F4FBAE33BBBD557660E267209862D583F3342E4B2F56D08335A4B228434FB7E756FF388673C9945B44207E5F588DAD1689DECDC7D4E5E17CB
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Interpreting Data</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="interpreting_data"></A><I>Interpreting Data</I></P>..<P>After the pattern has been plotted, there are various methods of interpreting the results, depending upon the information wanted from the test.</P>..<P><A HREF="fm2xpq.htm">Classification</A></P>..<P><A HREF="fm4c81.htm">Normative Data</A></P>..<P><A HREF="fm7z8q.htm">Identifying Color Vision Deficiencies</A></P>..<P><A HREF="fm9sfm.htm">Analysis Options</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-NSVN7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	431
Entropy (8bit):	5.408686600061125
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepfu4ksMeq5p49d4khM+SS:WlSZ62nTsdBLSS
MD5:	3CF442E57B99570D31853ED83ECF1E7D
SHA1:	2FDE1B5269BA41A60EB51B8A988736BD42FD1700
SHA-256:	24D208BDC3ACEADB25547AF3E235C6D80BC856A818CD79ED2F6AEE1CD78B3CAC
SHA-512:	27204C9206C8C185BD83A70BD1F1F6BB97DF360059AACBD3B354AF6E93C10ADCE8254D204BA3FD8964BF71525B1D70F2DA158D57D477ECEE999E198435C0B1EE
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Administration</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="administration"></A>Administering the test</H3>..<P><A HREF="fm4ndz.htm">Lighting</A></P>..<P><A HREF="fm0llx.htm">Procedure</A></P>..<P><A HREF="fm359j.htm">Scoring</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-O5UUN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	510
Entropy (8bit):	5.3959573376704855
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfnEFssMeq1+SF3qt+TI2xJCk1uZKhndeF/:WlSZ6/1pBqt+TFJP8gndeh
MD5:	89F360D3917E16DB4038FBD5F6A0F8FE
SHA1:	71E396A9BC0F5635C58A34593A2F35FF17A72F07
SHA-256:	EBCC651951C84400F6558A51ADE53178BA89EA065ED6B6F20CAB7ABCA3B9633D
SHA-512:	0BCC4D58CAE9CEFC9937707C2F83E14A5A85D0DF3EB3598D695AC7293D309FBC8A6626D85933B9EFACF97B5DADBBA74BD6F7F8883C9F170F67D33949E16C4ED2
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Color Vision</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H1><A NAME="colorvision"></A>Color Vision</H1>..<P><A HREF="fm83zi.htm">Color Perception</A></P>..<P><A HREF="fm5l0u.htm">Color Vision Theory</A></P>..<P><A HREF="fm1nug.htm">Color Discrimination BASICS</A></P>..<P><A HREF="fm8siz.htm">Defective Color Vision</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-OFSN0.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	620
Entropy (8bit):	5.274736574478381
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfL7nlJRWsMeqNU1awn25GWJcdwnFI2CwT0dJivkRiFYOEo:WlSZ6jZMu1ahGWe4I2LAELFYON
MD5:	83E1AE5BDB9119BFE9326E731A2A3B28
SHA1:	EB2D68BE25D2D333B0F65D19F6FEB2BB20037655
SHA-256:	1D3D83603FD8FAA5B7717B885B195168535904E7F7D5C9D704E295DD3FECA98C
SHA-512:	CEAC6769D13D4BD27C955E3F7922D7C7B4879C9984D168F7B119A8C050451F59839C8969125BAE2A012E25DC1C2EC8E3339289794FA9FE19133C92979390D9E4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Personal Information Form</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="personal_information_form"></A><I>Viewing Personal Information</I></P>..<P>Personal details relating to each record is viewed by selecting Personal Information from the View Menu. The form is read only and shows details of the current record including Name, Initials, Reference, Date of Birth, Date of Test, Duration of test and any other Comments.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-P7SOO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	620
Entropy (8bit):	5.116566131884742
Encrypted:	false
SSDEEP:	12:BMQEdOaA9zp6QclfVIgb8RxPDwAhHL91DwmxRLwAhbFAt0Ic87w1qgPC:WnAZpsqgwRxzpL4mxVrt878PC
MD5:	C8828E36B6CB9FE7F9AEBAA4E1F56A16
SHA1:	50FF09FB952BD1D54D3C0D6738DB343EA79863A8
SHA-256:	2F84B8B9A955C9D98FA7D0CCA825EF11A0F1C9CFD08A486961CE486CF208B56F
SHA-512:	754F0D54CE302512694118F7643C532A54AD16AAA1F96B74959DB5705BB05BF96B79503285D8E67CD62A184A6BDC20051437CD94765DD47AB7D1ABA3BC25D49C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Untitled Document</title>.</head>..<frameset rows="" cols="200," frameborder="yes" border="2" framespacing="2">. <frame src="indexList.htm" name="leftFrame" noresize>. <frameset rows="80,*" frameborder="yes" border="2" framespacing="2">. <frame src="nav.htm" name="topFrame" scrolling="NO" noresize>. <frame src="fm5l0u.htm" name="mainFrame">. </frameset>.</frameset>.<noframes><body>.</body></noframes>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-PLMVF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	710
Entropy (8bit):	5.261019547793298
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepf7aWsMeqBfRSUtKJ0FjBRadpOaeNIUcOY7aPxjGf4u:WlSZ6XL/WKIPQ6f4u
MD5:	8757FE967B3B2016702801F7DFD956FE
SHA1:	2C7895603A296B7F74AC68B0CBB75A01BA998E53
SHA-256:	E47A9E1AA87B8A6CF1A2E170AE26C1AB788E896C77DF4D9D82FBFDC88D7A2C7E
SHA-512:	F4C01326DCE5D7DA776FA0ABE7BA4FA374E291D9B39210A89EDD9F74AE58C7419A00F01FEB8429BE2D930FB9AD56E42D2CAB945334C2A2EA25121F01B159FB9E
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Scoring</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="scoring"></A><I>Scoring</I></P>..<P>Scoring the FM Hue Test manually is time-consuming and somewhat tedious. The computer program has been developed to simplify and speed up the scoring process. For information on using the computer program, go to the section on the <A HREF="fm00c1.htm">FM Hue Test Scoring Software</A></P>..<P>If you do not have a PC and need to score the test manually, please contact Macbeth for a set of instructions and score sheets.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-Q64L4.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (312)
Category:	dropped
Size (bytes):	1398
Entropy (8bit):	5.353935142547625
Encrypted:	false
SSDEEP:	24:WlSZ6d6N6D77B+d2Zm4ZrZ8xySvidQiid3Oid5QdidfoB3ur+H8DJyYtCMx:qSZ6lvu2M4JxvQfTC8gxurpbwMx
MD5:	ED6EBC4FE72232406C961D3CF127D3E1
SHA1:	B46E178DE8637F1BA0E42E6F307F5F044288F9A0
SHA-256:	2CE912E585D45494DCE71142BFB84E3843F1E728CD1AFCC2761B053DA9AA02F0
SHA-512:	1F0E4BB6DD1F83A04FCE843A5F6B4252555723A65FFD758AD46121DBC1E058371749B6C569F59A0FB07CBAF4266CB65874086DF0E747EBB321E47A6C9A78DD92
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Dichromacy</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="dichromacy"></A><I>Dichromacy</I></P>..<P>Dichromats have two cone photopigments instead of three and are able to match all spectral hues using a mixture of just two colors. They are further classified as protanope (long-wavelength pigment missing), deuteranope (medium-wavelength pigment missing) and tritanope (short-wavelength pigment missing).</P>..<P>The prevalence of the various forms of dichromacy are as follows:</P>..<TABLE cols=3 width=303>..<TR VALIGN="top">.<TD width=37%><B>Type</B></TD>.<TD width=31%><B>Men %</B></TD>.<TD width=32%><B>Women %</B></TD>.</TR>..<TR VALIGN="top">.<TD width=37%> Protanopia</TD>.<TD width=31%>1.0</TD>.<TD width=32%>0.02</TD>.</TR>..<TR VALIGN="top">.<TD width=37%>Deuteranopia</TD>.<TD width=31%>1.1</TD>.<TD width=32%>

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-Q7636.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	626
Entropy (8bit):	5.374428216383203
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfzsMeqQ0A9/fgjef0UZXhKmQ5HxAUfSSvs:WlSZ6HQB/oif0UztOYSk
MD5:	B75BAC3B5A1E60F837F55946F634B2A4
SHA1:	1923238A06CBD72576AE0533C47AA63F3D3621C8
SHA-256:	87F62E10ECEBFF3EA49A9EF2B8DBE12A6B1C971D02432D06520F86C4B539D9FE
SHA-512:	DF66C481D27FE010983CD9950C388E796862EFF5A3CC6EE02E3B83C0B9D51DEC3E04EA0EC54D69DB06FBDA2D5FF04B42A711BD8B64C2AE0CB3BC1E1BFFE5F81C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>File Menu</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="file_menu"></A>File menu</H3>..<P><A HREF="fm760n.htm">New</A></P>..<P><A HREF="fm59da.htm">Open</A></P>..<P><A HREF="fm9i7k.htm">Save As</A></P>..<P><A HREF="fm1xf2.htm">Export Graph</A></P>..<P><A HREF="fm6m3u.htm">Export Scores</A></P>..<P><A HREF="fm043d.htm">Export Name and Analysis</A></P>..<P><A HREF="fm7n8x.htm">Print</A></P>..<P><A HREF="fm7dgf.htm">Exit</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-QDOA0.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	879
Entropy (8bit):	5.2068248724886885
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfLqel8sMeqW+OFY912Yx21RjlBVW91qFJJzTOjW50DX5e2Dr9Y6:WlSZ6jzoog12b1Rg1+DzTO6qDc4rPTus
MD5:	694B7AD80535DC431F2BADD11DF08920
SHA1:	955794123963237623E72014E201567DD9A67103
SHA-256:	F2F5801A3284BD3086D741A7EF2DA9B3EEDDF60DC4A2F5CAB842605E3A62EAD0
SHA-512:	9DDB259B33AEF9C6EB8D0246F0DA3F8EDD858073D0197657203B4BB8F85D30DFE1E082011118A46A095C9D351B858733DD64D7AD9E4E7089404DD67D6713C590
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Percentile - experienced</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="percentile_3"></A><I>Percentile (Experienced color matchers)</I></P>..<P>The percentile for the current Total Error Score with respect to a distribution of Total Error Scores obtained from a group of experienced color matchers.</P>..<P>For example, a figure of 90% means that the current Total Error Score would be in the top 10% for experienced color matchers.</P>..<P>The analysis is based on results for 150 personnel of three to twenty years experience in the color control laboratories of manufacturers of dyes, rugs, plastics, textiles and paints.</P>..<P>See <A HREF="fm4c81.htm">Industrial Norms</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-QKUE9.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (544)
Category:	dropped
Size (bytes):	1944
Entropy (8bit):	4.838318020960845
Encrypted:	false
SSDEEP:	48:qSZ6jNTcHSoyz6tc3gJ0RXF/FG9cdUCwk20ZAFaUX:ruYyoyOmjRXFOcp1SFaU
MD5:	5BF473CD8F8E4B2FC9EF7758AB5A2AA4
SHA1:	19216144BAB032238B0BC870AD264B387A67D9D0
SHA-256:	752764B703F1339A905831BEDB5D5246BD49F99BCD41FF091EFD0C2499467A21
SHA-512:	5D02768A4A820827EF1B8F31F10394BE7FE0594742BBFEC5B8CE5073268DD30029DDDAB3E2F186930CCFD47A40B6AE55268DDFD2942B2507428B1E94F5BB6200
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Procedure</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="procedure"></A><I>Procedure</I></P>..<P>1.Open one case lengthwise in front of the subject so that the empty, inclined panel to which the pilot caps are fixed, is nearer the subject. The cases may be given in any order. Before being presented to the subject, the caps should be arranged in random order. A good practice to follow is to rearrange the caps after each test is administered. To do so, after the arrangement of the caps has been recorded, transfer them to the opposite panel in random order. Then close the case and turn it over. It is now ready for future testing.</P>..<P>2.Instruct the subject as follows:</P>..<P><I>The object of the test is to arrange the caps in order according to color. Please transfer them from this panel (indicate) to this pan

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-QMTKE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1108
Entropy (8bit):	5.095816593016971
Encrypted:	false
SSDEEP:	24:WlSZ6/ocZAfpTyA+tE621y7+q2CXQAa87Xk+P:qSZ6zZod+tEEylAvrkk
MD5:	D8B33E4915AE868F0A6002EDBB46068C
SHA1:	603FFA51805E3630347D1F6DB59303C2318D9708
SHA-256:	22CA976D4A0E2CF72CAB1C3947DC68C62C8A61FEA8F3ACEF8D0BBD5241B6125E
SHA-512:	2F07E976FECF9DE17B2618AD215D2BB70C9FF8A9E52E827F8F2B445D6DF07851CB56A6C94097E447DA6756FF7ACE74BACDE64A595144DF7FD904B660340E28B4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Copy Scores (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="2mwdzwg"></A><I>Edit menu - Copy Scores</I></P>..<P>Data (cap order) can be placed in the Windows clipboard and pasted directly into other Windows programs.</P>..<P>To copy data to the clipboard select Copy Scores from the<B> </B>Edit menu. If you wish to copy the actual error scores then select Raw Error Scores from the sub menu. Alternatively, the scores can be copied as actual scores minus 2 by selecting the Error Scores minus 2 option.</P>..<P>Having placed the data into the clipboard it may be pasted into an Excel spreadsheet for example, by loading Excel, placing the cursor at the desired place in the sheet and then selecting PASTE. Error scores will be entered into each cell in the selected column sequentially.</P>..<P>This facility al

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-QNGPC.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (323)
Category:	dropped
Size (bytes):	1036
Entropy (8bit):	5.079220047740994
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepfd9KK0sMeqrfbiaPH5hjTmK10hdyjZOei/SAqs1gQ5FRr9PxgIm:WlSZ60rfbTvx10ethiqAB1hfJyd
MD5:	A76D4404E2A605FB93444DF4F1534406
SHA1:	21D91C83F4FF40DE50456596B8D9AE0486249330
SHA-256:	F936B85232AD7FE72DC94A1FFFE14978098D9D840069F7643F7C428ADBE2B177
SHA-512:	528E8A55103F3EC8B0F38A3E05128D22DB156F2116D6F0A6CB0AB7E0C408F9D06C71DAA3EB5AD782FE8800DC62495A622E359F2A48D47FF37D15EC99F85A661C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>New (File Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="file_menu_new"></A><I>File menu - New </I></P>..<P>In some circumstances it may be desirable to maintain more than one database. For example, in a large company, separate databases could be kept for each department or division. Within a hospital, it may be desirable to segregate records according to various criteria e.g. diabetics, inherited color deficiencies etc.</P>..<P>To open a new database, select New from the File menu. Enter a name for the new database in the standard dialogue box. The name of the new database will be displayed in the title bar of the main form. </P>..<P>CAUTION - Giving the new database the same name as an existing database will erase all records in the old database.</P>..<P>Database files are given an extension of <I>.hdb</

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-QV0C1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	726
Entropy (8bit):	5.280595375772896
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfkMWsMeq7sxkz8St+k9GrwJsgPJenxv6s3stefH4IViXAgF:WlSZ6s17t8uGB2MxiE329F
MD5:	60AAD2DBE3B012707422BA569275EFA2
SHA1:	2AA71D2FEE0A2D7312842A66EA35942EF7B15BFE
SHA-256:	12EDF682ECB09B000BAD399CE38EA7657E93F7537E0A48F97B679A798AB37782
SHA-512:	5FA7CB65C59DEB0473B0F2593BA9B3C1FC15381D5B1661E698260D893D03DCE199C8C9F162F3CA6DEE357850800084719481924881FAD5080C6ED8EBD3783E8B
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Averaging</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="averaging_data"></A><I>Averaging Data</I></P>..<P>It is sometimes helpful to average several sets of data to establish an underlying pattern.</P>..<P>Multiple data sets can be averaged by selecting the records you wish to average from the database and clicking on the Average option.</P>..<P><I>Note: The average option will only be enabled when two or more records have been selected</I>.</P>..<P>See Also <A HREF="fm3fjn.htm">Viewing Records Stored in the Database</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-RFH5Q.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (601)
Category:	dropped
Size (bytes):	1127
Entropy (8bit):	5.148762765260473
Encrypted:	false
SSDEEP:	24:WlSZ6IVZWdF2C7t2JH8OvIib+3KJ0XZQeb85KvmDRS:qSZ6ILWd0CxMjIkX0pQeYKQS
MD5:	B8EE54072D8DB4CBA36743CD59E351A6
SHA1:	EFE9F8075CB5A457259224D7BA3657D5F00F151F
SHA-256:	D3AC5DAFFC69644AFF5867B05EE0315A37ECB7D9C9BCD019E5A7E8606B239E9B
SHA-512:	4A91AE46006DF0058FDA2B0E066251119292C640DC72E3B1254739E227DA69C2C6CA8553881E76C4A2C3DEEC7C56BAC43497D2585B3C6BFFCF497F0FDC0EB399
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Save Current Record Record (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="2xz83ip"></A><I>Edit menu - Save Current Record</I></P>..<P>The program incorporates a simple database to allow easy access and reference to previous records. The name of the active database is displayed in the Title Bar of the main form. </P>..<P>Having arranged the order of the 'caps' on the screen so that it matches the order of the FM Hue Test caps, data is added to the database by either clicking on <IMG SRC="../images/bm17.gif" ALT="" BORDER=0> in the toolbar or selecting Save Current Record from the Edit menu. You will then be required to enter the subject's name, reference number etc. When this is completed, clicking on OK causes the data and the subject's personal information to be added to the database. This informat

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-RNMQO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	1117
Entropy (8bit):	4.903867197791394
Encrypted:	false
SSDEEP:	24:WLZpsqgwaEtJo6uwDK88ZftlBAeNBAehxQy1SsYREX0tC:KMqgCy6u8781lAenAe7Qy8sYI0tC
MD5:	9FEC8D6A1FF2EE28339621718E15BD1D
SHA1:	1D0560941F2A18E7A3C5B6AD26059A0227ACB3FA
SHA-256:	B2376A2C01A60D4CE99052C088E7C0907819F29D0FCEB18A6BBB4A1892C00442
SHA-512:	7DFD6019908E8751CEF442E15FB4FD1174934B61F46CC572C3CD3E450A8CBACF8C8DEC8480F5D09855EA0DFD8D8F2236DAA8172AB89DE136954F20A74B393A9D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Untitled Document</title>.</head>..<body>.<p>DEUTAN CONFUSION LOCI</p>.<p>The easiest way of representing the combinations of colors which are confused by color deficient people is with reference to the CIE chromaticity diagram.</p>.<p>The colors which dichromats confuse lie along straight lines when plotted on a chromaticity diagram.</p>.<p>The lines radiate from different points according to the type of defect. These lines are called isochromatic confusion loci.</p>.<p>Dichromats will tend to confuse colors over the whole length of the confusion loci, whereas anomalous trichromats will tend to confuse colors over a more limited ranger.</p>.<p>The line which passes through the whole point and intersects the spectral locaus, indicates the wavelength which will appear "white" or neut

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-SDEVG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (355)
Category:	dropped
Size (bytes):	1058
Entropy (8bit):	5.111341093157474
Encrypted:	false
SSDEEP:	24:WlSZ6dWv+QRIgK5EM5aN6oESXo5hjipvN6moxI:qSZ6RQRIZGMj1nyIy
MD5:	42F95F795FFAD4722410BBBDE1D277CD
SHA1:	B7D7F81058E89186268CA588B455275C14105FB8
SHA-256:	33AFF1B12ABBAE564FE0DC38DDDBE0E839D8F71933C8D8B1CE1A82FC9B7094D8
SHA-512:	3B5AA0DF34B14200056F959B1D712EF20489D9B47B631D189028C0E4F9D96D2031D4EC836CDB0492272CCC46FCDF225BE60E1B27D66495F57C85F61FCF5930AA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Monochromacy</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="monochromacy"></A><I>Monochromacy</I></P>..<P>Monochromats are able to match all spectral colors using just one color. These individuals are unable to discriminate solely on the basis of wavelength and are therefore truly color <I>blind</I>.</P>..<P>There are two types of monochromacy. Rod monochromats have normal rods but have no functioning cone receptors. As a result, their vision at night is normal but under photopic (daylight) conditions, visual acuity is poor and affected individuals tend to suffer from photophobia and nystagmus. Rod monochromacy affects about 0.001% of men and women.</P>..<P>Cone monochromats have one type of cone (normally blue). As a result, they often have poor acuity but in general, are less handicapped than rod monochromat

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-ST0IH.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	840
Entropy (8bit):	5.247957805853096
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfLZsMeq6xFWVcUGQeynlMBiBdgVrfQIT8deF9K1LnS+J5TNT+x3:WlSZ6jRHmULeICIBArIPdeur7nT+d
MD5:	3D745C989EFF06AAF457C127B12455F5
SHA1:	9C8A5FB5B4E198C0829441EBFD15DAC599F6B073
SHA-256:	6D626DDD4EA1FC1CC1E12290AC8DDF1F8385C5AC259872AE63D18D75CCAAEE93
SHA-512:	DC5A1479CA2E334566C3BDEB1E6FDDDD6407125C95A5373A173E3CFCE4C49126DC1B0E855B069091A5E8B603DFA6300B1D320AD90F82DDBD7B13E27749B8DC2C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Protan confusion axes</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="ps49gg"></A><I>View color confusions for protan defects</I></P>..<P>This option is selected from the View menu of the computer program.</P>..<P>A color representation of CIE color space is displayed with isochromatic confusion lines superimposed. Colors lying along the confusion lines will tend to be confused by individuals with a protan (red) defect.</P>..<P>For more information see <A HREF="fm8siz.htm">Defective Color Vision</A></P>..<P>N.B. The colors displayed are only approximate and will vary according to the color capabilities of the monitor and display card.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-T2K0T.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	575
Entropy (8bit):	5.336010030955101
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepfn0sMeqyEnA2Qg26C/ZG7RMD:WlSZ6+yEnnQQkN
MD5:	2CE217ADDD150CE9D26EDFE8DAFA2357
SHA1:	93C6FB1989AA5A93F1815E002C7671EF99F5BC4E
SHA-256:	ACAFD88794D25EC359CDC4A0DC22C78912446F5B023FBCF20E56E39A90BEBFCF
SHA-512:	1A3C62A181EF93609F1D6EE11B4D78C6D972F72B1D12AEF694438CA3F28602F6CEC3691072F4106541FC96365612033ECF8C394C120A3AA72394A35E384DB3BE
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Examples database</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="examples_database"></A><I>Examples database</I></P>..<P>A database of example results is included with this program. To view the examples:</P>..<P>Select Open Existing Database from the File menu</P>..<P>Select Example from the list of databases</P>..<P>Select the required example from the View Database Window</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-TR801.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (325)
Category:	dropped
Size (bytes):	893
Entropy (8bit):	5.201736125486845
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfnpsMeqHTIwAZgyYEbnta/JtL+2RQVv0fZFRAEVqNp1E3JErkFk:WlSZ6/BzIw8glEbnWzQVv0f7RAE+kJ6
MD5:	192678FC93132D6D07FF49536B8606BC
SHA1:	752224EFC3C46404545EAEF9980BA0968A425FF1
SHA-256:	404CC56C64E1509993930094858A2CE320F480827F897DBF8FA7F50BB94CAAE7
SHA-512:	66940366BD203AF8910A9114C061EA44AECC724EB0DD21840D9F3BCFC963E224DD917C01FFAF42357A647DA0F7E0615990F778D02B2AA3893DE926312AB27DDA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Confusion axes</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H4><A NAME="confusion_axes"></A><I>Displaying Confusion Axes</I></H4>..<P>Data obtained for color defective individuals will show a clustering of maximum errors in two regions which are nearly opposite on the hue circle. A line drawn through these two points is referred to as the confusion axis. The orientation of the confusion axis can be used to identify the type of color defectiveness.</P>..<P>To aid diagnosis, typical confusion axes for protan deutan and tritan defects can be superimposed on the polar graph by selecting the Show Confusion Axes option.</P>..<P>See Also <A HREF="fm7z8q.htm">Identifying Color Vision Deficiencies</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-TUE5D.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	620
Entropy (8bit):	5.113713229977671
Encrypted:	false
SSDEEP:	12:BMQEdOaA9zp6QclfVIgb8RxPDwAhHL91DwmxRLwAhbFAts87w1qgPC:WnAZpsqgwRxzpL4mxVX878PC
MD5:	D98C6A1A5CA178C807EF61EEEA70AB88
SHA1:	8C496EDE53C990802B7296B6B07A179F09097E17
SHA-256:	1AD26B7BA2935536FFFC2B10A3EF100D186AB68CB895BCCB4727B54148D9EC1E
SHA-512:	7E56A3BF92659491E170B31A861880AA10701E094FF6C701F81C003F59BAE8E5FBB063E85206CE0C3846CD688C3660DB8862C7E5D0EF80AD743424851E800B56
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Untitled Document</title>.</head>..<frameset rows="" cols="200," frameborder="yes" border="2" framespacing="2">. <frame src="indexList.htm" name="leftFrame" noresize>. <frameset rows="80,*" frameborder="yes" border="2" framespacing="2">. <frame src="nav.htm" name="topFrame" scrolling="NO" noresize>. <frame src="fm00c1.htm" name="mainFrame">. </frameset>.</frameset>.<noframes><body>.</body></noframes>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-U0ALJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (498)
Category:	dropped
Size (bytes):	1053
Entropy (8bit):	5.033782561959998
Encrypted:	false
SSDEEP:	24:WlSZ6MQ2xQHHNMW7OSBf5eGqwOEUBqdCY:qSZ6/Nx9t5eG87BqdP
MD5:	4E4EA2AA8DEF4E3D1FAFD3FA367CF0F8
SHA1:	5BCFE9D9AE45E1130F0E0BF23A01F30F6749B124
SHA-256:	A4D8411E1B655606417346688126F14401276D4793B317380D29CA26BF7B79DC
SHA-512:	5F86230841AAE79F82346F8359670B7094F93C9A381DAA2D40C2ACF6BAA0130E3387268B9D03FFFDDFB61FCB4A356DCEE8F40342AA6061ADC901CF75833DD4EC
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Acquired Defects</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="acquired_defects"></A><I>Acquired color deficiency</I></P>..<P>Some changes in color vision occur throughout life even in healthy individuals. These changes can be explained in terms of yellowing of the ocular media and perhaps changes in retinal sensitivity. Color vision deficiencies can arise at any time throughout life as a result of general or ocular disease, trauma, medication or as a result of exposure to toxic substances. Unlike congenital color deficiencies, acquired defects commonly affect one eye only and affect males and females equally.</P>..<P>The effects of various diseases on color vision has only been fully recognised in recent years. This is partly because acquired defects often affect blue perception and most color vision tests onl

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-U8E2K.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	636
Entropy (8bit):	5.4145390192545175
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepf9uK0sMeqmpvMwFClLRn5wR7aZSM6SMyl:WlSZ6G5wCll5wRWZSHSjl
MD5:	441616208AA2FD5E02A9F6ED4FC67EB7
SHA1:	82792470239CE4DB05BDBDD7D0AE4106E52756C9
SHA-256:	0DBFE3BEDDF32492936675AC4B71DDC957341BA85BBB276CC6BAC47FA7BAC329
SHA-512:	5CF6A8856E47295F3E941282188D4DD5AF7A2B6E87CCE55E9F9A6C072DAA5F2561CC0391D509195B336BF67C3F75204F77BF8D1ECBFA859933B88649B3450009
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Set preferences (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME=".g2gy6"></A><I>Edit menu - Preferences</I></P>..<P>Various program options can be set by selecting Preferences from the Edit menu.</P>..<P>The Preferences form allows the program to be customised in a number of ways:</P>..<P><A HREF="fm5a7n.htm">Color Options</A></P>..<P><A HREF="fm6i4a.htm">Scoring Options</A></P>..<P><A HREF="fm9sfm.htm">Analysis Options</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-UMKBS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	936
Entropy (8bit):	5.2263641952779745
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfQK0sMeqOib+FwuW/96hTMtnyVpRRet3RFCOTE4k+yUdU3Ty5b0:WlSZ6iOpqbUpojCOg+3kTyQBco
MD5:	B14F7D134FCA742BFF10511E8CACD851
SHA1:	378B018F1992715FBEF1B939A2AFDFE574A828AA
SHA-256:	9AFC217EE065D34FCE92381DAD8B74BA468D732C31C1EEA62671FDDDA1C3DDCA
SHA-512:	C260657BAE77E8D0776E165F97EAC5326F62E31224603FC8C4E1FF605A407D2B752EE3CBAD08A277752DEE3DDCE21C5D9E3598A5E99D8D504A4E17597C495562
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Export Graph (File Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="0x.kg."></A><I>File menu - Export Graph </I></P>..<P>Polar and linear graphs can be saved individually as Bitmap (BMP) files. This provides an easy method for including plots in reports prepared using other Windows programs.</P>..<P>Select Export Graph from the File Menu and then select Polar or Linear from the sub menu. The Save As dialog box is then displayed, allowing a path and filename to be specified.</P>..<P>The graph can now be viewed and edited using most Bitmap editors (e.g. Paintbrush) and imported by most Windows wordprocessors.</P>..<P>Graphs can also be pasted directly into other Windows programs using the Copy Graph option from the Edit Menu.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-V5MP8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (330)
Category:	dropped
Size (bytes):	916
Entropy (8bit):	5.268497665890047
Encrypted:	false
SSDEEP:	24:WlSZ6t3u/guja8PW6TNh+BF/RUeUnnMuV5oW:qSZ6VCtO6+j/RdUFj
MD5:	7ED51437F8EC2173768AD7DFF0E580E2
SHA1:	9185C0F227232BDE8D8C25D283E8822E877D93F6
SHA-256:	DCA96AB3FEEA5D59CA3D2D240EDED15033B6C14602F2DD25B5902708DB75637E
SHA-512:	507187BFD03E642E03EF5FC3E2292ABE261914F29FCB7821CEA9EF204336B90E19C808D68113BF514305CDC984D31077342D542B02681C0E05FDCB04B514E4C9
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Zone Theory</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="zone"></A><I>Zone Theory</I></P>..<P>Both the Young-Helmholtz theory and Hering's theory could be supported experimentally and while both theories explained certain color phenomena, neither provided an adequate explanation for all subjective color experiences. The two theories were reconciled by the <B>zone theory</B>, originally proposed by Donders in 1881.</P>..<P>According to this theory, color information is processed in a series of zones in the visual pathway; trichromacy occurring at one level and opponency at another (see below). This concept forms the basis of modern color vision theories.</P>..<P><IMG SRC="../images/bm0.gif" ALT="" BORDER=0></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\is-VQ6DC.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	310
Entropy (8bit):	5.395522024555973
Encrypted:	false
SSDEEP:	6:B8FQk+Hryft1q2Q8EevWR0NNEXW0Yf1J3RoNqx0iNMeqlnKJyTZy0yEMoVCRWvQT:BMQkzLq2Q8Eepf6N3sMeqkJyT40uooqE
MD5:	0C803F3DE7AA2B9DEE685041365725FF
SHA1:	1E43BECC5907218634B4AE177F2A4E9EE02EB561
SHA-256:	A06BD536E900A3A789EA761F028DC1E5B80BA1BB4BAA6A767A8A9B6D1BC1588A
SHA-512:	EE6F5D75CD971F3FF50521FB7380569FAF68323CACE88DCA76BC959C0E87C9ABA26747C3DDCEAE6C5E625176CBA6F1B025DC42006365C4318446EACBC88B2EE4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>(Untitled)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">..<P><A NAME="0_olb_"></A><I>Exit</I></P>..<P>Terminates the program.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\nav.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	473
Entropy (8bit):	5.384635953507603
Encrypted:	false
SSDEEP:	12:BMQbwMC9zp6QclfVISLrvZMNEqhZMN+HybP0qqUC:WLZpsq4VXqhZJHHkC
MD5:	7728EEBF5A93BDA4B9CC421920A5C8F9
SHA1:	67EB2D44A2A8FC0309340BC328EE2948B61F1349
SHA-256:	5E3020F8EFC4D9618E22329F866622CC3D69CBF0194CDF3FD817A571F7F6A01F
SHA-512:	1317128FC73B11B0CD3627B4D38810CBD3D83B2759E2258D2E30E5D372DD311351AAC71DE1510DEFF27728A865B09D40CD280EC95EC250616F5B8D9D713D07EA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Farnsworth-Munsell 100 Hue Test Scoring Software: Help</title>.</head>..<body>.<HTML>.<HEAD>..<BODY>..<form>..<input type="button" value="Back" onclick="history.back()">.<input type="button" value="Forward" onclick="history.forward()">.FM 100 Hue Help.</form>.</body>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\._bm10.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	64757
Entropy (8bit):	5.513544306180357
Encrypted:	false
SSDEEP:	1536:fX7YULL1SyEpMnRPxLmEpMLRPxL3EpMoRPxL8EpMFRPxLVEpMGRPxLNPj9EX4img:fU9yEpMnRPxLmEpMLRPxL3EpMoRPxL8F
MD5:	B341192EDFF6166348EF7BE261403360
SHA1:	8C7EAD2DEE3CEFDC56C4F9028FC5CE295C52D848
SHA-256:	885BB88E591F96D1A449E6E9DE823159AC0D5E854F94F84CD1851797CAE140CE
SHA-512:	AFE6F8E19F0B74A624B432BCD1E7075DC18B5863DF70037C925A9F18067CA3968496CC2FE2EF96B739BE74F3A0153821D9D29720CCF2C2EF20FEDD816B736EA1
Malicious:	false
Reputation:	low
Preview:	.................................2... .......R....GIFf8BIM.............................................................................................................................................................................................................................................................................................Adobe Photoshop CS2.. . ......J.H...........H...H.......J.H..........8BIM.......J.HGr.ph.bj.....L.......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\._bm14.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	61506
Entropy (8bit):	5.32365048427296
Encrypted:	false
SSDEEP:	1536:n4PpnnZ1yEpMnRPoLmEpMLRPoL3EpMoRPoL8EpMFRPoLVEpMGRPoLNPj9EX4imWA:n+nn3yEpMnRPoLmEpMLRPoL3EpMoRPoH
MD5:	FC68846BCF5F61F9A688DDA39C2C3EE3
SHA1:	68FBD9AC5BF590D5E780099CCD2E2B1D6EFDA834
SHA-256:	4720EF305E4658D99A272B100998EDC5DAA509C88077F7576A93C4FB7BDF2D15
SHA-512:	C454D10CB4F24856950B1A160067CEB300B6EBDB5733256EDEDA57429C6DDCEB8C62C9838B107344F72858CB235F111F04BF84DDC97351B697AD9A0482F3ED46
Malicious:	false
Reputation:	low
Preview:	.................................2... .......R....GIFf8BIM.............................................................................................................................................................................................................................................................................................Adobe Photoshop CS2...........I.M...........H...H.......I.M..........8BIM.......I.MGr.ph.bj.....L.......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\._bm22.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	63292
Entropy (8bit):	5.4246885763998005
Encrypted:	false
SSDEEP:	1536:uuRvEd3WTvEd3WTvEd3WJbyEpMnRPeLmEpMLRPeL3EpMoRPeL8EpMFRPeLVEpMG5:u0EJmEJmEJWyEpMnRPeLmEpMLRPeL3EL
MD5:	FC34F18540CB81828AA7ECDD392DB335
SHA1:	65317F0FB58A8AD622159EFADF10D1AF74584CA1
SHA-256:	39173096804451E59985449F5C4B3B4280D4E7494A269D56785D8C1F209BBED5
SHA-512:	DCD76CEB4EBCEFEA7763A506BD9D057C03DD21BC09A038DB50CF2F3FB2A75C2E51E08586E1F3448BFB71B50D7CFD01BA14A26D6909A21BF5ADBE04164F482120
Malicious:	false
Reputation:	low
Preview:	.................................2... .......R....GIFf8BIM.............................................................................................................................................................................................................................................................................................Adobe Photoshop CS2...........I.I...........H...H.......I.I..........8BIM.......I.IGr.ph.bj.....L.......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\._bm26.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	65456
Entropy (8bit):	5.5498646869323
Encrypted:	false
SSDEEP:	1536:pcG+bUdTYdndndlzyEpMnRP/LmEpMLRP/L3EpMoRP/L8EpMFRP/LVEpMGRP/LNPL:pcGEUudndnddyEpMnRP/LmEpMLRP/L3q
MD5:	9ABDEF69982EA709D578AAA4AC9E4753
SHA1:	9C28CC76FA0752EBEC9CFDA6456217255FAF25AC
SHA-256:	1533A29E9EB73AE5EA9053A8758FABAC465516D4EC2C88552367FB2565E119AB
SHA-512:	E3890E93E46FB7E2B4F794FF4AEFC9E138F165010C2D518B3F3BDB060AC970960866C9C177FECF69980EDB61A90C471D26A275477769394DA9692BA6315D8723
Malicious:	false
Reputation:	low
Preview:	.................................2... .......R...^GIFf8BIM.............................................................................................................................................................................................................................................................................................Adobe Photoshop CS2..!.!......J.H...........H...H.......J.H..........8BIM.......J.HGr.ph.bj.....L.......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\._bm8.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.6897983724188628
Encrypted:	false
SSDEEP:	3:PFltl5Xj//:PftrjX
MD5:	6D6431F71FAAE765A3C35655A81FEFB7
SHA1:	85703A4247EA652D07CB490A67DA856BC185F3EF
SHA-256:	66FD0BF9F5DCF21983E9097F37DAFA108112F55593F98BF283B63A8FEB78C3CA
SHA-512:	5A88EEFFE85745155C39821754ACFD012E31E5566817B7A2B6EC9C79586AD7F3CF8013D7345D7FE38CBFDEC81817217E2818F70584F185EAB116ADB76C181288
Malicious:	false
Reputation:	low
Preview:	.................................&... GIFfMeSa........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\._bm9.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	53685
Entropy (8bit):	4.755130593031549
Encrypted:	false
SSDEEP:	1536:8gHHrF6yEpMnRPkLmEpMLRPkL3EpMoRPkL8EpMFRPkLVEpMGRPkLNPj9EX4imqMW:8gHH56yEpMnRPkLmEpMLRPkL3EpMoRP3
MD5:	D74C87A532632AD9F3869788BC64CD8A
SHA1:	B18B412468A9CA43CF0E35A79BA06DC3C91F69E0
SHA-256:	2CD1A4FF35CE4C6A10C8B547976291F95A47BFBEDFE628F1D91767F767833B7D
SHA-512:	3B2759BC0FB92CA75CBAAB1035E0C17370DB91C36C118184CEE75F35BFFB73DF788B2EC60BDF23901CF9C06F03A5C9D8DCC3249D38FF971E07C41B2465A58D29
Malicious:	false
Reputation:	low
Preview:	.................................2... .......R...cGIFf8BIM...........................................................................................................................................................................................................................................................................................Adobe Photoshop CS2...........).c...........H...H.......).c..........8BIM.......).cGr.ph.bj.....L.......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\._chromaticity.jpg (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.6897983724188628
Encrypted:	false
SSDEEP:	3:PFltl51xX:Pft5x
MD5:	157E107640B55D60F7B0AE8B9854629C
SHA1:	87D20B20FBC46B571E154619C1D83582E7AAF62D
SHA-256:	BCAD9313E0D69DA085CD225D876C598B8FBEC7477E6280279971BE111B167AAA
SHA-512:	DB23CAAC9D28013C1EB4E673B8402F968A16F8474536B516885AC7C0B01895E6CECB5B9FF96E6171D9D73D1A21C7AC2A368D042BCD469E14EED070F59D5CCFAA
Malicious:	false
Reputation:	low
Preview:	.................................&... JPEG8BIM........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\._deutanCIE.jpg (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.6897983724188628
Encrypted:	false
SSDEEP:	3:PFltl51xX:Pft5x
MD5:	157E107640B55D60F7B0AE8B9854629C
SHA1:	87D20B20FBC46B571E154619C1D83582E7AAF62D
SHA-256:	BCAD9313E0D69DA085CD225D876C598B8FBEC7477E6280279971BE111B167AAA
SHA-512:	DB23CAAC9D28013C1EB4E673B8402F968A16F8474536B516885AC7C0B01895E6CECB5B9FF96E6171D9D73D1A21C7AC2A368D042BCD469E14EED070F59D5CCFAA
Malicious:	false
Reputation:	low
Preview:	.................................&... JPEG8BIM........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\._protanCIE.jpg (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.6897983724188628
Encrypted:	false
SSDEEP:	3:PFltl51xX:Pft5x
MD5:	157E107640B55D60F7B0AE8B9854629C
SHA1:	87D20B20FBC46B571E154619C1D83582E7AAF62D
SHA-256:	BCAD9313E0D69DA085CD225D876C598B8FBEC7477E6280279971BE111B167AAA
SHA-512:	DB23CAAC9D28013C1EB4E673B8402F968A16F8474536B516885AC7C0B01895E6CECB5B9FF96E6171D9D73D1A21C7AC2A368D042BCD469E14EED070F59D5CCFAA
Malicious:	false
Reputation:	low
Preview:	.................................&... JPEG8BIM........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\._tritanCIE.jpg (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.6897983724188628
Encrypted:	false
SSDEEP:	3:PFltl51xX:Pft5x
MD5:	157E107640B55D60F7B0AE8B9854629C
SHA1:	87D20B20FBC46B571E154619C1D83582E7AAF62D
SHA-256:	BCAD9313E0D69DA085CD225D876C598B8FBEC7477E6280279971BE111B167AAA
SHA-512:	DB23CAAC9D28013C1EB4E673B8402F968A16F8474536B516885AC7C0B01895E6CECB5B9FF96E6171D9D73D1A21C7AC2A368D042BCD469E14EED070F59D5CCFAA
Malicious:	false
Reputation:	low
Preview:	.................................&... JPEG8BIM........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\bm0.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 245 x 230
Category:	dropped
Size (bytes):	3906
Entropy (8bit):	7.536706229806521
Encrypted:	false
SSDEEP:	96:o7f1QpMi/SLPbUAorWnMAwyltQV834frIAsSThdL:ErLb5M5yltQDrIYPL
MD5:	12828D3D4CDD82D814A71932E906F4CA
SHA1:	A6C4981F85F85A40490977B0A71AFDD4B87C6CA0
SHA-256:	81D535B5DF4BF246380FA2BBC35C7CA654C4358D0EA50ABF9407BEB7F34A2510
SHA-512:	3F7100A8F80E0277BDE09C54B56ABB26BF329637486E7D0F76C4164F341AD7E540236064AC029D1F6F097C23DF0637A7A13091E2D89073D871BFD9863C4453A2
Malicious:	false
Reputation:	low
Preview:	GIF87a.....................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...............H......\....#J.H....3j.... C....cI.'#....K....9p.@..m...0.N.>_..:.'.).f.8....M.".$..R.K......)%..t......r}6).{D..h....Ji>....\|.n.;......B.KX...A...K.rC...bf+..b.P.6..4..yK.D@j.O.a.{3..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\bm1.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 245 x 230
Category:	dropped
Size (bytes):	3906
Entropy (8bit):	7.536706229806521
Encrypted:	false
SSDEEP:	96:o7f1QpMi/SLPbUAorWnMAwyltQV834frIAsSThdL:ErLb5M5yltQDrIYPL
MD5:	12828D3D4CDD82D814A71932E906F4CA
SHA1:	A6C4981F85F85A40490977B0A71AFDD4B87C6CA0
SHA-256:	81D535B5DF4BF246380FA2BBC35C7CA654C4358D0EA50ABF9407BEB7F34A2510
SHA-512:	3F7100A8F80E0277BDE09C54B56ABB26BF329637486E7D0F76C4164F341AD7E540236064AC029D1F6F097C23DF0637A7A13091E2D89073D871BFD9863C4453A2
Malicious:	false
Reputation:	low
Preview:	GIF87a.....................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...............H......\....#J.H....3j.... C....cI.'#....K....9p.@..m...0.N.>_..:.'.).f.8....M.".$..R.K......)%..t......r}6).{D..h....Ji>....\|.n.;......B.KX...A...K.rC...bf+..b.P.6..4..yK.D@j.O.a.{3..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\bm10.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 72 x 74
Category:	dropped
Size (bytes):	3795
Entropy (8bit):	7.440990419987494
Encrypted:	false
SSDEEP:	48:hK0u2XFShm1wVISwdUY3iz0e0pQQJzIWC85AOakncW/8MMWre:l3XFShmOciAe0HdIWC85Ha2/5K
MD5:	5DC7268132B0562F1CCE98CEAB204C9E
SHA1:	DB166FF68F94BFE8BE970047F8D60CA9A7376DA4
SHA-256:	1DA6EC344F2FF1C196780BDFAE055247FB72C67B6C49B11974CA93405B84E920
SHA-512:	58231F4303EE9B955D2F2AB7484FF6A1384E3FC4071251180CAA98527A544C6E7340E74261036BF1CB5A2D1BE5F865CD5582022232EAD4505842C1F1F6335B75
Malicious:	false
Reputation:	low
Preview:	GIF89aH.J........................................................................................................................................................................................................................................................................................................................................................................................~~~}}}xxxvvvuuusssrrrooommmlllkkkiiifffdddaaa```^^^ZZZYYYXXXWWWUUUTTTSSSPPPNNNMMMLLLJJJHHHGGGFFFEEECCCBBB@@@???<<<;;;:::999888777666555444333222000///...---,,,+++**&&&###""" ...........................................................................................................................................................................................................................!.......,....H.J.....o..H......\....#J.H...S...y...<.&..Hr..@SXH......&.x..T....`.r......m.@...-.......Th0.T.......f.j.......r.......4x.`..X..]..A.....".0.......6.... .~{...?\|........"X.A..BA...2...1.....b..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\bm14.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 77 x 73
Category:	dropped
Size (bytes):	3079
Entropy (8bit):	7.406272062451004
Encrypted:	false
SSDEEP:	48:PR5ETp8uDYPhb1xoNVIuar96f0CXbqtiFTGmk7JxrmRClU:Pw+yYR1xoNVIB921rqIGR9xKClU
MD5:	CD81AC9B6DF722AE7ED668A66F10AB83
SHA1:	E58D72A3998EC6D21236818527524B07D9596AF9
SHA-256:	A85EC0D8A1ABB0FDA111BB2E5FB22865B5890A886ED49CDD4CF6BC4D80BCB10F
SHA-512:	02A7D5C319666993DD78F3187A13426B5CFDFED7577EDC41568670AAD885C41960C322664C486A455A5AF5D9A67BF29599283EDF1C768E37A79063173CA07500
Malicious:	false
Reputation:	low
Preview:	GIF89aM.I.......................................................................................................................................................................................................................................................................................................................................................~~~}}}{{{zzzyyyxxxwwwuuutttsssrrrooolllkkkjjjiiifffeeedddbbb\\\[[[ZZZYYYXXXWWWVVVTTTRRRNNNLLLKKKJJJHHHGGGFFFEEEBBBAAA???>>>===;;;:::888777666555222111///...---,,,+++)))((('''!!! .........................................................................................................................................................................................................................................................!.......,....M.I.....[..H......*\....#J.H..E.....c.H."K...S....=.yR....0c.\|...T(s.....L...4p..... ...F:+.b....C.6...Q......(jD7...`...V.].2....K...2\..@..o..}.@k../.d.p._..K.....<...........C.\..S/.[q...p.t

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\bm2.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 384 x 288
Category:	dropped
Size (bytes):	4304
Entropy (8bit):	7.5924730131756535
Encrypted:	false
SSDEEP:	48:+m5CNjtJwsNd0akbhBUiFr6G15FZmwZSMIorealaKjhLb0yAyG61iz0ls40bsqjm:VYNjDFQQet5zuKjNxAM1pC4iYx
MD5:	BC939228247546ED31EB767DA7AC968E
SHA1:	28BA9BDE030F63ED7157EC22B0F4D2D5015B6F78
SHA-256:	48124EFD0503E82B1F3A6CF4B5304506E7796EF28ED750D7DE35CEFFF5769DE9
SHA-512:	801F3468E43285BD5B66904DC82496AFE7DA6FD7C082591C0B2E4D283B8D0860787B6F6FD364796C0C6DE0A91FC5BC9D4EA07D2B474A584DBDEF01EE6D0869CE
Malicious:	false
Reputation:	low
Preview:	GIF87a.. ..................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...... ........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x.....#......+.p_...E...\.#..,.rZ.3....W.Ck.-.tU.SCE....R.c..@. .

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\bm22.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 73 x 73
Category:	dropped
Size (bytes):	3371
Entropy (8bit):	7.4497952238318845
Encrypted:	false
SSDEEP:	48:jZAXJoZcpLLem5/iwDwfcaH+ilFRYFC2fY4QgZV6xLspy9Xud:QJLT9iwDwfrFRYhfAgZsxLL5ud
MD5:	D075014A91FB5B1F24C9A2DE9BCF4509
SHA1:	80E44947F656F5DAE3DB1B480C53847432DB8EB2
SHA-256:	E6A06206F1456B78981C24F595612E8DCE1B4FD28ED6E9D0C81D81E1E869BEA2
SHA-512:	CC83C97CB05A3C8398D481EF5E22B2D811F8E3AFCCF1539FFAA26862DF2AFF9E12DCF0C758F7C0F652AFB9DB3375CB7CA69692AEFED1B592AB501062308B7B51
Malicious:	false
Reputation:	low
Preview:	GIF89aI.I...............................................................................................................................................................................................................................................................................................................................................................................{{{zzzyyywwwrrrqqqppplllkkkhhhfffdddbbbaaa```^^^[[[YYYXXXWWWUUUTTTRRRQQQPPPOOONNNMMMLLLHHHEEEDDDCCCBBBAAA@@@???>>><<<:::999777666555444333222///,,,+++)))(((&&&%%%$$$###!!!..........................................................................................................................................................................................................................................!.......,....I.I.....g..H......\....#J.H..DM..R$..$W..QD.I...4!....0]N....'e....e...........^j."...XxD.......E.f.z....<.9}.......f].mP..\..4V.....\u....q.\|.U...U.h......H4,.U.....U.T.P.\|.0h....t..R.....E

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\bm26.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 72 x 74
Category:	dropped
Size (bytes):	4110
Entropy (8bit):	7.4584861984724675
Encrypted:	false
SSDEEP:	96:RVc3E2/Vbk1o4w4XR2zefgTnPniAQg3g9gD:Ry3E2/R4x2zefgTPnHhg9gD
MD5:	1F69A289B8526EA5F9BA921F2F6300CA
SHA1:	8660295C6D7E1E4AF0C3241D1C8E9B823CEB8F10
SHA-256:	5B5B5EDF0CB50ECAE101FB55AC758CD279347FE2B93025A22D5072A92FBC8198
SHA-512:	49A927302FD8B97D955729C25658EDA52764C3EB8D7471CA4FCCE0F11BD799EB11108B95BDB992BBABC4A52353FB10CC6EA828460955B1E4648B1BE3B5EB80D4
Malicious:	false
Reputation:	low
Preview:	GIF89aH.J.......................................................................................................................................................................................................................................................................................................................................................................................................~~~}}}\|\|\|{{{zzzyyywwwtttsssrrrqqqpppooonnnmmmkkkjjjhhhfffeeecccbbbaaa```___\\\[[[YYYTTTSSSRRRQQQOOONNNLLLKKKJJJIIIHHHGGGFFFEEECCCBBBAAA???>>>===:::999888777666555444333222000,,,+++**)))&&&$$$###!!! ....................................................................................................................................................................................!.......,....H.J........H......\....#J.H.b._.R..u.U/. ...Tg..... 8.....@.@....@^..\...'.....%.'..qT........8x....S.4P..'. ..>l.......6X.-..V.48.SE$....A...U...j..p..m.LU..(..3..m\..2g......p.$8....3=+.}.a....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\bm3.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 384 x 288
Category:	dropped
Size (bytes):	4492
Entropy (8bit):	7.58971495123084
Encrypted:	false
SSDEEP:	48:kmeYAs5qFTR++GW81Z8mmEY63DBR7USE5OV0lh0crC2nN60oMhcFPuXBtKL6/aSE:7YtvW1Z8mVjQSE4K0c2MJhceBKVz
MD5:	971521BE861C321A42C8B61A28A5648D
SHA1:	D9FF84F443460399C4CEC3B1D2F35ED4A287700D
SHA-256:	51BA0178C59F5B4F78C09053953F7169372D9627DEBB9BE703F947F28C9094D3
SHA-512:	BAF61E70CB778E6909C840CDA836C2A973D5ADE314B44C7012C4DC7271CF25D838ECDBBD38C861E853D276A126A6AEF6B165820929A9A697ECB810302C8CF086
Malicious:	false
Reputation:	low
Preview:	GIF87a.. ..................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...... ........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x..........L.....+^....#K.L....3k.......C....4...G.v.._..c.\|-.t.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\bm4.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 384 x 288
Category:	dropped
Size (bytes):	4818
Entropy (8bit):	7.6367849199074005
Encrypted:	false
SSDEEP:	48:kmerHGURL0JYAr/6LlC9Lt/vJpbfccVJWut9N5rFc2tM1JlPhnu0LXF0zHZbgI87:7ERMrChCttHJ5fccVlvFcKc9W8BZxd
MD5:	EEF8AFF62E42E96A4084643C8BDC2EB1
SHA1:	5D3F62DE51637E9E066ADCBCB494A0A600ECFEE7
SHA-256:	39B5479331FE362BCDF9B2E3DA7BC30ACB022AFB0051D8873DABCF572F24D151
SHA-512:	F0301C4A69AE00B0CE44AE368C2E6DE3A86D953B34FAC70909F980BA61A7445DF99703859FF36D8DB022D806C20BF7181A5D5601CEC5CB7732C9CA817447E730
Malicious:	false
Reputation:	low
Preview:	GIF87a.. ..................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...... ........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x..........L.....+^....#K.L....3k.......C....4...G.v.._..c.\|-.t.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\bm5.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 331 x 282
Category:	dropped
Size (bytes):	6459
Entropy (8bit):	7.795298472658523
Encrypted:	false
SSDEEP:	192:HuK5kKySIhrWvs1Z6llVd8kAtx+OvalQJWIdgIncx:HuK/IesabA6OvpsIdJcx
MD5:	7EB67FBD884EE59B9E9167DE26E66898
SHA1:	9A1B3C67AF91AA0C2B8043A1CC50B2A581992000
SHA-256:	0F843A42BE584D8276D96AAFD0370F6ED600F63695BD23C6568A30A46274E4FF
SHA-512:	17102636A724D3611C1963A46B2B9D9A3934878D0CE20BAA6E7C5A7A111C3404037E4A1BA4828CCBA76BCBA588585312203430AF0AE82FDE2862A5CD8199911E
Malicious:	false
Reputation:	low
Preview:	GIF87aK....................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,....K..........H......*\....#J.H....3j.... C..I...(S.\...0c.I....r....O.9...I...B..L...P.J..t....2....X....0..h..}:.......K..X.q..m....3......Z...+^i.`.8./.L9dc...K.......n&.....S.V(..c.\|W.../..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\bm6.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 279 x 247
Category:	dropped
Size (bytes):	8132
Entropy (8bit):	7.852135436848708
Encrypted:	false
SSDEEP:	192:hdkw7q38j7G4j5JzSJ6lKGbnLhTSOowEeS1S:hDeOlcGnZSOowEG
MD5:	74E2973D1826EB678AC1033A552F3FE9
SHA1:	851728CC3945575B856637DD2822C392E1D87BF0
SHA-256:	66EADED01CF97BF91131AFD54FF7DA4B2578CAF0FC17FE55A8C47737F36C8C4F
SHA-512:	B238A364DEB991643126F7D98031D139E53A3BA728C51D3D5F2D5B305E19C8D3A0F85A40E15CF6B898283F4EC673D184722BD093D8CA93A126CA8A3A5B071A79
Malicious:	false
Reputation:	low
Preview:	GIF87a...............@........................................@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...............H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.........@P.@.G.e..!...B.8...R.....(.R.&.+Pk.e.%.-.f.V.Z.jZ....]hw..k..Jxp.k.5.4,\....E[Po..-_Vj7h......\.oL.]..^]..]..~uKyl.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\bm8.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 73 x 73
Category:	dropped
Size (bytes):	4531
Entropy (8bit):	7.438989839400492
Encrypted:	false
SSDEEP:	96:hxLbRXf1w+qbHqp8skPDv5X5uezT0VS7KkKjaVZ9E3Ui9cLycoWvhamUYOqKpWR9:hbWHbHqpNk9X5uezT0VSrnZ9+KLycocL
MD5:	4FE24E60EB6273C1DD57B5FE2B9A575C
SHA1:	19A68E7A948E3E56FB1FAFCE89D72C6F200D9573
SHA-256:	624758037DF43276503AEFE924292E8C3F6342ACBB22405811CFBEF98E40F8AC
SHA-512:	817F9889313FF626D35E27D1BAB49C0BCF923195E0BA33942349FC13D4689D872C8FA287CEDD2A06E3E8A136ECC269BC3CBC9C5C3A8A414C6E5FFB3DF2A240A1
Malicious:	false
Reputation:	low
Preview:	GIF89aI.I...............................................................................................................................................................................................................................................................................................................................................................{{{...www~~~.....................!.......,....I.I.................}.... ....................&............{...04:D^aLLU.\^6M......).......4QUIjRd=A3..."/6ElKbT:.........&3[fcR:..~......A../8`...".,......F.. ....`#..\|...p.O..T..9..A.W.-9.3...1`b...@....~.8 ....H.h ....~j.S.....b".p...,VP..`....D.!......&,HP......phP@IT2q.p.....?..l.......4...#J...[..1eG..(..`....%. .:AM...V.v.g.."rL.. ....Sp.p..x..{*0.....4i..c.E......1f...Z.Dx!&M.?{$`.1EG.....9."..........Q.~t....,`A<...A.h.aR..(F..<.g.. aC......V....Y=...8....} ...P.....TPB..`0@+.....P.`..{....V.1.....b..?.1.."....4.s@.H@...N....>.@..$]...6..@...A..dlP.a.<...mP...{.!..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\bm9.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 99 x 41
Category:	dropped
Size (bytes):	1858
Entropy (8bit):	6.911111727204752
Encrypted:	false
SSDEEP:	24:sKig0f0qmUBwxNNwYWcxW42FAnE+S8r+pgVLkbmzUnE6GhwLYD:sKiJf0qlcNkRF+Nt6pqQmYEDwLYD
MD5:	AF94ABCE48144E917332EBB8D366833A
SHA1:	FC4BF88F1D0352EE0B73AB2CEA9C40F8E96CB468
SHA-256:	67F19CD592A02CAE34B9AB8461F5CA3168A0A4C096CAFF029C64D5EA8213D80A
SHA-512:	568A98BFA3CBC03B1D174E6BC2ECB69A612331D8003036C476C954CF401667DC862D2C15B45653F451E1AD78E6C6A97B228456E248BD2C05A938727427F8C685
Malicious:	false
Reputation:	low
Preview:	GIF89ac.)........................................................................................................................................................................................................................................................................................{{{yyyxxxsssrrrqqqpppooonnnllliiigggfffeeedddcccaaa```]]]\\\[[[ZZZYYYXXXVVVUUUTTTSSSRRRQQQPPPLLLKKKGGGFFFEEEDDDCCCAAA???===<<<888555333.....................................................................................................................................................................................................................................................................................................................................................................!.......,....c.)........H......*\....#J.H....3j....;x..I...$..Y...0c..sg.D3Ln.....@i..J...H...R.".'..H.J...X.j.....'r.~I...h.6 ...p.....C/s..=..a...._ubHa.......Ha.$.#.m ..<3.".....#.d.2%F......0B...z

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\chromaticity.jpg (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 395x415, components 3
Category:	dropped
Size (bytes):	21246
Entropy (8bit):	7.882526000297608
Encrypted:	false
SSDEEP:	384:JjPPPPPPPP/moY3TkBi/R2CyUya3sNEFR1NBmQwayLi6iJZh0S0teu3uCXRKfGOs:ZxYCOR5DyPaz1NYQKLi6iLeS0teu+CQu
MD5:	DD2C92A88D54B1476D5A31B6984451A4
SHA1:	C563CA1302F29BF7EB22B11BE0B885697AEB621A
SHA-256:	C89DDB70716690F0E1584C4126889EC0DACDEDBD887B3A406999EA674DFA22C6
SHA-512:	3F2C957B32E3040EF9C88EC7C0F757291616CF31C4339CB524D79F886620D2A862AE895FC6F4501F82496F7818A8B3907772352C44F5D04EAA6D2F56F051432A
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d...............................................................................................................................................................................................................................................!1A"..Qa..t..6.2....5Uu.Vq.B#S..R.b3$7..C.4%...r.&'......................!..1.AQaq."2......Rb..B...r#3..............?...........................................................x.Wm...Q.R.%.9%m.]PDL2<.)...5.....@A....M.g.v..4V.....=..q.>...G.......<.j\|.....m.K.3m.a.C4A.4.#.............Y..........:...K.dn.-.a4....Ogw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\deutanCIE.jpg (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 447x449, components 3
Category:	dropped
Size (bytes):	29003
Entropy (8bit):	7.898807437754511
Encrypted:	false
SSDEEP:	384:LjyHHHH6fNS6z6reWkxZeJPWbb0B/bGTpSJhZeZcJ5Vy8Nj+O/TbyMJ/joejB8vv:9FSfeWkxiWbb0F+ZcJv1aqKQq0O
MD5:	C856FDE76FA298D3821FD2879E322D57
SHA1:	C5EB1FB0FD6533B2820D26CB3A14E918B645469F
SHA-256:	A996A02A492DFA186AF905A922789726969975CF65128C1DF3BC2375589771E1
SHA-512:	C2CE9EE2D2DF5E657838D97116FCB58861D1B036DA9533CE2C282CBFE77F260BB6B1AD9D2042049C9B746272A92E98ACD9D21596C9BDE2E56525EECCB16E2212
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.............................................................................................................................................................................................................................................!.1.A..Qa."2s..6q....S..TU.BRb#..5.V..r3...Cc$....4D.dt.%.&v......................!1..AQ2aq.."..........RrBb.#.............?..R.....P.T...].q7..#....l....>.. .@yM.r~$._.`...............~...x.?.v/.0\|o...N......@.I.\|.....;..>7...'b..... ~$._.`...............~...x.?.v/.0\|o...N......@.I.\|.....;..>7...'b..... ~$._.`...............~...x.?.v/.0\|o...N......@.I.\|.....;..>7...'b..... ~$._.`...............~...x.?.v/.0\|o...N......@.I.\|.....;..>7...'b..... ~$._.`...............~...x.?.v/.0\|o...N......@.I.\|.....;..>7...'b..... ~$._.`...............~...x.?.v/.0\|o...N......@...R.=un.b...h.4.....Z. .v.i,..+.s,q.dq....FH.d.....s.Aw.^S]A.A.xG...........+.gk..e...d...lL4.iB.......8.{,....d..[

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\is-0FQKI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.6897983724188628
Encrypted:	false
SSDEEP:	3:PFltl51xX:Pft5x
MD5:	157E107640B55D60F7B0AE8B9854629C
SHA1:	87D20B20FBC46B571E154619C1D83582E7AAF62D
SHA-256:	BCAD9313E0D69DA085CD225D876C598B8FBEC7477E6280279971BE111B167AAA
SHA-512:	DB23CAAC9D28013C1EB4E673B8402F968A16F8474536B516885AC7C0B01895E6CECB5B9FF96E6171D9D73D1A21C7AC2A368D042BCD469E14EED070F59D5CCFAA
Malicious:	false
Reputation:	low
Preview:	.................................&... JPEG8BIM........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\is-12UI4.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	64757
Entropy (8bit):	5.513544306180357
Encrypted:	false
SSDEEP:	1536:fX7YULL1SyEpMnRPxLmEpMLRPxL3EpMoRPxL8EpMFRPxLVEpMGRPxLNPj9EX4img:fU9yEpMnRPxLmEpMLRPxL3EpMoRPxL8F
MD5:	B341192EDFF6166348EF7BE261403360
SHA1:	8C7EAD2DEE3CEFDC56C4F9028FC5CE295C52D848
SHA-256:	885BB88E591F96D1A449E6E9DE823159AC0D5E854F94F84CD1851797CAE140CE
SHA-512:	AFE6F8E19F0B74A624B432BCD1E7075DC18B5863DF70037C925A9F18067CA3968496CC2FE2EF96B739BE74F3A0153821D9D29720CCF2C2EF20FEDD816B736EA1
Malicious:	false
Reputation:	low
Preview:	.................................2... .......R....GIFf8BIM.............................................................................................................................................................................................................................................................................................Adobe Photoshop CS2.. . ......J.H...........H...H.......J.H..........8BIM.......J.HGr.ph.bj.....L.......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\is-17FI2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 72 x 74
Category:	dropped
Size (bytes):	3795
Entropy (8bit):	7.440990419987494
Encrypted:	false
SSDEEP:	48:hK0u2XFShm1wVISwdUY3iz0e0pQQJzIWC85AOakncW/8MMWre:l3XFShmOciAe0HdIWC85Ha2/5K
MD5:	5DC7268132B0562F1CCE98CEAB204C9E
SHA1:	DB166FF68F94BFE8BE970047F8D60CA9A7376DA4
SHA-256:	1DA6EC344F2FF1C196780BDFAE055247FB72C67B6C49B11974CA93405B84E920
SHA-512:	58231F4303EE9B955D2F2AB7484FF6A1384E3FC4071251180CAA98527A544C6E7340E74261036BF1CB5A2D1BE5F865CD5582022232EAD4505842C1F1F6335B75
Malicious:	false
Reputation:	low
Preview:	GIF89aH.J........................................................................................................................................................................................................................................................................................................................................................................................~~~}}}xxxvvvuuusssrrrooommmlllkkkiiifffdddaaa```^^^ZZZYYYXXXWWWUUUTTTSSSPPPNNNMMMLLLJJJHHHGGGFFFEEECCCBBB@@@???<<<;;;:::999888777666555444333222000///...---,,,+++**&&&###""" ...........................................................................................................................................................................................................................!.......,....H.J.....o..H......\....#J.H...S...y...<.&..Hr..@SXH......&.x..T....`.r......m.@...-.......Th0.T.......f.j.......r.......4x.`..X..]..A.....".0.......6.... .~{...?\|........"X.A..BA...2...1.....b..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\is-2LEQN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 331 x 282
Category:	dropped
Size (bytes):	6459
Entropy (8bit):	7.795298472658523
Encrypted:	false
SSDEEP:	192:HuK5kKySIhrWvs1Z6llVd8kAtx+OvalQJWIdgIncx:HuK/IesabA6OvpsIdJcx
MD5:	7EB67FBD884EE59B9E9167DE26E66898
SHA1:	9A1B3C67AF91AA0C2B8043A1CC50B2A581992000
SHA-256:	0F843A42BE584D8276D96AAFD0370F6ED600F63695BD23C6568A30A46274E4FF
SHA-512:	17102636A724D3611C1963A46B2B9D9A3934878D0CE20BAA6E7C5A7A111C3404037E4A1BA4828CCBA76BCBA588585312203430AF0AE82FDE2862A5CD8199911E
Malicious:	false
Reputation:	low
Preview:	GIF87aK....................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,....K..........H......*\....#J.H....3j.... C..I...(S.\...0c.I....r....O.9...I...B..L...P.J..t....2....X....0..h..}:.......K..X.q..m....3......Z...+^i.`.8./.L9dc...K.......n&.....S.V(..c.\|W.../..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\is-3GPF9.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 384 x 288
Category:	dropped
Size (bytes):	4492
Entropy (8bit):	7.58971495123084
Encrypted:	false
SSDEEP:	48:kmeYAs5qFTR++GW81Z8mmEY63DBR7USE5OV0lh0crC2nN60oMhcFPuXBtKL6/aSE:7YtvW1Z8mVjQSE4K0c2MJhceBKVz
MD5:	971521BE861C321A42C8B61A28A5648D
SHA1:	D9FF84F443460399C4CEC3B1D2F35ED4A287700D
SHA-256:	51BA0178C59F5B4F78C09053953F7169372D9627DEBB9BE703F947F28C9094D3
SHA-512:	BAF61E70CB778E6909C840CDA836C2A973D5ADE314B44C7012C4DC7271CF25D838ECDBBD38C861E853D276A126A6AEF6B165820929A9A697ECB810302C8CF086
Malicious:	false
Reputation:	low
Preview:	GIF87a.. ..................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...... ........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x..........L.....+^....#K.L....3k.......C....4...G.v.._..c.\|-.t.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\is-3QPHL.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 384 x 288
Category:	dropped
Size (bytes):	4818
Entropy (8bit):	7.6367849199074005
Encrypted:	false
SSDEEP:	48:kmerHGURL0JYAr/6LlC9Lt/vJpbfccVJWut9N5rFc2tM1JlPhnu0LXF0zHZbgI87:7ERMrChCttHJ5fccVlvFcKc9W8BZxd
MD5:	EEF8AFF62E42E96A4084643C8BDC2EB1
SHA1:	5D3F62DE51637E9E066ADCBCB494A0A600ECFEE7
SHA-256:	39B5479331FE362BCDF9B2E3DA7BC30ACB022AFB0051D8873DABCF572F24D151
SHA-512:	F0301C4A69AE00B0CE44AE368C2E6DE3A86D953B34FAC70909F980BA61A7445DF99703859FF36D8DB022D806C20BF7181A5D5601CEC5CB7732C9CA817447E730
Malicious:	false
Reputation:	low
Preview:	GIF87a.. ..................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...... ........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x..........L.....+^....#K.L....3k.......C....4...G.v.._..c.\|-.t.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\is-46CDF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 245 x 230
Category:	dropped
Size (bytes):	3906
Entropy (8bit):	7.536706229806521
Encrypted:	false
SSDEEP:	96:o7f1QpMi/SLPbUAorWnMAwyltQV834frIAsSThdL:ErLb5M5yltQDrIYPL
MD5:	12828D3D4CDD82D814A71932E906F4CA
SHA1:	A6C4981F85F85A40490977B0A71AFDD4B87C6CA0
SHA-256:	81D535B5DF4BF246380FA2BBC35C7CA654C4358D0EA50ABF9407BEB7F34A2510
SHA-512:	3F7100A8F80E0277BDE09C54B56ABB26BF329637486E7D0F76C4164F341AD7E540236064AC029D1F6F097C23DF0637A7A13091E2D89073D871BFD9863C4453A2
Malicious:	false
Reputation:	low
Preview:	GIF87a.....................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...............H......\....#J.H....3j.... C....cI.'#....K....9p.@..m...0.N.>_..:.'.).f.8....M.".$..R.K......)%..t......r}6).{D..h....Ji>....\|.n.;......B.KX...A...K.rC...bf+..b.P.6..4..yK.D@j.O.a.{3..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\is-4RNK2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.6897983724188628
Encrypted:	false
SSDEEP:	3:PFltl51xX:Pft5x
MD5:	157E107640B55D60F7B0AE8B9854629C
SHA1:	87D20B20FBC46B571E154619C1D83582E7AAF62D
SHA-256:	BCAD9313E0D69DA085CD225D876C598B8FBEC7477E6280279971BE111B167AAA
SHA-512:	DB23CAAC9D28013C1EB4E673B8402F968A16F8474536B516885AC7C0B01895E6CECB5B9FF96E6171D9D73D1A21C7AC2A368D042BCD469E14EED070F59D5CCFAA
Malicious:	false
Reputation:	low
Preview:	.................................&... JPEG8BIM........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\is-6J21Q.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.6897983724188628
Encrypted:	false
SSDEEP:	3:PFltl51xX:Pft5x
MD5:	157E107640B55D60F7B0AE8B9854629C
SHA1:	87D20B20FBC46B571E154619C1D83582E7AAF62D
SHA-256:	BCAD9313E0D69DA085CD225D876C598B8FBEC7477E6280279971BE111B167AAA
SHA-512:	DB23CAAC9D28013C1EB4E673B8402F968A16F8474536B516885AC7C0B01895E6CECB5B9FF96E6171D9D73D1A21C7AC2A368D042BCD469E14EED070F59D5CCFAA
Malicious:	false
Reputation:	low
Preview:	.................................&... JPEG8BIM........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\is-7965P.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 395x415, components 3
Category:	dropped
Size (bytes):	21246
Entropy (8bit):	7.882526000297608
Encrypted:	false
SSDEEP:	384:JjPPPPPPPP/moY3TkBi/R2CyUya3sNEFR1NBmQwayLi6iJZh0S0teu3uCXRKfGOs:ZxYCOR5DyPaz1NYQKLi6iLeS0teu+CQu
MD5:	DD2C92A88D54B1476D5A31B6984451A4
SHA1:	C563CA1302F29BF7EB22B11BE0B885697AEB621A
SHA-256:	C89DDB70716690F0E1584C4126889EC0DACDEDBD887B3A406999EA674DFA22C6
SHA-512:	3F2C957B32E3040EF9C88EC7C0F757291616CF31C4339CB524D79F886620D2A862AE895FC6F4501F82496F7818A8B3907772352C44F5D04EAA6D2F56F051432A
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d...............................................................................................................................................................................................................................................!1A"..Qa..t..6.2....5Uu.Vq.B#S..R.b3$7..C.4%...r.&'......................!..1.AQaq."2......Rb..B...r#3..............?...........................................................x.Wm...Q.R.%.9%m.]PDL2<.)...5.....@A....M.g.v..4V.....=..q.>...G.......<.j\|.....m.K.3m.a.C4A.4.#.............Y..........:...K.dn.-.a4....Ogw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\is-BOBCK.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 447x449, components 3
Category:	dropped
Size (bytes):	29003
Entropy (8bit):	7.898807437754511
Encrypted:	false
SSDEEP:	384:LjyHHHH6fNS6z6reWkxZeJPWbb0B/bGTpSJhZeZcJ5Vy8Nj+O/TbyMJ/joejB8vv:9FSfeWkxiWbb0F+ZcJv1aqKQq0O
MD5:	C856FDE76FA298D3821FD2879E322D57
SHA1:	C5EB1FB0FD6533B2820D26CB3A14E918B645469F
SHA-256:	A996A02A492DFA186AF905A922789726969975CF65128C1DF3BC2375589771E1
SHA-512:	C2CE9EE2D2DF5E657838D97116FCB58861D1B036DA9533CE2C282CBFE77F260BB6B1AD9D2042049C9B746272A92E98ACD9D21596C9BDE2E56525EECCB16E2212
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.............................................................................................................................................................................................................................................!.1.A..Qa."2s..6q....S..TU.BRb#..5.V..r3...Cc$....4D.dt.%.&v......................!1..AQ2aq.."..........RrBb.#.............?..R.....P.T...].q7..#....l....>.. .@yM.r~$._.`...............~...x.?.v/.0\|o...N......@.I.\|.....;..>7...'b..... ~$._.`...............~...x.?.v/.0\|o...N......@.I.\|.....;..>7...'b..... ~$._.`...............~...x.?.v/.0\|o...N......@.I.\|.....;..>7...'b..... ~$._.`...............~...x.?.v/.0\|o...N......@.I.\|.....;..>7...'b..... ~$._.`...............~...x.?.v/.0\|o...N......@.I.\|.....;..>7...'b..... ~$._.`...............~...x.?.v/.0\|o...N......@...R.=un.b...h.4.....Z. .v.i,..+.s,q.dq....FH.d.....s.Aw.^S]A.A.xG...........+.gk..e...d...lL4.iB.......8.{,....d..[

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\is-C39NK.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	61506
Entropy (8bit):	5.32365048427296
Encrypted:	false
SSDEEP:	1536:n4PpnnZ1yEpMnRPoLmEpMLRPoL3EpMoRPoL8EpMFRPoLVEpMGRPoLNPj9EX4imWA:n+nn3yEpMnRPoLmEpMLRPoL3EpMoRPoH
MD5:	FC68846BCF5F61F9A688DDA39C2C3EE3
SHA1:	68FBD9AC5BF590D5E780099CCD2E2B1D6EFDA834
SHA-256:	4720EF305E4658D99A272B100998EDC5DAA509C88077F7576A93C4FB7BDF2D15
SHA-512:	C454D10CB4F24856950B1A160067CEB300B6EBDB5733256EDEDA57429C6DDCEB8C62C9838B107344F72858CB235F111F04BF84DDC97351B697AD9A0482F3ED46
Malicious:	false
Reputation:	low
Preview:	.................................2... .......R....GIFf8BIM.............................................................................................................................................................................................................................................................................................Adobe Photoshop CS2...........I.M...........H...H.......I.M..........8BIM.......I.MGr.ph.bj.....L.......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\is-DBCVG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 384 x 288
Category:	dropped
Size (bytes):	4304
Entropy (8bit):	7.5924730131756535
Encrypted:	false
SSDEEP:	48:+m5CNjtJwsNd0akbhBUiFr6G15FZmwZSMIorealaKjhLb0yAyG61iz0ls40bsqjm:VYNjDFQQet5zuKjNxAM1pC4iYx
MD5:	BC939228247546ED31EB767DA7AC968E
SHA1:	28BA9BDE030F63ED7157EC22B0F4D2D5015B6F78
SHA-256:	48124EFD0503E82B1F3A6CF4B5304506E7796EF28ED750D7DE35CEFFF5769DE9
SHA-512:	801F3468E43285BD5B66904DC82496AFE7DA6FD7C082591C0B2E4D283B8D0860787B6F6FD364796C0C6DE0A91FC5BC9D4EA07D2B474A584DBDEF01EE6D0869CE
Malicious:	false
Reputation:	low
Preview:	GIF87a.. ..................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...... ........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x.....#......+.p_...E...\.#..,.rZ.3....W.Ck.-.tU.SCE....R.c..@. .

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\is-FSJ7R.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.6897983724188628
Encrypted:	false
SSDEEP:	3:PFltl5Xj//:PftrjX
MD5:	6D6431F71FAAE765A3C35655A81FEFB7
SHA1:	85703A4247EA652D07CB490A67DA856BC185F3EF
SHA-256:	66FD0BF9F5DCF21983E9097F37DAFA108112F55593F98BF283B63A8FEB78C3CA
SHA-512:	5A88EEFFE85745155C39821754ACFD012E31E5566817B7A2B6EC9C79586AD7F3CF8013D7345D7FE38CBFDEC81817217E2818F70584F185EAB116ADB76C181288
Malicious:	false
Reputation:	low
Preview:	.................................&... GIFfMeSa........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\is-GI1C8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 77 x 73
Category:	dropped
Size (bytes):	3079
Entropy (8bit):	7.406272062451004
Encrypted:	false
SSDEEP:	48:PR5ETp8uDYPhb1xoNVIuar96f0CXbqtiFTGmk7JxrmRClU:Pw+yYR1xoNVIB921rqIGR9xKClU
MD5:	CD81AC9B6DF722AE7ED668A66F10AB83
SHA1:	E58D72A3998EC6D21236818527524B07D9596AF9
SHA-256:	A85EC0D8A1ABB0FDA111BB2E5FB22865B5890A886ED49CDD4CF6BC4D80BCB10F
SHA-512:	02A7D5C319666993DD78F3187A13426B5CFDFED7577EDC41568670AAD885C41960C322664C486A455A5AF5D9A67BF29599283EDF1C768E37A79063173CA07500
Malicious:	false
Reputation:	low
Preview:	GIF89aM.I.......................................................................................................................................................................................................................................................................................................................................................~~~}}}{{{zzzyyyxxxwwwuuutttsssrrrooolllkkkjjjiiifffeeedddbbb\\\[[[ZZZYYYXXXWWWVVVTTTRRRNNNLLLKKKJJJHHHGGGFFFEEEBBBAAA???>>>===;;;:::888777666555222111///...---,,,+++)))((('''!!! .........................................................................................................................................................................................................................................................!.......,....M.I.....[..H......*\....#J.H..E.....c.H."K...S....=.yR....0c.\|...T(s.....L...4p..... ...F:+.b....C.6...Q......(jD7...`...V.].2....K...2\..@..o..}.@k../.d.p._..K.....<...........C.\..S/.[q...p.t

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\is-JEC9M.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 449x449, components 3
Category:	dropped
Size (bytes):	29069
Entropy (8bit):	7.8909654461222525
Encrypted:	false
SSDEEP:	384:O4zw/TjyqIa8xNUP/MlujbvUYneccc0WB9JSG/pn48HI63RKNmuGQsnr01Bv+J:OH/CM0UPvhneivBOyHn/LQQG+J
MD5:	503071DCBE6825F45EF4092F00AFF04F
SHA1:	088F6C89D992693D42679B45A325B2DE08251C87
SHA-256:	3A5E982AEF0CB895C027A596CD429DBE725A26987F6B96B9BA5D6AD1E12E507B
SHA-512:	C5C12BAF5D59BF4539178AD3171A4DD2278AD660C54665C56787961867513AB6FEDE1A57068C990F7DA0B14679DE88EB9AAAC07802DF74F301CD33B2022C8808
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d...............................................................................................................................................................................................................................................!1A"..Qa....q2R.3t.u.6V..Bbr.#..4.5U..$....c.%Cs.&.SDTd.........................!1..AQ"aq.......2r...#BR..b3....4............?..R.......T.j........................................................v..1.6....K.{.CZ..'..9..J......1....Z..7.\..gF...7Y...4.........e.......n.`..C.-25..h.x.q..y..`..m...).9..$...1ln.Y....Rc....G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\is-K5BJL.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 73 x 73
Category:	dropped
Size (bytes):	4531
Entropy (8bit):	7.438989839400492
Encrypted:	false
SSDEEP:	96:hxLbRXf1w+qbHqp8skPDv5X5uezT0VS7KkKjaVZ9E3Ui9cLycoWvhamUYOqKpWR9:hbWHbHqpNk9X5uezT0VSrnZ9+KLycocL
MD5:	4FE24E60EB6273C1DD57B5FE2B9A575C
SHA1:	19A68E7A948E3E56FB1FAFCE89D72C6F200D9573
SHA-256:	624758037DF43276503AEFE924292E8C3F6342ACBB22405811CFBEF98E40F8AC
SHA-512:	817F9889313FF626D35E27D1BAB49C0BCF923195E0BA33942349FC13D4689D872C8FA287CEDD2A06E3E8A136ECC269BC3CBC9C5C3A8A414C6E5FFB3DF2A240A1
Malicious:	false
Reputation:	low
Preview:	GIF89aI.I...............................................................................................................................................................................................................................................................................................................................................................{{{...www~~~.....................!.......,....I.I.................}.... ....................&............{...04:D^aLLU.\^6M......).......4QUIjRd=A3..."/6ElKbT:.........&3[fcR:..~......A../8`...".,......F.. ....`#..\|...p.O..T..9..A.W.-9.3...1`b...@....~.8 ....H.h ....~j.S.....b".p...,VP..`....D.!......&,HP......phP@IT2q.p.....?..l.......4...#J...[..1eG..(..`....%. .:AM...V.v.g.."rL.. ....Sp.p..x..{*0.....4i..c.E......1f...Z.Dx!&M.?{$`.1EG.....9."..........Q.~t....,`A<...A.h.aR..(F..<.g.. aC......V....Y=...8....} ...P.....TPB..`0@+.....P.`..{....V.1.....b..?.1.."....4.s@.H@...N....>.@..$]...6..@...A..dlP.a.<...mP...{.!..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\is-KPBGS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 73 x 73
Category:	dropped
Size (bytes):	3371
Entropy (8bit):	7.4497952238318845
Encrypted:	false
SSDEEP:	48:jZAXJoZcpLLem5/iwDwfcaH+ilFRYFC2fY4QgZV6xLspy9Xud:QJLT9iwDwfrFRYhfAgZsxLL5ud
MD5:	D075014A91FB5B1F24C9A2DE9BCF4509
SHA1:	80E44947F656F5DAE3DB1B480C53847432DB8EB2
SHA-256:	E6A06206F1456B78981C24F595612E8DCE1B4FD28ED6E9D0C81D81E1E869BEA2
SHA-512:	CC83C97CB05A3C8398D481EF5E22B2D811F8E3AFCCF1539FFAA26862DF2AFF9E12DCF0C758F7C0F652AFB9DB3375CB7CA69692AEFED1B592AB501062308B7B51
Malicious:	false
Reputation:	low
Preview:	GIF89aI.I...............................................................................................................................................................................................................................................................................................................................................................................{{{zzzyyywwwrrrqqqppplllkkkhhhfffdddbbbaaa```^^^[[[YYYXXXWWWUUUTTTRRRQQQPPPOOONNNMMMLLLHHHEEEDDDCCCBBBAAA@@@???>>><<<:::999777666555444333222///,,,+++)))(((&&&%%%$$$###!!!..........................................................................................................................................................................................................................................!.......,....I.I.....g..H......\....#J.H..DM..R$..$W..QD.I...4!....0]N....'e....e...........^j."...XxD.......E.f.z....<.9}.......f].mP..\..4V.....\u....q.\|.U...U.h......H4,.U.....U.T.P.\|.0h....t..R.....E

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\is-LB9QB.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 279 x 247
Category:	dropped
Size (bytes):	8132
Entropy (8bit):	7.852135436848708
Encrypted:	false
SSDEEP:	192:hdkw7q38j7G4j5JzSJ6lKGbnLhTSOowEeS1S:hDeOlcGnZSOowEG
MD5:	74E2973D1826EB678AC1033A552F3FE9
SHA1:	851728CC3945575B856637DD2822C392E1D87BF0
SHA-256:	66EADED01CF97BF91131AFD54FF7DA4B2578CAF0FC17FE55A8C47737F36C8C4F
SHA-512:	B238A364DEB991643126F7D98031D139E53A3BA728C51D3D5F2D5B305E19C8D3A0F85A40E15CF6B898283F4EC673D184722BD093D8CA93A126CA8A3A5B071A79
Malicious:	false
Reputation:	low
Preview:	GIF87a...............@........................................@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...............H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.........@P.@.G.e..!...B.8...R.....(.R.&.+Pk.e.%.-.f.V.Z.jZ....]hw..k..Jxp.k.5.4,\....E[Po..-_Vj7h......\.oL.]..^]..]..~uKyl.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\is-MPNJ1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	65456
Entropy (8bit):	5.5498646869323
Encrypted:	false
SSDEEP:	1536:pcG+bUdTYdndndlzyEpMnRP/LmEpMLRP/L3EpMoRP/L8EpMFRP/LVEpMGRP/LNPL:pcGEUudndnddyEpMnRP/LmEpMLRP/L3q
MD5:	9ABDEF69982EA709D578AAA4AC9E4753
SHA1:	9C28CC76FA0752EBEC9CFDA6456217255FAF25AC
SHA-256:	1533A29E9EB73AE5EA9053A8758FABAC465516D4EC2C88552367FB2565E119AB
SHA-512:	E3890E93E46FB7E2B4F794FF4AEFC9E138F165010C2D518B3F3BDB060AC970960866C9C177FECF69980EDB61A90C471D26A275477769394DA9692BA6315D8723
Malicious:	false
Reputation:	low
Preview:	.................................2... .......R...^GIFf8BIM.............................................................................................................................................................................................................................................................................................Adobe Photoshop CS2..!.!......J.H...........H...H.......J.H..........8BIM.......J.HGr.ph.bj.....L.......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\is-NRER6.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	53685
Entropy (8bit):	4.755130593031549
Encrypted:	false
SSDEEP:	1536:8gHHrF6yEpMnRPkLmEpMLRPkL3EpMoRPkL8EpMFRPkLVEpMGRPkLNPj9EX4imqMW:8gHH56yEpMnRPkLmEpMLRPkL3EpMoRP3
MD5:	D74C87A532632AD9F3869788BC64CD8A
SHA1:	B18B412468A9CA43CF0E35A79BA06DC3C91F69E0
SHA-256:	2CD1A4FF35CE4C6A10C8B547976291F95A47BFBEDFE628F1D91767F767833B7D
SHA-512:	3B2759BC0FB92CA75CBAAB1035E0C17370DB91C36C118184CEE75F35BFFB73DF788B2EC60BDF23901CF9C06F03A5C9D8DCC3249D38FF971E07C41B2465A58D29
Malicious:	false
Reputation:	low
Preview:	.................................2... .......R...cGIFf8BIM...........................................................................................................................................................................................................................................................................................Adobe Photoshop CS2...........).c...........H...H.......).c..........8BIM.......).cGr.ph.bj.....L.......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\is-OLJM3.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 446x449, components 3
Category:	dropped
Size (bytes):	30258
Entropy (8bit):	7.90755313396624
Encrypted:	false
SSDEEP:	384:F2G03d553fsWi8voZm59QGoF4M1FF9Uv0cN3s/7661z653ilAXpBs+6iT9ThdMVD:PEd5TqZOQdTBcNc/MZilAXDDD/dE
MD5:	20F7134FC5F34AAC822D8CA8A5F46127
SHA1:	EEDCD83C415666C1BF9924A6CE078A84A6BE0EEA
SHA-256:	E9A7963FF4692D146B13D90956F43070EC9288980A57F0FA68A05AFDBFA5D5C3
SHA-512:	2F2ED435D1CC874680F4E7ABC13D8A9999B7693D9DF8C05A62AB1FD93398A9BDB67C7764905E00652E6C61BFAD7A281B700D97731E7426266EB08528307988FC
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.............................................................................................................................................................................................................................................!.1.A.Qa"2......q.#34Tt.U..G..BR..5uV.br...CS.$...%cs.D....6.'......................!1..AQ.aq...2.....".R.Bbr..3..#.4............?.........'..xqa...h..8.Pc...[..c.7.......#.*.....5..2...w....{....l...2.J....[.-..F...o.X..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\is-P42U2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 72 x 74
Category:	dropped
Size (bytes):	4110
Entropy (8bit):	7.4584861984724675
Encrypted:	false
SSDEEP:	96:RVc3E2/Vbk1o4w4XR2zefgTnPniAQg3g9gD:Ry3E2/R4x2zefgTPnHhg9gD
MD5:	1F69A289B8526EA5F9BA921F2F6300CA
SHA1:	8660295C6D7E1E4AF0C3241D1C8E9B823CEB8F10
SHA-256:	5B5B5EDF0CB50ECAE101FB55AC758CD279347FE2B93025A22D5072A92FBC8198
SHA-512:	49A927302FD8B97D955729C25658EDA52764C3EB8D7471CA4FCCE0F11BD799EB11108B95BDB992BBABC4A52353FB10CC6EA828460955B1E4648B1BE3B5EB80D4
Malicious:	false
Reputation:	low
Preview:	GIF89aH.J.......................................................................................................................................................................................................................................................................................................................................................................................................~~~}}}\|\|\|{{{zzzyyywwwtttsssrrrqqqpppooonnnmmmkkkjjjhhhfffeeecccbbbaaa```___\\\[[[YYYTTTSSSRRRQQQOOONNNLLLKKKJJJIIIHHHGGGFFFEEECCCBBBAAA???>>>===:::999888777666555444333222000,,,+++**)))&&&$$$###!!! ....................................................................................................................................................................................!.......,....H.J........H......\....#J.H.b._.R..u.U/. ...Tg..... 8.....@.@....@^..\...'.....%.'..qT........8x....S.4P..'. ..>l.......6X.-..V.48.SE$....A...U...j..p..m.LU..(..3..m\..2g......p.$8....3=+.}.a....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\is-QR59P.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.6897983724188628
Encrypted:	false
SSDEEP:	3:PFltl51xX:Pft5x
MD5:	157E107640B55D60F7B0AE8B9854629C
SHA1:	87D20B20FBC46B571E154619C1D83582E7AAF62D
SHA-256:	BCAD9313E0D69DA085CD225D876C598B8FBEC7477E6280279971BE111B167AAA
SHA-512:	DB23CAAC9D28013C1EB4E673B8402F968A16F8474536B516885AC7C0B01895E6CECB5B9FF96E6171D9D73D1A21C7AC2A368D042BCD469E14EED070F59D5CCFAA
Malicious:	false
Reputation:	low
Preview:	.................................&... JPEG8BIM........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\is-SK9FA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	63292
Entropy (8bit):	5.4246885763998005
Encrypted:	false
SSDEEP:	1536:uuRvEd3WTvEd3WTvEd3WJbyEpMnRPeLmEpMLRPeL3EpMoRPeL8EpMFRPeLVEpMG5:u0EJmEJmEJWyEpMnRPeLmEpMLRPeL3EL
MD5:	FC34F18540CB81828AA7ECDD392DB335
SHA1:	65317F0FB58A8AD622159EFADF10D1AF74584CA1
SHA-256:	39173096804451E59985449F5C4B3B4280D4E7494A269D56785D8C1F209BBED5
SHA-512:	DCD76CEB4EBCEFEA7763A506BD9D057C03DD21BC09A038DB50CF2F3FB2A75C2E51E08586E1F3448BFB71B50D7CFD01BA14A26D6909A21BF5ADBE04164F482120
Malicious:	false
Reputation:	low
Preview:	.................................2... .......R....GIFf8BIM.............................................................................................................................................................................................................................................................................................Adobe Photoshop CS2...........I.I...........H...H.......I.I..........8BIM.......I.IGr.ph.bj.....L.......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\is-UDUO7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 245 x 230
Category:	dropped
Size (bytes):	3906
Entropy (8bit):	7.536706229806521
Encrypted:	false
SSDEEP:	96:o7f1QpMi/SLPbUAorWnMAwyltQV834frIAsSThdL:ErLb5M5yltQDrIYPL
MD5:	12828D3D4CDD82D814A71932E906F4CA
SHA1:	A6C4981F85F85A40490977B0A71AFDD4B87C6CA0
SHA-256:	81D535B5DF4BF246380FA2BBC35C7CA654C4358D0EA50ABF9407BEB7F34A2510
SHA-512:	3F7100A8F80E0277BDE09C54B56ABB26BF329637486E7D0F76C4164F341AD7E540236064AC029D1F6F097C23DF0637A7A13091E2D89073D871BFD9863C4453A2
Malicious:	false
Reputation:	low
Preview:	GIF87a.....................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...............H......\....#J.H....3j.... C....cI.'#....K....9p.@..m...0.N.>_..:.'.).f.8....M.".$..R.K......)%..t......r}6).{D..h....Ji>....\|.n.;......B.KX...A...K.rC...bf+..b.P.6..4..yK.D@j.O.a.{3..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\is-VB2QF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 99 x 41
Category:	dropped
Size (bytes):	1858
Entropy (8bit):	6.911111727204752
Encrypted:	false
SSDEEP:	24:sKig0f0qmUBwxNNwYWcxW42FAnE+S8r+pgVLkbmzUnE6GhwLYD:sKiJf0qlcNkRF+Nt6pqQmYEDwLYD
MD5:	AF94ABCE48144E917332EBB8D366833A
SHA1:	FC4BF88F1D0352EE0B73AB2CEA9C40F8E96CB468
SHA-256:	67F19CD592A02CAE34B9AB8461F5CA3168A0A4C096CAFF029C64D5EA8213D80A
SHA-512:	568A98BFA3CBC03B1D174E6BC2ECB69A612331D8003036C476C954CF401667DC862D2C15B45653F451E1AD78E6C6A97B228456E248BD2C05A938727427F8C685
Malicious:	false
Reputation:	low
Preview:	GIF89ac.)........................................................................................................................................................................................................................................................................................{{{yyyxxxsssrrrqqqpppooonnnllliiigggfffeeedddcccaaa```]]]\\\[[[ZZZYYYXXXVVVUUUTTTSSSRRRQQQPPPLLLKKKGGGFFFEEEDDDCCCAAA???===<<<888555333.....................................................................................................................................................................................................................................................................................................................................................................!.......,....c.)........H......*\....#J.H....3j....;x..I...$..Y...0c..sg.D3Ln.....@i..J...H...R.".'..H.J...X.j.....'r.~I...h.6 ...p.....C/s..=..a...._ubHa.......Ha.$.#.m ..<3.".....#.d.2%F......0B...z

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\protanCIE.jpg (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 446x449, components 3
Category:	dropped
Size (bytes):	30258
Entropy (8bit):	7.90755313396624
Encrypted:	false
SSDEEP:	384:F2G03d553fsWi8voZm59QGoF4M1FF9Uv0cN3s/7661z653ilAXpBs+6iT9ThdMVD:PEd5TqZOQdTBcNc/MZilAXDDD/dE
MD5:	20F7134FC5F34AAC822D8CA8A5F46127
SHA1:	EEDCD83C415666C1BF9924A6CE078A84A6BE0EEA
SHA-256:	E9A7963FF4692D146B13D90956F43070EC9288980A57F0FA68A05AFDBFA5D5C3
SHA-512:	2F2ED435D1CC874680F4E7ABC13D8A9999B7693D9DF8C05A62AB1FD93398A9BDB67C7764905E00652E6C61BFAD7A281B700D97731E7426266EB08528307988FC
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.............................................................................................................................................................................................................................................!.1.A.Qa"2......q.#34Tt.U..G..BR..5uV.br...CS.$...%cs.D....6.'......................!1..AQ.aq...2.....".R.Bbr..3..#.4............?.........'..xqa...h..8.Pc...[..c.7.......#.*.....5..2...w....{....l...2.J....[.-..F...o.X..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\images\tritanCIE.jpg (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 449x449, components 3
Category:	dropped
Size (bytes):	29069
Entropy (8bit):	7.8909654461222525
Encrypted:	false
SSDEEP:	384:O4zw/TjyqIa8xNUP/MlujbvUYneccc0WB9JSG/pn48HI63RKNmuGQsnr01Bv+J:OH/CM0UPvhneivBOyHn/LQQG+J
MD5:	503071DCBE6825F45EF4092F00AFF04F
SHA1:	088F6C89D992693D42679B45A325B2DE08251C87
SHA-256:	3A5E982AEF0CB895C027A596CD429DBE725A26987F6B96B9BA5D6AD1E12E507B
SHA-512:	C5C12BAF5D59BF4539178AD3171A4DD2278AD660C54665C56787961867513AB6FEDE1A57068C990F7DA0B14679DE88EB9AAAC07802DF74F301CD33B2022C8808
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d...............................................................................................................................................................................................................................................!1A"..Qa....q2R.3t.u.6V..Bbr.#..4.5U..$....c.%Cs.&.SDTd.........................!1..AQ"aq.......2r...#BR..b3....4............?..R.......T.j........................................................v..1.6....K.{.CZ..'..9..J......1....Z..7.\..gF...7Y...4.........e.......n.`..C.-25..h.x.q..y..`..m...).9..$...1ln.Y....Rc....G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm0001.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm00c1.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm043d.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm05rb.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm0bdx.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm0f1q.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm0j5b.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm0llx.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm120e.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm1nug.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm1oxg.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm1xf2.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm1zg9.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm23fl.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm26k5.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm29bn.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm2bco.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm2k85.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm2kms.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm2ldj.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm2lyr.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm2u5h.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm2x5t.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm2xpq.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm2y9i.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm31o3.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm34xa.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm359j.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm36re.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm3be6.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm3fjn.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm3ncl.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm3rcn.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm3ueq.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm4b3b.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm4c81.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm4eox.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm4eus.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm4ndz.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm4qex.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm4r8z.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm4s11.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm4srr.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm4two.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm52sz.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm549z.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm57n9.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm59da.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm59v4.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm5a7n.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm5asz.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm5dgl.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm5fw3.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm5l0u.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm5sol.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm5tbb.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm68mt.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm6d0t.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm6i4a.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm6m3u.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm6q01.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm6rj8.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm7243.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm7560.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm760n.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm7hf5.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm7hf6.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm7hf7.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm7kqh.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm7lkj.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm7n8x.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm7ppd.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm7rub.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm7z8q.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm83zi.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm8igl.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm8iie.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm8siz.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm8vi2.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm97vy.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm9i7k.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm9p4j.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._fm9sfm.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._indexCIE.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.661226943847434
Encrypted:	false
SSDEEP:	3:PFltl5U9nIk:Pftg9nI
MD5:	9C46007F92F6817CB70BB63B8E7DFC9E
SHA1:	0A0442591054622234A03F01652EABD6057200CA
SHA-256:	FDFF1042BE8E2C1B296E56E5949B0C66C60E9424657958C8EF86394F78711A98
SHA-512:	2D2047D4F5FC4C3C441EB792FAD60C95805FBBEEA9B5F905D916E84A5E68E3DD72E87B5F1B20186E7F9D86B6D3EC5C8E3685665F090C0A5F86B78272E5FC06EF
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXTDmWr........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._indexDT.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.661226943847434
Encrypted:	false
SSDEEP:	3:PFltl5U9nIk:Pftg9nI
MD5:	9C46007F92F6817CB70BB63B8E7DFC9E
SHA1:	0A0442591054622234A03F01652EABD6057200CA
SHA-256:	FDFF1042BE8E2C1B296E56E5949B0C66C60E9424657958C8EF86394F78711A98
SHA-512:	2D2047D4F5FC4C3C441EB792FAD60C95805FBBEEA9B5F905D916E84A5E68E3DD72E87B5F1B20186E7F9D86B6D3EC5C8E3685665F090C0A5F86B78272E5FC06EF
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXTDmWr........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._indexList.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.661226943847434
Encrypted:	false
SSDEEP:	3:PFltl5U9nIk:Pftg9nI
MD5:	9C46007F92F6817CB70BB63B8E7DFC9E
SHA1:	0A0442591054622234A03F01652EABD6057200CA
SHA-256:	FDFF1042BE8E2C1B296E56E5949B0C66C60E9424657958C8EF86394F78711A98
SHA-512:	2D2047D4F5FC4C3C441EB792FAD60C95805FBBEEA9B5F905D916E84A5E68E3DD72E87B5F1B20186E7F9D86B6D3EC5C8E3685665F090C0A5F86B78272E5FC06EF
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXTDmWr........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._indexPR.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.661226943847434
Encrypted:	false
SSDEEP:	3:PFltl5U9nIk:Pftg9nI
MD5:	9C46007F92F6817CB70BB63B8E7DFC9E
SHA1:	0A0442591054622234A03F01652EABD6057200CA
SHA-256:	FDFF1042BE8E2C1B296E56E5949B0C66C60E9424657958C8EF86394F78711A98
SHA-512:	2D2047D4F5FC4C3C441EB792FAD60C95805FBBEEA9B5F905D916E84A5E68E3DD72E87B5F1B20186E7F9D86B6D3EC5C8E3685665F090C0A5F86B78272E5FC06EF
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXTDmWr........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._indexTR.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.661226943847434
Encrypted:	false
SSDEEP:	3:PFltl5U9nIk:Pftg9nI
MD5:	9C46007F92F6817CB70BB63B8E7DFC9E
SHA1:	0A0442591054622234A03F01652EABD6057200CA
SHA-256:	FDFF1042BE8E2C1B296E56E5949B0C66C60E9424657958C8EF86394F78711A98
SHA-512:	2D2047D4F5FC4C3C441EB792FAD60C95805FBBEEA9B5F905D916E84A5E68E3DD72E87B5F1B20186E7F9D86B6D3EC5C8E3685665F090C0A5F86B78272E5FC06EF
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXTDmWr........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\._nav.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.661226943847434
Encrypted:	false
SSDEEP:	3:PFltl5U9nIk:Pftg9nI
MD5:	9C46007F92F6817CB70BB63B8E7DFC9E
SHA1:	0A0442591054622234A03F01652EABD6057200CA
SHA-256:	FDFF1042BE8E2C1B296E56E5949B0C66C60E9424657958C8EF86394F78711A98
SHA-512:	2D2047D4F5FC4C3C441EB792FAD60C95805FBBEEA9B5F905D916E84A5E68E3DD72E87B5F1B20186E7F9D86B6D3EC5C8E3685665F090C0A5F86B78272E5FC06EF
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXTDmWr........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm0001.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	417
Entropy (8bit):	5.368072804887997
Encrypted:	false
SSDEEP:	6:B8FQk+Hryft1q2Q8EevWR0NNEXW0Yf1J3R90M0iNMeql201gr1L4cgCSnGcgU29I:BMQkzLq2Q8Eepfn0M0sMeqRqr1IA6
MD5:	DE5B06A0AA5A9AB8E2D816942493C781
SHA1:	3A7D7E698C6DB16A5BAA47A31167359C4C004005
SHA-256:	A287C3779354F2DC8C843D9948580C945DB8584774E1D9B4574910E91EFA35F2
SHA-512:	8BFC2FA9BDDB25494CD1B64F15C760E795217207C9F14F104CA1CB6F300E056BBF9D661893538FF4B3D3691F16C203906F7D4CEDA5BE4769D73D2D710AEDC29D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Contents</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H1>Contents</H1>..<P><A HREF="fm34xa.htm">Color Vision</A></P>..<P><A HREF="fm4eus.htm">The FM Hue Test</A></P>..<P><A HREF="fm00c1.htm">The FM Hue Test Scoring Software</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm00c1.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	636
Entropy (8bit):	5.400055084866752
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfPNj0sMeq629MIWjd8RMAUBj9vjJCB:WlSZ6Nj23MIWj2RML97JM
MD5:	4732EBBE27066917BCB1809B84AC84E3
SHA1:	1DB014BCCD50109BEEAB3332BD41864C04EA6197
SHA-256:	A6EEE3CE49B685160C8FA9E6004C92EFB8FEA625F4A56A93C0035C522FB8E3C2
SHA-512:	E19384CAC6BC6557DBF4EBEEF03C257D09FFAB0FCA74A8F547EDF5224A2B063E4C79EAFDEA9FCA0F03E5E27405452C586F3E61EE8B8EE80B880785D5F981AD84
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>The FM Hue Test Program</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="n_46v1"></A>The FM Hue Test Scoring Software</H3>..<P><A HREF="fm3rcn.htm">Overview</A></P>..<P><A HREF="fm36re.htm">Entering data</A></P>..<P><A HREF="fm4eox.htm">Displaying data</A></P>..<P><A HREF="fm7n8x.htm">Printing data</A></P>..<P><A HREF="fm23fl.htm">Interpreting data</A></P>..<P><A HREF="fm31o3.htm">Menus</A></P>..<P><A HREF="fm3ueq.htm">The Toolbar</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm043d.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1077
Entropy (8bit):	5.1138748666165785
Encrypted:	false
SSDEEP:	24:WlSZ6OXHeJDSpojCshHMDyiGH+fJbPTyGco:qSZ6WuSeOy/HQJbrIo
MD5:	D9799E3994DEB308C66C76EEC0FD0FF3
SHA1:	BF086284DC622DB5437D3CD121253B049386D638
SHA-256:	872E06F30F56D065D2027B2F237D968491A5D09C8B6FDCBA4149BC582766B843
SHA-512:	575642E2272E3A6F47F1273303874902A36242D9E4782CEBCAEE5648BB549BE39BFAB46EEB4925325DA277592DB02060D5DA7D8D60ADB323C561669CBF14C67D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Export Name and Analysis (File Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="fm94h9"></A><I>File menu - Export Name and Analysis </I></P>..<P>The current Name and Analysis can be saved separately as Text files. This provides an easy method for exporting this information to other Windows programs.</P>..<P>Select Export Name and Analysis from the File Menu. The Save As dialog box is then displayed, allowing a path and filename to be specified.</P>..<P>The data entered as Personal Information is saved together with the analysis of the results. The information included is dependent on the Analysis options currently selected</P>..<P>This information can now be imported by most Windows wordprocessors and spreadsheet programs.</P>..<P>Name and Analysis can also be pasted directly into other Windows programs usin

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm05rb.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	840
Entropy (8bit):	5.247957805853096
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfLZsMeq6xFWVcUGQeynlMBiBdgVrfQIT8deF9K1LnS+J5TNT+x3:WlSZ6jRHmULeICIBArIPdeur7nT+d
MD5:	3D745C989EFF06AAF457C127B12455F5
SHA1:	9C8A5FB5B4E198C0829441EBFD15DAC599F6B073
SHA-256:	6D626DDD4EA1FC1CC1E12290AC8DDF1F8385C5AC259872AE63D18D75CCAAEE93
SHA-512:	DC5A1479CA2E334566C3BDEB1E6FDDDD6407125C95A5373A173E3CFCE4C49126DC1B0E855B069091A5E8B603DFA6300B1D320AD90F82DDBD7B13E27749B8DC2C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Protan confusion axes</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="ps49gg"></A><I>View color confusions for protan defects</I></P>..<P>This option is selected from the View menu of the computer program.</P>..<P>A color representation of CIE color space is displayed with isochromatic confusion lines superimposed. Colors lying along the confusion lines will tend to be confused by individuals with a protan (red) defect.</P>..<P>For more information see <A HREF="fm8siz.htm">Defective Color Vision</A></P>..<P>N.B. The colors displayed are only approximate and will vary according to the color capabilities of the monitor and display card.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm0bdx.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	575
Entropy (8bit):	5.336010030955101
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepfn0sMeqyEnA2Qg26C/ZG7RMD:WlSZ6+yEnnQQkN
MD5:	2CE217ADDD150CE9D26EDFE8DAFA2357
SHA1:	93C6FB1989AA5A93F1815E002C7671EF99F5BC4E
SHA-256:	ACAFD88794D25EC359CDC4A0DC22C78912446F5B023FBCF20E56E39A90BEBFCF
SHA-512:	1A3C62A181EF93609F1D6EE11B4D78C6D972F72B1D12AEF694438CA3F28602F6CEC3691072F4106541FC96365612033ECF8C394C120A3AA72394A35E384DB3BE
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Examples database</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="examples_database"></A><I>Examples database</I></P>..<P>A database of example results is included with this program. To view the examples:</P>..<P>Select Open Existing Database from the File menu</P>..<P>Select Example from the list of databases</P>..<P>Select the required example from the View Database Window</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm0f1q.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (1003)
Category:	dropped
Size (bytes):	3245
Entropy (8bit):	4.7739869790053175
Encrypted:	false
SSDEEP:	48:qSZ6jZWFe1Lqa+SkQJwA9Y6c3ikc8CiJxAcgKkpNyU41vCo2bwN+NzY4eGBEmlb0:r3FEeSkQJBucpiJCpZdK+NQaFAVMU
MD5:	B3F1AFC2CC8CE4D9EC8D22CE78A3DD1B
SHA1:	ED01770AD84052F85311BC5A709EBCB832FE69D6
SHA-256:	5DC0CF499A8C51C752E0BCB5FB50F061893DD4C85720ABB426C9E9CE163488CC
SHA-512:	97D8131C9D72506373573373B7EFABD703E5420E3C54F17B25B40F735D94A096D4B10F588775D78C82180B76A93B7B351DAE085CDF64F4627470A2790A8BBEF8
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Principles of Construction</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="principles_of_construction"></A>Principles of Construction</H3>..<P>An understanding of the material in this section is not necessary for the practical use of this test. However, the information is important if the test is used in connection with research in color vision.</P>..<P><I>Perceptible Color Differences</I></P>..<P>Imagine a chart made up of all possible discriminable hues - reds, greens, blues, etc., in all strengths from neutral to high purity, but all of the same brightness. If these colors were organized systematically, they would form a color array similar to that shown below. Equal distances on this diagram represent equal differences of color to the normal eye.</P>..<P><IMG SRC="../images/bm5.gif" ALT="" BORDER=0></P>..<P>

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm0j5b.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	447
Entropy (8bit):	5.323337674890775
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepf3eK0sMeqFM9GQhE2Kquz7G4e:WlSZ6foFM9Lm2sPA
MD5:	7C5DC0CB784B4B43AB8747E3F55ECE1C
SHA1:	2AF65D1460E99E57A1D056E6BF1925256A7CA392
SHA-256:	486D8A4589D88901ABAF55FA12A3248F3185039DA1797D2033259AE387EE3EFD
SHA-512:	6CE64010DFDF2184CA842F6FB776C85631571A3F368820D87CC4ADB9859A1F38E8EDD913D60EA289CB85F70B14917CF62AD1A928AEA3D7FE5D7D1A133952F4B2
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Undo (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="edit_menu_undo"></A><I>Edit menu - Undo </I></P>..<P>This option undoes the last data entry, i.e. it returns the caps to the position that they were in prior to the last cap movement. </P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm0llx.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (544)
Category:	dropped
Size (bytes):	1944
Entropy (8bit):	4.838318020960845
Encrypted:	false
SSDEEP:	48:qSZ6jNTcHSoyz6tc3gJ0RXF/FG9cdUCwk20ZAFaUX:ruYyoyOmjRXFOcp1SFaU
MD5:	5BF473CD8F8E4B2FC9EF7758AB5A2AA4
SHA1:	19216144BAB032238B0BC870AD264B387A67D9D0
SHA-256:	752764B703F1339A905831BEDB5D5246BD49F99BCD41FF091EFD0C2499467A21
SHA-512:	5D02768A4A820827EF1B8F31F10394BE7FE0594742BBFEC5B8CE5073268DD30029DDDAB3E2F186930CCFD47A40B6AE55268DDFD2942B2507428B1E94F5BB6200
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Procedure</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="procedure"></A><I>Procedure</I></P>..<P>1.Open one case lengthwise in front of the subject so that the empty, inclined panel to which the pilot caps are fixed, is nearer the subject. The cases may be given in any order. Before being presented to the subject, the caps should be arranged in random order. A good practice to follow is to rearrange the caps after each test is administered. To do so, after the arrangement of the caps has been recorded, transfer them to the opposite panel in random order. Then close the case and turn it over. It is now ready for future testing.</P>..<P>2.Instruct the subject as follows:</P>..<P><I>The object of the test is to arrange the caps in order according to color. Please transfer them from this panel (indicate) to this pan

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm120e.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	677
Entropy (8bit):	5.328663374099687
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfXNr50sMeq7p5rhGQeynlJTv7k9K1LnS+J5TNT+x3:WlSZ6/f2NLeIDAsr7nT+d
MD5:	05B017E05F9FEFC2F641E0FB97323A1F
SHA1:	B7F68148D267AA727F1BD08849D2360D3422BD77
SHA-256:	BF7A69D6E9B4AEA73A5D9E84B521CFA07B577BC52BAB20E5C4FFF7699E0E2634
SHA-512:	55D07E73EE99C5BE327F3AA8D52084654838A23FCABC459175ED7B3E33CCBBA7B570AED8FEB45374A120DD228FFAEC95FD76C744373FF8AC41A664C5018B36E7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>CIE Chromaticity Diagram</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="3o1s_zn"></A><I>View CIE Chromaticity Diagram</I></P>..<P>This option is selected from the View menu of the computer program.</P>..<P>A color representation of CIE color space is displayed.</P>..<P>For more information see <A HREF="fm1nug.htm">Color discrimination</A></P>..<P>N.B. The colors displayed are only approximate and will vary according to the color capabilities of the monitor and display card.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm1nug.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (335)
Category:	dropped
Size (bytes):	923
Entropy (8bit):	5.294460497061449
Encrypted:	false
SSDEEP:	24:WlSZ6/mAaCMZurAF3lPoKTJkRI88pVxu2s:qSZ6+AVMZurAF3lPfJkQxu2s
MD5:	697EABBD397BCB3F0E518CC5D71F8665
SHA1:	79DDEC0A5E0B8AC160E44080744D6DA0E2DAB6FA
SHA-256:	2745476DC843A0631F14A4554D36EA5986CA947A2E1F018D3511F3D185D57BC9
SHA-512:	243CB0ABA5C40911C652D3E9D22A2BAAE2B1B968D0B34E6D871B38BF0E91D174C7E9BFE62E268BCAC8DBA52E511360302D53A01552F4121C9C18F5CDF352CEF8
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Color discrimination - Basics</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="3i08098"></A>Color Discrimination Basics</H3>..<P>Before considering the various forms of color deficiency, it is necessary to understand the basics of color discrimination.</P>..<P>In order to discriminate between different wavelengths, two or more photoreceptors with different but overlapping spectral absorption are required. To understand why this is so, consider the situation for individuals with one, two and three types of photopigment - known as monochromats, dichromats and trichromats respectively.</P>..<P><A HREF="fm7lkj.htm">Monochromats</A></P>..<P><A HREF="fm4r8z.htm">Dichromats</A></P>..<P><A HREF="fm7243.htm">Trichromats</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm1oxg.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (765)
Category:	dropped
Size (bytes):	3135
Entropy (8bit):	4.693350362602618
Encrypted:	false
SSDEEP:	48:qSZ62i0MKM4E/6ugJl81SIeXAenAeb58KYv17ZzVj3jtX4aGUOESP:rRjbM4xkS3XAenAecZFhIa9SP
MD5:	C3A78B42905BD2A6A610B253FDEEF4C8
SHA1:	6908EFB6662DC972F0CB7BC1B4E7CEA3A370B900
SHA-256:	EC543C234BD8824D19802FA63A8FD04E9F4EF24C225BE88B513D2E076A23D889
SHA-512:	01F2F2E4DF713D03444CB9BB2DFE1D07AE6A8FBAF8D4BC91864F9FC7AA2F45A846239A2F8C7EB86D97F1E94629E90CE815C50798CF77709A00348CF20A85174D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>How do color defectives see the world?</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="9ov7m4"></A><I>How do color defectives see the world?</I></P>..<P>The effects of a color deficiency on visual performance in the real world depends on the type and severity of the defect. A person with slight deuteranomaly may have some difficulty differentiating between certain colors, particularly when they are pale or desaturated, but the condition is unlikely to be a significant handicap. In contrast, dichromats have significant problems differentiatiating between a wide range of colors and any tasks which involve choosing between these colors will be difficult or impossible to carry out.</P>..<P>Protans and deutans (both anomalous trichromats and dichromats) share a common difficulty with the red-orange-yellow-green range

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm1xf2.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	936
Entropy (8bit):	5.2263641952779745
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfQK0sMeqOib+FwuW/96hTMtnyVpRRet3RFCOTE4k+yUdU3Ty5b0:WlSZ6iOpqbUpojCOg+3kTyQBco
MD5:	B14F7D134FCA742BFF10511E8CACD851
SHA1:	378B018F1992715FBEF1B939A2AFDFE574A828AA
SHA-256:	9AFC217EE065D34FCE92381DAD8B74BA468D732C31C1EEA62671FDDDA1C3DDCA
SHA-512:	C260657BAE77E8D0776E165F97EAC5326F62E31224603FC8C4E1FF605A407D2B752EE3CBAD08A277752DEE3DDCE21C5D9E3598A5E99D8D504A4E17597C495562
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Export Graph (File Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="0x.kg."></A><I>File menu - Export Graph </I></P>..<P>Polar and linear graphs can be saved individually as Bitmap (BMP) files. This provides an easy method for including plots in reports prepared using other Windows programs.</P>..<P>Select Export Graph from the File Menu and then select Polar or Linear from the sub menu. The Save As dialog box is then displayed, allowing a path and filename to be specified.</P>..<P>The graph can now be viewed and edited using most Bitmap editors (e.g. Paintbrush) and imported by most Windows wordprocessors.</P>..<P>Graphs can also be pasted directly into other Windows programs using the Copy Graph option from the Edit Menu.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm1zg9.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (725)
Category:	dropped
Size (bytes):	1610
Entropy (8bit):	5.268377430514314
Encrypted:	false
SSDEEP:	24:WlSZ6WoN61vB6OpxoTpHR42GBlhw88tVkTgTGz+XymidQ1ZXidc9Nidw9idg+:qSZ6ovIOpxoTpVGbybirQec9swcg+
MD5:	2D77A45149481A8EC3A96F07AD680BB4
SHA1:	C034CCE21CBF3476321F5BE199602FFB9BEEE6A4
SHA-256:	9DD621E79484281AA3254A76C649B61322077EDEBFB72F7C44E74462045A0744
SHA-512:	971514B584A074F8996E8367BFF105D38A54CDC699102B6A94380A798D1E745D6865C309A71652297859531E472C64E829A62492AF872F6A666037E9F4F97FF7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Anomalous Trichromacy</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="anomalous_trichromacy"></A><I>Anomalous trichromacy</I></P>..<P>Anomalous trichromats have three cone photopigments and like normal trichromats, require three colors to match all spectral hues. However, the relative proportions of the three primaries required to make a color match are anomalous implying that one or more of the cone photopigments has abnormal absorption characteristics. The terms used are protanomalous, deuteranomalous and tritanomalous to describe the presence of abnormal 'red', 'green' and 'blue' photopigment respectively. Anomalous trichromats do not accept color matches made by normal trichromats and may not accept matches made by other anomalous trichromats in the same category. The severity of the defect also varies signif

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm23fl.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	680
Entropy (8bit):	5.3881807823176375
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfRfdsMeqJGXdmfElVHc4d9XLYjkdJAtYX3HMyl:WlSZ6/Yt9V8iLYodStuXjl
MD5:	04E3F9E6409D85862B06CB1F025DBF7E
SHA1:	D02CB6EAA0EE42B13CAC5064504799F783CB6C3A
SHA-256:	B4AC799F1725E4A46B396F10757CDDB93498D3E0DD63A24A4BD30B7F140D0327
SHA-512:	B2C519126A2F6C1F4FBAE33BBBD557660E267209862D583F3342E4B2F56D08335A4B228434FB7E756FF388673C9945B44207E5F588DAD1689DECDC7D4E5E17CB
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Interpreting Data</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="interpreting_data"></A><I>Interpreting Data</I></P>..<P>After the pattern has been plotted, there are various methods of interpreting the results, depending upon the information wanted from the test.</P>..<P><A HREF="fm2xpq.htm">Classification</A></P>..<P><A HREF="fm4c81.htm">Normative Data</A></P>..<P><A HREF="fm7z8q.htm">Identifying Color Vision Deficiencies</A></P>..<P><A HREF="fm9sfm.htm">Analysis Options</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm26k5.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	587
Entropy (8bit):	5.294553446122531
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepfc01jsMeqPAiL14F0x21yGoNlJqjy/Y17WDbTjsET:WlSZ6f1ft1IP1yGoPJwp176bTBT
MD5:	E44592203D952AFCEB6061CED401D71D
SHA1:	45A2B20E34265662B78497EDF9ED13D2596CE54E
SHA-256:	C721733B3E4DCDB5A90B840A5DDA15D475E172BF9645906698D0B9D22CB13E7A
SHA-512:	787C3F3370EE83AA8883EF8E7D36156D6A9CAF3549616273370B0A8DFF9529311AF61104F033F74B0CEEFD1D2D2D4E824DB71A7FB9BEA0FA818EB52D8B2DD368
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Square Root Total Error Score</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="euxqgu"></A><I>Square Root of Total Error Score</I></P>..<P>The distribution of Total Error Scores in a population tends to be skewed. However, by taking the Square Root of the Total Error Score a more symmetrical distribution is obtained. For this reason, the square root is often used in statistical analyses.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm29bn.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (325)
Category:	dropped
Size (bytes):	893
Entropy (8bit):	5.201736125486845
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfnpsMeqHTIwAZgyYEbnta/JtL+2RQVv0fZFRAEVqNp1E3JErkFk:WlSZ6/BzIw8glEbnWzQVv0f7RAE+kJ6
MD5:	192678FC93132D6D07FF49536B8606BC
SHA1:	752224EFC3C46404545EAEF9980BA0968A425FF1
SHA-256:	404CC56C64E1509993930094858A2CE320F480827F897DBF8FA7F50BB94CAAE7
SHA-512:	66940366BD203AF8910A9114C061EA44AECC724EB0DD21840D9F3BCFC963E224DD917C01FFAF42357A647DA0F7E0615990F778D02B2AA3893DE926312AB27DDA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Confusion axes</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H4><A NAME="confusion_axes"></A><I>Displaying Confusion Axes</I></H4>..<P>Data obtained for color defective individuals will show a clustering of maximum errors in two regions which are nearly opposite on the hue circle. A line drawn through these two points is referred to as the confusion axis. The orientation of the confusion axis can be used to identify the type of color defectiveness.</P>..<P>To aid diagnosis, typical confusion axes for protan deutan and tritan defects can be superimposed on the polar graph by selecting the Show Confusion Axes option.</P>..<P>See Also <A HREF="fm7z8q.htm">Identifying Color Vision Deficiencies</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm2bco.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	991
Entropy (8bit):	5.1381954562896235
Encrypted:	false
SSDEEP:	24:WlSZ6/7o1JiO9twCs6RMDyiagn2MPX3A9E:qSZ6GtZOy5gnLt
MD5:	B4C7F34EF15643AE3DB55B82472C1A89
SHA1:	8BB72A34C9DDD88817121F0F1DE97FBF5EF52393
SHA-256:	F31AF4296AB4000E34916CD3C7EB954FB9A7F2FE72D64759619BC729194A42B3
SHA-512:	00640C44B5B72CBB4C06902ECE2E43EE294F8A58D1A80E81DC08115BAE0ED2B10F4B5E4408EED16E05D3FF5A7B979850B821748D5280F73F7A4779FBDAE9CE52
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Copy Name and Analysis (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="19vjcs8"></A><I>Edit menu - Copy Name and Analysis </I></P>..<P>The current Name and Analysis can be copied to the Windows clipboard and pasted into other Windows programs.</P>..<P>Select Copy Name and Analysis from the Edit Menu.</P>..<P>The data entered as Personal Information is copied together with the analysis of the results. The information included is dependent on the Analysis options currently selected.</P>..<P>Having placed the information in the clipboard it may be copied into a Word document for example, by loading Word, placing the cursor at the desired position in the document and then selecting PASTE. This allows analysis information to be readily incorporated into pro-forma reports etc.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm2k85.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	462
Entropy (8bit):	5.32741393975773
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfP21jsMeq1u14F01YBgpoTJYW1rH:WlSZ621fA1I01CgpoTd1L
MD5:	BB6E47AEDDACFE400564D79C9F8C29F5
SHA1:	B85A393974C834DB90B53D5548272C6966646604
SHA-256:	DFA41452998146C979C9E983051F4333D9AEB2C8F0912DC524AC7FF2237EF753
SHA-512:	454758206789882233ACDF96247AB7B068FF14DAE5199832F5757254DB8E18A939A7FED04CE02872507F322DD9F937D75B317ECACC9BA058C4F545B75FD206B3
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Total Error Score</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="total_error_score"></A><I>Total Error Score</I></P>..<P>The Total Error Score is obtained by summing the (error score - 2) for each cap. Thus a perfect sequence produces a Total Error Score of zero</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm2kms.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (587)
Category:	dropped
Size (bytes):	903
Entropy (8bit):	5.155251943022798
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfHDWsMeqdCjLfwl5cZEE+EBTDB1MFtoiexMFOe9JvmKzxyWE5ix:WlSZ6vIdTBE9BTDB1Mg7MrOKzgXsQ+V
MD5:	106866B6492A36360F159961EEE2305D
SHA1:	284307C43A818C4D0F54A1EECB527BECA713C093
SHA-256:	2BB321A3622686AA758F77A180CF69BD03BBA387E248B79C498D742C1F44426A
SHA-512:	E1312B1B93E860C95239E9A333939C29271F5E64FB59E58BE863373591318C51B473A83125B45629EA3B9D93D13BC9107CB6A93AD6810087B3DB0BF6C99500BA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Opponent Theory</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="opponent"></A><I>Opponent Theory of Color Vision</I></P>..<P>In 1870, Ewald Hering, a German psychologist / physiologist proposed an alternative theory of color vision. Based on a series of subjective observations of color appearance, Hering proposed that color vision was derived from three mechanisms; one responding positively to red light and negatively to green, one responding positively to yellow and negatively to blue and a <I>brightness</I> mechanism which responds positively to light and negatively to the absence of light. This theory became known as <B>Hering</B>'<B>s theory</B> or the <B>opponent theory of color vision</B>.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm2ldj.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	923
Entropy (8bit):	5.146237749023851
Encrypted:	false
SSDEEP:	24:WlSZ6jh3KO9b7FSKvwTrumMfftGJ2Tgib49QLPx+Te:qSZ6jIVKvyrumMQsTjIQ1l
MD5:	C0E7D7EAF88C97D45D659ECF353FC18A
SHA1:	1203C792EC5D7DF2C093CFDA77AF8D25B11BC672
SHA-256:	27E7E9B41BD0563F161B52C00A24AD8AD9A941F9F7401736FCCCBE65081A5B36
SHA-512:	97F85D3D2D1FF20D3971DBD36D13CB55C1FA4BDDB62E70F72B37A75D877292A9997CDE33F45AF60F52C2491DD8F76A2CE4BA5009B9076FF8B2A2D4C001A84A5A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Print Dialog Window</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="print_dialog_window"></A><I>Print Dialog Window</I></P>..<P>The print dialog window allows the following print options to be set:</P>..<P>Number of copies - Sets the number of copies of each page to be printed.</P>..<P>Print in color - When selected, the data points are printed in color (color printers only).</P>..<P>Header - When the corresponding check box is ticked, the text contained in the text box is printed as a header at the top of each printed page. Header text is automatically saved in the program's <I>ini</I> file so does not need to be re-entered each time the program is run.</P>..<P>Setup - Allows various printer options to be modified.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm2lyr.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	805
Entropy (8bit):	5.3227461689215865
Encrypted:	false
SSDEEP:	24:WlSZ6D1qK0qC6ihT5uzk0S1nPbHkqexU0fo:qSZ6D1M75uz5S1nTEqWUEo
MD5:	40C0793E0B18A2CB53BDFD9F180B5946
SHA1:	255BBC92314FC8E93422AEDBF567EBAFF89E62B8
SHA-256:	D32B91DACC3D5CE473A20453E4F9892281A7617D005D36074D95728FCF85B43E
SHA-512:	C26530E6166E98F3CE35D69F53FBB0BAEC3F2B78161D811590EFE5A8E930CA307A4B29A0377A3DEAD6EEB7A0BD6A1DEF7F3DB8201B85B197B4931CB749587175
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Displaying Error Scores</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="displaying_error_scores"></A><I>Displaying Error Scores <IMG SRC="../images/bm18.gif" ALT="" BORDER=0></I></P>..<P>The error score for each cap is calculated from the sum of the difference between the cap number and the numbers of the caps on either side. It is these error score which are plotted on the graphs. </P>..<P>Although there is normally no need to view the error scores individually, they can be displayed by clicking on the <IMG SRC="../images/bm19.gif" ALT="" BORDER=0> icon or selecting Error Scores from the View menu.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm2u5h.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ISO-8859 text, with very long lines (390)
Category:	dropped
Size (bytes):	2172
Entropy (8bit):	4.91400865988998
Encrypted:	false
SSDEEP:	48:qSZ6jueAtTY9YLAF7mDo87vGw1mbi7mqbmImhm4LtmZNTcGVJ3I03AC:rrD+7YvGwJxbnGzGJ3Q0b
MD5:	A74F5396FE4153AA1C19002524D41A5C
SHA1:	8C7495F7D0BC6CAB889C3BCF37A8E97D97CF3C70
SHA-256:	364634A2564FFF9AEBB41EE58DD26DF5F106DE0C617EC3A3B57A6028475DCB57
SHA-512:	AAD7267E950F2C52DEB6462B16BD7084C3D2AE901A624394BCE574C7E27BB28BE51152DF1E660CC8A2A5B57F6A0FC8AE6E6460FEE3DA1DE3F1CEAF7404D2341D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Purpose of FM Hue test</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H2><A NAME="purpose"></A>Purpose of the FM Hue Test</H2>..<P><I>Primary Usage</I></P>..<P>The Farnsworth-Munsell Hue Test offers a simple method for testing color discrimination. It yields data which can be applied to many psychological and industrial problems in color vision. Its primary uses are to:</P>..<P>.Separate persons with normal color vision into classes of superior, average and low color discrimination.</P>..<P></P>..<P>.To measure the zones of color confusion of color defective persons.</P>..<P><I>Examples of Uses</I></P>..<P>.Examination of inspectors of color goods, of color graders, and of color matchers.</P>..<P>.Testing for type and degree of color defectiveness.</P>..<P></P>..<P>.Detection of poor color vision in salespeople.</P>..<P></

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm2x5t.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	863
Entropy (8bit):	5.396304068142892
Encrypted:	false
SSDEEP:	24:WlSZ6GV1lYjKvSAnwFFvoVJ7iRcKjWJlV6SfVwu:qSZ6GjlmKlnwXoH7JKCJlIYwu
MD5:	0E3BBCE46B535C167F4052B61FD5AB3E
SHA1:	A94E47F1D2AA79CFE6075F61A9755BFE270D821C
SHA-256:	CF290E1B1E012C3F4D2CBF1E4419E1248D57B7B036035434C28EA7773FFD6DFE
SHA-512:	E406103ECB688350D787262BB279BF12F9AE1E0040F49E650E559BD65880CCDD8EE936B9A361454FF7E85BF5B2F85ADE3D5B2A1D0CE65EB17674D316D2A5A823
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Filtering Data</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="filtering_data"></A><I>Filtering Data</I></P>..<P>Data can be smoothed by clicking on the Filter check box. The program uses a simple averaging algorithm described by Dain and Birch (1987). Filtering can be helpful for interpreting 'noisy' data and determining an axis of confusion for color defectives.</P>..<P>Filtering is turned off by deselecting the check box.</P>..<P><U>Refererence</U></P>..<P>Dain, S.J. and Birch, J. (1987) An averaging method for the interpretation of the Farnsworth-Munsell 100-Hue Test - I. Congenital colour vision defects. Ophthal. Physiol.Opt., Vol 7, No. 3, pp 267-280.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm2xpq.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (615)
Category:	dropped
Size (bytes):	2145
Entropy (8bit):	4.939382033556128
Encrypted:	false
SSDEEP:	48:qSZ61wjaXKAF3jUX3AFQjhXVRde9QtJHYRnBqARAfAkABAF3:ruMaXnTUX0shXV3r/HYRnB23
MD5:	72A0276B97DD44DA53691CEB2CBC6F8F
SHA1:	F90E0A1915ADE2DB6479CBD0D31F09F81C77E808
SHA-256:	C859C0B1B1890C6C10C53E0EB2377DDAE01371074356737555BC15B5A2541167
SHA-512:	1D9E9211E17806016725533CB4D03B8B5DD126CBD30C286E3B3097D7555E726267DA93347875D9E93DE16636F80B7AE5F7C1514CFB4C715513760C8CB855C77E
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Classification</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="classification"></A><I>Classification</I></P>..<P>Subjects with 'normal' color vision can be classified as follows:</P>..<P><U>Superior Discrimination</U></P>..<P>About 16% of the population (exclusive of color defectives) has been found to make 0 to 4 transpositions on first test, or total error score of zero to 16. This is the range of superior competence for color discrimination.</P>..<P><U>Average Discrimination</U></P>..<P>About 68% of the population (exclusive of color defectives) make a total error score between 20 and 100 on first tests. This is the range of normal competence for color discrimination.</P>..<P><U>Low Discrimination</U></P>..<P>About 16% of the population (exclusive of color defectives) has been found to make total error scores

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm2y9i.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	636
Entropy (8bit):	5.4145390192545175
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepf9uK0sMeqmpvMwFClLRn5wR7aZSM6SMyl:WlSZ6G5wCll5wRWZSHSjl
MD5:	441616208AA2FD5E02A9F6ED4FC67EB7
SHA1:	82792470239CE4DB05BDBDD7D0AE4106E52756C9
SHA-256:	0DBFE3BEDDF32492936675AC4B71DDC957341BA85BBB276CC6BAC47FA7BAC329
SHA-512:	5CF6A8856E47295F3E941282188D4DD5AF7A2B6E87CCE55E9F9A6C072DAA5F2561CC0391D509195B336BF67C3F75204F77BF8D1ECBFA859933B88649B3450009
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Set preferences (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME=".g2gy6"></A><I>Edit menu - Preferences</I></P>..<P>Various program options can be set by selecting Preferences from the Edit menu.</P>..<P>The Preferences form allows the program to be customised in a number of ways:</P>..<P><A HREF="fm5a7n.htm">Color Options</A></P>..<P><A HREF="fm6i4a.htm">Scoring Options</A></P>..<P><A HREF="fm9sfm.htm">Analysis Options</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm31o3.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	442
Entropy (8bit):	5.324339252115576
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfssMeqqWZyWv9XRQB9BS5U:WlSZ6WqWwYmjB8U
MD5:	ADC2880842CAB455463FBD1072E97458
SHA1:	AAAE0A8FE1C60DE08018F8AF9DB0A86FDE07FAF1
SHA-256:	4076DB50196D5AB5DB815D6612CD99B4253BD395EA1FDA3912B7BE631A1664F6
SHA-512:	035178E7F24350BC37CE9279C66C0C0EC83BC753993C024FC4D525EF53C64ED6902F25C94FBB18E74F563686B1BE1C6954DEEBD0EE60EB5C62E0930FD3CF9400
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Menus</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="menus"></A>Menus</H3>..<P><A HREF="fm8igl.htm">File menu</A></P>..<P><A HREF="fm57n9.htm">Edit menu</A></P>..<P><A HREF="fm3ncl.htm">View menu</A></P>..<P><A HREF="fm5sol.htm">Help menu</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm34xa.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	510
Entropy (8bit):	5.3959573376704855
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfnEFssMeq1+SF3qt+TI2xJCk1uZKhndeF/:WlSZ6/1pBqt+TFJP8gndeh
MD5:	89F360D3917E16DB4038FBD5F6A0F8FE
SHA1:	71E396A9BC0F5635C58A34593A2F35FF17A72F07
SHA-256:	EBCC651951C84400F6558A51ADE53178BA89EA065ED6B6F20CAB7ABCA3B9633D
SHA-512:	0BCC4D58CAE9CEFC9937707C2F83E14A5A85D0DF3EB3598D695AC7293D309FBC8A6626D85933B9EFACF97B5DADBBA74BD6F7F8883C9F170F67D33949E16C4ED2
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Color Vision</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H1><A NAME="colorvision"></A>Color Vision</H1>..<P><A HREF="fm83zi.htm">Color Perception</A></P>..<P><A HREF="fm5l0u.htm">Color Vision Theory</A></P>..<P><A HREF="fm1nug.htm">Color Discrimination BASICS</A></P>..<P><A HREF="fm8siz.htm">Defective Color Vision</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm359j.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	710
Entropy (8bit):	5.261019547793298
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepf7aWsMeqBfRSUtKJ0FjBRadpOaeNIUcOY7aPxjGf4u:WlSZ6XL/WKIPQ6f4u
MD5:	8757FE967B3B2016702801F7DFD956FE
SHA1:	2C7895603A296B7F74AC68B0CBB75A01BA998E53
SHA-256:	E47A9E1AA87B8A6CF1A2E170AE26C1AB788E896C77DF4D9D82FBFDC88D7A2C7E
SHA-512:	F4C01326DCE5D7DA776FA0ABE7BA4FA374E291D9B39210A89EDD9F74AE58C7419A00F01FEB8429BE2D930FB9AD56E42D2CAB945334C2A2EA25121F01B159FB9E
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Scoring</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="scoring"></A><I>Scoring</I></P>..<P>Scoring the FM Hue Test manually is time-consuming and somewhat tedious. The computer program has been developed to simplify and speed up the scoring process. For information on using the computer program, go to the section on the <A HREF="fm00c1.htm">FM Hue Test Scoring Software</A></P>..<P>If you do not have a PC and need to score the test manually, please contact Macbeth for a set of instructions and score sheets.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm36re.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (602), with CR line terminators
Category:	dropped
Size (bytes):	1410
Entropy (8bit):	5.14490057467229
Encrypted:	false
SSDEEP:	24:WlloCZ609xzehIDs0htrKC2DS1VWKcOVbGi62y39oG347VRyveUDDVl3eeJaZOK:qloCZ6Oz8qsatrKC8eDXdGi62Cb8A/3s
MD5:	C10886CD5FECD22821B239DF51ACFEE0
SHA1:	6F1A0DA1C6A4458962FE35B2FE0A04E5E0C5F4AE
SHA-256:	7633A224B1710353AFB3A1F7EE18622F58E392823B17606F5C74F245FE8484D0
SHA-512:	809B5FAF868EE7E5BF58E73A1696D7731F327D5E3D8C55A11ADDED37B0BA614F7B183AB00AB0A4CDB23190E46E82367608805BE383BCD6A6C022D4336BF835F9
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Entering Cap Order</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="2keizvz"></A><I>Entering Data (View/Arrange) <IMG SRC="../images/bm8.gif" ALT="" BORDER=0></I></P>..<P>The input screen is displayed by clicking on <IMG SRC="../images/bm8.gif" ALT="" BORDER=0> or selecting Data Entry Screen from the View menu.</P>..<P>The input screen shows a schematic representation of the FM-Hue test with caps arranged in four boxes.</P>..<P>Initially caps are shown in the correct numerical order. To score and analyze data obtained with the FM Hue test, the order of caps set by the subject is transferred onto the screen by simply <I>dragging</I> and <I>dropping</I> the caps on the screen. This is a standard Windows method and involves moving the mouse cursor over the cap to be moved, pressing the left mouse button and holding i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm3be6.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (1625)
Category:	dropped
Size (bytes):	2433
Entropy (8bit):	4.923089130355738
Encrypted:	false
SSDEEP:	48:qSZ60YOQquZ/JBL0EHMgh+KCoxGh6Aj2keoJ+dMtll4N99R3F:riOA/JB0CAaotlyHF
MD5:	F54225B56AD7DA48538385472CA4E2D3
SHA1:	4FD2DF530E47A3C7183DA8A0E5631E0554596A79
SHA-256:	024CE65D864FA810308156E82C27101FC1F9E3F89B2022C0FEADEFEB0DDC6A94
SHA-512:	CD8D18C22E61BE7EF527FE166D222FA059B9CF9C439E051155B260815802B58AF62B52550FA89222B4C472CA869203E8EC35103DE664F80E0992F3FADBB84550
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Modern Day Theories of Color Vision</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="modern"></A><I>Modern Day Understanding of Color Vision</I></P>..<P>It was not until almost 100 years after Young and Helmoltz originally proposed the trichromatic theory that the existence of three kinds of photopigment in cones was confirmed (Brown and Wald, 1964). Using a technique known as microspectrophotometry, evidence has been found for a short-wave receptor (blue) which absorbs light best at 419 nm, a medium-wave receptor (green) which absorbs best at 531 nm and a long-wave receptor (red) which absorbs best at 558nm (Dartnall et al, 1983). The three types of cones differ in their overall numbers and their distribution over the retina. It is estimated that the normal retina contains 54 percent medium-wavelength sensitive c

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm3fjn.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1406
Entropy (8bit):	5.087519906127907
Encrypted:	false
SSDEEP:	24:WlSZ6MaaHU2OvlToCuz0mXVRliSiRr3jxLIyLU5eYM5LeLPSMG/:qSZ6O9MlToPjFRziRrFLImgB4LgSMG/
MD5:	133C2D1C5DB25D3BA0AD7F5C3DFFC318
SHA1:	700297C8E1102561B2EF9B5968FFCBDFEC1198A5
SHA-256:	18EB93BA9F896DE2A51446353F01F1745643907FB2ED9744D20C65D40584B8C8
SHA-512:	7006F5D962E9769044B3A01C3843332A752F849A05D931D5E4F63F951A0AED650139FA121A53A0E0E2A1097391FCC12C75E8D3A2FAD11A49A9665C43D2FF6533
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>View Records</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="view_records"></A><I>Viewing records stored in the database <IMG SRC="../images/bm20.gif" ALT="" BORDER=0></I></P>..<P>Data saved in the database can be retrieved, edited and displayed by simply clicking on the database icon <IMG SRC="../images/bm21.gif" ALT="" BORDER=0> or selecting Database from the View menu. A list of the records currently held in the database will be displayed.</P>..<P>Records may be sorted according to Name, Reference, Date of Birth, Date of test, File number or Comments by clicking on the appropriate option button in the <I>Sort by</I> panel.</P>..<P>To select a patient record, click on the required record so that is highlighted and then click on the Select button. The data for the selected record will then be displayed on th

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm3ncl.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	824
Entropy (8bit):	5.398231046189484
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfMsMeqpJp2F9IDAnLEnMEI5OK5hu0sSWf1hZhhKR1s:WlSZ6GpbcIKLrrOCk0NWfPZrH
MD5:	90B964A224FF78F94A4F4F0AE9F96547
SHA1:	D664CD27287FBFAEFB1F0AC86FFA78C08348DE47
SHA-256:	F3859DCBD06528AA7AD645B9233436864F4675625633A487D8C097D5D89EA849
SHA-512:	83F4344BFC3E3978C0F10983816942D9677EFA58885F204D7BF66D47AA32FFBAFEC9D9EC42407561925FA7FC199AC12EB2FD6511AB7BC4575848463E14EF5CF4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>View Menu</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="view_menu"></A>View menu</H3>..<P><A HREF="fm36re.htm">Data entry screen</A></P>..<P><A HREF="fm2lyr.htm">Error scores</A></P>..<P><A HREF="fm6d0t.htm">Personal Information</A></P>..<P><A HREF="fm3fjn.htm">Database</A></P>..<P><A HREF="fm4two.htm">Polar graph (usual format)</A></P>..<P><A HREF="fm7560.htm">Linear graph</A></P>..<P><A HREF="fm120e.htm">Show CIE Chromaticity diagram</A></P>..<P><A HREF="fm05rb.htm">Show Protan confusion loci</A></P>..<P><A HREF="fm4srr.htm">Show Deutan confusion loci</A></P>..<P><A HREF="fm4b3b.htm">Show Tritan confusion loci</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm3rcn.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	733
Entropy (8bit):	5.257828609022488
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepfb7sMeqdzb8AFqBRcsfwS1/znULScSzMc8ITeaPZg9NbOQjEKf:WlSZ6DndzbPqkv22SOtePo0Qjjf
MD5:	BBA47CBAD6547DCF402EF5899922FB97
SHA1:	691DF9B44970B13D100BE3B73DFA69F9E8C7A5FF
SHA-256:	CE61489CC6711B7B355E92237C32D475604719288B1D16B377C3B01AA8AD14E8
SHA-512:	CCF35F758B8BA2DA49A638B68822737E179FEE732FD3757D153F5E4E2437816B2A9106D92F5C48E5C1268D124E9F1CAF15C1411E4B6651B63FF3CCBC28891216
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Overview</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="overview"></A><I>Overview</I></P>..<P>The FM Hue Test Scoring Software has been developed to speed up and simplify FM Hue Test data input (cap order) and to provide a powerful set of analytical and administrative tools.</P>..<P>Results can be saved on disc, displayed in polar or linear format and filtered / analysed according to a variety of algorithms. The program is also capable of producing high quality graphical output on a wide range of displays, printers and plotters.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm3ueq.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	951
Entropy (8bit):	5.463654319767326
Encrypted:	false
SSDEEP:	24:WlloCZ65rX4Os2BJvCQWPEk0Uq4w2kI+h1dNbHCVd:qloCZ6FIOWPZkIkt1dxCVd
MD5:	EF17225EDD4AD11E9DE39B38BA2979FA
SHA1:	F50E4CCE88AC680AA47C13E5DF2DE0669BD50B0E
SHA-256:	1128E54A905B883E3FA96C823D9519C699371D5305055BAC31955EFCEDF1B1B2
SHA-512:	8FB1133EF976AFF50016CA2CC3484AAD3359ADBE7FC52C0BE1B03143590ED83A511F90F26209FC60089FE2ECD654572569BBD6926EBC1EBBD9483878676B8399
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Toolbar</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="toolbar"></A>The toolbar</H3>..<P>The toolbar displayed at the top of the screen is designed to allow easy access to the most frequently used functions.</P>..<P><IMG SRC="../images/bm22.gif" ALT="" BORDER=0>Display help</P>..<P><A HREF="fm7n8x.htm"><IMG SRC="../images/bm14.gif" ALT="" BORDER=0>Print results</A></P>..<P><A HREF="fm3fjn.htm"><IMG SRC="../images/bm26.gif" ALT="" BORDER=0>View records stored in the database</A></P>..<P><A HREF="fm36re.htm"><IMG SRC="../images/bm8.gif" ALT="" BORDER=0>Entering data</A></P>..<P><A HREF="fm4two.htm"><IMG SRC="../images/bm10.gif" ALT="" BORDER=0>Analyze and Plot Data</A></P>..<P>All of these functions are also available from the pull down menus.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm4b3b.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	834
Entropy (8bit):	5.228525446711539
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfPPsMeqMxFWVuUGQeynlMBiBdgVXRWeT8deF9K1LnS+J5TNT+x3:WlSZ6LZUULeICIBABWZdeur7nT+d
MD5:	080B5C6E3694538856784FD9B2E059F6
SHA1:	45491F405F18C07815C11875E7C7E7E562A9204B
SHA-256:	24054D217FCEC0EB368FA6825BF718B4906A02C475E78BFF9E84116ED9F54493
SHA-512:	A2ADD9D018CADF4FC18BF0460BF929D525D63E8D31601C7DDE51022C218752626FD48B90C4A44D9EA7EED2F161783DFE8F7B9FB707A4E30BCF58E57B0F6882F5
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Tritan confusion axes</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="try9gg"></A><I>View color confusions for tritan defects</I></P>..<P>This option is selected from the View menu of the computer program.</P>..<P>A color representation of CIE color space is displayed with isochromatic confusion lines superimposed. Colors lying along the confusion lines will tend to be confused by individuals with a tritan defect.</P>..<P>For more information see <A HREF="fm8siz.htm">Defective Color Vision</A></P>..<P>N.B. The colors displayed are only approximate and will vary according to the color capabilities of the monitor and display card.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm4c81.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ISO-8859 text, with very long lines (840)
Category:	dropped
Size (bytes):	5098
Entropy (8bit):	5.261947726103011
Encrypted:	false
SSDEEP:	96:rHQmssTVeX1Kw7UBT7OmRGShMIXZgSk8XzCLzlyk0UFVBOlCWvaR4:rwKTVeX1R74USjkDaCR4
MD5:	273828C98BCBBCE9497AC68156F595A0
SHA1:	FB6075A0DFF9208309EB26FA48DAA74A02132FEF
SHA-256:	7683EDEE111B40B3E2D10430AEB6E0456D82CF923774B477E863427E7A4AF5A9
SHA-512:	5EB5833C48CA116511B1FC06D06A922DA2A13B9975DA68624B31428C2F0A9C98A5BB3576922A8EA408CF3CF481AB63A58142CE8C4BD4E68ADF78B952B264F1E3
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Normative Data</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="normative_data"></A><I>Normative Data</I></P>..<P><B><U>Distribution of Total Error Scores</U></B></P>..<P>The distribution of initial error scores which may be anticipated from particular populations is indicated in the following table. The <B>unselected</B> column shows the errors which may be expected from each percentile of an unselected group of people aged 15 to 45. The next column, '<B>in-plant</B>'<B> applicants</B>, was drawn from 300 tests of employed personnel applying for promotion to color control positions (shader trainees, laboratory testers and laboratory technicians) in a paint manufacturing plant. The last column, <B>experienced</B>, is accumulated from tests on 150 personnel with three to twenty years experience in the color control

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm4eox.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (454), with CR line terminators
Category:	dropped
Size (bytes):	2921
Entropy (8bit):	5.067136786531387
Encrypted:	false
SSDEEP:	48:qloCZ6A14E52NYvwQVvABgsMX2JwbvCVHs7picwMDjFyAoK6zl9Nxris/HkWDRfB:CAo7tuwzCVHCbkK6znLrisUy
MD5:	EF362738E6E276AA44561432CAE06953
SHA1:	9DA5FAEA290925BBAFF5CB396580BB3B08B17286
SHA-256:	BE8D6B17605DE4E8FE74197737F334555A37BF6905B2BA10439D7674BA616FF2
SHA-512:	8D0F280BF64EAC7960E5027BD98745B273F97FD383F87A63D0E70CDC091685BA2473F469C7B44A05A3806EA382C1515725A2FE08F30059D356F96281699159F1
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Displaying Data</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="displaying_data"></A><I>Displaying Data</I></P>..<P>Data may be plotted in two formats: Polar Graph or Linear Graph</P>.<P>These can be accessed by clicking the analysis button <IMG SRC="../images/bm10.gif" ALT="" BORDER=0> in the toolbar, or by selecting. or selecting Polar Graph or Linear Graph from the View Menu.</P>. .<P><A NAME="polar_graph"></A><I>Polar Graph </I></P>..<P>The cap numbers (1-85) are represented by the radial lines. (Note - the angular spacing of the radial lines is not uniform - this is intentional).</P>..<P>The Error Scores are plotted for each cap, with the inner circle representing a score of 2 (caps in correct order). The circles corresponding to error scores of 5, 10 etc. are darker to assist with the interpretation of the

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm4eus.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	511
Entropy (8bit):	5.378824446452878
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfLsMeq1yLR6yiffVTTZC0:WlSZ6PgLR65ffVTTw0
MD5:	5C44E32EEFFC400F2C7009E891834EB0
SHA1:	4BB88D2E2DAF7DC3F1D6D396F5C6D867AF69C37F
SHA-256:	0CF79794940790A88EB589A0F2C07697A21C3A6DDBC9D83C30A6EEB7468F8AC5
SHA-512:	FAB0E7DD8798A3DC5FE977FF65F1F8F427E1803674C7343C16F6B8980EA15191B3D120EFDA59FC9ED1E737B320721BA0885ACFEEE316C1317CEF19246910A927
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>FM Hue Test</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H1><A NAME="fm_hue_test"></A>The FM Hue Test</H1>..<P><A HREF="fm2u5h.htm">Purpose of the FM Hue Test</A></P>..<P><A HREF="fm52sz.htm">Materials</A></P>..<P><A HREF="fm97vy.htm">Administering the Test</A></P>..<P><A HREF="fm0f1q.htm">Principles of Construction</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm4ndz.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (486)
Category:	dropped
Size (bytes):	1433
Entropy (8bit):	5.013375871434199
Encrypted:	false
SSDEEP:	24:WlSZ60zshc2m65O21W/FhIakRUj8LQacthcg13nET9akMFazvy5o5qaPR2ohx:qSZ64J2etwjQZMCY1MFazhR2ohx
MD5:	E1042B5BAAC321D04FB489C93341DD10
SHA1:	0FF564B97CF591D603792C456C39DCFC7423DD4A
SHA-256:	3D9954039957F8CB4FE9D5E0C5CBC1219753D178396CD3AAEAD90C8E1CF1185A
SHA-512:	0D4022719BC97B9BF5510782A56D1F94375078CA9FFE1E3E235A94E19D802DB83FD62EB6727AF29608746C1E1D057509D32FCA32C2D46EF0B4A34DD93EBB555E
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Lighting</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="lighting"></A><I>Lighting</I></P>..<P>Reliable results cannot be expected from this test unless standard illumination is used. The illumination should approximate 6,740 degrees Kelvin (Standard Illuminant C or average daylight) preferably at 25 foot candles or more. Equivalent results can be achieved with using a tungsten halogen daylight source at 6,500 degrees K, such as the one found in the SpectraLight II and SolSource manufactured by Macbeth. </P>..<P>If natural daylight is used, the test should be given near a window illuminated chiefly from the north sky, lightly to moderately overcast. Daylight Fluorescent (6500 degrees) may be used if necessary such as the one found in the Judge II from Macbeth. Since natural daylight is variable, the results cann

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm4qex.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (312)
Category:	dropped
Size (bytes):	1398
Entropy (8bit):	5.353935142547625
Encrypted:	false
SSDEEP:	24:WlSZ6d6N6D77B+d2Zm4ZrZ8xySvidQiid3Oid5QdidfoB3ur+H8DJyYtCMx:qSZ6lvu2M4JxvQfTC8gxurpbwMx
MD5:	ED6EBC4FE72232406C961D3CF127D3E1
SHA1:	B46E178DE8637F1BA0E42E6F307F5F044288F9A0
SHA-256:	2CE912E585D45494DCE71142BFB84E3843F1E728CD1AFCC2761B053DA9AA02F0
SHA-512:	1F0E4BB6DD1F83A04FCE843A5F6B4252555723A65FFD758AD46121DBC1E058371749B6C569F59A0FB07CBAF4266CB65874086DF0E747EBB321E47A6C9A78DD92
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Dichromacy</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="dichromacy"></A><I>Dichromacy</I></P>..<P>Dichromats have two cone photopigments instead of three and are able to match all spectral hues using a mixture of just two colors. They are further classified as protanope (long-wavelength pigment missing), deuteranope (medium-wavelength pigment missing) and tritanope (short-wavelength pigment missing).</P>..<P>The prevalence of the various forms of dichromacy are as follows:</P>..<TABLE cols=3 width=303>..<TR VALIGN="top">.<TD width=37%><B>Type</B></TD>.<TD width=31%><B>Men %</B></TD>.<TD width=32%><B>Women %</B></TD>.</TR>..<TR VALIGN="top">.<TD width=37%> Protanopia</TD>.<TD width=31%>1.0</TD>.<TD width=32%>0.02</TD>.</TR>..<TR VALIGN="top">.<TD width=37%>Deuteranopia</TD>.<TD width=31%>1.1</TD>.<TD width=32%>

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm4r8z.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (774)
Category:	dropped
Size (bytes):	2060
Entropy (8bit):	4.995219875919159
Encrypted:	false
SSDEEP:	24:WlSZ65257t5kNMyJgYaJUYREDWpGq1UdgfO0XWKsQesuw8hW1eQou3BJUBke/T+e:qSZ68AayJ2hNG8WV7s2w3v8iee9yMje
MD5:	D484198175B8133EE69F56E16DFE1E28
SHA1:	E319B3123F09B6F470923DFCDB041AAF5F616F04
SHA-256:	4158779C1EC75B8E8F266390DC1EE4381B33B11D4604531E45F565348525BB74
SHA-512:	7FB5C48DF3E69C02C46529DE8FE4202A62FB48CD9562D7E23F2A9C5BD972BFFB9F4B525B25CA5E7CF3F3E3439AB26F3D88E49169258DF0A09D1902B4BEB24490
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Dichromats</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="dichromats"></A><I>Dichromats</I></P>..<P><IMG SRC="../images/bm3.gif" ALT="" BORDER=0></P>..<P>An individual who has two photopigments is called a <B>dichromat.</B> The absorption spectra of the two photopigments (P1 and P2) peak at different wavelengths but overlap over a considerable portion of the spectrum. If the subject is shown two patches of light, one patch consisting of <I>A</I> and the other <I>B</I>, it is now impossible to adjust the intensity of <I>B</I> so that it will match <I>A</I>. This is because the number of quanta absorbed by the two photopigments for <I>A</I> never equals the number absorbed by these same photopigments for <I>B</I>. No matter how the intensity of <I>A</I> and <I>B</I> are changed, they never have identical effects o

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm4s11.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	700
Entropy (8bit):	5.334701284674859
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfzdK0sMeqvRZBaFtUZJ6eFuQMH963Jii/3DL4KJoczg:WlSZ6tvRZAPQQeKH4ii/Ygbzg
MD5:	16E8C949E498069540E1A79A75630C97
SHA1:	B770D32276F1814477419C9697A8C8045CF4FF2C
SHA-256:	0B99E1F2C854276DC118F380E552C8BBBC581ADD633A91F24936522E25D1774C
SHA-512:	2E2CCDB95D4834231867A9E8ECE08C32E45F78713A369A806BF11B03611C16E9C077A52530CFC06A893397C584B5F140F36EF520FC88B99E26136BE484D3C5B3
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>New Record (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="5igc0ze"></A><I>Edit menu - New Record </I></P>..<P>Selecting New Record from the File Menu resets the order of the caps to the correct numerical order.</P>..<P>This can also be achieved by clicking on the <IMG SRC="../images/bm15.gif" ALT="" BORDER=0> icon in the toolbar.</P>..<P>If the current data has not yet been saved, a warning message will be shown asking if the current data should be saved before the cap order is reset.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm4srr.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	842
Entropy (8bit):	5.249181144618396
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepff2sMeqpxFWVNUGQeynlMBiBdgVD8PT8deF9K1LnS+J5TNT+x3:WlSZ68s/ULeICIBA4Ideur7nT+d
MD5:	78EEC1C5F83E5AE595AB570AC3451D63
SHA1:	7B8645B048D8C95E60C1821403E3D83AEF99DCD7
SHA-256:	DED660D563AF4F8542F9C6AFBFDA1C615B3CB521BE66EC346935807F387FAC98
SHA-512:	C4BB4C2FA4055719057890733C950235FDB816DB87B5BB0923D443CF538DE29FF4473B8939EA470B33E51FB7D04D949DECD2E10006EC41CF64F544C4ABCAD9E2
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Deutan confusion axes</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="df09gg"></A><I>View color confusions for deutan defects</I></P>..<P>This option is selected from the View menu of the computer program.</P>..<P>A color representation of CIE color space is displayed with isochromatic confusion lines superimposed. Colors lying along the confusion lines will tend to be confused by individuals with a deutan (green) defect.</P>..<P>For more information see <A HREF="fm8siz.htm">Defective Color Vision</A></P>..<P>N.B. The colors displayed are only approximate and will vary according to the color capabilities of the monitor and display card.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm4two.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (454)
Category:	dropped
Size (bytes):	2382
Entropy (8bit):	5.089178054796509
Encrypted:	false
SSDEEP:	48:qSZ6j8HOSjzWBgsMX2J9EbvCVHa7picwMDjFyGoKpis9HSMDRdWZSkji2:rFHO8tumzCVHIb6Kpisuf
MD5:	FB8D980999A670389F45E47869989DC0
SHA1:	A9C27FC93979436C648EFACD19C1F6DA0DAE41A8
SHA-256:	F7DDECF60F51CC761001D2821DD71156B584A02FADE19EE1E8BB334FA4C759C6
SHA-512:	CA906DC7DD4B8BFC1AF18183FA0453BA2CDB3E01A204103249A4F1A4D7AA59861E34DAD3C3649E73B7C7084A013C1AA7B29F5FC89A148D667CB7AFA8DC2DA19A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Polar graph</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="polar_graph"></A><I>Polar Graph <IMG SRC="../images/bm10.gif" ALT="" BORDER=0></I></P>..<P>A graphical representation of the data can be displayed on a polar graph by clicking on the <IMG SRC="../images/bm11.gif" ALT="" BORDER=0> icon in the toolbar or selecting Polar Graph from the View Menu.</P>..<P>The cap numbers (1-85) are represented by the radial lines. (Note - the angular spacing of the radial lines is not uniform - this is intentional).</P>..<P>The Error Scores are plotted for each cap, with the inner circle representing a score of 2 (caps in correct order). The circles corresponding to error scores of 5, 10 etc. are darker to assist with the interpretation of the graph.</P>..<P>A subject with 'perfect' hue discrimination would be able to put

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm52sz.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (420)
Category:	dropped
Size (bytes):	1478
Entropy (8bit):	4.927547647151434
Encrypted:	false
SSDEEP:	24:WlSZ6VSmVuqt4yy4QWa1i5ymCIanMO/FGQ6W5HfEEdBDzI974J2Nv4rNdF54l35:qSZ6VjrhyIa1eJNONGlidRW7u2Nqdn4f
MD5:	1598F67139DD4BB4A27356A6F6F8A6CF
SHA1:	13176535BDFD3C18807C55DDEC8D60F3B50D9C93
SHA-256:	58375FB674DF4A7D4C8DE7A588E7A7E63F9374739CD02EED231EF73B4F660B26
SHA-512:	5E1D4C0693424A10DD5A7B16D704D5EB5DC2C2719500F87E7BAA3A14AC7F06B01855006ADE8396B1C21DEDB28D58CE82DF8AA584C91466BCFF17696BF76E309D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Materials</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="materials"></A>Materials</H3>..<P>The FM Hue Test includes a total of ninety-three colors mounted in plastic caps, housed in four separate cases. Each case consists of two hinged panels which contain a quarter of the eighty-five numbered, removable color caps. (Two caps are repeated and fixed as pilot colors at either end of one panel in each case, making a total of ninety-three caps.) </P>..<P>Pigments in the color caps are made from the most stable materials available. However since no chemical is absolutely permanent, the caps should not be unduly exposed to light.</P>..<P>The matt surface of the color caps is necessary in order to give the same spectral characteristics from any angle, but it is sensitive to fingerprints. It has been found that slight

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm549z.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (389)
Category:	dropped
Size (bytes):	953
Entropy (8bit):	5.147696898037409
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepf7gKMWsMeqBTKGFW1gyyHypVDMomENSkYvu2VFGjuDklCoSpeJz:WlSZ67hPigyyHKPhoZvERIR67OI14RY
MD5:	AC590A27C6E958A26D468E6C1FD3EB8A
SHA1:	10F38E91D6003EF55DC0DD3ECC79BBA9FE815599
SHA-256:	29D6A5D95D203DAA09D30FE8A0B55324ACC9916F3AE0ABECC944765264750B27
SHA-512:	CD6FC4862F1D10BC217B06751358560A2985FC712D2E2768351AB729F096C1220219B4CD7D28208D15D23B0FB07BB3F684D28ED1053762CE43722AA855F43D7D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Scaling</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="scaling"></A><I>Scaling</I></P>..<P>The standard FM Hue chart has a scale maximum of 14. While this is suitable for most purposes, error scores for individuals with very poor hue discrimination may exceed 14 and will therefore extend beyond the graph. </P>..<P>The current scale maximum is shown in the Scaling Panel. The scale maximum can be changed by simply entering a new number into this box or by selecting Auto. When the Auto option is selected the scale maximum will be set automatically to the maximum error score for the current set of data. The scale maximum can be reset to the standard value (14) by selecting the Standard option.</P>..<P>The scale maximum must be in the range 4 to 50.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm57n9.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	701
Entropy (8bit):	5.402047491130126
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfxsMeqxy9JSHY6ckZSLzQ05umSsjrOzCC:WlSZ6B4JSHYHk8vQ05fzvuD
MD5:	023A9031812E8F672145F20FDB063568
SHA1:	DB67545547E7EB5F4E2266E780718D582FD2A08F
SHA-256:	8EF2C4C2CA4F0920DBCDB28DE2FCFC1F66258491C1DD21E2496385E5E1B0BCE4
SHA-512:	1552C04118E84251A8B7992A4A774BD0D543F08C450738EF4CC154ADD45BDFEA03B4642C9F7205FF4DB9F3A112080E8842D684237E5E9DA9854AC7B66101FD44
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Edit menu</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="edit_menu"></A>Edit menu</H3>..<P><A HREF="fm0j5b.htm">Undo</A></P>..<P><A HREF="fm6q01.htm">Copy graph</A></P>..<P><A HREF="fm5tbb.htm">Copy scores</A></P>..<P><A HREF="fm2bco.htm">Copy Name and Analysis</A></P>..<P><A HREF="fm4s11.htm">New Record</A></P>..<P><A HREF="fm6rj8.htm">Select Record</A></P>..<P><A HREF="fm68mt.htm">Delete Record</A></P>..<P><A HREF="fm59v4.htm">Save Current Record</A></P>..<P><A HREF="fm2y9i.htm">Preferences</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm59da.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	605
Entropy (8bit):	5.279621065676119
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepf9sNK0sMeqruvBIs2/qs5FRrv+w+:WlSZ6Yr4b2HMp
MD5:	D9F1F9370FDD2C27C03087A2AD04550A
SHA1:	6DB338CA74391F89A302DC0E8DA1E3D1720E400A
SHA-256:	643492C97D20FC8BF8E511BB5E19A8A9778044BEA2CE449C2FD724737575C93D
SHA-512:	DFB82AEE127CDFD6D4CBC5B4C9D514184CCE29850E349F2DAF8998B5D4DB3EDB41C7CC4F4B5CCB00B314CAE0B957B441570C65CCC29E652F4BFD5E59A5115BC3
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Open (File Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="file_menu_open"></A><I>File menu - Open </I></P>..<P>To open an existing database, select the Open option from the File menu. Select the database from the list displayed. The name of new database will be displayed in the title bar of the main form. </P>..<P>New records can now be added to this database and existing records can be retrieved.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm59v4.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (601)
Category:	dropped
Size (bytes):	1127
Entropy (8bit):	5.148762765260473
Encrypted:	false
SSDEEP:	24:WlSZ6IVZWdF2C7t2JH8OvIib+3KJ0XZQeb85KvmDRS:qSZ6ILWd0CxMjIkX0pQeYKQS
MD5:	B8EE54072D8DB4CBA36743CD59E351A6
SHA1:	EFE9F8075CB5A457259224D7BA3657D5F00F151F
SHA-256:	D3AC5DAFFC69644AFF5867B05EE0315A37ECB7D9C9BCD019E5A7E8606B239E9B
SHA-512:	4A91AE46006DF0058FDA2B0E066251119292C640DC72E3B1254739E227DA69C2C6CA8553881E76C4A2C3DEEC7C56BAC43497D2585B3C6BFFCF497F0FDC0EB399
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Save Current Record Record (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="2xz83ip"></A><I>Edit menu - Save Current Record</I></P>..<P>The program incorporates a simple database to allow easy access and reference to previous records. The name of the active database is displayed in the Title Bar of the main form. </P>..<P>Having arranged the order of the 'caps' on the screen so that it matches the order of the FM Hue Test caps, data is added to the database by either clicking on <IMG SRC="../images/bm17.gif" ALT="" BORDER=0> in the toolbar or selecting Save Current Record from the Edit menu. You will then be required to enter the subject's name, reference number etc. When this is completed, clicking on OK causes the data and the subject's personal information to be added to the database. This informat

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm5a7n.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (321)
Category:	dropped
Size (bytes):	857
Entropy (8bit):	5.170457077506571
Encrypted:	false
SSDEEP:	24:WlSZ6/Pe7LVP4H+u3KzGBLCZmaj66DHd3d3:qSZ6ON4H1K65CZmaj66D9t3
MD5:	F2B50273A38B8754901B04DCC4E6BBD8
SHA1:	583A49979F59B85D00483A10D6CF00AEBA7BE5C4
SHA-256:	BC465108CD0D46B8DA044C878B5705D519A2C3898CAEA9382AE415B466737F17
SHA-512:	AAB4FF204C9CC0711E49F61C3D7A2CF513B19257F9D0416FFA6D059688DC567C0BDAB86D6388281D80843D02367CC3802EF71E9377C51F9DC338B63A842BAD7A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Color Options</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="color_options"></A><I>Color Options</I></P>..<P>The color used by the FM Hue Test is reproduced (approximately) on the screen to aid data input and the analysis of polar and linear graphs. However, if the computer being used is unable to display all the colors, color dithering is used. This can reduce the legibility of the cap numbers on the data entry screen.</P>..<P>If this occurs, color can be disabled from the<A HREF="fm2y9i.htm"> Preferences option</A> which is accessed from the Edit menu. The caps on the input screen are then displayed in grey and color labels are added to the graphs.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm5asz.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (792)
Category:	dropped
Size (bytes):	1098
Entropy (8bit):	5.0141340803092485
Encrypted:	false
SSDEEP:	24:WlSZ6ysHGmF6gv5VduIF9e/So4LVcFzeYac:qSZ6JVd/Fe4Sac
MD5:	718315A67420BD174A72DBDE54EAE703
SHA1:	825CC820696A72DBC09BEC15A7D733EAAC828E5C
SHA-256:	8CDA48100A9C7D439A39C649DB4314DB89F2C37C1DD8535D576A70CFAE5B1917
SHA-512:	8128353CD6DC51898C1ED1457D14B25C83EBE65CDD67BB9B6470D72744BBFDDB39867821342F3D8882FA0591CE55051EC8B4B97D29ED08741B75D4DDFF84805D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Newtons Experiment</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="newtons"></A><I>Newton's Experiment</I></P>..<P>The first insights into the nature of color vision came from Isaac Newton. In his room at Cambridge University, he placed a prism so that sunlight shining through a hole in the shutter of his window entered the prism. He observed that the sunlight became transformed by its passage through the prism into a spectrum of colors. He also noted that the sunlight could be reconstituted by recombining the spectral colors. Newton concluded that sunlight is made up of each of the spectral colors. Later work showed that these spectral colors differed in wavelength thus demonstrating for the first time the link between wavelength and color. However, it was clear to Newton that <I>... the rays ... are not colored

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm5dgl.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (330)
Category:	dropped
Size (bytes):	916
Entropy (8bit):	5.268497665890047
Encrypted:	false
SSDEEP:	24:WlSZ6t3u/guja8PW6TNh+BF/RUeUnnMuV5oW:qSZ6VCtO6+j/RdUFj
MD5:	7ED51437F8EC2173768AD7DFF0E580E2
SHA1:	9185C0F227232BDE8D8C25D283E8822E877D93F6
SHA-256:	DCA96AB3FEEA5D59CA3D2D240EDED15033B6C14602F2DD25B5902708DB75637E
SHA-512:	507187BFD03E642E03EF5FC3E2292ABE261914F29FCB7821CEA9EF204336B90E19C808D68113BF514305CDC984D31077342D542B02681C0E05FDCB04B514E4C9
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Zone Theory</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="zone"></A><I>Zone Theory</I></P>..<P>Both the Young-Helmholtz theory and Hering's theory could be supported experimentally and while both theories explained certain color phenomena, neither provided an adequate explanation for all subjective color experiences. The two theories were reconciled by the <B>zone theory</B>, originally proposed by Donders in 1881.</P>..<P>According to this theory, color information is processed in a series of zones in the visual pathway; trichromacy occurring at one level and opponency at another (see below). This concept forms the basis of modern color vision theories.</P>..<P><IMG SRC="../images/bm0.gif" ALT="" BORDER=0></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm5fw3.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1236
Entropy (8bit):	5.205746040930025
Encrypted:	false
SSDEEP:	24:WlSZ6mJiySKp1GHRE0vFnHzxDFhLA1ZciDl8HFXdvkPiDF3UgQnWF7BKu4R2hr0d:qSZ6QSwExFnWDciyXdSi9QWF1KPAOP8o
MD5:	78A9D9EE7E2BAC30E1D4981B3B0E5B37
SHA1:	4BA4FC7857EE5CB5CF092405D57617EC627D79B5
SHA-256:	55AC012EB532EE6B4D182EC6F446439638405FB226B0CBFCFDECB8C539795193
SHA-512:	3917087D7451FC8D1D1C2B5F2723B3F59504D6287E62FA8D86EC316AE1868FC07628DF1ABDB1190E9289072B5D603A3A631CBA6CBF9F1CFB3C29D91440D087B6
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Vingrys Analysis</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="vingrys_analysis"></A><I>Vingrys Analysis</I></P>..<P>The Vingrys Analysis performs a vector analysis of the data and provides a series of indices describing the orientation, magnitude and polarity of the data.</P>..<P>The Confusion index (C-index) describes the severity of a color loss. A perfect arrangement of caps will give a C-index of 1.0.</P>..<P>The Scatter index (S-index) quantifies the specificity (polarity or randomness) of a cap arrangement. A perfect arrangement of caps gives an S-index of 1.28.</P>..<P>The Angle identifies the orientation of the cap arrangement. </P>..<P>The results of the Vingrys analysis are used to determine a provisional diagnosis.</P>..<P><U>Reference</U></P>..<P>For more information on the derivation and applicat

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm5l0u.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	948
Entropy (8bit):	5.389985607836416
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfnEFgzsMeqAgy5m9HJ+4m1k9pWm13R9XF3t766twt+IBHSbyIlO:WlSZ6/BV4894m13vrWt++H+1C7D
MD5:	90B240063D7DD2DF17DCDB1E9C88CDBA
SHA1:	836D8E4620E04C843451E3EC52DE9D94319260A6
SHA-256:	833B48F68273E7BA7A813852621CA42B235FA2ABCB4FA68B200EA78D4A62FAFE
SHA-512:	8D5F6D4196548940D2C943F19B9BB1CCDD6F573A1DD1AD3C89A1294E026B21749E7B78A6BBFADF2842EC70E01E7B46A8DCEE563350C1F0BA640FE8FD6488539F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Color Vision - Theories</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="30j5h."></A>Color Vision - Theory</H3>..<P>Human color vision is exquisitely sensitive. It has been estimated that an individual with normal color vision can discriminate over 7 million colors and shades. Through the years, many experiments have been conducted which contribute to our current understanding of color vision.</P>..<P><A HREF="fm5asz.htm">Newton's experiment</A></P>..<P><A HREF="fm7rub.htm">Young's Trichromatic Theory</A></P>..<P><A HREF="fm8vi2.htm">Young-Helmholtz Theory</A></P>..<P><A HREF="fm2kms.htm">Opponent Theory of Color Vision</A></P>..<P><A HREF="fm5dgl.htm">Zone Theory</A></P>..<P><A HREF="fm3be6.htm">Modern Day Understanding of Color Vision</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm5sol.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	351
Entropy (8bit):	5.446691573408966
Encrypted:	false
SSDEEP:	6:B8FQk+Hryft1q2Q8EevWR0NNEXW0Yf1J3RtsvIALjiNMeqlxMZDALejz6ACi4MmS:BMQkzLq2Q8EepfT+/sMeqicajV4ezqE
MD5:	8AB3976F88A285EB5056A5CF9F4E92B8
SHA1:	96297612E348F76D31BD21DBF1B1285984600D3F
SHA-256:	1D3437C60A5CE189863A41E2431B392879CF0A1380E409BE41E160EAA47A171C
SHA-512:	A77F2397BF8211B0A04166C8137A0B1EEAC27871EF6D3C4F4393CECC29B7D3D5C7E494E8E5546433F9E0C1C3D55FB822A15AACD1A64B407E57413F20686A8A2A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Help menu</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="help_menu"></A>Help menu</H3>..<P>Displays help files and gives information about the program.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm5tbb.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1108
Entropy (8bit):	5.095816593016971
Encrypted:	false
SSDEEP:	24:WlSZ6/ocZAfpTyA+tE621y7+q2CXQAa87Xk+P:qSZ6zZod+tEEylAvrkk
MD5:	D8B33E4915AE868F0A6002EDBB46068C
SHA1:	603FFA51805E3630347D1F6DB59303C2318D9708
SHA-256:	22CA976D4A0E2CF72CAB1C3947DC68C62C8A61FEA8F3ACEF8D0BBD5241B6125E
SHA-512:	2F07E976FECF9DE17B2618AD215D2BB70C9FF8A9E52E827F8F2B445D6DF07851CB56A6C94097E447DA6756FF7ACE74BACDE64A595144DF7FD904B660340E28B4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Copy Scores (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="2mwdzwg"></A><I>Edit menu - Copy Scores</I></P>..<P>Data (cap order) can be placed in the Windows clipboard and pasted directly into other Windows programs.</P>..<P>To copy data to the clipboard select Copy Scores from the<B> </B>Edit menu. If you wish to copy the actual error scores then select Raw Error Scores from the sub menu. Alternatively, the scores can be copied as actual scores minus 2 by selecting the Error Scores minus 2 option.</P>..<P>Having placed the data into the clipboard it may be pasted into an Excel spreadsheet for example, by loading Excel, placing the cursor at the desired place in the sheet and then selecting PASTE. Error scores will be entered into each cell in the selected column sequentially.</P>..<P>This facility al

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm68mt.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	722
Entropy (8bit):	5.189539237283799
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepffgS4dK0sMeqswFI7BkJQalZvRzSylZLMBQ7X2y0pCf56BI:WlSZ6w/tXy8ZJz4Uy0oC
MD5:	236FF059BADB24D9CA507E169D7D78DE
SHA1:	E0E11161367933B252035E505BB3DF9F42EED0A2
SHA-256:	88269A3304769019DF67B1CE3C5F3DA25814878BC8800653F8F11D84895E6716
SHA-512:	B69C0BF86AD0920A5E9C426DEDF3344708C54F7E95786A2427FAD9D5F5F4798B67A861704E3C4EFF6BB5A48196E774FE3641D8FF3F8EE401E1A79EF4F76CAD6A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Delete Record (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="3bic_yu"></A><I>Edit menu - Delete Record </I></P>..<P>A record saved in the database can be deleted by selecting Delete Record from the Edit menu. </P>..<P>Firstly a list of names currently held in the database will be displayed.To delete a record, click on the appropriate name so that it is highlighted and then click on the Delete button.</P>..<P>You may delete multiple records by selecting more than one name then clicking on the Delete button.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm6d0t.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	620
Entropy (8bit):	5.274736574478381
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfL7nlJRWsMeqNU1awn25GWJcdwnFI2CwT0dJivkRiFYOEo:WlSZ6jZMu1ahGWe4I2LAELFYON
MD5:	83E1AE5BDB9119BFE9326E731A2A3B28
SHA1:	EB2D68BE25D2D333B0F65D19F6FEB2BB20037655
SHA-256:	1D3D83603FD8FAA5B7717B885B195168535904E7F7D5C9D704E295DD3FECA98C
SHA-512:	CEAC6769D13D4BD27C955E3F7922D7C7B4879C9984D168F7B119A8C050451F59839C8969125BAE2A012E25DC1C2EC8E3339289794FA9FE19133C92979390D9E4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Personal Information Form</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="personal_information_form"></A><I>Viewing Personal Information</I></P>..<P>Personal details relating to each record is viewed by selecting Personal Information from the View Menu. The form is read only and shows details of the current record including Name, Initials, Reference, Date of Birth, Date of Test, Duration of test and any other Comments.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm6i4a.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	789
Entropy (8bit):	5.253043780386524
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfEu0sMeqdSJ9C0F2oDyMoJw4BXFuu/3okbbgWOo:WlSZ6kIXpTyMGB9okpOo
MD5:	1193395B83108C929B13329928E34FA9
SHA1:	1BDC9AB2DAC5E46FFB9FDC70EBBEAD349BB67664
SHA-256:	C90F2F401EEC80C7C2E8B7F798D628961013802A7D9657C788D5C42AB353FA1D
SHA-512:	2FEE3B549F3201FF41BEAD34C097BF1F221F53F0B37F59A0C22194749B29CA116F1D3DDC71EA048469DEAEFD37CBA8FCBB7C0F887B1E60798DF52395A76DA2EA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Standard;Kinnear;Plotting methods</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="bye5mz"></A><I>Scoring Options</I></P>..<P>There are two methods for plotting error scores:</P>..<P>The Standard method involves plotting the error score against the<B> corresponding cap number</B>. This is the preferred method for most applications.</P>..<P>The Kinnear method involves plotting the error score against the <B>position</B> of the cap. This method is rarely used.</P>..<P>Plotting method can be changed from the <A HREF="fm2y9i.htm">Preferences Option</A> which is accessed from the Edit menu.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm6m3u.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	960
Entropy (8bit):	5.198714447067879
Encrypted:	false
SSDEEP:	24:WlSZ6/hg5hikepojCbx73uCz+fJbcTyxco:qSZ6UWxNQJb2Zo
MD5:	D0B410F24B23DABD32B8D2F948F45E71
SHA1:	35D636FFBD71F213F3AC02A3C0BB76651803D108
SHA-256:	C14D9A0523C002EAC6753511EADFBE2A38269008F12DB48E0CA6280EB9697F4C
SHA-512:	EBDE9BDCCA0F590447C24D4117F49E37C09C59F4A5BE02FC2296E90092C1A44C4D34B65A8A313C9414E340810B7172DA4E33ABE2A9BE6A2AE2BFFA286B7B0468
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Export Scores (File Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="1mx2ojj"></A><I>File menu - Export Scores </I></P>..<P>Error scores can be saved separately as Text files. This provides an easy method for exporting data to other Windows programs.</P>..<P>Select Export Scores from the File Menu and then select Error Scores minus 2 or Raw Error Scores from the sub menu. The Save As dialog box is then displayed, allowing a path and filename to be specified.</P>..<P>The data is saved in the format:</P>..<P>Cap position , Error score (CR)</P>..<P>The data can now be imported by most Windows wordprocessors and spreadsheet programs.</P>..<P>Scores can also be pasted directly into other Windows programs using the Copy Scores option from the Edit Menu.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm6q01.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1148
Entropy (8bit):	5.150931772291609
Encrypted:	false
SSDEEP:	24:WlSZ6/3PpTyAIVoSKaDTNIBsvZn2MPXpA9E:qSZ6JdIVlKaWKZnL3
MD5:	B30B94D1CE5EFC033EC60C9080459BAA
SHA1:	DFCB8F5D49FD64A66A7482FFADE87FCABCC414AC
SHA-256:	4DD0654A19F8C58FBADE2D2B9547CE2B58D52FEB153DED136068179B1ECCC85E
SHA-512:	2AE912ADB5675833514B930E1CC2BAE8116DA3685DEE7F963FDD3FBE6A6DC2CAC11375C93E393F6E36B1CF598343C7237D98F180F6C63A72C523D65FD138F1B0
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Copy Graph (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="3.ne_qa"></A><I>Edit menu - Copy Graph </I></P>..<P>Polar and linear graphs can be copied into the Windows clipboard and pasted directly into other Windows programs.</P>..<P>To place a graph into the clipboard, first display the graph in the required format (linear or polar) on the screen then select Copy Graph from the<B> </B>Edit menu. Select Bitmap or<B> </B>Metafile format from the sub menu.</P>..<P><I>The bitmap format can be edited using packages such as Paintbrush.</I></P>..<P><I>The metafile format takes considerably less memory and will allow editing by object-based drawing packages.</I></P>..<P>Having placed the plot into the clipboard it may be copied into a Word document for example, by loading Word, placing the cursor at the desir

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm6rj8.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1358
Entropy (8bit):	5.054147959173274
Encrypted:	false
SSDEEP:	24:WlSZ6nN7g4wZqCmnmXVRlieL3jxLIyLU5eYM5LeLPSMG/:qSZ6n+4yqOFRhLFLImgB4LgSMG/
MD5:	7F7AC70B50CEC86D2CA55180A736C385
SHA1:	77EF42BEDC142CFBD6D852E6ED750BF1305313E6
SHA-256:	85E0256CA7B879880B3CAC64B8050DC1A4C523614B04D80D89B52043554D7501
SHA-512:	35C2EE3519740160FC827D894D77839F71D4E58C3FD65CBA5D8D373BF6D50325E5D568E650647D87F75B33B83C604487E7CFCC7372A9A62AC057FE03635B0582
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Select Record (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="11cfrtd"></A><I>Edit menu - Select Record </I></P>..<P>A record saved in the database can be retrieved, edited and displayed by selecting Select Record from the Edit menu or clicking on the database icon <IMG SRC="../images/bm16.gif" ALT="" BORDER=0> in the toolbar. A list of records currently held in the database will be displayed.</P>..<P>Records may be sorted according to Name, Reference, Date of Birth, Date of test, File number or Comments by clicking on the appropriate option button in the <I>Sort by</I> panel.</P>..<P>To select a record, click on the appropriate name so that is highlighted and then click on the Select button. The data for the selected record will then be displayed on the screen.</P>..<P>You may select multiple record

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm7243.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (891)
Category:	dropped
Size (bytes):	1752
Entropy (8bit):	4.971275634042893
Encrypted:	false
SSDEEP:	48:qSZ6kWNf0R3PB1DWMmPhHU9BEx4s486Yv:rf/BgMmPhHU+d
MD5:	A7052BED1A574EEC9FD1794C9E532DC8
SHA1:	7F65CFD50110F7B8CC9FEA773E8495F541BC6296
SHA-256:	1FA8B7AA2386AE1FF39F70FE55A1999654C9C44CF914A48FFEACA2ED57A77C79
SHA-512:	D5688B49098B396143499D84F7E98C3172E33C01CDDB05864351CDE93C781E51CA947C4665D2794A8517DBC32EC94E1D42C26AE70EE0697305DADBCD96DCEFE6
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Trichromats</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="trichromats"></A><I>Trichromats</I></P>..<P>From psychophysical, physiological and anatomical investigations, we know that cones in the normal human retina contain one of <B>three</B> types of photopigment. An individual with normal color vision is therefore called a <B>trichromat</B>. From the discussion above it follows that a trichromat requires a mixture of three wavelengths to match any other wavelength.</P>..<P>The ability to match colors using a mixture of just three primaries forms the basis of a powerful method for describing colors. In 1931, the Committee Internationale de l'Eclairage (CIE) devised a standard system for specifying colors based on the trichromatic color matching characteristics of a 'standard observer'. For technical reasons th

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm7560.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (350)
Category:	dropped
Size (bytes):	1091
Entropy (8bit):	5.3957870405139525
Encrypted:	false
SSDEEP:	24:WlSZ6xce4SzeI6J59NxisiscwRHSMDRdWZSEjiW:qSZ6yfSzo59NxZis9HSMDRdWZSEjiW
MD5:	B2A3DCE3407EED58530ADB71B3DCCE6E
SHA1:	F76FE79384BC38E584D207B9DDAEB4489BAD337A
SHA-256:	355E70B0603CD28E44B44826F14EE9F7B486528E8C431F503E2183DE088B2018
SHA-512:	0D7675AA7CA523D37F61676739C40AE1AEE2202C164832F66C2B14B8929698B0CA52168D1E4E8992F8680AE4F37F0D7C50424F0EF84DFBA632BD180FF83A1643
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Linear graph</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="linear_graph"></A><I>Linear Graph <IMG SRC="../images/bm12.gif" ALT="" BORDER=0></I></P>..<P>A graphical representation of the data can be displayed on a linear graph by clicking on the <IMG SRC="../images/bm13.gif" ALT="" BORDER=0> icon in the toolbar or selecting Linear Graph from the View Menu. The cap numbers (1-85) are represented along the x-axis and the error scores are plotted against the y-axis. This format is rarely used.</P>..<P>The format of the display and the presentation of data can be customized in a number of ways:</P>..<P><A HREF="fm6i4a.htm">Scoring Options</A></P>..<P><A HREF="fm549z.htm">Scaling</A></P>..<P><A HREF="fm29bn.htm">Displaying confusion axes</A></P>..<P><A HREF="fm5a7n.htm">Color Options</A></P>..<P><A HREF="fm2x5t.ht

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm760n.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (323)
Category:	dropped
Size (bytes):	1036
Entropy (8bit):	5.079220047740994
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepfd9KK0sMeqrfbiaPH5hjTmK10hdyjZOei/SAqs1gQ5FRr9PxgIm:WlSZ60rfbTvx10ethiqAB1hfJyd
MD5:	A76D4404E2A605FB93444DF4F1534406
SHA1:	21D91C83F4FF40DE50456596B8D9AE0486249330
SHA-256:	F936B85232AD7FE72DC94A1FFFE14978098D9D840069F7643F7C428ADBE2B177
SHA-512:	528E8A55103F3EC8B0F38A3E05128D22DB156F2116D6F0A6CB0AB7E0C408F9D06C71DAA3EB5AD782FE8800DC62495A622E359F2A48D47FF37D15EC99F85A661C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>New (File Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="file_menu_new"></A><I>File menu - New </I></P>..<P>In some circumstances it may be desirable to maintain more than one database. For example, in a large company, separate databases could be kept for each department or division. Within a hospital, it may be desirable to segregate records according to various criteria e.g. diabetics, inherited color deficiencies etc.</P>..<P>To open a new database, select New from the File menu. Enter a name for the new database in the standard dialogue box. The name of the new database will be displayed in the title bar of the main form. </P>..<P>CAUTION - Giving the new database the same name as an existing database will erase all records in the old database.</P>..<P>Database files are given an extension of <I>.hdb</

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm7dgf.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	310
Entropy (8bit):	5.395522024555973
Encrypted:	false
SSDEEP:	6:B8FQk+Hryft1q2Q8EevWR0NNEXW0Yf1J3RoNqx0iNMeqlnKJyTZy0yEMoVCRWvQT:BMQkzLq2Q8Eepf6N3sMeqkJyT40uooqE
MD5:	0C803F3DE7AA2B9DEE685041365725FF
SHA1:	1E43BECC5907218634B4AE177F2A4E9EE02EB561
SHA-256:	A06BD536E900A3A789EA761F028DC1E5B80BA1BB4BAA6A767A8A9B6D1BC1588A
SHA-512:	EE6F5D75CD971F3FF50521FB7380569FAF68323CACE88DCA76BC959C0E87C9ABA26747C3DDCEAE6C5E625176CBA6F1B025DC42006365C4318446EACBC88B2EE4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>(Untitled)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">..<P><A NAME="0_olb_"></A><I>Exit</I></P>..<P>Terminates the program.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm7hf5.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	835
Entropy (8bit):	5.273411342898745
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfLqeCyGsMeqW0RFY912Yx21R5eEQUgRR2lBVW91b2FJJzTOLius:WlSZ6jzY/jg12b1Rg7h12DzTOLius
MD5:	2C611641208A5D079D9BEE5D1C9473CA
SHA1:	C686F787D7367CBFCDBC531DDBC0F8EE5C61CD39
SHA-256:	77CF7B99A5C540E19426D4C73E39838492017BD79B1110F8AAFD41221228834A
SHA-512:	FC5689E393C892DA4741B162B5DC317C3C164EC6C553551AA4298C963766A5EB1F0F0CEFF25CBAADFE7E0273E365246759C580751051F991DBAB3AA4C0262374
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Percentile - first test</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="percentile_1"></A><I>Percentile (first test - unselected sample)</I></P>..<P>The percentile for the current Total Error Score with respect to a distribution of Total Error Scores obtained from an 'unselected' group of subjects aged 15 to 45 for their first attempt at the test.</P>..<P>For example, a figure of 90% means that the current Total Error Score would be in the top 10% for subjects with no previous experience of color matching.</P>..<P>The analysis is based on results for 494 'unselected' subjects.</P>..<P>See <A HREF="fm4c81.htm">Industrial Norms</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm7hf6.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	977
Entropy (8bit):	5.1795973943265405
Encrypted:	false
SSDEEP:	24:WlSZ6jzORnGg12b1RKv19DzTOCOAFtZqhus:qSZ6j6FPCHKvn6CPfqhus
MD5:	379CE855E1766D9A3CBD2A89C04810A0
SHA1:	E82BC97596F6B545FED31A138240580AE584235E
SHA-256:	1B3F9FFBEE77A3B4FE257050720E80309F92278C08737949FCF6068819B5C4AC
SHA-512:	554D286D606964E825A6AC5FC994B7473ACE16955D873071274D780F23DE4DA46465BDECBD1D130783F098A5F76A7A4A0E55AFAB6573198D591ABAFFC4380CA9
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Percentile - some experience</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="percentile_2"></A><I>Percentile (some experience of color matching)</I></P>..<P>The percentile for the current Total Error Score with respect to a distribution of Total Error Scores obtained from a group of subjects with some experience of color matching.</P>..<P>For example, a figure of 90% means that the current Total Error Score would be in the top 10% for subjects with some previous experience of color matching.</P>..<P>The analysis is based on results for 300 employed personnel making application for promotion to positions of color control in a paint manufacturing plant - shader trainees, laboratory testers and laboratory technicians.</P>..<P>See <A HREF="fm4c81.htm">Industrial Norms</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm7hf7.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	879
Entropy (8bit):	5.2068248724886885
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfLqel8sMeqW+OFY912Yx21RjlBVW91qFJJzTOjW50DX5e2Dr9Y6:WlSZ6jzoog12b1Rg1+DzTO6qDc4rPTus
MD5:	694B7AD80535DC431F2BADD11DF08920
SHA1:	955794123963237623E72014E201567DD9A67103
SHA-256:	F2F5801A3284BD3086D741A7EF2DA9B3EEDDF60DC4A2F5CAB842605E3A62EAD0
SHA-512:	9DDB259B33AEF9C6EB8D0246F0DA3F8EDD858073D0197657203B4BB8F85D30DFE1E082011118A46A095C9D351B858733DD64D7AD9E4E7089404DD67D6713C590
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Percentile - experienced</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="percentile_3"></A><I>Percentile (Experienced color matchers)</I></P>..<P>The percentile for the current Total Error Score with respect to a distribution of Total Error Scores obtained from a group of experienced color matchers.</P>..<P>For example, a figure of 90% means that the current Total Error Score would be in the top 10% for experienced color matchers.</P>..<P>The analysis is based on results for 150 personnel of three to twenty years experience in the color control laboratories of manufacturers of dyes, rugs, plastics, textiles and paints.</P>..<P>See <A HREF="fm4c81.htm">Industrial Norms</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm7kqh.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (355)
Category:	dropped
Size (bytes):	1058
Entropy (8bit):	5.111341093157474
Encrypted:	false
SSDEEP:	24:WlSZ6dWv+QRIgK5EM5aN6oESXo5hjipvN6moxI:qSZ6RQRIZGMj1nyIy
MD5:	42F95F795FFAD4722410BBBDE1D277CD
SHA1:	B7D7F81058E89186268CA588B455275C14105FB8
SHA-256:	33AFF1B12ABBAE564FE0DC38DDDBE0E839D8F71933C8D8B1CE1A82FC9B7094D8
SHA-512:	3B5AA0DF34B14200056F959B1D712EF20489D9B47B631D189028C0E4F9D96D2031D4EC836CDB0492272CCC46FCDF225BE60E1B27D66495F57C85F61FCF5930AA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Monochromacy</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="monochromacy"></A><I>Monochromacy</I></P>..<P>Monochromats are able to match all spectral colors using just one color. These individuals are unable to discriminate solely on the basis of wavelength and are therefore truly color <I>blind</I>.</P>..<P>There are two types of monochromacy. Rod monochromats have normal rods but have no functioning cone receptors. As a result, their vision at night is normal but under photopic (daylight) conditions, visual acuity is poor and affected individuals tend to suffer from photophobia and nystagmus. Rod monochromacy affects about 0.001% of men and women.</P>..<P>Cone monochromats have one type of cone (normally blue). As a result, they often have poor acuity but in general, are less handicapped than rod monochromat

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm7lkj.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (995)
Category:	dropped
Size (bytes):	1425
Entropy (8bit):	5.073228911182896
Encrypted:	false
SSDEEP:	24:WlSZ652WBJj0CCu7sOv2Aibd98hiZjz3MR5rfHZZ0QFSqrXTlCG8M6m1VMCjMUw5:qSZ69JXeOuA0/gh5cQTXxn80SzSMx
MD5:	BCB3E4826A8D931040D797B6A6AC8223
SHA1:	A7A12EF094835903C0956C9BF7ACBDA8C47A8BBB
SHA-256:	85DD9A67EF62A66A7014E8043B71B5A25178E5CEAC864926537C4A828E9EDDB6
SHA-512:	A3ACE85A5C1C328C5B4673D36E042166C360622B814D70108ED138B287974292D14A18371790AACD25ED8ED84249B61051429A5010F712E12CAD5B7CC8BF8EDB
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Monochromats</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="monochromats"></A><I>Monochromats</I></P>..<P>A person with only one photopigment is known as a <B>monochromat</B>.</P>..<P><IMG SRC="../images/bm2.gif" ALT="" BORDER=0></P>..<P>The graph above shows an absorption spectrum for a hypothetical photopigment. A quantum of light with a wavelength of <I>A</I> has the highest probability of being absorbed by the photopigment, whereas a quantum with a wavelength of <I>B</I> has half the probability of being absorbed. Although <I>A</I> is twice as likely to be absorbed than <I>B</I>, the photopigment has no way of <I>knowing</I> which wavelength it absorbed. For a given amount of light energy, <I>A</I> would look brighter than light <I>B</I>. However, the subject would have no way of telling if the difference

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm7n8x.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (356), with CR line terminators
Category:	dropped
Size (bytes):	1216
Entropy (8bit):	5.1266684822349635
Encrypted:	false
SSDEEP:	24:WlloCZ6gdXhX0/WoCEBkDFqmOh/+VXseiDCkxRVU8d2PU6icUCHmNIR4KQT9Fci8:qloCZ6gdxX0unRqh2m/CoRVSbiemSR40
MD5:	AAB7C94999BFBF3AA51A5BB19F06935E
SHA1:	B262390D024FEFAAD6EEBFE3EB567C3C8D11A1F8
SHA-256:	BA27345882DD1193E458D4C02DBE5F0E8F3DC0D89B1D1CD1FAE6941CAED522AD
SHA-512:	74737B7082BFDFF1D3C08849C9EE5E6740F7B938057934A147D08523E3B005123937BA77D5AF97DC880C20BC468700C5E1D891013BA60A236E5BA31C0F7767AD
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Printing Graphs</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="7k9r.q"></A><I>Printing Data <IMG SRC="../images/bm14.gif" ALT="" BORDER=0></I></P>..<P>Results can be printed using any printer (with graphics capability) supported by your operating system. Printing is initiated by clicking on the printer icon on the toolbar or by selecting Print from the file menu. Alternatively, data or graphics may be exported as a PDF from the File/Export menu or copied to the clipboard from the Edit menu. </P>..<P>Results will be plotted in the same format as the current screen display (i.e. linear / polar, filtered / unfiltered etc.). Subject details and statistical information is printed below the graph when printing.The user can choose which statistical information to include using the Preferences option from the Applicati

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm7ppd.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	726
Entropy (8bit):	5.280595375772896
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfkMWsMeq7sxkz8St+k9GrwJsgPJenxv6s3stefH4IViXAgF:WlSZ6s17t8uGB2MxiE329F
MD5:	60AAD2DBE3B012707422BA569275EFA2
SHA1:	2AA71D2FEE0A2D7312842A66EA35942EF7B15BFE
SHA-256:	12EDF682ECB09B000BAD399CE38EA7657E93F7537E0A48F97B679A798AB37782
SHA-512:	5FA7CB65C59DEB0473B0F2593BA9B3C1FC15381D5B1661E698260D893D03DCE199C8C9F162F3CA6DEE357850800084719481924881FAD5080C6ED8EBD3783E8B
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Averaging</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="averaging_data"></A><I>Averaging Data</I></P>..<P>It is sometimes helpful to average several sets of data to establish an underlying pattern.</P>..<P>Multiple data sets can be averaged by selecting the records you wish to average from the database and clicking on the Average option.</P>..<P><I>Note: The average option will only be enabled when two or more records have been selected</I>.</P>..<P>See Also <A HREF="fm3fjn.htm">Viewing Records Stored in the Database</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm7rub.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (394)
Category:	dropped
Size (bytes):	1016
Entropy (8bit):	5.14617600546358
Encrypted:	false
SSDEEP:	24:WlSZ6zjEYFPeCNQ4BTo/OK3NspSW8bTIjycYExG:qSZ6vHZY0oV3HbTlSxG
MD5:	C9B9D2D4A315E728DC3F2C01B1E0619F
SHA1:	F0CEB44093E813511788B9890CBADE12EB49783E
SHA-256:	FFE07EC780B8772DF43E38A2A161344079338AD60616067CD44A8E92AF31BC53
SHA-512:	0D5732BD157E86C509CA17F61A0CAF0A09F813255023E0A7428A25F6B8CE4A482118AD3566C54347E275A99CE7306FE11EBA03D589D2CF59A72E25AEECC848FC
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Youngs Trichromatic Theory</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="youngs"></A><I>Young's Trichromatic Theory</I></P>..<P>The next major contribution to the understanding of color vision came from Thomas Young (1773-1829). Young thought it unlikely that the eye possessed a different receptor for every visible color and proposed that color vision was derived from the relative stimulation of just three receptors.</P>..<P>Young's trichromatic theory was not confirmed experimentally until almost fifty years later when Maxwell carried out an elegant series of experiments in which he used a spinning disc to produce additive mixtures of various combinations of colors. These experiments showed that virtually any color could be produced by simply adding together three primary colors in different proportions.</P>..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm7z8q.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (349)
Category:	dropped
Size (bytes):	2139
Entropy (8bit):	4.980346573596465
Encrypted:	false
SSDEEP:	48:qSZ6KnOzcHHNVcAFXvAq82i6rG5p3HRKJfuAKp:r2cHHP1XV82iY+FRKJ/Kp
MD5:	308D530AD7A93204C43AB98237AA4E79
SHA1:	DA9CE7FD93D93E996CE08E187EA2639670C97D8E
SHA-256:	0488413A4B324C3D1216FD1E78B48E9D15ECCFF063C68A318CFEE45E469986A5
SHA-512:	C3ECFFE606E16C2B9567DB22F45B1187FE889D6EF096074E10E9A9BD0795102869F213947B3B8F03A12F0B72D8B8AD80C67D445E71B59CEAA4F440C45B259FAC
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Identidying Color defectiveness using the FM Hue Test</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="3h_y_oj"></A><I>Identifying Color Defectiveness Using the FM Hue Test</I></P>..<P>The pattern of color defectiveness is identified using the FM Hue Test by bi-polarity, a clustering of maximum errors in two regions which are nearly opposite. The regions in which the errors are made can also be used to identify the type of color defectiveness. </P>..<P>Typical examples of patterns made by types of color-defective persons is given in the database of examples (<A HREF="fm0bdx.htm">Example.hdb</A>) which accompanies this program.</P>..<P>The severity of the defect can be gauged by the extent of the 'bulge', a severe degree of defect showing clear bipolarity with high error scores; moderate cases show small 'bulges' a

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm83zi.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (490)
Category:	dropped
Size (bytes):	1898
Entropy (8bit):	4.853458026897586
Encrypted:	false
SSDEEP:	48:qSZ6Ht3z+t0MQYNXV8X6rgCsAjfNN1+favedN8humB5:rZf/goH4ivedN8045
MD5:	58B18C881BAAA2DC434F00CCEACE5025
SHA1:	5EC19D03DECDD4539BD12377D1A9D397041F4334
SHA-256:	EB4D46EE025778E1A7FD224C4C4562569675199531F0E306AE5D768331D11C10
SHA-512:	0275223753F484198774F49C564F43354EB43220279126C4A23FE8B7A92261E3CCD777ED868FD32091DD98024058DB75354585B96EA0985531D077D6822F6CC6
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Color Perception</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="color_perception"></A><I>Color Perception</I></H3>..<P>Color is one of the most obvious and pervasive qualities of human visual perception. While it is possible to recognize objects and perform most visual tasks without chromatic information, color adds another dimension to perception. After watching a black and white film on television, one is often struck by the <I>richness </I>of perception when a colored image is restored. Similarly, a black and white photograph of a natural scene, seldom conveys the full beauty of the original.</P>..<P>Color plays an important role in many different areas of our lives. Important messages are often conveyed by colored signals - red usually meaning <I>danger</I> or <I>stop </I>and green, <I>go</I> or <I>all cl

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm8igl.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	626
Entropy (8bit):	5.374428216383203
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfzsMeqQ0A9/fgjef0UZXhKmQ5HxAUfSSvs:WlSZ6HQB/oif0UztOYSk
MD5:	B75BAC3B5A1E60F837F55946F634B2A4
SHA1:	1923238A06CBD72576AE0533C47AA63F3D3621C8
SHA-256:	87F62E10ECEBFF3EA49A9EF2B8DBE12A6B1C971D02432D06520F86C4B539D9FE
SHA-512:	DF66C481D27FE010983CD9950C388E796862EFF5A3CC6EE02E3B83C0B9D51DEC3E04EA0EC54D69DB06FBDA2D5FF04B42A711BD8B64C2AE0CB3BC1E1BFFE5F81C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>File Menu</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="file_menu"></A>File menu</H3>..<P><A HREF="fm760n.htm">New</A></P>..<P><A HREF="fm59da.htm">Open</A></P>..<P><A HREF="fm9i7k.htm">Save As</A></P>..<P><A HREF="fm1xf2.htm">Export Graph</A></P>..<P><A HREF="fm6m3u.htm">Export Scores</A></P>..<P><A HREF="fm043d.htm">Export Name and Analysis</A></P>..<P><A HREF="fm7n8x.htm">Print</A></P>..<P><A HREF="fm7dgf.htm">Exit</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm8iie.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	608
Entropy (8bit):	5.3987448449430975
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepf+sMeqe2jS13Ux21TaxLKt1QOLsQ1QYsYu:WlSZ6MDjS13o21+ut15QQ1QYsx
MD5:	2BBEE43DA0881ADF39FAE81F8E87FED0
SHA1:	661544071BF7649A5E027AAC016196761274761C
SHA-256:	BDDE91901D280A0D3FA07A5DF92355E04B39AE37A51953E2CB970EE2CA511F8E
SHA-512:	E2D4571ED13ED0DFBE83E070829EB54D6CEBB5E527241FE1110CE00FB5C86379A8610AED54743DD336163CBD21BC26B90C00AA6DF417C6990BDFD3A0C4A41C80
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Classification</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="146r.h6"></A><I>Classification</I></P>..<P>Results are classified into Superior, Average or Low on the basis of the Total Error Score.</P>..<P>Superior : Total Error Score < 16</P>..<P>Average : Total Error Score 16 to 100</P>..<P>Low : Total Error Score > 100</P>..<P>This classification is based on <A HREF="fm4c81.htm">Normative Data</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm8siz.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (827)
Category:	dropped
Size (bytes):	2139
Entropy (8bit):	4.985907315227886
Encrypted:	false
SSDEEP:	48:qSZ6jbKoS9p+4mUVU2VRwhBZ02WC7HTruO4I8M4mPFIruL64I:rsKPpdfVU23wG2WCL3p4I8reCP
MD5:	2A3D3316CD6E700F97B4242892A1F0E6
SHA1:	D33B6A16F0250460338253AE5CF0AC0DCB8D2BE6
SHA-256:	CBFAF0A53797679590B617BBC86155AD2F23876D808D39802C6C23B99C056438
SHA-512:	FDB44AE445D3AA26B675983F50AC91D024A62E106B1438F5A5E1DD30C62508EA051BE91BB3C20C216C7D46416058F286B7A20891DFC086ACA7C61F178C5D3C2B
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Color Vision - Defective</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="2p8e2k"></A>Defective Color Vision</H3>..<P>John Dalton carried out the first serious investigation of color deficiency in 1794. He became aware that his own color vision differed to that of other people, in particular he was unable to distinguish between certain colors and was unable to see deep red colors. Dalton found similar defects among his brothers and started to investigate the prevalence of the condition using a series of colored ribbons. Dalton believed that the cause of his condition lay in a blue coloration in the vitreous humour of his eye. This explanation was subsequently disproved by a<I> post mortem</I> examination carried out at his own request. However, the term 'Daltonism' has persisted to describe this form of color def

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm8vi2.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (448)
Category:	dropped
Size (bytes):	769
Entropy (8bit):	5.247197737120789
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfgIWsMeqv7B0N4BMMkAQrCnK9qWmPf8OQFT1oyCyEaB7:WlSZ6IxFo467trCKEzsOQFTHCi7
MD5:	DFF17E2AD89987F638D634C1B0FFF54F
SHA1:	C6C04485AF47361679CEFF98AD6CA273C250F87E
SHA-256:	31F4A71216271F30389A979C158A4131B7D895AD244A12DFCE117D10DCA0B634
SHA-512:	0E018638EA93449125E6DB324331EBCAF824BD23952A881B4ABBEC6AACF24099F37EE2AB95301331AB7593ED6CAB28885028B16758AE870405F4333D9A33F206
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Young Helmholtz Theory</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="young_helmholtz"></A><I>Young-Helmholtz Theory</I></P>..<P>Hermann von Helmholtz carried out similar color mixing experiments but at first rejected Young's theory because he was unable to match all spectral colors with trichromatic (three color) mixtures. He later realized that this result could be explained by the three retinal receptors having overlapping spectral sensitivities. Helmholtz went on to champion the trichromatic theory which later became known as the<B> Young-Helmholtz theory</B>.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm97vy.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	431
Entropy (8bit):	5.408686600061125
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepfu4ksMeq5p49d4khM+SS:WlSZ62nTsdBLSS
MD5:	3CF442E57B99570D31853ED83ECF1E7D
SHA1:	2FDE1B5269BA41A60EB51B8A988736BD42FD1700
SHA-256:	24D208BDC3ACEADB25547AF3E235C6D80BC856A818CD79ED2F6AEE1CD78B3CAC
SHA-512:	27204C9206C8C185BD83A70BD1F1F6BB97DF360059AACBD3B354AF6E93C10ADCE8254D204BA3FD8964BF71525B1D70F2DA158D57D477ECEE999E198435C0B1EE
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Administration</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="administration"></A>Administering the test</H3>..<P><A HREF="fm4ndz.htm">Lighting</A></P>..<P><A HREF="fm0llx.htm">Procedure</A></P>..<P><A HREF="fm359j.htm">Scoring</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm9i7k.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	612
Entropy (8bit):	5.3295965535806085
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfQgK0sMeqfBGQbZWJChfQ0T/Kce4hx8ll:WlSZ6xfBLbCCY0ed
MD5:	A66F36002B88660174CF8C6F7B19C4F9
SHA1:	4F4C2C8AAC87687F1BE35A43E13678922F57C9EB
SHA-256:	9CF6E0AF7AA5D8B0F263FA6BED5877373B3762FCFF1E31044D41292B6B0B9836
SHA-512:	AA81624F6D92EC098DC92A7D24DF67E7369561F7C5AF3692BBBF4219E56A16C08BA58598ECC82AEF7F25E3BA0BF3070EB59A40F2D3F04504286F70F34110659D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Save As (File Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="3_gii4p"></A><I>File menu - Save As </I></P>..<P>This option saves the current database under a different filename then makes the new database current. This is a useful way of keeping backup copies of your databases.</P>..<P>CAUTION - Saving the database with the same name as an existing database will erase all records in the existing database.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm9p4j.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (498)
Category:	dropped
Size (bytes):	1053
Entropy (8bit):	5.033782561959998
Encrypted:	false
SSDEEP:	24:WlSZ6MQ2xQHHNMW7OSBf5eGqwOEUBqdCY:qSZ6/Nx9t5eG87BqdP
MD5:	4E4EA2AA8DEF4E3D1FAFD3FA367CF0F8
SHA1:	5BCFE9D9AE45E1130F0E0BF23A01F30F6749B124
SHA-256:	A4D8411E1B655606417346688126F14401276D4793B317380D29CA26BF7B79DC
SHA-512:	5F86230841AAE79F82346F8359670B7094F93C9A381DAA2D40C2ACF6BAA0130E3387268B9D03FFFDDFB61FCB4A356DCEE8F40342AA6061ADC901CF75833DD4EC
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Acquired Defects</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="acquired_defects"></A><I>Acquired color deficiency</I></P>..<P>Some changes in color vision occur throughout life even in healthy individuals. These changes can be explained in terms of yellowing of the ocular media and perhaps changes in retinal sensitivity. Color vision deficiencies can arise at any time throughout life as a result of general or ocular disease, trauma, medication or as a result of exposure to toxic substances. Unlike congenital color deficiencies, acquired defects commonly affect one eye only and affect males and females equally.</P>..<P>The effects of various diseases on color vision has only been fully recognised in recent years. This is partly because acquired defects often affect blue perception and most color vision tests onl

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\fm9sfm.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1096
Entropy (8bit):	5.322074942718442
Encrypted:	false
SSDEEP:	24:WlSZ6We7LoBEUBNFDwhOwsp91No1N8jkZBrX3W:qSZ6iqUBNtwhOTp9DoDk2BrX3W
MD5:	193E2B281F654EEA18A9120206D27BAB
SHA1:	C49FEBDF7CE90002D00B30D73E0D3BA1B4BF2D99
SHA-256:	A228DC18DEF8C349C50F0D9C77403D5F6BB5D5D4D81F95A7D1710D18973A1F41
SHA-512:	54A2C9E9AD0290A88FE223815604A8740EF39F57BDC49DA8C56C33BFDBFD732A5F82466955BE7D585BEB6D641FB421B097ACB55B40ADDB3A034DC5E27E560897
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Analysis</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="6wkrur"></A><I>Analysis Options</I></P>..<P>The program includes a powerful set of analytical tools. The results of the analysis is displayed in the Analysis window and is printed out with the graphs.</P>..<P>The user may select which analysis information to display by means of the Preferences form which is accessed from the Edit menu.</P>..<P>The following analysis information is available:</P>..<P><A HREF="fm2k85.htm">Total Error Score</A></P>..<P><A HREF="fm26k5.htm">Square Root of the Total Error Score</A></P>..<P><A HREF="fm5fw3.htm">Vingrys Analysis</A></P>..<P><A HREF="fm8iie.htm">Classification</A></P>..<P><A HREF="fm7hf5.htm">Percentile (first test unselected sample)</A></P>..<P><A HREF="fm7hf6.htm">Percentile (some experience of color matching)</A

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\index.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	652
Entropy (8bit):	5.1462435476545885
Encrypted:	false
SSDEEP:	12:BMQEdOaA9zp6QclfVISLDxPDwAhHL91DwmxRLwAhbFAtT87w1qgPC:WnAZpsq4DxzpL4mxVA878PC
MD5:	9433A81C9FD156FA8D4D90C7B62E7557
SHA1:	C4C8C3A13EE0B45E1AD623BE40DC10DF0B7AA437
SHA-256:	01F71092AE64BA43B4F4E4283BD35F4A560F2AF505C092E23CB5A73A05212AA0
SHA-512:	A20C8B64F74E5EC08AA74C4B6DA6AC9A0A5578F63784EFF118E28466C4C408A9C995C65F235AB76FD9B84DEE28E7121D3CCF172F99C13D3434A0E6019F7E2A5C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Farnsworth-Munsell 100 Hue Scoring Software: Help</title>.</head>..<frameset rows="" cols="200," frameborder="yes" border="2" framespacing="2">. <frame src="indexList.htm" name="leftFrame" noresize>. <frameset rows="80,*" frameborder="yes" border="2" framespacing="2">. <frame src="nav.htm" name="topFrame" scrolling="NO" noresize>. <frame src="fm0001.htm" name="mainFrame">. </frameset>.</frameset>.<noframes><body>.</body></noframes>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\indexCIE.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	1403
Entropy (8bit):	4.972646287022937
Encrypted:	false
SSDEEP:	24:WLZpsqgwhUDIcd/NVxonOLm0yTPhH0FmeqdEj9BFek/hoOrjpBppfW4SXai9DC:KMqgKOV1DwMmPhH8t9BEYSsjTpPbsDC
MD5:	C2B113694C6A2C6C04A3734D98BBFD05
SHA1:	69A74E1521C986B6D7046A4C6F6FB9C45B0A6038
SHA-256:	47CC985EDEE5A47B6E4DFC2891215E0B986B854198670C7526AFBDBFD26CB4C3
SHA-512:	27B129CB72EA766DA23AF95827CF82BBAA3B4DA0B349C8CEB6DF532957FE1FBBA54CEBCB99C9EA400E61817A082F5B3DF682F87937822D20519BE38ADBCED1D8
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Untitled Document</title>.</head>..<body>.<p> </p>.<p>CIE CHROMATICITY DIAGRAM</p>.<p>The ability to match colors using a mixture of just three primaries forms the basis of a powerful method for describing colors.</p>.<p>In 1931, the Committee Internationale de l'Eclairage (CIE) devised a standard system for specifying colors based on the trichromatic color matching characteristics of a 'standard observer.'</p>.<p>For technical reasons the CIE adopted imaginary primary colors (rather than red, green, blue) which were designated X,Y, and Z.</p>.<p>The relative amounts of X, Y, Z required in a color match are represented by the lower case letters x, y, z.</p>.<p>Since the sum of x+y+z is equal to unity, the value of z can be ascertained from the values of x and y.</p>.<p>Therefore, all per

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\indexCV.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	620
Entropy (8bit):	5.116566131884742
Encrypted:	false
SSDEEP:	12:BMQEdOaA9zp6QclfVIgb8RxPDwAhHL91DwmxRLwAhbFAt0Ic87w1qgPC:WnAZpsqgwRxzpL4mxVrt878PC
MD5:	C8828E36B6CB9FE7F9AEBAA4E1F56A16
SHA1:	50FF09FB952BD1D54D3C0D6738DB343EA79863A8
SHA-256:	2F84B8B9A955C9D98FA7D0CCA825EF11A0F1C9CFD08A486961CE486CF208B56F
SHA-512:	754F0D54CE302512694118F7643C532A54AD16AAA1F96B74959DB5705BB05BF96B79503285D8E67CD62A184A6BDC20051437CD94765DD47AB7D1ABA3BC25D49C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Untitled Document</title>.</head>..<frameset rows="" cols="200," frameborder="yes" border="2" framespacing="2">. <frame src="indexList.htm" name="leftFrame" noresize>. <frameset rows="80,*" frameborder="yes" border="2" framespacing="2">. <frame src="nav.htm" name="topFrame" scrolling="NO" noresize>. <frame src="fm5l0u.htm" name="mainFrame">. </frameset>.</frameset>.<noframes><body>.</body></noframes>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\indexDT.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	1117
Entropy (8bit):	4.903867197791394
Encrypted:	false
SSDEEP:	24:WLZpsqgwaEtJo6uwDK88ZftlBAeNBAehxQy1SsYREX0tC:KMqgCy6u8781lAenAe7Qy8sYI0tC
MD5:	9FEC8D6A1FF2EE28339621718E15BD1D
SHA1:	1D0560941F2A18E7A3C5B6AD26059A0227ACB3FA
SHA-256:	B2376A2C01A60D4CE99052C088E7C0907819F29D0FCEB18A6BBB4A1892C00442
SHA-512:	7DFD6019908E8751CEF442E15FB4FD1174934B61F46CC572C3CD3E450A8CBACF8C8DEC8480F5D09855EA0DFD8D8F2236DAA8172AB89DE136954F20A74B393A9D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Untitled Document</title>.</head>..<body>.<p>DEUTAN CONFUSION LOCI</p>.<p>The easiest way of representing the combinations of colors which are confused by color deficient people is with reference to the CIE chromaticity diagram.</p>.<p>The colors which dichromats confuse lie along straight lines when plotted on a chromaticity diagram.</p>.<p>The lines radiate from different points according to the type of defect. These lines are called isochromatic confusion loci.</p>.<p>Dichromats will tend to confuse colors over the whole length of the confusion loci, whereas anomalous trichromats will tend to confuse colors over a more limited ranger.</p>.<p>The line which passes through the whole point and intersects the spectral locaus, indicates the wavelength which will appear "white" or neut

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\indexFM.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	620
Entropy (8bit):	5.107866666885297
Encrypted:	false
SSDEEP:	12:BMQEdOaA9zp6QclfVIgb8RxPDwAhHL91DwmxRLwAhbFAtj87w1qgPC:WnAZpsqgwRxzpL4mxVk878PC
MD5:	ACD8635BB244F2711A1BDEB81D6935A9
SHA1:	2C6C33CCB87AB60F39E6ED5C86070408D7F5CE09
SHA-256:	D8258D977A80DA38AADE434F2B6FDCD5C4D224BBF7EB01A6F7DCB8CFEAAB58C5
SHA-512:	993F89D2517B991109920ECADE2C3B8036E3003110C58DBC4ECCCC3ED2645691B6FDF8EED0C0F739A8D14915676F1E0455CBB0499A09CA5066ED13776B256325
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Untitled Document</title>.</head>..<frameset rows="" cols="200," frameborder="yes" border="2" framespacing="2">. <frame src="indexList.htm" name="leftFrame" noresize>. <frameset rows="80,*" frameborder="yes" border="2" framespacing="2">. <frame src="nav.htm" name="topFrame" scrolling="NO" noresize>. <frame src="fm4eus.htm" name="mainFrame">. </frameset>.</frameset>.<noframes><body>.</body></noframes>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\indexFS.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	620
Entropy (8bit):	5.113713229977671
Encrypted:	false
SSDEEP:	12:BMQEdOaA9zp6QclfVIgb8RxPDwAhHL91DwmxRLwAhbFAts87w1qgPC:WnAZpsqgwRxzpL4mxVX878PC
MD5:	D98C6A1A5CA178C807EF61EEEA70AB88
SHA1:	8C496EDE53C990802B7296B6B07A179F09097E17
SHA-256:	1AD26B7BA2935536FFFC2B10A3EF100D186AB68CB895BCCB4727B54148D9EC1E
SHA-512:	7E56A3BF92659491E170B31A861880AA10701E094FF6C701F81C003F59BAE8E5FBB063E85206CE0C3846CD688C3660DB8862C7E5D0EF80AD743424851E800B56
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Untitled Document</title>.</head>..<frameset rows="" cols="200," frameborder="yes" border="2" framespacing="2">. <frame src="indexList.htm" name="leftFrame" noresize>. <frameset rows="80,*" frameborder="yes" border="2" framespacing="2">. <frame src="nav.htm" name="topFrame" scrolling="NO" noresize>. <frame src="fm00c1.htm" name="mainFrame">. </frameset>.</frameset>.<noframes><body>.</body></noframes>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\indexList.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ISO-8859 text, with CR line terminators
Category:	dropped
Size (bytes):	19412
Entropy (8bit):	4.825244600394692
Encrypted:	false
SSDEEP:	384:KhH1eeeMueMuPMuxBeMuxuWuxAMusMux9MuxlmeMuwMuxwMuxYMuxMeMuqMuxkMI:KhgeeMueMuPMuxBeMuxuWuxAMusMux9m
MD5:	675CA9892EC326FF4259F4022D3575BE
SHA1:	FD532ED462C8D287310CB207D5BDE3A417C6A58A
SHA-256:	4AEAE69D75DDAB2BEB5988CC96EBCFA99B8CE5A8FC800FE0D7E00B0196055419
SHA-512:	FB82B26560040DC17BB810E12F3D03ED97E1B2E626987D28EEB16AD6D2450213C9B4B0694556140AD82D53D3D39CFE468965FE8C67A7F63E2D431A34CCAB89FB
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Farnsworth-Munsell 100 Hue Scoring Software: Help</title>.<style type="text/css">. .span.s3 {color: #000000}.table.t1 {border-collapse: collapse}. td.td1 {border-style: solid; border-width: 1.0px 1.0px 1.0px 1.0px;.. border-color: #bfbfbf #bfbfbf #bfbfbf #bfbfbf; .. padding: 0.0px 0.0px 0.0px 0.0px.. }.. p.p1 {margin: 0.0px 0.0px 0.0px 0.0px; font: 10.0px Arial; color: #0000ff}. p.p2 {margin: 0.0px 0.0px 0.0px 0.0px; font: 10.0px Arial}. p.p3 {margin: 0.0px 0.0px 0.0px 0.0px; font: 10.0px Arial; color: #008000}. p.p4 {margin: 0.0px 0.0px 0.0px 0.0px; font: 10.0px Arial; min-height: 11.0px}. p.p5 {margin: 0.0px 0.0px 0.0px 0.0px; font: 36.0px Arial; color: #0000ff}. p.p6 {margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Arial}. p.p7 {margin: 12.0px 0.0px 3.0px 0.0px; font:

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\indexPR.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	1132
Entropy (8bit):	4.916068132865607
Encrypted:	false
SSDEEP:	24:WLZpsqgw+tJo6uwDK88ZftlBAeNBAehxQy1SsYREXBrC:KMqgfy6u8781lAenAe7Qy8sYIBrC
MD5:	87645DFC88532C01899AB9BFDCDD2B9A
SHA1:	11ED1DF917A28160527E3B60C38FC8C44DE5B2CF
SHA-256:	988E5D9A88ED374E09EA2841A1606CF5276C36512EC6A86A70D8FC9D728B5739
SHA-512:	087E0766AE43447746BD963AF124FE5CD6059044168AAB98EE599CE90309B8A4619E3A93F172F22770581B2D24F7FB043E5CF3629681E13F515BB175297F899C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Untitled Document</title>.</head>..<body>.<p>PROTAN CONFUSION LOCI</p>.<p>The easiest way of representing the combinations of colors which are confused by color deficient people is with reference to the CIE chromaticity diagram.</p>.<p>The colors which dichromats confuse lie along straight lines when plotted on a chromaticity diagram.</p>.<p>The lines radiate from different points according to the type of defect. These lines are called isochromatic confusion loci.</p>.<p>Dichromats will tend to confuse colors over the whole length of the confusion loci, whereas anomalous trichromats will tend to confuse colors over a more limited ranger.</p>.<p>The line which passes through the whole point and intersects the spectral locaus, indicates the wavelength which will appear "white" or neut

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\indexTR.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	1103
Entropy (8bit):	4.832787464154585
Encrypted:	false
SSDEEP:	24:WLZpsqgwvtJo6uwDK88ZfqZBAeNBAehxQy1SsYREXrC:KMqgsy6u8781q7AenAe7Qy8sYIrC
MD5:	3DFCA87387FA5E7E1176E988681CEAC9
SHA1:	9D429FFD97C4B5BA7FDE07E8CA1BBC5B9EAF08A1
SHA-256:	29F60861DB960BFA97F66D6082AF07C9D27350E5E0BF9176E164A1C25FB2D3EC
SHA-512:	0DF65BD35AE170D1F429267BFF8E8FA5260AA93AAC33BC113DAADB366F6A84CEBD3D60016F3385D8379376A6003535D7DB25FB6D27E5B4B02B02D1FF975880B5
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Untitled Document</title>.</head>..<body>.<p>The easiest way of representing the combinations of colors which are confused by color deficient people is with reference to the CIE chromaticity diagram.</p>.<p>The colors which dichromats confuse lie along straight lines when plotted on a chromaticity diagram.</p>.<p>The lines radiate from different points according to the type of defect. These lines are called isochromatic confusion loci.</p>.<p align="center">Dichromats will tend to confuse colors over the whole length of the confusion loci, whereas anomalous trichromats will tend to confuse colors over a more limited ranger.</p>.<p>The line which passes through the whole point and intersects the spectral locaus, indicates the wavelength which will appear "white" or neutral to the col

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-03K44.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1077
Entropy (8bit):	5.1138748666165785
Encrypted:	false
SSDEEP:	24:WlSZ6OXHeJDSpojCshHMDyiGH+fJbPTyGco:qSZ6WuSeOy/HQJbrIo
MD5:	D9799E3994DEB308C66C76EEC0FD0FF3
SHA1:	BF086284DC622DB5437D3CD121253B049386D638
SHA-256:	872E06F30F56D065D2027B2F237D968491A5D09C8B6FDCBA4149BC582766B843
SHA-512:	575642E2272E3A6F47F1273303874902A36242D9E4782CEBCAEE5648BB549BE39BFAB46EEB4925325DA277592DB02060D5DA7D8D60ADB323C561669CBF14C67D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Export Name and Analysis (File Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="fm94h9"></A><I>File menu - Export Name and Analysis </I></P>..<P>The current Name and Analysis can be saved separately as Text files. This provides an easy method for exporting this information to other Windows programs.</P>..<P>Select Export Name and Analysis from the File Menu. The Save As dialog box is then displayed, allowing a path and filename to be specified.</P>..<P>The data entered as Personal Information is saved together with the analysis of the results. The information included is dependent on the Analysis options currently selected</P>..<P>This information can now be imported by most Windows wordprocessors and spreadsheet programs.</P>..<P>Name and Analysis can also be pasted directly into other Windows programs usin

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-04LMA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ISO-8859 text, with CR line terminators
Category:	dropped
Size (bytes):	19412
Entropy (8bit):	4.825244600394692
Encrypted:	false
SSDEEP:	384:KhH1eeeMueMuPMuxBeMuxuWuxAMusMux9MuxlmeMuwMuxwMuxYMuxMeMuqMuxkMI:KhgeeMueMuPMuxBeMuxuWuxAMusMux9m
MD5:	675CA9892EC326FF4259F4022D3575BE
SHA1:	FD532ED462C8D287310CB207D5BDE3A417C6A58A
SHA-256:	4AEAE69D75DDAB2BEB5988CC96EBCFA99B8CE5A8FC800FE0D7E00B0196055419
SHA-512:	FB82B26560040DC17BB810E12F3D03ED97E1B2E626987D28EEB16AD6D2450213C9B4B0694556140AD82D53D3D39CFE468965FE8C67A7F63E2D431A34CCAB89FB
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Farnsworth-Munsell 100 Hue Scoring Software: Help</title>.<style type="text/css">. .span.s3 {color: #000000}.table.t1 {border-collapse: collapse}. td.td1 {border-style: solid; border-width: 1.0px 1.0px 1.0px 1.0px;.. border-color: #bfbfbf #bfbfbf #bfbfbf #bfbfbf; .. padding: 0.0px 0.0px 0.0px 0.0px.. }.. p.p1 {margin: 0.0px 0.0px 0.0px 0.0px; font: 10.0px Arial; color: #0000ff}. p.p2 {margin: 0.0px 0.0px 0.0px 0.0px; font: 10.0px Arial}. p.p3 {margin: 0.0px 0.0px 0.0px 0.0px; font: 10.0px Arial; color: #008000}. p.p4 {margin: 0.0px 0.0px 0.0px 0.0px; font: 10.0px Arial; min-height: 11.0px}. p.p5 {margin: 0.0px 0.0px 0.0px 0.0px; font: 36.0px Arial; color: #0000ff}. p.p6 {margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Arial}. p.p7 {margin: 12.0px 0.0px 3.0px 0.0px; font:

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-05FRS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	1117
Entropy (8bit):	4.903867197791394
Encrypted:	false
SSDEEP:	24:WLZpsqgwaEtJo6uwDK88ZftlBAeNBAehxQy1SsYREX0tC:KMqgCy6u8781lAenAe7Qy8sYI0tC
MD5:	9FEC8D6A1FF2EE28339621718E15BD1D
SHA1:	1D0560941F2A18E7A3C5B6AD26059A0227ACB3FA
SHA-256:	B2376A2C01A60D4CE99052C088E7C0907819F29D0FCEB18A6BBB4A1892C00442
SHA-512:	7DFD6019908E8751CEF442E15FB4FD1174934B61F46CC572C3CD3E450A8CBACF8C8DEC8480F5D09855EA0DFD8D8F2236DAA8172AB89DE136954F20A74B393A9D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Untitled Document</title>.</head>..<body>.<p>DEUTAN CONFUSION LOCI</p>.<p>The easiest way of representing the combinations of colors which are confused by color deficient people is with reference to the CIE chromaticity diagram.</p>.<p>The colors which dichromats confuse lie along straight lines when plotted on a chromaticity diagram.</p>.<p>The lines radiate from different points according to the type of defect. These lines are called isochromatic confusion loci.</p>.<p>Dichromats will tend to confuse colors over the whole length of the confusion loci, whereas anomalous trichromats will tend to confuse colors over a more limited ranger.</p>.<p>The line which passes through the whole point and intersects the spectral locaus, indicates the wavelength which will appear "white" or neut

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-0E8BP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-0IV1H.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-0JCIU.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-0MPU3.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	840
Entropy (8bit):	5.247957805853096
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfLZsMeq6xFWVcUGQeynlMBiBdgVrfQIT8deF9K1LnS+J5TNT+x3:WlSZ6jRHmULeICIBArIPdeur7nT+d
MD5:	3D745C989EFF06AAF457C127B12455F5
SHA1:	9C8A5FB5B4E198C0829441EBFD15DAC599F6B073
SHA-256:	6D626DDD4EA1FC1CC1E12290AC8DDF1F8385C5AC259872AE63D18D75CCAAEE93
SHA-512:	DC5A1479CA2E334566C3BDEB1E6FDDDD6407125C95A5373A173E3CFCE4C49126DC1B0E855B069091A5E8B603DFA6300B1D320AD90F82DDBD7B13E27749B8DC2C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Protan confusion axes</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="ps49gg"></A><I>View color confusions for protan defects</I></P>..<P>This option is selected from the View menu of the computer program.</P>..<P>A color representation of CIE color space is displayed with isochromatic confusion lines superimposed. Colors lying along the confusion lines will tend to be confused by individuals with a protan (red) defect.</P>..<P>For more information see <A HREF="fm8siz.htm">Defective Color Vision</A></P>..<P>N.B. The colors displayed are only approximate and will vary according to the color capabilities of the monitor and display card.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-0U3IJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-15JKC.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-1817C.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-1E06E.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-1FDJB.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-1IDCL.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (774)
Category:	dropped
Size (bytes):	2060
Entropy (8bit):	4.995219875919159
Encrypted:	false
SSDEEP:	24:WlSZ65257t5kNMyJgYaJUYREDWpGq1UdgfO0XWKsQesuw8hW1eQou3BJUBke/T+e:qSZ68AayJ2hNG8WV7s2w3v8iee9yMje
MD5:	D484198175B8133EE69F56E16DFE1E28
SHA1:	E319B3123F09B6F470923DFCDB041AAF5F616F04
SHA-256:	4158779C1EC75B8E8F266390DC1EE4381B33B11D4604531E45F565348525BB74
SHA-512:	7FB5C48DF3E69C02C46529DE8FE4202A62FB48CD9562D7E23F2A9C5BD972BFFB9F4B525B25CA5E7CF3F3E3439AB26F3D88E49169258DF0A09D1902B4BEB24490
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Dichromats</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="dichromats"></A><I>Dichromats</I></P>..<P><IMG SRC="../images/bm3.gif" ALT="" BORDER=0></P>..<P>An individual who has two photopigments is called a <B>dichromat.</B> The absorption spectra of the two photopigments (P1 and P2) peak at different wavelengths but overlap over a considerable portion of the spectrum. If the subject is shown two patches of light, one patch consisting of <I>A</I> and the other <I>B</I>, it is now impossible to adjust the intensity of <I>B</I> so that it will match <I>A</I>. This is because the number of quanta absorbed by the two photopigments for <I>A</I> never equals the number absorbed by these same photopigments for <I>B</I>. No matter how the intensity of <I>A</I> and <I>B</I> are changed, they never have identical effects o

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-1M111.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	587
Entropy (8bit):	5.294553446122531
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepfc01jsMeqPAiL14F0x21yGoNlJqjy/Y17WDbTjsET:WlSZ6f1ft1IP1yGoPJwp176bTBT
MD5:	E44592203D952AFCEB6061CED401D71D
SHA1:	45A2B20E34265662B78497EDF9ED13D2596CE54E
SHA-256:	C721733B3E4DCDB5A90B840A5DDA15D475E172BF9645906698D0B9D22CB13E7A
SHA-512:	787C3F3370EE83AA8883EF8E7D36156D6A9CAF3549616273370B0A8DFF9529311AF61104F033F74B0CEEFD1D2D2D4E824DB71A7FB9BEA0FA818EB52D8B2DD368
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Square Root Total Error Score</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="euxqgu"></A><I>Square Root of Total Error Score</I></P>..<P>The distribution of Total Error Scores in a population tends to be skewed. However, by taking the Square Root of the Total Error Score a more symmetrical distribution is obtained. For this reason, the square root is often used in statistical analyses.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-1NV6D.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (486)
Category:	dropped
Size (bytes):	1433
Entropy (8bit):	5.013375871434199
Encrypted:	false
SSDEEP:	24:WlSZ60zshc2m65O21W/FhIakRUj8LQacthcg13nET9akMFazvy5o5qaPR2ohx:qSZ64J2etwjQZMCY1MFazhR2ohx
MD5:	E1042B5BAAC321D04FB489C93341DD10
SHA1:	0FF564B97CF591D603792C456C39DCFC7423DD4A
SHA-256:	3D9954039957F8CB4FE9D5E0C5CBC1219753D178396CD3AAEAD90C8E1CF1185A
SHA-512:	0D4022719BC97B9BF5510782A56D1F94375078CA9FFE1E3E235A94E19D802DB83FD62EB6727AF29608746C1E1D057509D32FCA32C2D46EF0B4A34DD93EBB555E
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Lighting</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="lighting"></A><I>Lighting</I></P>..<P>Reliable results cannot be expected from this test unless standard illumination is used. The illumination should approximate 6,740 degrees Kelvin (Standard Illuminant C or average daylight) preferably at 25 foot candles or more. Equivalent results can be achieved with using a tungsten halogen daylight source at 6,500 degrees K, such as the one found in the SpectraLight II and SolSource manufactured by Macbeth. </P>..<P>If natural daylight is used, the test should be given near a window illuminated chiefly from the north sky, lightly to moderately overcast. Daylight Fluorescent (6500 degrees) may be used if necessary such as the one found in the Judge II from Macbeth. Since natural daylight is variable, the results cann

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-1PDT6.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.661226943847434
Encrypted:	false
SSDEEP:	3:PFltl5U9nIk:Pftg9nI
MD5:	9C46007F92F6817CB70BB63B8E7DFC9E
SHA1:	0A0442591054622234A03F01652EABD6057200CA
SHA-256:	FDFF1042BE8E2C1B296E56E5949B0C66C60E9424657958C8EF86394F78711A98
SHA-512:	2D2047D4F5FC4C3C441EB792FAD60C95805FBBEEA9B5F905D916E84A5E68E3DD72E87B5F1B20186E7F9D86B6D3EC5C8E3685665F090C0A5F86B78272E5FC06EF
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXTDmWr........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-23T4J.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-2443L.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-24IPR.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	626
Entropy (8bit):	5.374428216383203
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfzsMeqQ0A9/fgjef0UZXhKmQ5HxAUfSSvs:WlSZ6HQB/oif0UztOYSk
MD5:	B75BAC3B5A1E60F837F55946F634B2A4
SHA1:	1923238A06CBD72576AE0533C47AA63F3D3621C8
SHA-256:	87F62E10ECEBFF3EA49A9EF2B8DBE12A6B1C971D02432D06520F86C4B539D9FE
SHA-512:	DF66C481D27FE010983CD9950C388E796862EFF5A3CC6EE02E3B83C0B9D51DEC3E04EA0EC54D69DB06FBDA2D5FF04B42A711BD8B64C2AE0CB3BC1E1BFFE5F81C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>File Menu</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="file_menu"></A>File menu</H3>..<P><A HREF="fm760n.htm">New</A></P>..<P><A HREF="fm59da.htm">Open</A></P>..<P><A HREF="fm9i7k.htm">Save As</A></P>..<P><A HREF="fm1xf2.htm">Export Graph</A></P>..<P><A HREF="fm6m3u.htm">Export Scores</A></P>..<P><A HREF="fm043d.htm">Export Name and Analysis</A></P>..<P><A HREF="fm7n8x.htm">Print</A></P>..<P><A HREF="fm7dgf.htm">Exit</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-2FOS2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (601)
Category:	dropped
Size (bytes):	1127
Entropy (8bit):	5.148762765260473
Encrypted:	false
SSDEEP:	24:WlSZ6IVZWdF2C7t2JH8OvIib+3KJ0XZQeb85KvmDRS:qSZ6ILWd0CxMjIkX0pQeYKQS
MD5:	B8EE54072D8DB4CBA36743CD59E351A6
SHA1:	EFE9F8075CB5A457259224D7BA3657D5F00F151F
SHA-256:	D3AC5DAFFC69644AFF5867B05EE0315A37ECB7D9C9BCD019E5A7E8606B239E9B
SHA-512:	4A91AE46006DF0058FDA2B0E066251119292C640DC72E3B1254739E227DA69C2C6CA8553881E76C4A2C3DEEC7C56BAC43497D2585B3C6BFFCF497F0FDC0EB399
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Save Current Record Record (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="2xz83ip"></A><I>Edit menu - Save Current Record</I></P>..<P>The program incorporates a simple database to allow easy access and reference to previous records. The name of the active database is displayed in the Title Bar of the main form. </P>..<P>Having arranged the order of the 'caps' on the screen so that it matches the order of the FM Hue Test caps, data is added to the database by either clicking on <IMG SRC="../images/bm17.gif" ALT="" BORDER=0> in the toolbar or selecting Save Current Record from the Edit menu. You will then be required to enter the subject's name, reference number etc. When this is completed, clicking on OK causes the data and the subject's personal information to be added to the database. This informat

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-2QU10.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (544)
Category:	dropped
Size (bytes):	1944
Entropy (8bit):	4.838318020960845
Encrypted:	false
SSDEEP:	48:qSZ6jNTcHSoyz6tc3gJ0RXF/FG9cdUCwk20ZAFaUX:ruYyoyOmjRXFOcp1SFaU
MD5:	5BF473CD8F8E4B2FC9EF7758AB5A2AA4
SHA1:	19216144BAB032238B0BC870AD264B387A67D9D0
SHA-256:	752764B703F1339A905831BEDB5D5246BD49F99BCD41FF091EFD0C2499467A21
SHA-512:	5D02768A4A820827EF1B8F31F10394BE7FE0594742BBFEC5B8CE5073268DD30029DDDAB3E2F186930CCFD47A40B6AE55268DDFD2942B2507428B1E94F5BB6200
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Procedure</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="procedure"></A><I>Procedure</I></P>..<P>1.Open one case lengthwise in front of the subject so that the empty, inclined panel to which the pilot caps are fixed, is nearer the subject. The cases may be given in any order. Before being presented to the subject, the caps should be arranged in random order. A good practice to follow is to rearrange the caps after each test is administered. To do so, after the arrangement of the caps has been recorded, transfer them to the opposite panel in random order. Then close the case and turn it over. It is now ready for future testing.</P>..<P>2.Instruct the subject as follows:</P>..<P><I>The object of the test is to arrange the caps in order according to color. Please transfer them from this panel (indicate) to this pan

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-38QRI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-3B1I8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	835
Entropy (8bit):	5.273411342898745
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfLqeCyGsMeqW0RFY912Yx21R5eEQUgRR2lBVW91b2FJJzTOLius:WlSZ6jzY/jg12b1Rg7h12DzTOLius
MD5:	2C611641208A5D079D9BEE5D1C9473CA
SHA1:	C686F787D7367CBFCDBC531DDBC0F8EE5C61CD39
SHA-256:	77CF7B99A5C540E19426D4C73E39838492017BD79B1110F8AAFD41221228834A
SHA-512:	FC5689E393C892DA4741B162B5DC317C3C164EC6C553551AA4298C963766A5EB1F0F0CEFF25CBAADFE7E0273E365246759C580751051F991DBAB3AA4C0262374
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Percentile - first test</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="percentile_1"></A><I>Percentile (first test - unselected sample)</I></P>..<P>The percentile for the current Total Error Score with respect to a distribution of Total Error Scores obtained from an 'unselected' group of subjects aged 15 to 45 for their first attempt at the test.</P>..<P>For example, a figure of 90% means that the current Total Error Score would be in the top 10% for subjects with no previous experience of color matching.</P>..<P>The analysis is based on results for 494 'unselected' subjects.</P>..<P>See <A HREF="fm4c81.htm">Industrial Norms</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-3NUAN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	510
Entropy (8bit):	5.3959573376704855
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfnEFssMeq1+SF3qt+TI2xJCk1uZKhndeF/:WlSZ6/1pBqt+TFJP8gndeh
MD5:	89F360D3917E16DB4038FBD5F6A0F8FE
SHA1:	71E396A9BC0F5635C58A34593A2F35FF17A72F07
SHA-256:	EBCC651951C84400F6558A51ADE53178BA89EA065ED6B6F20CAB7ABCA3B9633D
SHA-512:	0BCC4D58CAE9CEFC9937707C2F83E14A5A85D0DF3EB3598D695AC7293D309FBC8A6626D85933B9EFACF97B5DADBBA74BD6F7F8883C9F170F67D33949E16C4ED2
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Color Vision</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H1><A NAME="colorvision"></A>Color Vision</H1>..<P><A HREF="fm83zi.htm">Color Perception</A></P>..<P><A HREF="fm5l0u.htm">Color Vision Theory</A></P>..<P><A HREF="fm1nug.htm">Color Discrimination BASICS</A></P>..<P><A HREF="fm8siz.htm">Defective Color Vision</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-445D7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	700
Entropy (8bit):	5.334701284674859
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfzdK0sMeqvRZBaFtUZJ6eFuQMH963Jii/3DL4KJoczg:WlSZ6tvRZAPQQeKH4ii/Ygbzg
MD5:	16E8C949E498069540E1A79A75630C97
SHA1:	B770D32276F1814477419C9697A8C8045CF4FF2C
SHA-256:	0B99E1F2C854276DC118F380E552C8BBBC581ADD633A91F24936522E25D1774C
SHA-512:	2E2CCDB95D4834231867A9E8ECE08C32E45F78713A369A806BF11B03611C16E9C077A52530CFC06A893397C584B5F140F36EF520FC88B99E26136BE484D3C5B3
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>New Record (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="5igc0ze"></A><I>Edit menu - New Record </I></P>..<P>Selecting New Record from the File Menu resets the order of the caps to the correct numerical order.</P>..<P>This can also be achieved by clicking on the <IMG SRC="../images/bm15.gif" ALT="" BORDER=0> icon in the toolbar.</P>..<P>If the current data has not yet been saved, a warning message will be shown asking if the current data should be saved before the cap order is reset.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-4BM9G.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-4S7G9.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-502LK.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (490)
Category:	dropped
Size (bytes):	1898
Entropy (8bit):	4.853458026897586
Encrypted:	false
SSDEEP:	48:qSZ6Ht3z+t0MQYNXV8X6rgCsAjfNN1+favedN8humB5:rZf/goH4ivedN8045
MD5:	58B18C881BAAA2DC434F00CCEACE5025
SHA1:	5EC19D03DECDD4539BD12377D1A9D397041F4334
SHA-256:	EB4D46EE025778E1A7FD224C4C4562569675199531F0E306AE5D768331D11C10
SHA-512:	0275223753F484198774F49C564F43354EB43220279126C4A23FE8B7A92261E3CCD777ED868FD32091DD98024058DB75354585B96EA0985531D077D6822F6CC6
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Color Perception</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="color_perception"></A><I>Color Perception</I></H3>..<P>Color is one of the most obvious and pervasive qualities of human visual perception. While it is possible to recognize objects and perform most visual tasks without chromatic information, color adds another dimension to perception. After watching a black and white film on television, one is often struck by the <I>richness </I>of perception when a colored image is restored. Similarly, a black and white photograph of a natural scene, seldom conveys the full beauty of the original.</P>..<P>Color plays an important role in many different areas of our lives. Important messages are often conveyed by colored signals - red usually meaning <I>danger</I> or <I>stop </I>and green, <I>go</I> or <I>all cl

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-54012.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (323)
Category:	dropped
Size (bytes):	1036
Entropy (8bit):	5.079220047740994
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepfd9KK0sMeqrfbiaPH5hjTmK10hdyjZOei/SAqs1gQ5FRr9PxgIm:WlSZ60rfbTvx10ethiqAB1hfJyd
MD5:	A76D4404E2A605FB93444DF4F1534406
SHA1:	21D91C83F4FF40DE50456596B8D9AE0486249330
SHA-256:	F936B85232AD7FE72DC94A1FFFE14978098D9D840069F7643F7C428ADBE2B177
SHA-512:	528E8A55103F3EC8B0F38A3E05128D22DB156F2116D6F0A6CB0AB7E0C408F9D06C71DAA3EB5AD782FE8800DC62495A622E359F2A48D47FF37D15EC99F85A661C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>New (File Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="file_menu_new"></A><I>File menu - New </I></P>..<P>In some circumstances it may be desirable to maintain more than one database. For example, in a large company, separate databases could be kept for each department or division. Within a hospital, it may be desirable to segregate records according to various criteria e.g. diabetics, inherited color deficiencies etc.</P>..<P>To open a new database, select New from the File menu. Enter a name for the new database in the standard dialogue box. The name of the new database will be displayed in the title bar of the main form. </P>..<P>CAUTION - Giving the new database the same name as an existing database will erase all records in the old database.</P>..<P>Database files are given an extension of <I>.hdb</

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-5513E.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (765)
Category:	dropped
Size (bytes):	3135
Entropy (8bit):	4.693350362602618
Encrypted:	false
SSDEEP:	48:qSZ62i0MKM4E/6ugJl81SIeXAenAeb58KYv17ZzVj3jtX4aGUOESP:rRjbM4xkS3XAenAecZFhIa9SP
MD5:	C3A78B42905BD2A6A610B253FDEEF4C8
SHA1:	6908EFB6662DC972F0CB7BC1B4E7CEA3A370B900
SHA-256:	EC543C234BD8824D19802FA63A8FD04E9F4EF24C225BE88B513D2E076A23D889
SHA-512:	01F2F2E4DF713D03444CB9BB2DFE1D07AE6A8FBAF8D4BC91864F9FC7AA2F45A846239A2F8C7EB86D97F1E94629E90CE815C50798CF77709A00348CF20A85174D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>How do color defectives see the world?</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="9ov7m4"></A><I>How do color defectives see the world?</I></P>..<P>The effects of a color deficiency on visual performance in the real world depends on the type and severity of the defect. A person with slight deuteranomaly may have some difficulty differentiating between certain colors, particularly when they are pale or desaturated, but the condition is unlikely to be a significant handicap. In contrast, dichromats have significant problems differentiatiating between a wide range of colors and any tasks which involve choosing between these colors will be difficult or impossible to carry out.</P>..<P>Protans and deutans (both anomalous trichromats and dichromats) share a common difficulty with the red-orange-yellow-green range

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-55TA1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	620
Entropy (8bit):	5.107866666885297
Encrypted:	false
SSDEEP:	12:BMQEdOaA9zp6QclfVIgb8RxPDwAhHL91DwmxRLwAhbFAtj87w1qgPC:WnAZpsqgwRxzpL4mxVk878PC
MD5:	ACD8635BB244F2711A1BDEB81D6935A9
SHA1:	2C6C33CCB87AB60F39E6ED5C86070408D7F5CE09
SHA-256:	D8258D977A80DA38AADE434F2B6FDCD5C4D224BBF7EB01A6F7DCB8CFEAAB58C5
SHA-512:	993F89D2517B991109920ECADE2C3B8036E3003110C58DBC4ECCCC3ED2645691B6FDF8EED0C0F739A8D14915676F1E0455CBB0499A09CA5066ED13776B256325
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Untitled Document</title>.</head>..<frameset rows="" cols="200," frameborder="yes" border="2" framespacing="2">. <frame src="indexList.htm" name="leftFrame" noresize>. <frameset rows="80,*" frameborder="yes" border="2" framespacing="2">. <frame src="nav.htm" name="topFrame" scrolling="NO" noresize>. <frame src="fm4eus.htm" name="mainFrame">. </frameset>.</frameset>.<noframes><body>.</body></noframes>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-5ABIO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-5DFVG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	960
Entropy (8bit):	5.198714447067879
Encrypted:	false
SSDEEP:	24:WlSZ6/hg5hikepojCbx73uCz+fJbcTyxco:qSZ6UWxNQJb2Zo
MD5:	D0B410F24B23DABD32B8D2F948F45E71
SHA1:	35D636FFBD71F213F3AC02A3C0BB76651803D108
SHA-256:	C14D9A0523C002EAC6753511EADFBE2A38269008F12DB48E0CA6280EB9697F4C
SHA-512:	EBDE9BDCCA0F590447C24D4117F49E37C09C59F4A5BE02FC2296E90092C1A44C4D34B65A8A313C9414E340810B7172DA4E33ABE2A9BE6A2AE2BFFA286B7B0468
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Export Scores (File Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="1mx2ojj"></A><I>File menu - Export Scores </I></P>..<P>Error scores can be saved separately as Text files. This provides an easy method for exporting data to other Windows programs.</P>..<P>Select Export Scores from the File Menu and then select Error Scores minus 2 or Raw Error Scores from the sub menu. The Save As dialog box is then displayed, allowing a path and filename to be specified.</P>..<P>The data is saved in the format:</P>..<P>Cap position , Error score (CR)</P>..<P>The data can now be imported by most Windows wordprocessors and spreadsheet programs.</P>..<P>Scores can also be pasted directly into other Windows programs using the Copy Scores option from the Edit Menu.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-5HLQ1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-5HO9A.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-5TAUU.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.661226943847434
Encrypted:	false
SSDEEP:	3:PFltl5U9nIk:Pftg9nI
MD5:	9C46007F92F6817CB70BB63B8E7DFC9E
SHA1:	0A0442591054622234A03F01652EABD6057200CA
SHA-256:	FDFF1042BE8E2C1B296E56E5949B0C66C60E9424657958C8EF86394F78711A98
SHA-512:	2D2047D4F5FC4C3C441EB792FAD60C95805FBBEEA9B5F905D916E84A5E68E3DD72E87B5F1B20186E7F9D86B6D3EC5C8E3685665F090C0A5F86B78272E5FC06EF
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXTDmWr........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-6KSJ6.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-72P8D.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1096
Entropy (8bit):	5.322074942718442
Encrypted:	false
SSDEEP:	24:WlSZ6We7LoBEUBNFDwhOwsp91No1N8jkZBrX3W:qSZ6iqUBNtwhOTp9DoDk2BrX3W
MD5:	193E2B281F654EEA18A9120206D27BAB
SHA1:	C49FEBDF7CE90002D00B30D73E0D3BA1B4BF2D99
SHA-256:	A228DC18DEF8C349C50F0D9C77403D5F6BB5D5D4D81F95A7D1710D18973A1F41
SHA-512:	54A2C9E9AD0290A88FE223815604A8740EF39F57BDC49DA8C56C33BFDBFD732A5F82466955BE7D585BEB6D641FB421B097ACB55B40ADDB3A034DC5E27E560897
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Analysis</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="6wkrur"></A><I>Analysis Options</I></P>..<P>The program includes a powerful set of analytical tools. The results of the analysis is displayed in the Analysis window and is printed out with the graphs.</P>..<P>The user may select which analysis information to display by means of the Preferences form which is accessed from the Edit menu.</P>..<P>The following analysis information is available:</P>..<P><A HREF="fm2k85.htm">Total Error Score</A></P>..<P><A HREF="fm26k5.htm">Square Root of the Total Error Score</A></P>..<P><A HREF="fm5fw3.htm">Vingrys Analysis</A></P>..<P><A HREF="fm8iie.htm">Classification</A></P>..<P><A HREF="fm7hf5.htm">Percentile (first test unselected sample)</A></P>..<P><A HREF="fm7hf6.htm">Percentile (some experience of color matching)</A

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-7E3FC.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-7M0SM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-7MRE8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-7SC7L.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	677
Entropy (8bit):	5.328663374099687
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfXNr50sMeq7p5rhGQeynlJTv7k9K1LnS+J5TNT+x3:WlSZ6/f2NLeIDAsr7nT+d
MD5:	05B017E05F9FEFC2F641E0FB97323A1F
SHA1:	B7F68148D267AA727F1BD08849D2360D3422BD77
SHA-256:	BF7A69D6E9B4AEA73A5D9E84B521CFA07B577BC52BAB20E5C4FFF7699E0E2634
SHA-512:	55D07E73EE99C5BE327F3AA8D52084654838A23FCABC459175ED7B3E33CCBBA7B570AED8FEB45374A120DD228FFAEC95FD76C744373FF8AC41A664C5018B36E7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>CIE Chromaticity Diagram</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="3o1s_zn"></A><I>View CIE Chromaticity Diagram</I></P>..<P>This option is selected from the View menu of the computer program.</P>..<P>A color representation of CIE color space is displayed.</P>..<P>For more information see <A HREF="fm1nug.htm">Color discrimination</A></P>..<P>N.B. The colors displayed are only approximate and will vary according to the color capabilities of the monitor and display card.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-7VJGI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (389)
Category:	dropped
Size (bytes):	953
Entropy (8bit):	5.147696898037409
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepf7gKMWsMeqBTKGFW1gyyHypVDMomENSkYvu2VFGjuDklCoSpeJz:WlSZ67hPigyyHKPhoZvERIR67OI14RY
MD5:	AC590A27C6E958A26D468E6C1FD3EB8A
SHA1:	10F38E91D6003EF55DC0DD3ECC79BBA9FE815599
SHA-256:	29D6A5D95D203DAA09D30FE8A0B55324ACC9916F3AE0ABECC944765264750B27
SHA-512:	CD6FC4862F1D10BC217B06751358560A2985FC712D2E2768351AB729F096C1220219B4CD7D28208D15D23B0FB07BB3F684D28ED1053762CE43722AA855F43D7D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Scaling</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="scaling"></A><I>Scaling</I></P>..<P>The standard FM Hue chart has a scale maximum of 14. While this is suitable for most purposes, error scores for individuals with very poor hue discrimination may exceed 14 and will therefore extend beyond the graph. </P>..<P>The current scale maximum is shown in the Scaling Panel. The scale maximum can be changed by simply entering a new number into this box or by selecting Auto. When the Auto option is selected the scale maximum will be set automatically to the maximum error score for the current set of data. The scale maximum can be reset to the standard value (14) by selecting the Standard option.</P>..<P>The scale maximum must be in the range 4 to 50.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-804M9.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (587)
Category:	dropped
Size (bytes):	903
Entropy (8bit):	5.155251943022798
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfHDWsMeqdCjLfwl5cZEE+EBTDB1MFtoiexMFOe9JvmKzxyWE5ix:WlSZ6vIdTBE9BTDB1Mg7MrOKzgXsQ+V
MD5:	106866B6492A36360F159961EEE2305D
SHA1:	284307C43A818C4D0F54A1EECB527BECA713C093
SHA-256:	2BB321A3622686AA758F77A180CF69BD03BBA387E248B79C498D742C1F44426A
SHA-512:	E1312B1B93E860C95239E9A333939C29271F5E64FB59E58BE863373591318C51B473A83125B45629EA3B9D93D13BC9107CB6A93AD6810087B3DB0BF6C99500BA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Opponent Theory</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="opponent"></A><I>Opponent Theory of Color Vision</I></P>..<P>In 1870, Ewald Hering, a German psychologist / physiologist proposed an alternative theory of color vision. Based on a series of subjective observations of color appearance, Hering proposed that color vision was derived from three mechanisms; one responding positively to red light and negatively to green, one responding positively to yellow and negatively to blue and a <I>brightness</I> mechanism which responds positively to light and negatively to the absence of light. This theory became known as <B>Hering</B>'<B>s theory</B> or the <B>opponent theory of color vision</B>.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-8ATLQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-8B7U9.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-8FUCN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1358
Entropy (8bit):	5.054147959173274
Encrypted:	false
SSDEEP:	24:WlSZ6nN7g4wZqCmnmXVRlieL3jxLIyLU5eYM5LeLPSMG/:qSZ6n+4yqOFRhLFLImgB4LgSMG/
MD5:	7F7AC70B50CEC86D2CA55180A736C385
SHA1:	77EF42BEDC142CFBD6D852E6ED750BF1305313E6
SHA-256:	85E0256CA7B879880B3CAC64B8050DC1A4C523614B04D80D89B52043554D7501
SHA-512:	35C2EE3519740160FC827D894D77839F71D4E58C3FD65CBA5D8D373BF6D50325E5D568E650647D87F75B33B83C604487E7CFCC7372A9A62AC057FE03635B0582
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Select Record (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="11cfrtd"></A><I>Edit menu - Select Record </I></P>..<P>A record saved in the database can be retrieved, edited and displayed by selecting Select Record from the Edit menu or clicking on the database icon <IMG SRC="../images/bm16.gif" ALT="" BORDER=0> in the toolbar. A list of records currently held in the database will be displayed.</P>..<P>Records may be sorted according to Name, Reference, Date of Birth, Date of test, File number or Comments by clicking on the appropriate option button in the <I>Sort by</I> panel.</P>..<P>To select a record, click on the appropriate name so that is highlighted and then click on the Select button. The data for the selected record will then be displayed on the screen.</P>..<P>You may select multiple record

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-8HLE5.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	608
Entropy (8bit):	5.3987448449430975
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepf+sMeqe2jS13Ux21TaxLKt1QOLsQ1QYsYu:WlSZ6MDjS13o21+ut15QQ1QYsx
MD5:	2BBEE43DA0881ADF39FAE81F8E87FED0
SHA1:	661544071BF7649A5E027AAC016196761274761C
SHA-256:	BDDE91901D280A0D3FA07A5DF92355E04B39AE37A51953E2CB970EE2CA511F8E
SHA-512:	E2D4571ED13ED0DFBE83E070829EB54D6CEBB5E527241FE1110CE00FB5C86379A8610AED54743DD336163CBD21BC26B90C00AA6DF417C6990BDFD3A0C4A41C80
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Classification</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="146r.h6"></A><I>Classification</I></P>..<P>Results are classified into Superior, Average or Low on the basis of the Total Error Score.</P>..<P>Superior : Total Error Score < 16</P>..<P>Average : Total Error Score 16 to 100</P>..<P>Low : Total Error Score > 100</P>..<P>This classification is based on <A HREF="fm4c81.htm">Normative Data</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-8ONJI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-90SJB.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-94FTD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (498)
Category:	dropped
Size (bytes):	1053
Entropy (8bit):	5.033782561959998
Encrypted:	false
SSDEEP:	24:WlSZ6MQ2xQHHNMW7OSBf5eGqwOEUBqdCY:qSZ6/Nx9t5eG87BqdP
MD5:	4E4EA2AA8DEF4E3D1FAFD3FA367CF0F8
SHA1:	5BCFE9D9AE45E1130F0E0BF23A01F30F6749B124
SHA-256:	A4D8411E1B655606417346688126F14401276D4793B317380D29CA26BF7B79DC
SHA-512:	5F86230841AAE79F82346F8359670B7094F93C9A381DAA2D40C2ACF6BAA0130E3387268B9D03FFFDDFB61FCB4A356DCEE8F40342AA6061ADC901CF75833DD4EC
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Acquired Defects</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="acquired_defects"></A><I>Acquired color deficiency</I></P>..<P>Some changes in color vision occur throughout life even in healthy individuals. These changes can be explained in terms of yellowing of the ocular media and perhaps changes in retinal sensitivity. Color vision deficiencies can arise at any time throughout life as a result of general or ocular disease, trauma, medication or as a result of exposure to toxic substances. Unlike congenital color deficiencies, acquired defects commonly affect one eye only and affect males and females equally.</P>..<P>The effects of various diseases on color vision has only been fully recognised in recent years. This is partly because acquired defects often affect blue perception and most color vision tests onl

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-974V5.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1148
Entropy (8bit):	5.150931772291609
Encrypted:	false
SSDEEP:	24:WlSZ6/3PpTyAIVoSKaDTNIBsvZn2MPXpA9E:qSZ6JdIVlKaWKZnL3
MD5:	B30B94D1CE5EFC033EC60C9080459BAA
SHA1:	DFCB8F5D49FD64A66A7482FFADE87FCABCC414AC
SHA-256:	4DD0654A19F8C58FBADE2D2B9547CE2B58D52FEB153DED136068179B1ECCC85E
SHA-512:	2AE912ADB5675833514B930E1CC2BAE8116DA3685DEE7F963FDD3FBE6A6DC2CAC11375C93E393F6E36B1CF598343C7237D98F180F6C63A72C523D65FD138F1B0
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Copy Graph (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="3.ne_qa"></A><I>Edit menu - Copy Graph </I></P>..<P>Polar and linear graphs can be copied into the Windows clipboard and pasted directly into other Windows programs.</P>..<P>To place a graph into the clipboard, first display the graph in the required format (linear or polar) on the screen then select Copy Graph from the<B> </B>Edit menu. Select Bitmap or<B> </B>Metafile format from the sub menu.</P>..<P><I>The bitmap format can be edited using packages such as Paintbrush.</I></P>..<P><I>The metafile format takes considerably less memory and will allow editing by object-based drawing packages.</I></P>..<P>Having placed the plot into the clipboard it may be copied into a Word document for example, by loading Word, placing the cursor at the desir

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-98KK1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	620
Entropy (8bit):	5.113713229977671
Encrypted:	false
SSDEEP:	12:BMQEdOaA9zp6QclfVIgb8RxPDwAhHL91DwmxRLwAhbFAts87w1qgPC:WnAZpsqgwRxzpL4mxVX878PC
MD5:	D98C6A1A5CA178C807EF61EEEA70AB88
SHA1:	8C496EDE53C990802B7296B6B07A179F09097E17
SHA-256:	1AD26B7BA2935536FFFC2B10A3EF100D186AB68CB895BCCB4727B54148D9EC1E
SHA-512:	7E56A3BF92659491E170B31A861880AA10701E094FF6C701F81C003F59BAE8E5FBB063E85206CE0C3846CD688C3660DB8862C7E5D0EF80AD743424851E800B56
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Untitled Document</title>.</head>..<frameset rows="" cols="200," frameborder="yes" border="2" framespacing="2">. <frame src="indexList.htm" name="leftFrame" noresize>. <frameset rows="80,*" frameborder="yes" border="2" framespacing="2">. <frame src="nav.htm" name="topFrame" scrolling="NO" noresize>. <frame src="fm00c1.htm" name="mainFrame">. </frameset>.</frameset>.<noframes><body>.</body></noframes>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-995OP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	1103
Entropy (8bit):	4.832787464154585
Encrypted:	false
SSDEEP:	24:WLZpsqgwvtJo6uwDK88ZfqZBAeNBAehxQy1SsYREXrC:KMqgsy6u8781q7AenAe7Qy8sYIrC
MD5:	3DFCA87387FA5E7E1176E988681CEAC9
SHA1:	9D429FFD97C4B5BA7FDE07E8CA1BBC5B9EAF08A1
SHA-256:	29F60861DB960BFA97F66D6082AF07C9D27350E5E0BF9176E164A1C25FB2D3EC
SHA-512:	0DF65BD35AE170D1F429267BFF8E8FA5260AA93AAC33BC113DAADB366F6A84CEBD3D60016F3385D8379376A6003535D7DB25FB6D27E5B4B02B02D1FF975880B5
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Untitled Document</title>.</head>..<body>.<p>The easiest way of representing the combinations of colors which are confused by color deficient people is with reference to the CIE chromaticity diagram.</p>.<p>The colors which dichromats confuse lie along straight lines when plotted on a chromaticity diagram.</p>.<p>The lines radiate from different points according to the type of defect. These lines are called isochromatic confusion loci.</p>.<p align="center">Dichromats will tend to confuse colors over the whole length of the confusion loci, whereas anomalous trichromats will tend to confuse colors over a more limited ranger.</p>.<p>The line which passes through the whole point and intersects the spectral locaus, indicates the wavelength which will appear "white" or neutral to the col

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-9EUJD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-9KAS3.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	351
Entropy (8bit):	5.446691573408966
Encrypted:	false
SSDEEP:	6:B8FQk+Hryft1q2Q8EevWR0NNEXW0Yf1J3RtsvIALjiNMeqlxMZDALejz6ACi4MmS:BMQkzLq2Q8EepfT+/sMeqicajV4ezqE
MD5:	8AB3976F88A285EB5056A5CF9F4E92B8
SHA1:	96297612E348F76D31BD21DBF1B1285984600D3F
SHA-256:	1D3437C60A5CE189863A41E2431B392879CF0A1380E409BE41E160EAA47A171C
SHA-512:	A77F2397BF8211B0A04166C8137A0B1EEAC27871EF6D3C4F4393CECC29B7D3D5C7E494E8E5546433F9E0C1C3D55FB822A15AACD1A64B407E57413F20686A8A2A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Help menu</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="help_menu"></A>Help menu</H3>..<P>Displays help files and gives information about the program.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-9LHHV.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-9RHQ1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-9RTEB.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-A1RJE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	612
Entropy (8bit):	5.3295965535806085
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfQgK0sMeqfBGQbZWJChfQ0T/Kce4hx8ll:WlSZ6xfBLbCCY0ed
MD5:	A66F36002B88660174CF8C6F7B19C4F9
SHA1:	4F4C2C8AAC87687F1BE35A43E13678922F57C9EB
SHA-256:	9CF6E0AF7AA5D8B0F263FA6BED5877373B3762FCFF1E31044D41292B6B0B9836
SHA-512:	AA81624F6D92EC098DC92A7D24DF67E7369561F7C5AF3692BBBF4219E56A16C08BA58598ECC82AEF7F25E3BA0BF3070EB59A40F2D3F04504286F70F34110659D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Save As (File Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="3_gii4p"></A><I>File menu - Save As </I></P>..<P>This option saves the current database under a different filename then makes the new database current. This is a useful way of keeping backup copies of your databases.</P>..<P>CAUTION - Saving the database with the same name as an existing database will erase all records in the existing database.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-AITOV.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1108
Entropy (8bit):	5.095816593016971
Encrypted:	false
SSDEEP:	24:WlSZ6/ocZAfpTyA+tE621y7+q2CXQAa87Xk+P:qSZ6zZod+tEEylAvrkk
MD5:	D8B33E4915AE868F0A6002EDBB46068C
SHA1:	603FFA51805E3630347D1F6DB59303C2318D9708
SHA-256:	22CA976D4A0E2CF72CAB1C3947DC68C62C8A61FEA8F3ACEF8D0BBD5241B6125E
SHA-512:	2F07E976FECF9DE17B2618AD215D2BB70C9FF8A9E52E827F8F2B445D6DF07851CB56A6C94097E447DA6756FF7ACE74BACDE64A595144DF7FD904B660340E28B4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Copy Scores (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="2mwdzwg"></A><I>Edit menu - Copy Scores</I></P>..<P>Data (cap order) can be placed in the Windows clipboard and pasted directly into other Windows programs.</P>..<P>To copy data to the clipboard select Copy Scores from the<B> </B>Edit menu. If you wish to copy the actual error scores then select Raw Error Scores from the sub menu. Alternatively, the scores can be copied as actual scores minus 2 by selecting the Error Scores minus 2 option.</P>..<P>Having placed the data into the clipboard it may be pasted into an Excel spreadsheet for example, by loading Excel, placing the cursor at the desired place in the sheet and then selecting PASTE. Error scores will be entered into each cell in the selected column sequentially.</P>..<P>This facility al

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-AN58C.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-AUPUA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-B7633.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-BA9D7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	310
Entropy (8bit):	5.395522024555973
Encrypted:	false
SSDEEP:	6:B8FQk+Hryft1q2Q8EevWR0NNEXW0Yf1J3RoNqx0iNMeqlnKJyTZy0yEMoVCRWvQT:BMQkzLq2Q8Eepf6N3sMeqkJyT40uooqE
MD5:	0C803F3DE7AA2B9DEE685041365725FF
SHA1:	1E43BECC5907218634B4AE177F2A4E9EE02EB561
SHA-256:	A06BD536E900A3A789EA761F028DC1E5B80BA1BB4BAA6A767A8A9B6D1BC1588A
SHA-512:	EE6F5D75CD971F3FF50521FB7380569FAF68323CACE88DCA76BC959C0E87C9ABA26747C3DDCEAE6C5E625176CBA6F1B025DC42006365C4318446EACBC88B2EE4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>(Untitled)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">..<P><A NAME="0_olb_"></A><I>Exit</I></P>..<P>Terminates the program.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-BB5KQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-BF1LC.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1406
Entropy (8bit):	5.087519906127907
Encrypted:	false
SSDEEP:	24:WlSZ6MaaHU2OvlToCuz0mXVRliSiRr3jxLIyLU5eYM5LeLPSMG/:qSZ6O9MlToPjFRziRrFLImgB4LgSMG/
MD5:	133C2D1C5DB25D3BA0AD7F5C3DFFC318
SHA1:	700297C8E1102561B2EF9B5968FFCBDFEC1198A5
SHA-256:	18EB93BA9F896DE2A51446353F01F1745643907FB2ED9744D20C65D40584B8C8
SHA-512:	7006F5D962E9769044B3A01C3843332A752F849A05D931D5E4F63F951A0AED650139FA121A53A0E0E2A1097391FCC12C75E8D3A2FAD11A49A9665C43D2FF6533
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>View Records</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="view_records"></A><I>Viewing records stored in the database <IMG SRC="../images/bm20.gif" ALT="" BORDER=0></I></P>..<P>Data saved in the database can be retrieved, edited and displayed by simply clicking on the database icon <IMG SRC="../images/bm21.gif" ALT="" BORDER=0> or selecting Database from the View menu. A list of the records currently held in the database will be displayed.</P>..<P>Records may be sorted according to Name, Reference, Date of Birth, Date of test, File number or Comments by clicking on the appropriate option button in the <I>Sort by</I> panel.</P>..<P>To select a patient record, click on the required record so that is highlighted and then click on the Select button. The data for the selected record will then be displayed on th

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-BGOBI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-BTSAS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ISO-8859 text, with very long lines (840)
Category:	dropped
Size (bytes):	5098
Entropy (8bit):	5.261947726103011
Encrypted:	false
SSDEEP:	96:rHQmssTVeX1Kw7UBT7OmRGShMIXZgSk8XzCLzlyk0UFVBOlCWvaR4:rwKTVeX1R74USjkDaCR4
MD5:	273828C98BCBBCE9497AC68156F595A0
SHA1:	FB6075A0DFF9208309EB26FA48DAA74A02132FEF
SHA-256:	7683EDEE111B40B3E2D10430AEB6E0456D82CF923774B477E863427E7A4AF5A9
SHA-512:	5EB5833C48CA116511B1FC06D06A922DA2A13B9975DA68624B31428C2F0A9C98A5BB3576922A8EA408CF3CF481AB63A58142CE8C4BD4E68ADF78B952B264F1E3
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Normative Data</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="normative_data"></A><I>Normative Data</I></P>..<P><B><U>Distribution of Total Error Scores</U></B></P>..<P>The distribution of initial error scores which may be anticipated from particular populations is indicated in the following table. The <B>unselected</B> column shows the errors which may be expected from each percentile of an unselected group of people aged 15 to 45. The next column, '<B>in-plant</B>'<B> applicants</B>, was drawn from 300 tests of employed personnel applying for promotion to color control positions (shader trainees, laboratory testers and laboratory technicians) in a paint manufacturing plant. The last column, <B>experienced</B>, is accumulated from tests on 150 personnel with three to twenty years experience in the color control

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-C1Q87.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-CIGG6.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-DCV4G.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	951
Entropy (8bit):	5.463654319767326
Encrypted:	false
SSDEEP:	24:WlloCZ65rX4Os2BJvCQWPEk0Uq4w2kI+h1dNbHCVd:qloCZ6FIOWPZkIkt1dxCVd
MD5:	EF17225EDD4AD11E9DE39B38BA2979FA
SHA1:	F50E4CCE88AC680AA47C13E5DF2DE0669BD50B0E
SHA-256:	1128E54A905B883E3FA96C823D9519C699371D5305055BAC31955EFCEDF1B1B2
SHA-512:	8FB1133EF976AFF50016CA2CC3484AAD3359ADBE7FC52C0BE1B03143590ED83A511F90F26209FC60089FE2ECD654572569BBD6926EBC1EBBD9483878676B8399
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Toolbar</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="toolbar"></A>The toolbar</H3>..<P>The toolbar displayed at the top of the screen is designed to allow easy access to the most frequently used functions.</P>..<P><IMG SRC="../images/bm22.gif" ALT="" BORDER=0>Display help</P>..<P><A HREF="fm7n8x.htm"><IMG SRC="../images/bm14.gif" ALT="" BORDER=0>Print results</A></P>..<P><A HREF="fm3fjn.htm"><IMG SRC="../images/bm26.gif" ALT="" BORDER=0>View records stored in the database</A></P>..<P><A HREF="fm36re.htm"><IMG SRC="../images/bm8.gif" ALT="" BORDER=0>Entering data</A></P>..<P><A HREF="fm4two.htm"><IMG SRC="../images/bm10.gif" ALT="" BORDER=0>Analyze and Plot Data</A></P>..<P>All of these functions are also available from the pull down menus.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-DG5I9.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	605
Entropy (8bit):	5.279621065676119
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepf9sNK0sMeqruvBIs2/qs5FRrv+w+:WlSZ6Yr4b2HMp
MD5:	D9F1F9370FDD2C27C03087A2AD04550A
SHA1:	6DB338CA74391F89A302DC0E8DA1E3D1720E400A
SHA-256:	643492C97D20FC8BF8E511BB5E19A8A9778044BEA2CE449C2FD724737575C93D
SHA-512:	DFB82AEE127CDFD6D4CBC5B4C9D514184CCE29850E349F2DAF8998B5D4DB3EDB41C7CC4F4B5CCB00B314CAE0B957B441570C65CCC29E652F4BFD5E59A5115BC3
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Open (File Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="file_menu_open"></A><I>File menu - Open </I></P>..<P>To open an existing database, select the Open option from the File menu. Select the database from the list displayed. The name of new database will be displayed in the title bar of the main form. </P>..<P>New records can now be added to this database and existing records can be retrieved.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-DH1VQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	1403
Entropy (8bit):	4.972646287022937
Encrypted:	false
SSDEEP:	24:WLZpsqgwhUDIcd/NVxonOLm0yTPhH0FmeqdEj9BFek/hoOrjpBppfW4SXai9DC:KMqgKOV1DwMmPhH8t9BEYSsjTpPbsDC
MD5:	C2B113694C6A2C6C04A3734D98BBFD05
SHA1:	69A74E1521C986B6D7046A4C6F6FB9C45B0A6038
SHA-256:	47CC985EDEE5A47B6E4DFC2891215E0B986B854198670C7526AFBDBFD26CB4C3
SHA-512:	27B129CB72EA766DA23AF95827CF82BBAA3B4DA0B349C8CEB6DF532957FE1FBBA54CEBCB99C9EA400E61817A082F5B3DF682F87937822D20519BE38ADBCED1D8
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Untitled Document</title>.</head>..<body>.<p> </p>.<p>CIE CHROMATICITY DIAGRAM</p>.<p>The ability to match colors using a mixture of just three primaries forms the basis of a powerful method for describing colors.</p>.<p>In 1931, the Committee Internationale de l'Eclairage (CIE) devised a standard system for specifying colors based on the trichromatic color matching characteristics of a 'standard observer.'</p>.<p>For technical reasons the CIE adopted imaginary primary colors (rather than red, green, blue) which were designated X,Y, and Z.</p>.<p>The relative amounts of X, Y, Z required in a color match are represented by the lower case letters x, y, z.</p>.<p>Since the sum of x+y+z is equal to unity, the value of z can be ascertained from the values of x and y.</p>.<p>Therefore, all per

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-DH8FK.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-DL7S8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (335)
Category:	dropped
Size (bytes):	923
Entropy (8bit):	5.294460497061449
Encrypted:	false
SSDEEP:	24:WlSZ6/mAaCMZurAF3lPoKTJkRI88pVxu2s:qSZ6+AVMZurAF3lPfJkQxu2s
MD5:	697EABBD397BCB3F0E518CC5D71F8665
SHA1:	79DDEC0A5E0B8AC160E44080744D6DA0E2DAB6FA
SHA-256:	2745476DC843A0631F14A4554D36EA5986CA947A2E1F018D3511F3D185D57BC9
SHA-512:	243CB0ABA5C40911C652D3E9D22A2BAAE2B1B968D0B34E6D871B38BF0E91D174C7E9BFE62E268BCAC8DBA52E511360302D53A01552F4121C9C18F5CDF352CEF8
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Color discrimination - Basics</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="3i08098"></A>Color Discrimination Basics</H3>..<P>Before considering the various forms of color deficiency, it is necessary to understand the basics of color discrimination.</P>..<P>In order to discriminate between different wavelengths, two or more photoreceptors with different but overlapping spectral absorption are required. To understand why this is so, consider the situation for individuals with one, two and three types of photopigment - known as monochromats, dichromats and trichromats respectively.</P>..<P><A HREF="fm7lkj.htm">Monochromats</A></P>..<P><A HREF="fm4r8z.htm">Dichromats</A></P>..<P><A HREF="fm7243.htm">Trichromats</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-DV75M.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-E0FN4.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-E5GKL.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	977
Entropy (8bit):	5.1795973943265405
Encrypted:	false
SSDEEP:	24:WlSZ6jzORnGg12b1RKv19DzTOCOAFtZqhus:qSZ6j6FPCHKvn6CPfqhus
MD5:	379CE855E1766D9A3CBD2A89C04810A0
SHA1:	E82BC97596F6B545FED31A138240580AE584235E
SHA-256:	1B3F9FFBEE77A3B4FE257050720E80309F92278C08737949FCF6068819B5C4AC
SHA-512:	554D286D606964E825A6AC5FC994B7473ACE16955D873071274D780F23DE4DA46465BDECBD1D130783F098A5F76A7A4A0E55AFAB6573198D591ABAFFC4380CA9
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Percentile - some experience</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="percentile_2"></A><I>Percentile (some experience of color matching)</I></P>..<P>The percentile for the current Total Error Score with respect to a distribution of Total Error Scores obtained from a group of subjects with some experience of color matching.</P>..<P>For example, a figure of 90% means that the current Total Error Score would be in the top 10% for subjects with some previous experience of color matching.</P>..<P>The analysis is based on results for 300 employed personnel making application for promotion to positions of color control in a paint manufacturing plant - shader trainees, laboratory testers and laboratory technicians.</P>..<P>See <A HREF="fm4c81.htm">Industrial Norms</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-E6MGQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-E99CD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1236
Entropy (8bit):	5.205746040930025
Encrypted:	false
SSDEEP:	24:WlSZ6mJiySKp1GHRE0vFnHzxDFhLA1ZciDl8HFXdvkPiDF3UgQnWF7BKu4R2hr0d:qSZ6QSwExFnWDciyXdSi9QWF1KPAOP8o
MD5:	78A9D9EE7E2BAC30E1D4981B3B0E5B37
SHA1:	4BA4FC7857EE5CB5CF092405D57617EC627D79B5
SHA-256:	55AC012EB532EE6B4D182EC6F446439638405FB226B0CBFCFDECB8C539795193
SHA-512:	3917087D7451FC8D1D1C2B5F2723B3F59504D6287E62FA8D86EC316AE1868FC07628DF1ABDB1190E9289072B5D603A3A631CBA6CBF9F1CFB3C29D91440D087B6
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Vingrys Analysis</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="vingrys_analysis"></A><I>Vingrys Analysis</I></P>..<P>The Vingrys Analysis performs a vector analysis of the data and provides a series of indices describing the orientation, magnitude and polarity of the data.</P>..<P>The Confusion index (C-index) describes the severity of a color loss. A perfect arrangement of caps will give a C-index of 1.0.</P>..<P>The Scatter index (S-index) quantifies the specificity (polarity or randomness) of a cap arrangement. A perfect arrangement of caps gives an S-index of 1.28.</P>..<P>The Angle identifies the orientation of the cap arrangement. </P>..<P>The results of the Vingrys analysis are used to determine a provisional diagnosis.</P>..<P><U>Reference</U></P>..<P>For more information on the derivation and applicat

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-E9H7K.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-EIC21.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	462
Entropy (8bit):	5.32741393975773
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfP21jsMeq1u14F01YBgpoTJYW1rH:WlSZ621fA1I01CgpoTd1L
MD5:	BB6E47AEDDACFE400564D79C9F8C29F5
SHA1:	B85A393974C834DB90B53D5548272C6966646604
SHA-256:	DFA41452998146C979C9E983051F4333D9AEB2C8F0912DC524AC7FF2237EF753
SHA-512:	454758206789882233ACDF96247AB7B068FF14DAE5199832F5757254DB8E18A939A7FED04CE02872507F322DD9F937D75B317ECACC9BA058C4F545B75FD206B3
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Total Error Score</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="total_error_score"></A><I>Total Error Score</I></P>..<P>The Total Error Score is obtained by summing the (error score - 2) for each cap. Thus a perfect sequence produces a Total Error Score of zero</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-EJCPH.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-ESV03.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-ET15B.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-F14ON.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (420)
Category:	dropped
Size (bytes):	1478
Entropy (8bit):	4.927547647151434
Encrypted:	false
SSDEEP:	24:WlSZ6VSmVuqt4yy4QWa1i5ymCIanMO/FGQ6W5HfEEdBDzI974J2Nv4rNdF54l35:qSZ6VjrhyIa1eJNONGlidRW7u2Nqdn4f
MD5:	1598F67139DD4BB4A27356A6F6F8A6CF
SHA1:	13176535BDFD3C18807C55DDEC8D60F3B50D9C93
SHA-256:	58375FB674DF4A7D4C8DE7A588E7A7E63F9374739CD02EED231EF73B4F660B26
SHA-512:	5E1D4C0693424A10DD5A7B16D704D5EB5DC2C2719500F87E7BAA3A14AC7F06B01855006ADE8396B1C21DEDB28D58CE82DF8AA584C91466BCFF17696BF76E309D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Materials</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="materials"></A>Materials</H3>..<P>The FM Hue Test includes a total of ninety-three colors mounted in plastic caps, housed in four separate cases. Each case consists of two hinged panels which contain a quarter of the eighty-five numbered, removable color caps. (Two caps are repeated and fixed as pilot colors at either end of one panel in each case, making a total of ninety-three caps.) </P>..<P>Pigments in the color caps are made from the most stable materials available. However since no chemical is absolutely permanent, the caps should not be unduly exposed to light.</P>..<P>The matt surface of the color caps is necessary in order to give the same spectral characteristics from any angle, but it is sensitive to fingerprints. It has been found that slight

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-F22M2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-F6MGU.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-FBRLE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	511
Entropy (8bit):	5.378824446452878
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfLsMeq1yLR6yiffVTTZC0:WlSZ6PgLR65ffVTTw0
MD5:	5C44E32EEFFC400F2C7009E891834EB0
SHA1:	4BB88D2E2DAF7DC3F1D6D396F5C6D867AF69C37F
SHA-256:	0CF79794940790A88EB589A0F2C07697A21C3A6DDBC9D83C30A6EEB7468F8AC5
SHA-512:	FAB0E7DD8798A3DC5FE977FF65F1F8F427E1803674C7343C16F6B8980EA15191B3D120EFDA59FC9ED1E737B320721BA0885ACFEEE316C1317CEF19246910A927
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>FM Hue Test</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H1><A NAME="fm_hue_test"></A>The FM Hue Test</H1>..<P><A HREF="fm2u5h.htm">Purpose of the FM Hue Test</A></P>..<P><A HREF="fm52sz.htm">Materials</A></P>..<P><A HREF="fm97vy.htm">Administering the Test</A></P>..<P><A HREF="fm0f1q.htm">Principles of Construction</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-FCVEM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	834
Entropy (8bit):	5.228525446711539
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfPPsMeqMxFWVuUGQeynlMBiBdgVXRWeT8deF9K1LnS+J5TNT+x3:WlSZ6LZUULeICIBABWZdeur7nT+d
MD5:	080B5C6E3694538856784FD9B2E059F6
SHA1:	45491F405F18C07815C11875E7C7E7E562A9204B
SHA-256:	24054D217FCEC0EB368FA6825BF718B4906A02C475E78BFF9E84116ED9F54493
SHA-512:	A2ADD9D018CADF4FC18BF0460BF929D525D63E8D31601C7DDE51022C218752626FD48B90C4A44D9EA7EED2F161783DFE8F7B9FB707A4E30BCF58E57B0F6882F5
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Tritan confusion axes</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="try9gg"></A><I>View color confusions for tritan defects</I></P>..<P>This option is selected from the View menu of the computer program.</P>..<P>A color representation of CIE color space is displayed with isochromatic confusion lines superimposed. Colors lying along the confusion lines will tend to be confused by individuals with a tritan defect.</P>..<P>For more information see <A HREF="fm8siz.htm">Defective Color Vision</A></P>..<P>N.B. The colors displayed are only approximate and will vary according to the color capabilities of the monitor and display card.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-FGUGV.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	948
Entropy (8bit):	5.389985607836416
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfnEFgzsMeqAgy5m9HJ+4m1k9pWm13R9XF3t766twt+IBHSbyIlO:WlSZ6/BV4894m13vrWt++H+1C7D
MD5:	90B240063D7DD2DF17DCDB1E9C88CDBA
SHA1:	836D8E4620E04C843451E3EC52DE9D94319260A6
SHA-256:	833B48F68273E7BA7A813852621CA42B235FA2ABCB4FA68B200EA78D4A62FAFE
SHA-512:	8D5F6D4196548940D2C943F19B9BB1CCDD6F573A1DD1AD3C89A1294E026B21749E7B78A6BBFADF2842EC70E01E7B46A8DCEE563350C1F0BA640FE8FD6488539F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Color Vision - Theories</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="30j5h."></A>Color Vision - Theory</H3>..<P>Human color vision is exquisitely sensitive. It has been estimated that an individual with normal color vision can discriminate over 7 million colors and shades. Through the years, many experiments have been conducted which contribute to our current understanding of color vision.</P>..<P><A HREF="fm5asz.htm">Newton's experiment</A></P>..<P><A HREF="fm7rub.htm">Young's Trichromatic Theory</A></P>..<P><A HREF="fm8vi2.htm">Young-Helmholtz Theory</A></P>..<P><A HREF="fm2kms.htm">Opponent Theory of Color Vision</A></P>..<P><A HREF="fm5dgl.htm">Zone Theory</A></P>..<P><A HREF="fm3be6.htm">Modern Day Understanding of Color Vision</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-FNQL3.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-FNT63.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (454), with CR line terminators
Category:	dropped
Size (bytes):	2921
Entropy (8bit):	5.067136786531387
Encrypted:	false
SSDEEP:	48:qloCZ6A14E52NYvwQVvABgsMX2JwbvCVHs7picwMDjFyAoK6zl9Nxris/HkWDRfB:CAo7tuwzCVHCbkK6znLrisUy
MD5:	EF362738E6E276AA44561432CAE06953
SHA1:	9DA5FAEA290925BBAFF5CB396580BB3B08B17286
SHA-256:	BE8D6B17605DE4E8FE74197737F334555A37BF6905B2BA10439D7674BA616FF2
SHA-512:	8D0F280BF64EAC7960E5027BD98745B273F97FD383F87A63D0E70CDC091685BA2473F469C7B44A05A3806EA382C1515725A2FE08F30059D356F96281699159F1
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Displaying Data</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="displaying_data"></A><I>Displaying Data</I></P>..<P>Data may be plotted in two formats: Polar Graph or Linear Graph</P>.<P>These can be accessed by clicking the analysis button <IMG SRC="../images/bm10.gif" ALT="" BORDER=0> in the toolbar, or by selecting. or selecting Polar Graph or Linear Graph from the View Menu.</P>. .<P><A NAME="polar_graph"></A><I>Polar Graph </I></P>..<P>The cap numbers (1-85) are represented by the radial lines. (Note - the angular spacing of the radial lines is not uniform - this is intentional).</P>..<P>The Error Scores are plotted for each cap, with the inner circle representing a score of 2 (caps in correct order). The circles corresponding to error scores of 5, 10 etc. are darker to assist with the interpretation of the

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-FOAPL.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-FR2MU.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.661226943847434
Encrypted:	false
SSDEEP:	3:PFltl5U9nIk:Pftg9nI
MD5:	9C46007F92F6817CB70BB63B8E7DFC9E
SHA1:	0A0442591054622234A03F01652EABD6057200CA
SHA-256:	FDFF1042BE8E2C1B296E56E5949B0C66C60E9424657958C8EF86394F78711A98
SHA-512:	2D2047D4F5FC4C3C441EB792FAD60C95805FBBEEA9B5F905D916E84A5E68E3DD72E87B5F1B20186E7F9D86B6D3EC5C8E3685665F090C0A5F86B78272E5FC06EF
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXTDmWr........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-G5EDA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	824
Entropy (8bit):	5.398231046189484
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfMsMeqpJp2F9IDAnLEnMEI5OK5hu0sSWf1hZhhKR1s:WlSZ6GpbcIKLrrOCk0NWfPZrH
MD5:	90B964A224FF78F94A4F4F0AE9F96547
SHA1:	D664CD27287FBFAEFB1F0AC86FFA78C08348DE47
SHA-256:	F3859DCBD06528AA7AD645B9233436864F4675625633A487D8C097D5D89EA849
SHA-512:	83F4344BFC3E3978C0F10983816942D9677EFA58885F204D7BF66D47AA32FFBAFEC9D9EC42407561925FA7FC199AC12EB2FD6511AB7BC4575848463E14EF5CF4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>View Menu</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="view_menu"></A>View menu</H3>..<P><A HREF="fm36re.htm">Data entry screen</A></P>..<P><A HREF="fm2lyr.htm">Error scores</A></P>..<P><A HREF="fm6d0t.htm">Personal Information</A></P>..<P><A HREF="fm3fjn.htm">Database</A></P>..<P><A HREF="fm4two.htm">Polar graph (usual format)</A></P>..<P><A HREF="fm7560.htm">Linear graph</A></P>..<P><A HREF="fm120e.htm">Show CIE Chromaticity diagram</A></P>..<P><A HREF="fm05rb.htm">Show Protan confusion loci</A></P>..<P><A HREF="fm4srr.htm">Show Deutan confusion loci</A></P>..<P><A HREF="fm4b3b.htm">Show Tritan confusion loci</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-G69U8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-GBDT3.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-GJQMH.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (602), with CR line terminators
Category:	dropped
Size (bytes):	1410
Entropy (8bit):	5.14490057467229
Encrypted:	false
SSDEEP:	24:WlloCZ609xzehIDs0htrKC2DS1VWKcOVbGi62y39oG347VRyveUDDVl3eeJaZOK:qloCZ6Oz8qsatrKC8eDXdGi62Cb8A/3s
MD5:	C10886CD5FECD22821B239DF51ACFEE0
SHA1:	6F1A0DA1C6A4458962FE35B2FE0A04E5E0C5F4AE
SHA-256:	7633A224B1710353AFB3A1F7EE18622F58E392823B17606F5C74F245FE8484D0
SHA-512:	809B5FAF868EE7E5BF58E73A1696D7731F327D5E3D8C55A11ADDED37B0BA614F7B183AB00AB0A4CDB23190E46E82367608805BE383BCD6A6C022D4336BF835F9
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Entering Cap Order</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="2keizvz"></A><I>Entering Data (View/Arrange) <IMG SRC="../images/bm8.gif" ALT="" BORDER=0></I></P>..<P>The input screen is displayed by clicking on <IMG SRC="../images/bm8.gif" ALT="" BORDER=0> or selecting Data Entry Screen from the View menu.</P>..<P>The input screen shows a schematic representation of the FM-Hue test with caps arranged in four boxes.</P>..<P>Initially caps are shown in the correct numerical order. To score and analyze data obtained with the FM Hue test, the order of caps set by the subject is transferred onto the screen by simply <I>dragging</I> and <I>dropping</I> the caps on the screen. This is a standard Windows method and involves moving the mouse cursor over the cap to be moved, pressing the left mouse button and holding i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-GMV9K.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (1625)
Category:	dropped
Size (bytes):	2433
Entropy (8bit):	4.923089130355738
Encrypted:	false
SSDEEP:	48:qSZ60YOQquZ/JBL0EHMgh+KCoxGh6Aj2keoJ+dMtll4N99R3F:riOA/JB0CAaotlyHF
MD5:	F54225B56AD7DA48538385472CA4E2D3
SHA1:	4FD2DF530E47A3C7183DA8A0E5631E0554596A79
SHA-256:	024CE65D864FA810308156E82C27101FC1F9E3F89B2022C0FEADEFEB0DDC6A94
SHA-512:	CD8D18C22E61BE7EF527FE166D222FA059B9CF9C439E051155B260815802B58AF62B52550FA89222B4C472CA869203E8EC35103DE664F80E0992F3FADBB84550
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Modern Day Theories of Color Vision</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="modern"></A><I>Modern Day Understanding of Color Vision</I></P>..<P>It was not until almost 100 years after Young and Helmoltz originally proposed the trichromatic theory that the existence of three kinds of photopigment in cones was confirmed (Brown and Wald, 1964). Using a technique known as microspectrophotometry, evidence has been found for a short-wave receptor (blue) which absorbs light best at 419 nm, a medium-wave receptor (green) which absorbs best at 531 nm and a long-wave receptor (red) which absorbs best at 558nm (Dartnall et al, 1983). The three types of cones differ in their overall numbers and their distribution over the retina. It is estimated that the normal retina contains 54 percent medium-wavelength sensitive c

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-GONTB.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (792)
Category:	dropped
Size (bytes):	1098
Entropy (8bit):	5.0141340803092485
Encrypted:	false
SSDEEP:	24:WlSZ6ysHGmF6gv5VduIF9e/So4LVcFzeYac:qSZ6JVd/Fe4Sac
MD5:	718315A67420BD174A72DBDE54EAE703
SHA1:	825CC820696A72DBC09BEC15A7D733EAAC828E5C
SHA-256:	8CDA48100A9C7D439A39C649DB4314DB89F2C37C1DD8535D576A70CFAE5B1917
SHA-512:	8128353CD6DC51898C1ED1457D14B25C83EBE65CDD67BB9B6470D72744BBFDDB39867821342F3D8882FA0591CE55051EC8B4B97D29ED08741B75D4DDFF84805D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Newtons Experiment</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="newtons"></A><I>Newton's Experiment</I></P>..<P>The first insights into the nature of color vision came from Isaac Newton. In his room at Cambridge University, he placed a prism so that sunlight shining through a hole in the shutter of his window entered the prism. He observed that the sunlight became transformed by its passage through the prism into a spectrum of colors. He also noted that the sunlight could be reconstituted by recombining the spectral colors. Newton concluded that sunlight is made up of each of the spectral colors. Later work showed that these spectral colors differed in wavelength thus demonstrating for the first time the link between wavelength and color. However, it was clear to Newton that <I>... the rays ... are not colored

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-GVUC7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-HPB1N.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	447
Entropy (8bit):	5.323337674890775
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepf3eK0sMeqFM9GQhE2Kquz7G4e:WlSZ6foFM9Lm2sPA
MD5:	7C5DC0CB784B4B43AB8747E3F55ECE1C
SHA1:	2AF65D1460E99E57A1D056E6BF1925256A7CA392
SHA-256:	486D8A4589D88901ABAF55FA12A3248F3185039DA1797D2033259AE387EE3EFD
SHA-512:	6CE64010DFDF2184CA842F6FB776C85631571A3F368820D87CC4ADB9859A1F38E8EDD913D60EA289CB85F70B14917CF62AD1A928AEA3D7FE5D7D1A133952F4B2
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Undo (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="edit_menu_undo"></A><I>Edit menu - Undo </I></P>..<P>This option undoes the last data entry, i.e. it returns the caps to the position that they were in prior to the last cap movement. </P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-HQ7C1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	805
Entropy (8bit):	5.3227461689215865
Encrypted:	false
SSDEEP:	24:WlSZ6D1qK0qC6ihT5uzk0S1nPbHkqexU0fo:qSZ6D1M75uz5S1nTEqWUEo
MD5:	40C0793E0B18A2CB53BDFD9F180B5946
SHA1:	255BBC92314FC8E93422AEDBF567EBAFF89E62B8
SHA-256:	D32B91DACC3D5CE473A20453E4F9892281A7617D005D36074D95728FCF85B43E
SHA-512:	C26530E6166E98F3CE35D69F53FBB0BAEC3F2B78161D811590EFE5A8E930CA307A4B29A0377A3DEAD6EEB7A0BD6A1DEF7F3DB8201B85B197B4931CB749587175
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Displaying Error Scores</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="displaying_error_scores"></A><I>Displaying Error Scores <IMG SRC="../images/bm18.gif" ALT="" BORDER=0></I></P>..<P>The error score for each cap is calculated from the sum of the difference between the cap number and the numbers of the caps on either side. It is these error score which are plotted on the graphs. </P>..<P>Although there is normally no need to view the error scores individually, they can be displayed by clicking on the <IMG SRC="../images/bm19.gif" ALT="" BORDER=0> icon or selecting Error Scores from the View menu.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-I29O7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (321)
Category:	dropped
Size (bytes):	857
Entropy (8bit):	5.170457077506571
Encrypted:	false
SSDEEP:	24:WlSZ6/Pe7LVP4H+u3KzGBLCZmaj66DHd3d3:qSZ6ON4H1K65CZmaj66D9t3
MD5:	F2B50273A38B8754901B04DCC4E6BBD8
SHA1:	583A49979F59B85D00483A10D6CF00AEBA7BE5C4
SHA-256:	BC465108CD0D46B8DA044C878B5705D519A2C3898CAEA9382AE415B466737F17
SHA-512:	AAB4FF204C9CC0711E49F61C3D7A2CF513B19257F9D0416FFA6D059688DC567C0BDAB86D6388281D80843D02367CC3802EF71E9377C51F9DC338B63A842BAD7A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Color Options</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="color_options"></A><I>Color Options</I></P>..<P>The color used by the FM Hue Test is reproduced (approximately) on the screen to aid data input and the analysis of polar and linear graphs. However, if the computer being used is unable to display all the colors, color dithering is used. This can reduce the legibility of the cap numbers on the data entry screen.</P>..<P>If this occurs, color can be disabled from the<A HREF="fm2y9i.htm"> Preferences option</A> which is accessed from the Edit menu. The caps on the input screen are then displayed in grey and color labels are added to the graphs.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-ICHU1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	636
Entropy (8bit):	5.4145390192545175
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepf9uK0sMeqmpvMwFClLRn5wR7aZSM6SMyl:WlSZ6G5wCll5wRWZSHSjl
MD5:	441616208AA2FD5E02A9F6ED4FC67EB7
SHA1:	82792470239CE4DB05BDBDD7D0AE4106E52756C9
SHA-256:	0DBFE3BEDDF32492936675AC4B71DDC957341BA85BBB276CC6BAC47FA7BAC329
SHA-512:	5CF6A8856E47295F3E941282188D4DD5AF7A2B6E87CCE55E9F9A6C072DAA5F2561CC0391D509195B336BF67C3F75204F77BF8D1ECBFA859933B88649B3450009
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Set preferences (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME=".g2gy6"></A><I>Edit menu - Preferences</I></P>..<P>Various program options can be set by selecting Preferences from the Edit menu.</P>..<P>The Preferences form allows the program to be customised in a number of ways:</P>..<P><A HREF="fm5a7n.htm">Color Options</A></P>..<P><A HREF="fm6i4a.htm">Scoring Options</A></P>..<P><A HREF="fm9sfm.htm">Analysis Options</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-ITI8J.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	936
Entropy (8bit):	5.2263641952779745
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfQK0sMeqOib+FwuW/96hTMtnyVpRRet3RFCOTE4k+yUdU3Ty5b0:WlSZ6iOpqbUpojCOg+3kTyQBco
MD5:	B14F7D134FCA742BFF10511E8CACD851
SHA1:	378B018F1992715FBEF1B939A2AFDFE574A828AA
SHA-256:	9AFC217EE065D34FCE92381DAD8B74BA468D732C31C1EEA62671FDDDA1C3DDCA
SHA-512:	C260657BAE77E8D0776E165F97EAC5326F62E31224603FC8C4E1FF605A407D2B752EE3CBAD08A277752DEE3DDCE21C5D9E3598A5E99D8D504A4E17597C495562
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Export Graph (File Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="0x.kg."></A><I>File menu - Export Graph </I></P>..<P>Polar and linear graphs can be saved individually as Bitmap (BMP) files. This provides an easy method for including plots in reports prepared using other Windows programs.</P>..<P>Select Export Graph from the File Menu and then select Polar or Linear from the sub menu. The Save As dialog box is then displayed, allowing a path and filename to be specified.</P>..<P>The graph can now be viewed and edited using most Bitmap editors (e.g. Paintbrush) and imported by most Windows wordprocessors.</P>..<P>Graphs can also be pasted directly into other Windows programs using the Copy Graph option from the Edit Menu.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-IV32F.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-IVJ0P.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	636
Entropy (8bit):	5.400055084866752
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfPNj0sMeq629MIWjd8RMAUBj9vjJCB:WlSZ6Nj23MIWj2RML97JM
MD5:	4732EBBE27066917BCB1809B84AC84E3
SHA1:	1DB014BCCD50109BEEAB3332BD41864C04EA6197
SHA-256:	A6EEE3CE49B685160C8FA9E6004C92EFB8FEA625F4A56A93C0035C522FB8E3C2
SHA-512:	E19384CAC6BC6557DBF4EBEEF03C257D09FFAB0FCA74A8F547EDF5224A2B063E4C79EAFDEA9FCA0F03E5E27405452C586F3E61EE8B8EE80B880785D5F981AD84
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>The FM Hue Test Program</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="n_46v1"></A>The FM Hue Test Scoring Software</H3>..<P><A HREF="fm3rcn.htm">Overview</A></P>..<P><A HREF="fm36re.htm">Entering data</A></P>..<P><A HREF="fm4eox.htm">Displaying data</A></P>..<P><A HREF="fm7n8x.htm">Printing data</A></P>..<P><A HREF="fm23fl.htm">Interpreting data</A></P>..<P><A HREF="fm31o3.htm">Menus</A></P>..<P><A HREF="fm3ueq.htm">The Toolbar</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-JBBG7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	842
Entropy (8bit):	5.249181144618396
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepff2sMeqpxFWVNUGQeynlMBiBdgVD8PT8deF9K1LnS+J5TNT+x3:WlSZ68s/ULeICIBA4Ideur7nT+d
MD5:	78EEC1C5F83E5AE595AB570AC3451D63
SHA1:	7B8645B048D8C95E60C1821403E3D83AEF99DCD7
SHA-256:	DED660D563AF4F8542F9C6AFBFDA1C615B3CB521BE66EC346935807F387FAC98
SHA-512:	C4BB4C2FA4055719057890733C950235FDB816DB87B5BB0923D443CF538DE29FF4473B8939EA470B33E51FB7D04D949DECD2E10006EC41CF64F544C4ABCAD9E2
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Deutan confusion axes</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="df09gg"></A><I>View color confusions for deutan defects</I></P>..<P>This option is selected from the View menu of the computer program.</P>..<P>A color representation of CIE color space is displayed with isochromatic confusion lines superimposed. Colors lying along the confusion lines will tend to be confused by individuals with a deutan (green) defect.</P>..<P>For more information see <A HREF="fm8siz.htm">Defective Color Vision</A></P>..<P>N.B. The colors displayed are only approximate and will vary according to the color capabilities of the monitor and display card.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-JH5DI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-JIJ2U.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	863
Entropy (8bit):	5.396304068142892
Encrypted:	false
SSDEEP:	24:WlSZ6GV1lYjKvSAnwFFvoVJ7iRcKjWJlV6SfVwu:qSZ6GjlmKlnwXoH7JKCJlIYwu
MD5:	0E3BBCE46B535C167F4052B61FD5AB3E
SHA1:	A94E47F1D2AA79CFE6075F61A9755BFE270D821C
SHA-256:	CF290E1B1E012C3F4D2CBF1E4419E1248D57B7B036035434C28EA7773FFD6DFE
SHA-512:	E406103ECB688350D787262BB279BF12F9AE1E0040F49E650E559BD65880CCDD8EE936B9A361454FF7E85BF5B2F85ADE3D5B2A1D0CE65EB17674D316D2A5A823
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Filtering Data</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="filtering_data"></A><I>Filtering Data</I></P>..<P>Data can be smoothed by clicking on the Filter check box. The program uses a simple averaging algorithm described by Dain and Birch (1987). Filtering can be helpful for interpreting 'noisy' data and determining an axis of confusion for color defectives.</P>..<P>Filtering is turned off by deselecting the check box.</P>..<P><U>Refererence</U></P>..<P>Dain, S.J. and Birch, J. (1987) An averaging method for the interpretation of the Farnsworth-Munsell 100-Hue Test - I. Congenital colour vision defects. Ophthal. Physiol.Opt., Vol 7, No. 3, pp 267-280.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-JMR0Q.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-JUP23.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-K6C83.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	442
Entropy (8bit):	5.324339252115576
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfssMeqqWZyWv9XRQB9BS5U:WlSZ6WqWwYmjB8U
MD5:	ADC2880842CAB455463FBD1072E97458
SHA1:	AAAE0A8FE1C60DE08018F8AF9DB0A86FDE07FAF1
SHA-256:	4076DB50196D5AB5DB815D6612CD99B4253BD395EA1FDA3912B7BE631A1664F6
SHA-512:	035178E7F24350BC37CE9279C66C0C0EC83BC753993C024FC4D525EF53C64ED6902F25C94FBB18E74F563686B1BE1C6954DEEBD0EE60EB5C62E0930FD3CF9400
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Menus</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="menus"></A>Menus</H3>..<P><A HREF="fm8igl.htm">File menu</A></P>..<P><A HREF="fm57n9.htm">Edit menu</A></P>..<P><A HREF="fm3ncl.htm">View menu</A></P>..<P><A HREF="fm5sol.htm">Help menu</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-KA7G5.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (330)
Category:	dropped
Size (bytes):	916
Entropy (8bit):	5.268497665890047
Encrypted:	false
SSDEEP:	24:WlSZ6t3u/guja8PW6TNh+BF/RUeUnnMuV5oW:qSZ6VCtO6+j/RdUFj
MD5:	7ED51437F8EC2173768AD7DFF0E580E2
SHA1:	9185C0F227232BDE8D8C25D283E8822E877D93F6
SHA-256:	DCA96AB3FEEA5D59CA3D2D240EDED15033B6C14602F2DD25B5902708DB75637E
SHA-512:	507187BFD03E642E03EF5FC3E2292ABE261914F29FCB7821CEA9EF204336B90E19C808D68113BF514305CDC984D31077342D542B02681C0E05FDCB04B514E4C9
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Zone Theory</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="zone"></A><I>Zone Theory</I></P>..<P>Both the Young-Helmholtz theory and Hering's theory could be supported experimentally and while both theories explained certain color phenomena, neither provided an adequate explanation for all subjective color experiences. The two theories were reconciled by the <B>zone theory</B>, originally proposed by Donders in 1881.</P>..<P>According to this theory, color information is processed in a series of zones in the visual pathway; trichromacy occurring at one level and opponency at another (see below). This concept forms the basis of modern color vision theories.</P>..<P><IMG SRC="../images/bm0.gif" ALT="" BORDER=0></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-KGQNA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	733
Entropy (8bit):	5.257828609022488
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepfb7sMeqdzb8AFqBRcsfwS1/znULScSzMc8ITeaPZg9NbOQjEKf:WlSZ6DndzbPqkv22SOtePo0Qjjf
MD5:	BBA47CBAD6547DCF402EF5899922FB97
SHA1:	691DF9B44970B13D100BE3B73DFA69F9E8C7A5FF
SHA-256:	CE61489CC6711B7B355E92237C32D475604719288B1D16B377C3B01AA8AD14E8
SHA-512:	CCF35F758B8BA2DA49A638B68822737E179FEE732FD3757D153F5E4E2437816B2A9106D92F5C48E5C1268D124E9F1CAF15C1411E4B6651B63FF3CCBC28891216
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Overview</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="overview"></A><I>Overview</I></P>..<P>The FM Hue Test Scoring Software has been developed to speed up and simplify FM Hue Test data input (cap order) and to provide a powerful set of analytical and administrative tools.</P>..<P>Results can be saved on disc, displayed in polar or linear format and filtered / analysed according to a variety of algorithms. The program is also capable of producing high quality graphical output on a wide range of displays, printers and plotters.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-KJNH2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-KQ98V.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	710
Entropy (8bit):	5.261019547793298
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepf7aWsMeqBfRSUtKJ0FjBRadpOaeNIUcOY7aPxjGf4u:WlSZ6XL/WKIPQ6f4u
MD5:	8757FE967B3B2016702801F7DFD956FE
SHA1:	2C7895603A296B7F74AC68B0CBB75A01BA998E53
SHA-256:	E47A9E1AA87B8A6CF1A2E170AE26C1AB788E896C77DF4D9D82FBFDC88D7A2C7E
SHA-512:	F4C01326DCE5D7DA776FA0ABE7BA4FA374E291D9B39210A89EDD9F74AE58C7419A00F01FEB8429BE2D930FB9AD56E42D2CAB945334C2A2EA25121F01B159FB9E
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Scoring</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="scoring"></A><I>Scoring</I></P>..<P>Scoring the FM Hue Test manually is time-consuming and somewhat tedious. The computer program has been developed to simplify and speed up the scoring process. For information on using the computer program, go to the section on the <A HREF="fm00c1.htm">FM Hue Test Scoring Software</A></P>..<P>If you do not have a PC and need to score the test manually, please contact Macbeth for a set of instructions and score sheets.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-KR4BK.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (325)
Category:	dropped
Size (bytes):	893
Entropy (8bit):	5.201736125486845
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfnpsMeqHTIwAZgyYEbnta/JtL+2RQVv0fZFRAEVqNp1E3JErkFk:WlSZ6/BzIw8glEbnWzQVv0f7RAE+kJ6
MD5:	192678FC93132D6D07FF49536B8606BC
SHA1:	752224EFC3C46404545EAEF9980BA0968A425FF1
SHA-256:	404CC56C64E1509993930094858A2CE320F480827F897DBF8FA7F50BB94CAAE7
SHA-512:	66940366BD203AF8910A9114C061EA44AECC724EB0DD21840D9F3BCFC963E224DD917C01FFAF42357A647DA0F7E0615990F778D02B2AA3893DE926312AB27DDA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Confusion axes</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H4><A NAME="confusion_axes"></A><I>Displaying Confusion Axes</I></H4>..<P>Data obtained for color defective individuals will show a clustering of maximum errors in two regions which are nearly opposite on the hue circle. A line drawn through these two points is referred to as the confusion axis. The orientation of the confusion axis can be used to identify the type of color defectiveness.</P>..<P>To aid diagnosis, typical confusion axes for protan deutan and tritan defects can be superimposed on the polar graph by selecting the Show Confusion Axes option.</P>..<P>See Also <A HREF="fm7z8q.htm">Identifying Color Vision Deficiencies</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-KTDUC.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-KV62Q.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	991
Entropy (8bit):	5.1381954562896235
Encrypted:	false
SSDEEP:	24:WlSZ6/7o1JiO9twCs6RMDyiagn2MPX3A9E:qSZ6GtZOy5gnLt
MD5:	B4C7F34EF15643AE3DB55B82472C1A89
SHA1:	8BB72A34C9DDD88817121F0F1DE97FBF5EF52393
SHA-256:	F31AF4296AB4000E34916CD3C7EB954FB9A7F2FE72D64759619BC729194A42B3
SHA-512:	00640C44B5B72CBB4C06902ECE2E43EE294F8A58D1A80E81DC08115BAE0ED2B10F4B5E4408EED16E05D3FF5A7B979850B821748D5280F73F7A4779FBDAE9CE52
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Copy Name and Analysis (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="19vjcs8"></A><I>Edit menu - Copy Name and Analysis </I></P>..<P>The current Name and Analysis can be copied to the Windows clipboard and pasted into other Windows programs.</P>..<P>Select Copy Name and Analysis from the Edit Menu.</P>..<P>The data entered as Personal Information is copied together with the analysis of the results. The information included is dependent on the Analysis options currently selected.</P>..<P>Having placed the information in the clipboard it may be copied into a Word document for example, by loading Word, placing the cursor at the desired position in the document and then selecting PASTE. This allows analysis information to be readily incorporated into pro-forma reports etc.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-L1C7V.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	680
Entropy (8bit):	5.3881807823176375
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfRfdsMeqJGXdmfElVHc4d9XLYjkdJAtYX3HMyl:WlSZ6/Yt9V8iLYodStuXjl
MD5:	04E3F9E6409D85862B06CB1F025DBF7E
SHA1:	D02CB6EAA0EE42B13CAC5064504799F783CB6C3A
SHA-256:	B4AC799F1725E4A46B396F10757CDDB93498D3E0DD63A24A4BD30B7F140D0327
SHA-512:	B2C519126A2F6C1F4FBAE33BBBD557660E267209862D583F3342E4B2F56D08335A4B228434FB7E756FF388673C9945B44207E5F588DAD1689DECDC7D4E5E17CB
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Interpreting Data</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="interpreting_data"></A><I>Interpreting Data</I></P>..<P>After the pattern has been plotted, there are various methods of interpreting the results, depending upon the information wanted from the test.</P>..<P><A HREF="fm2xpq.htm">Classification</A></P>..<P><A HREF="fm4c81.htm">Normative Data</A></P>..<P><A HREF="fm7z8q.htm">Identifying Color Vision Deficiencies</A></P>..<P><A HREF="fm9sfm.htm">Analysis Options</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-L1P0M.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-LB4FT.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (827)
Category:	dropped
Size (bytes):	2139
Entropy (8bit):	4.985907315227886
Encrypted:	false
SSDEEP:	48:qSZ6jbKoS9p+4mUVU2VRwhBZ02WC7HTruO4I8M4mPFIruL64I:rsKPpdfVU23wG2WCL3p4I8reCP
MD5:	2A3D3316CD6E700F97B4242892A1F0E6
SHA1:	D33B6A16F0250460338253AE5CF0AC0DCB8D2BE6
SHA-256:	CBFAF0A53797679590B617BBC86155AD2F23876D808D39802C6C23B99C056438
SHA-512:	FDB44AE445D3AA26B675983F50AC91D024A62E106B1438F5A5E1DD30C62508EA051BE91BB3C20C216C7D46416058F286B7A20891DFC086ACA7C61F178C5D3C2B
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Color Vision - Defective</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="2p8e2k"></A>Defective Color Vision</H3>..<P>John Dalton carried out the first serious investigation of color deficiency in 1794. He became aware that his own color vision differed to that of other people, in particular he was unable to distinguish between certain colors and was unable to see deep red colors. Dalton found similar defects among his brothers and started to investigate the prevalence of the condition using a series of colored ribbons. Dalton believed that the cause of his condition lay in a blue coloration in the vitreous humour of his eye. This explanation was subsequently disproved by a<I> post mortem</I> examination carried out at his own request. However, the term 'Daltonism' has persisted to describe this form of color def

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-LCJEV.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	879
Entropy (8bit):	5.2068248724886885
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfLqel8sMeqW+OFY912Yx21RjlBVW91qFJJzTOjW50DX5e2Dr9Y6:WlSZ6jzoog12b1Rg1+DzTO6qDc4rPTus
MD5:	694B7AD80535DC431F2BADD11DF08920
SHA1:	955794123963237623E72014E201567DD9A67103
SHA-256:	F2F5801A3284BD3086D741A7EF2DA9B3EEDDF60DC4A2F5CAB842605E3A62EAD0
SHA-512:	9DDB259B33AEF9C6EB8D0246F0DA3F8EDD858073D0197657203B4BB8F85D30DFE1E082011118A46A095C9D351B858733DD64D7AD9E4E7089404DD67D6713C590
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Percentile - experienced</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="percentile_3"></A><I>Percentile (Experienced color matchers)</I></P>..<P>The percentile for the current Total Error Score with respect to a distribution of Total Error Scores obtained from a group of experienced color matchers.</P>..<P>For example, a figure of 90% means that the current Total Error Score would be in the top 10% for experienced color matchers.</P>..<P>The analysis is based on results for 150 personnel of three to twenty years experience in the color control laboratories of manufacturers of dyes, rugs, plastics, textiles and paints.</P>..<P>See <A HREF="fm4c81.htm">Industrial Norms</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-LP3M1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (349)
Category:	dropped
Size (bytes):	2139
Entropy (8bit):	4.980346573596465
Encrypted:	false
SSDEEP:	48:qSZ6KnOzcHHNVcAFXvAq82i6rG5p3HRKJfuAKp:r2cHHP1XV82iY+FRKJ/Kp
MD5:	308D530AD7A93204C43AB98237AA4E79
SHA1:	DA9CE7FD93D93E996CE08E187EA2639670C97D8E
SHA-256:	0488413A4B324C3D1216FD1E78B48E9D15ECCFF063C68A318CFEE45E469986A5
SHA-512:	C3ECFFE606E16C2B9567DB22F45B1187FE889D6EF096074E10E9A9BD0795102869F213947B3B8F03A12F0B72D8B8AD80C67D445E71B59CEAA4F440C45B259FAC
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Identidying Color defectiveness using the FM Hue Test</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="3h_y_oj"></A><I>Identifying Color Defectiveness Using the FM Hue Test</I></P>..<P>The pattern of color defectiveness is identified using the FM Hue Test by bi-polarity, a clustering of maximum errors in two regions which are nearly opposite. The regions in which the errors are made can also be used to identify the type of color defectiveness. </P>..<P>Typical examples of patterns made by types of color-defective persons is given in the database of examples (<A HREF="fm0bdx.htm">Example.hdb</A>) which accompanies this program.</P>..<P>The severity of the defect can be gauged by the extent of the 'bulge', a severe degree of defect showing clear bipolarity with high error scores; moderate cases show small 'bulges' a

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-LTE3H.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	722
Entropy (8bit):	5.189539237283799
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepffgS4dK0sMeqswFI7BkJQalZvRzSylZLMBQ7X2y0pCf56BI:WlSZ6w/tXy8ZJz4Uy0oC
MD5:	236FF059BADB24D9CA507E169D7D78DE
SHA1:	E0E11161367933B252035E505BB3DF9F42EED0A2
SHA-256:	88269A3304769019DF67B1CE3C5F3DA25814878BC8800653F8F11D84895E6716
SHA-512:	B69C0BF86AD0920A5E9C426DEDF3344708C54F7E95786A2427FAD9D5F5F4798B67A861704E3C4EFF6BB5A48196E774FE3641D8FF3F8EE401E1A79EF4F76CAD6A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Delete Record (Edit Menu)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="3bic_yu"></A><I>Edit menu - Delete Record </I></P>..<P>A record saved in the database can be deleted by selecting Delete Record from the Edit menu. </P>..<P>Firstly a list of names currently held in the database will be displayed.To delete a record, click on the appropriate name so that it is highlighted and then click on the Delete button.</P>..<P>You may delete multiple records by selecting more than one name then clicking on the Delete button.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-LTEUM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-LTNSQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (891)
Category:	dropped
Size (bytes):	1752
Entropy (8bit):	4.971275634042893
Encrypted:	false
SSDEEP:	48:qSZ6kWNf0R3PB1DWMmPhHU9BEx4s486Yv:rf/BgMmPhHU+d
MD5:	A7052BED1A574EEC9FD1794C9E532DC8
SHA1:	7F65CFD50110F7B8CC9FEA773E8495F541BC6296
SHA-256:	1FA8B7AA2386AE1FF39F70FE55A1999654C9C44CF914A48FFEACA2ED57A77C79
SHA-512:	D5688B49098B396143499D84F7E98C3172E33C01CDDB05864351CDE93C781E51CA947C4665D2794A8517DBC32EC94E1D42C26AE70EE0697305DADBCD96DCEFE6
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Trichromats</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="trichromats"></A><I>Trichromats</I></P>..<P>From psychophysical, physiological and anatomical investigations, we know that cones in the normal human retina contain one of <B>three</B> types of photopigment. An individual with normal color vision is therefore called a <B>trichromat</B>. From the discussion above it follows that a trichromat requires a mixture of three wavelengths to match any other wavelength.</P>..<P>The ability to match colors using a mixture of just three primaries forms the basis of a powerful method for describing colors. In 1931, the Committee Internationale de l'Eclairage (CIE) devised a standard system for specifying colors based on the trichromatic color matching characteristics of a 'standard observer'. For technical reasons th

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-M8GAD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.661226943847434
Encrypted:	false
SSDEEP:	3:PFltl5U9nIk:Pftg9nI
MD5:	9C46007F92F6817CB70BB63B8E7DFC9E
SHA1:	0A0442591054622234A03F01652EABD6057200CA
SHA-256:	FDFF1042BE8E2C1B296E56E5949B0C66C60E9424657958C8EF86394F78711A98
SHA-512:	2D2047D4F5FC4C3C441EB792FAD60C95805FBBEEA9B5F905D916E84A5E68E3DD72E87B5F1B20186E7F9D86B6D3EC5C8E3685665F090C0A5F86B78272E5FC06EF
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXTDmWr........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-M8RAI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-MAGGD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (312)
Category:	dropped
Size (bytes):	1398
Entropy (8bit):	5.353935142547625
Encrypted:	false
SSDEEP:	24:WlSZ6d6N6D77B+d2Zm4ZrZ8xySvidQiid3Oid5QdidfoB3ur+H8DJyYtCMx:qSZ6lvu2M4JxvQfTC8gxurpbwMx
MD5:	ED6EBC4FE72232406C961D3CF127D3E1
SHA1:	B46E178DE8637F1BA0E42E6F307F5F044288F9A0
SHA-256:	2CE912E585D45494DCE71142BFB84E3843F1E728CD1AFCC2761B053DA9AA02F0
SHA-512:	1F0E4BB6DD1F83A04FCE843A5F6B4252555723A65FFD758AD46121DBC1E058371749B6C569F59A0FB07CBAF4266CB65874086DF0E747EBB321E47A6C9A78DD92
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Dichromacy</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="dichromacy"></A><I>Dichromacy</I></P>..<P>Dichromats have two cone photopigments instead of three and are able to match all spectral hues using a mixture of just two colors. They are further classified as protanope (long-wavelength pigment missing), deuteranope (medium-wavelength pigment missing) and tritanope (short-wavelength pigment missing).</P>..<P>The prevalence of the various forms of dichromacy are as follows:</P>..<TABLE cols=3 width=303>..<TR VALIGN="top">.<TD width=37%><B>Type</B></TD>.<TD width=31%><B>Men %</B></TD>.<TD width=32%><B>Women %</B></TD>.</TR>..<TR VALIGN="top">.<TD width=37%> Protanopia</TD>.<TD width=31%>1.0</TD>.<TD width=32%>0.02</TD>.</TR>..<TR VALIGN="top">.<TD width=37%>Deuteranopia</TD>.<TD width=31%>1.1</TD>.<TD width=32%>

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-MK5Q5.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-N715U.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (448)
Category:	dropped
Size (bytes):	769
Entropy (8bit):	5.247197737120789
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfgIWsMeqv7B0N4BMMkAQrCnK9qWmPf8OQFT1oyCyEaB7:WlSZ6IxFo467trCKEzsOQFTHCi7
MD5:	DFF17E2AD89987F638D634C1B0FFF54F
SHA1:	C6C04485AF47361679CEFF98AD6CA273C250F87E
SHA-256:	31F4A71216271F30389A979C158A4131B7D895AD244A12DFCE117D10DCA0B634
SHA-512:	0E018638EA93449125E6DB324331EBCAF824BD23952A881B4ABBEC6AACF24099F37EE2AB95301331AB7593ED6CAB28885028B16758AE870405F4333D9A33F206
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Young Helmholtz Theory</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="young_helmholtz"></A><I>Young-Helmholtz Theory</I></P>..<P>Hermann von Helmholtz carried out similar color mixing experiments but at first rejected Young's theory because he was unable to match all spectral colors with trichromatic (three color) mixtures. He later realized that this result could be explained by the three retinal receptors having overlapping spectral sensitivities. Helmholtz went on to champion the trichromatic theory which later became known as the<B> Young-Helmholtz theory</B>.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-NATDC.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-NLHBN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-NN3KP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-O1POA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-O6VMJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-OF932.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (615)
Category:	dropped
Size (bytes):	2145
Entropy (8bit):	4.939382033556128
Encrypted:	false
SSDEEP:	48:qSZ61wjaXKAF3jUX3AFQjhXVRde9QtJHYRnBqARAfAkABAF3:ruMaXnTUX0shXV3r/HYRnB23
MD5:	72A0276B97DD44DA53691CEB2CBC6F8F
SHA1:	F90E0A1915ADE2DB6479CBD0D31F09F81C77E808
SHA-256:	C859C0B1B1890C6C10C53E0EB2377DDAE01371074356737555BC15B5A2541167
SHA-512:	1D9E9211E17806016725533CB4D03B8B5DD126CBD30C286E3B3097D7555E726267DA93347875D9E93DE16636F80B7AE5F7C1514CFB4C715513760C8CB855C77E
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Classification</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="classification"></A><I>Classification</I></P>..<P>Subjects with 'normal' color vision can be classified as follows:</P>..<P><U>Superior Discrimination</U></P>..<P>About 16% of the population (exclusive of color defectives) has been found to make 0 to 4 transpositions on first test, or total error score of zero to 16. This is the range of superior competence for color discrimination.</P>..<P><U>Average Discrimination</U></P>..<P>About 68% of the population (exclusive of color defectives) make a total error score between 20 and 100 on first tests. This is the range of normal competence for color discrimination.</P>..<P><U>Low Discrimination</U></P>..<P>About 16% of the population (exclusive of color defectives) has been found to make total error scores

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-OJUPP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (355)
Category:	dropped
Size (bytes):	1058
Entropy (8bit):	5.111341093157474
Encrypted:	false
SSDEEP:	24:WlSZ6dWv+QRIgK5EM5aN6oESXo5hjipvN6moxI:qSZ6RQRIZGMj1nyIy
MD5:	42F95F795FFAD4722410BBBDE1D277CD
SHA1:	B7D7F81058E89186268CA588B455275C14105FB8
SHA-256:	33AFF1B12ABBAE564FE0DC38DDDBE0E839D8F71933C8D8B1CE1A82FC9B7094D8
SHA-512:	3B5AA0DF34B14200056F959B1D712EF20489D9B47B631D189028C0E4F9D96D2031D4EC836CDB0492272CCC46FCDF225BE60E1B27D66495F57C85F61FCF5930AA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Monochromacy</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="monochromacy"></A><I>Monochromacy</I></P>..<P>Monochromats are able to match all spectral colors using just one color. These individuals are unable to discriminate solely on the basis of wavelength and are therefore truly color <I>blind</I>.</P>..<P>There are two types of monochromacy. Rod monochromats have normal rods but have no functioning cone receptors. As a result, their vision at night is normal but under photopic (daylight) conditions, visual acuity is poor and affected individuals tend to suffer from photophobia and nystagmus. Rod monochromacy affects about 0.001% of men and women.</P>..<P>Cone monochromats have one type of cone (normally blue). As a result, they often have poor acuity but in general, are less handicapped than rod monochromat

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-OOR73.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-ORQCP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (356), with CR line terminators
Category:	dropped
Size (bytes):	1216
Entropy (8bit):	5.1266684822349635
Encrypted:	false
SSDEEP:	24:WlloCZ6gdXhX0/WoCEBkDFqmOh/+VXseiDCkxRVU8d2PU6icUCHmNIR4KQT9Fci8:qloCZ6gdxX0unRqh2m/CoRVSbiemSR40
MD5:	AAB7C94999BFBF3AA51A5BB19F06935E
SHA1:	B262390D024FEFAAD6EEBFE3EB567C3C8D11A1F8
SHA-256:	BA27345882DD1193E458D4C02DBE5F0E8F3DC0D89B1D1CD1FAE6941CAED522AD
SHA-512:	74737B7082BFDFF1D3C08849C9EE5E6740F7B938057934A147D08523E3B005123937BA77D5AF97DC880C20BC468700C5E1D891013BA60A236E5BA31C0F7767AD
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Printing Graphs</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="7k9r.q"></A><I>Printing Data <IMG SRC="../images/bm14.gif" ALT="" BORDER=0></I></P>..<P>Results can be printed using any printer (with graphics capability) supported by your operating system. Printing is initiated by clicking on the printer icon on the toolbar or by selecting Print from the file menu. Alternatively, data or graphics may be exported as a PDF from the File/Export menu or copied to the clipboard from the Edit menu. </P>..<P>Results will be plotted in the same format as the current screen display (i.e. linear / polar, filtered / unfiltered etc.). Subject details and statistical information is printed below the graph when printing.The user can choose which statistical information to include using the Preferences option from the Applicati

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-OTGN5.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ISO-8859 text, with very long lines (390)
Category:	dropped
Size (bytes):	2172
Entropy (8bit):	4.91400865988998
Encrypted:	false
SSDEEP:	48:qSZ6jueAtTY9YLAF7mDo87vGw1mbi7mqbmImhm4LtmZNTcGVJ3I03AC:rrD+7YvGwJxbnGzGJ3Q0b
MD5:	A74F5396FE4153AA1C19002524D41A5C
SHA1:	8C7495F7D0BC6CAB889C3BCF37A8E97D97CF3C70
SHA-256:	364634A2564FFF9AEBB41EE58DD26DF5F106DE0C617EC3A3B57A6028475DCB57
SHA-512:	AAD7267E950F2C52DEB6462B16BD7084C3D2AE901A624394BCE574C7E27BB28BE51152DF1E660CC8A2A5B57F6A0FC8AE6E6460FEE3DA1DE3F1CEAF7404D2341D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Purpose of FM Hue test</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H2><A NAME="purpose"></A>Purpose of the FM Hue Test</H2>..<P><I>Primary Usage</I></P>..<P>The Farnsworth-Munsell Hue Test offers a simple method for testing color discrimination. It yields data which can be applied to many psychological and industrial problems in color vision. Its primary uses are to:</P>..<P>.Separate persons with normal color vision into classes of superior, average and low color discrimination.</P>..<P></P>..<P>.To measure the zones of color confusion of color defective persons.</P>..<P><I>Examples of Uses</I></P>..<P>.Examination of inspectors of color goods, of color graders, and of color matchers.</P>..<P>.Testing for type and degree of color defectiveness.</P>..<P></P>..<P>.Detection of poor color vision in salespeople.</P>..<P></

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-P03AF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (350)
Category:	dropped
Size (bytes):	1091
Entropy (8bit):	5.3957870405139525
Encrypted:	false
SSDEEP:	24:WlSZ6xce4SzeI6J59NxisiscwRHSMDRdWZSEjiW:qSZ6yfSzo59NxZis9HSMDRdWZSEjiW
MD5:	B2A3DCE3407EED58530ADB71B3DCCE6E
SHA1:	F76FE79384BC38E584D207B9DDAEB4489BAD337A
SHA-256:	355E70B0603CD28E44B44826F14EE9F7B486528E8C431F503E2183DE088B2018
SHA-512:	0D7675AA7CA523D37F61676739C40AE1AEE2202C164832F66C2B14B8929698B0CA52168D1E4E8992F8680AE4F37F0D7C50424F0EF84DFBA632BD180FF83A1643
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Linear graph</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="linear_graph"></A><I>Linear Graph <IMG SRC="../images/bm12.gif" ALT="" BORDER=0></I></P>..<P>A graphical representation of the data can be displayed on a linear graph by clicking on the <IMG SRC="../images/bm13.gif" ALT="" BORDER=0> icon in the toolbar or selecting Linear Graph from the View Menu. The cap numbers (1-85) are represented along the x-axis and the error scores are plotted against the y-axis. This format is rarely used.</P>..<P>The format of the display and the presentation of data can be customized in a number of ways:</P>..<P><A HREF="fm6i4a.htm">Scoring Options</A></P>..<P><A HREF="fm549z.htm">Scaling</A></P>..<P><A HREF="fm29bn.htm">Displaying confusion axes</A></P>..<P><A HREF="fm5a7n.htm">Color Options</A></P>..<P><A HREF="fm2x5t.ht

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-PHF8J.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (725)
Category:	dropped
Size (bytes):	1610
Entropy (8bit):	5.268377430514314
Encrypted:	false
SSDEEP:	24:WlSZ6WoN61vB6OpxoTpHR42GBlhw88tVkTgTGz+XymidQ1ZXidc9Nidw9idg+:qSZ6ovIOpxoTpVGbybirQec9swcg+
MD5:	2D77A45149481A8EC3A96F07AD680BB4
SHA1:	C034CCE21CBF3476321F5BE199602FFB9BEEE6A4
SHA-256:	9DD621E79484281AA3254A76C649B61322077EDEBFB72F7C44E74462045A0744
SHA-512:	971514B584A074F8996E8367BFF105D38A54CDC699102B6A94380A798D1E745D6865C309A71652297859531E472C64E829A62492AF872F6A666037E9F4F97FF7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Anomalous Trichromacy</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="anomalous_trichromacy"></A><I>Anomalous trichromacy</I></P>..<P>Anomalous trichromats have three cone photopigments and like normal trichromats, require three colors to match all spectral hues. However, the relative proportions of the three primaries required to make a color match are anomalous implying that one or more of the cone photopigments has abnormal absorption characteristics. The terms used are protanomalous, deuteranomalous and tritanomalous to describe the presence of abnormal 'red', 'green' and 'blue' photopigment respectively. Anomalous trichromats do not accept color matches made by normal trichromats and may not accept matches made by other anomalous trichromats in the same category. The severity of the defect also varies signif

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-PJHLA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-PJQ3S.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-PJREI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	417
Entropy (8bit):	5.368072804887997
Encrypted:	false
SSDEEP:	6:B8FQk+Hryft1q2Q8EevWR0NNEXW0Yf1J3R90M0iNMeql201gr1L4cgCSnGcgU29I:BMQkzLq2Q8Eepfn0M0sMeqRqr1IA6
MD5:	DE5B06A0AA5A9AB8E2D816942493C781
SHA1:	3A7D7E698C6DB16A5BAA47A31167359C4C004005
SHA-256:	A287C3779354F2DC8C843D9948580C945DB8584774E1D9B4574910E91EFA35F2
SHA-512:	8BFC2FA9BDDB25494CD1B64F15C760E795217207C9F14F104CA1CB6F300E056BBF9D661893538FF4B3D3691F16C203906F7D4CEDA5BE4769D73D2D710AEDC29D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Contents</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H1>Contents</H1>..<P><A HREF="fm34xa.htm">Color Vision</A></P>..<P><A HREF="fm4eus.htm">The FM Hue Test</A></P>..<P><A HREF="fm00c1.htm">The FM Hue Test Scoring Software</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-PKG3V.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	701
Entropy (8bit):	5.402047491130126
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfxsMeqxy9JSHY6ckZSLzQ05umSsjrOzCC:WlSZ6B4JSHYHk8vQ05fzvuD
MD5:	023A9031812E8F672145F20FDB063568
SHA1:	DB67545547E7EB5F4E2266E780718D582FD2A08F
SHA-256:	8EF2C4C2CA4F0920DBCDB28DE2FCFC1F66258491C1DD21E2496385E5E1B0BCE4
SHA-512:	1552C04118E84251A8B7992A4A774BD0D543F08C450738EF4CC154ADD45BDFEA03B4642C9F7205FF4DB9F3A112080E8842D684237E5E9DA9854AC7B66101FD44
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Edit menu</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="edit_menu"></A>Edit menu</H3>..<P><A HREF="fm0j5b.htm">Undo</A></P>..<P><A HREF="fm6q01.htm">Copy graph</A></P>..<P><A HREF="fm5tbb.htm">Copy scores</A></P>..<P><A HREF="fm2bco.htm">Copy Name and Analysis</A></P>..<P><A HREF="fm4s11.htm">New Record</A></P>..<P><A HREF="fm6rj8.htm">Select Record</A></P>..<P><A HREF="fm68mt.htm">Delete Record</A></P>..<P><A HREF="fm59v4.htm">Save Current Record</A></P>..<P><A HREF="fm2y9i.htm">Preferences</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-PTSJ0.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-PV4RI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.661226943847434
Encrypted:	false
SSDEEP:	3:PFltl5U9nIk:Pftg9nI
MD5:	9C46007F92F6817CB70BB63B8E7DFC9E
SHA1:	0A0442591054622234A03F01652EABD6057200CA
SHA-256:	FDFF1042BE8E2C1B296E56E5949B0C66C60E9424657958C8EF86394F78711A98
SHA-512:	2D2047D4F5FC4C3C441EB792FAD60C95805FBBEEA9B5F905D916E84A5E68E3DD72E87B5F1B20186E7F9D86B6D3EC5C8E3685665F090C0A5F86B78272E5FC06EF
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXTDmWr........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-QH2TP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	652
Entropy (8bit):	5.1462435476545885
Encrypted:	false
SSDEEP:	12:BMQEdOaA9zp6QclfVISLDxPDwAhHL91DwmxRLwAhbFAtT87w1qgPC:WnAZpsq4DxzpL4mxVA878PC
MD5:	9433A81C9FD156FA8D4D90C7B62E7557
SHA1:	C4C8C3A13EE0B45E1AD623BE40DC10DF0B7AA437
SHA-256:	01F71092AE64BA43B4F4E4283BD35F4A560F2AF505C092E23CB5A73A05212AA0
SHA-512:	A20C8B64F74E5EC08AA74C4B6DA6AC9A0A5578F63784EFF118E28466C4C408A9C995C65F235AB76FD9B84DEE28E7121D3CCF172F99C13D3434A0E6019F7E2A5C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Farnsworth-Munsell 100 Hue Scoring Software: Help</title>.</head>..<frameset rows="" cols="200," frameborder="yes" border="2" framespacing="2">. <frame src="indexList.htm" name="leftFrame" noresize>. <frameset rows="80,*" frameborder="yes" border="2" framespacing="2">. <frame src="nav.htm" name="topFrame" scrolling="NO" noresize>. <frame src="fm0001.htm" name="mainFrame">. </frameset>.</frameset>.<noframes><body>.</body></noframes>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-QHCIA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-QJO63.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (1003)
Category:	dropped
Size (bytes):	3245
Entropy (8bit):	4.7739869790053175
Encrypted:	false
SSDEEP:	48:qSZ6jZWFe1Lqa+SkQJwA9Y6c3ikc8CiJxAcgKkpNyU41vCo2bwN+NzY4eGBEmlb0:r3FEeSkQJBucpiJCpZdK+NQaFAVMU
MD5:	B3F1AFC2CC8CE4D9EC8D22CE78A3DD1B
SHA1:	ED01770AD84052F85311BC5A709EBCB832FE69D6
SHA-256:	5DC0CF499A8C51C752E0BCB5FB50F061893DD4C85720ABB426C9E9CE163488CC
SHA-512:	97D8131C9D72506373573373B7EFABD703E5420E3C54F17B25B40F735D94A096D4B10F588775D78C82180B76A93B7B351DAE085CDF64F4627470A2790A8BBEF8
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Principles of Construction</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="principles_of_construction"></A>Principles of Construction</H3>..<P>An understanding of the material in this section is not necessary for the practical use of this test. However, the information is important if the test is used in connection with research in color vision.</P>..<P><I>Perceptible Color Differences</I></P>..<P>Imagine a chart made up of all possible discriminable hues - reds, greens, blues, etc., in all strengths from neutral to high purity, but all of the same brightness. If these colors were organized systematically, they would form a color array similar to that shown below. Equal distances on this diagram represent equal differences of color to the normal eye.</P>..<P><IMG SRC="../images/bm5.gif" ALT="" BORDER=0></P>..<P>

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-QLTRC.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-QU3IL.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	726
Entropy (8bit):	5.280595375772896
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfkMWsMeq7sxkz8St+k9GrwJsgPJenxv6s3stefH4IViXAgF:WlSZ6s17t8uGB2MxiE329F
MD5:	60AAD2DBE3B012707422BA569275EFA2
SHA1:	2AA71D2FEE0A2D7312842A66EA35942EF7B15BFE
SHA-256:	12EDF682ECB09B000BAD399CE38EA7657E93F7537E0A48F97B679A798AB37782
SHA-512:	5FA7CB65C59DEB0473B0F2593BA9B3C1FC15381D5B1661E698260D893D03DCE199C8C9F162F3CA6DEE357850800084719481924881FAD5080C6ED8EBD3783E8B
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Averaging</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="averaging_data"></A><I>Averaging Data</I></P>..<P>It is sometimes helpful to average several sets of data to establish an underlying pattern.</P>..<P>Multiple data sets can be averaged by selecting the records you wish to average from the database and clicking on the Average option.</P>..<P><I>Note: The average option will only be enabled when two or more records have been selected</I>.</P>..<P>See Also <A HREF="fm3fjn.htm">Viewing Records Stored in the Database</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-R2C40.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	789
Entropy (8bit):	5.253043780386524
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfEu0sMeqdSJ9C0F2oDyMoJw4BXFuu/3okbbgWOo:WlSZ6kIXpTyMGB9okpOo
MD5:	1193395B83108C929B13329928E34FA9
SHA1:	1BDC9AB2DAC5E46FFB9FDC70EBBEAD349BB67664
SHA-256:	C90F2F401EEC80C7C2E8B7F798D628961013802A7D9657C788D5C42AB353FA1D
SHA-512:	2FEE3B549F3201FF41BEAD34C097BF1F221F53F0B37F59A0C22194749B29CA116F1D3DDC71EA048469DEAEFD37CBA8FCBB7C0F887B1E60798DF52395A76DA2EA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Standard;Kinnear;Plotting methods</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="bye5mz"></A><I>Scoring Options</I></P>..<P>There are two methods for plotting error scores:</P>..<P>The Standard method involves plotting the error score against the<B> corresponding cap number</B>. This is the preferred method for most applications.</P>..<P>The Kinnear method involves plotting the error score against the <B>position</B> of the cap. This method is rarely used.</P>..<P>Plotting method can be changed from the <A HREF="fm2y9i.htm">Preferences Option</A> which is accessed from the Edit menu.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-S30E7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	575
Entropy (8bit):	5.336010030955101
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepfn0sMeqyEnA2Qg26C/ZG7RMD:WlSZ6+yEnnQQkN
MD5:	2CE217ADDD150CE9D26EDFE8DAFA2357
SHA1:	93C6FB1989AA5A93F1815E002C7671EF99F5BC4E
SHA-256:	ACAFD88794D25EC359CDC4A0DC22C78912446F5B023FBCF20E56E39A90BEBFCF
SHA-512:	1A3C62A181EF93609F1D6EE11B4D78C6D972F72B1D12AEF694438CA3F28602F6CEC3691072F4106541FC96365612033ECF8C394C120A3AA72394A35E384DB3BE
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Examples database</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="examples_database"></A><I>Examples database</I></P>..<P>A database of example results is included with this program. To view the examples:</P>..<P>Select Open Existing Database from the File menu</P>..<P>Select Example from the list of databases</P>..<P>Select the required example from the View Database Window</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-SMFMA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	431
Entropy (8bit):	5.408686600061125
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8Eepfu4ksMeq5p49d4khM+SS:WlSZ62nTsdBLSS
MD5:	3CF442E57B99570D31853ED83ECF1E7D
SHA1:	2FDE1B5269BA41A60EB51B8A988736BD42FD1700
SHA-256:	24D208BDC3ACEADB25547AF3E235C6D80BC856A818CD79ED2F6AEE1CD78B3CAC
SHA-512:	27204C9206C8C185BD83A70BD1F1F6BB97DF360059AACBD3B354AF6E93C10ADCE8254D204BA3FD8964BF71525B1D70F2DA158D57D477ECEE999E198435C0B1EE
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Administration</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="administration"></A>Administering the test</H3>..<P><A HREF="fm4ndz.htm">Lighting</A></P>..<P><A HREF="fm0llx.htm">Procedure</A></P>..<P><A HREF="fm359j.htm">Scoring</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-SRHK2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (995)
Category:	dropped
Size (bytes):	1425
Entropy (8bit):	5.073228911182896
Encrypted:	false
SSDEEP:	24:WlSZ652WBJj0CCu7sOv2Aibd98hiZjz3MR5rfHZZ0QFSqrXTlCG8M6m1VMCjMUw5:qSZ69JXeOuA0/gh5cQTXxn80SzSMx
MD5:	BCB3E4826A8D931040D797B6A6AC8223
SHA1:	A7A12EF094835903C0956C9BF7ACBDA8C47A8BBB
SHA-256:	85DD9A67EF62A66A7014E8043B71B5A25178E5CEAC864926537C4A828E9EDDB6
SHA-512:	A3ACE85A5C1C328C5B4673D36E042166C360622B814D70108ED138B287974292D14A18371790AACD25ED8ED84249B61051429A5010F712E12CAD5B7CC8BF8EDB
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Monochromats</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="monochromats"></A><I>Monochromats</I></P>..<P>A person with only one photopigment is known as a <B>monochromat</B>.</P>..<P><IMG SRC="../images/bm2.gif" ALT="" BORDER=0></P>..<P>The graph above shows an absorption spectrum for a hypothetical photopigment. A quantum of light with a wavelength of <I>A</I> has the highest probability of being absorbed by the photopigment, whereas a quantum with a wavelength of <I>B</I> has half the probability of being absorbed. Although <I>A</I> is twice as likely to be absorbed than <I>B</I>, the photopigment has no way of <I>knowing</I> which wavelength it absorbed. For a given amount of light energy, <I>A</I> would look brighter than light <I>B</I>. However, the subject would have no way of telling if the difference

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-T3E4Q.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	473
Entropy (8bit):	5.384635953507603
Encrypted:	false
SSDEEP:	12:BMQbwMC9zp6QclfVISLrvZMNEqhZMN+HybP0qqUC:WLZpsq4VXqhZJHHkC
MD5:	7728EEBF5A93BDA4B9CC421920A5C8F9
SHA1:	67EB2D44A2A8FC0309340BC328EE2948B61F1349
SHA-256:	5E3020F8EFC4D9618E22329F866622CC3D69CBF0194CDF3FD817A571F7F6A01F
SHA-512:	1317128FC73B11B0CD3627B4D38810CBD3D83B2759E2258D2E30E5D372DD311351AAC71DE1510DEFF27728A865B09D40CD280EC95EC250616F5B8D9D713D07EA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Farnsworth-Munsell 100 Hue Test Scoring Software: Help</title>.</head>..<body>.<HTML>.<HEAD>..<BODY>..<form>..<input type="button" value="Back" onclick="history.back()">.<input type="button" value="Forward" onclick="history.forward()">.FM 100 Hue Help.</form>.</body>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-TADKS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	923
Entropy (8bit):	5.146237749023851
Encrypted:	false
SSDEEP:	24:WlSZ6jh3KO9b7FSKvwTrumMfftGJ2Tgib49QLPx+Te:qSZ6jIVKvyrumMQsTjIQ1l
MD5:	C0E7D7EAF88C97D45D659ECF353FC18A
SHA1:	1203C792EC5D7DF2C093CFDA77AF8D25B11BC672
SHA-256:	27E7E9B41BD0563F161B52C00A24AD8AD9A941F9F7401736FCCCBE65081A5B36
SHA-512:	97F85D3D2D1FF20D3971DBD36D13CB55C1FA4BDDB62E70F72B37A75D877292A9997CDE33F45AF60F52C2491DD8F76A2CE4BA5009B9076FF8B2A2D4C001A84A5A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Print Dialog Window</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="print_dialog_window"></A><I>Print Dialog Window</I></P>..<P>The print dialog window allows the following print options to be set:</P>..<P>Number of copies - Sets the number of copies of each page to be printed.</P>..<P>Print in color - When selected, the data points are printed in color (color printers only).</P>..<P>Header - When the corresponding check box is ticked, the text contained in the text box is printed as a header at the top of each printed page. Header text is automatically saved in the program's <I>ini</I> file so does not need to be re-entered each time the program is run.</P>..<P>Setup - Allows various printer options to be modified.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-TUE7C.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-TUJTC.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-TVO0J.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (454)
Category:	dropped
Size (bytes):	2382
Entropy (8bit):	5.089178054796509
Encrypted:	false
SSDEEP:	48:qSZ6j8HOSjzWBgsMX2J9EbvCVHa7picwMDjFyGoKpis9HSMDRdWZSkji2:rFHO8tumzCVHIb6Kpisuf
MD5:	FB8D980999A670389F45E47869989DC0
SHA1:	A9C27FC93979436C648EFACD19C1F6DA0DAE41A8
SHA-256:	F7DDECF60F51CC761001D2821DD71156B584A02FADE19EE1E8BB334FA4C759C6
SHA-512:	CA906DC7DD4B8BFC1AF18183FA0453BA2CDB3E01A204103249A4F1A4D7AA59861E34DAD3C3649E73B7C7084A013C1AA7B29F5FC89A148D667CB7AFA8DC2DA19A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Polar graph</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="polar_graph"></A><I>Polar Graph <IMG SRC="../images/bm10.gif" ALT="" BORDER=0></I></P>..<P>A graphical representation of the data can be displayed on a polar graph by clicking on the <IMG SRC="../images/bm11.gif" ALT="" BORDER=0> icon in the toolbar or selecting Polar Graph from the View Menu.</P>..<P>The cap numbers (1-85) are represented by the radial lines. (Note - the angular spacing of the radial lines is not uniform - this is intentional).</P>..<P>The Error Scores are plotted for each cap, with the inner circle representing a score of 2 (caps in correct order). The circles corresponding to error scores of 5, 10 etc. are darker to assist with the interpretation of the graph.</P>..<P>A subject with 'perfect' hue discrimination would be able to put

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-U25FH.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-U71FE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.661226943847434
Encrypted:	false
SSDEEP:	3:PFltl5U9nIk:Pftg9nI
MD5:	9C46007F92F6817CB70BB63B8E7DFC9E
SHA1:	0A0442591054622234A03F01652EABD6057200CA
SHA-256:	FDFF1042BE8E2C1B296E56E5949B0C66C60E9424657958C8EF86394F78711A98
SHA-512:	2D2047D4F5FC4C3C441EB792FAD60C95805FBBEEA9B5F905D916E84A5E68E3DD72E87B5F1B20186E7F9D86B6D3EC5C8E3685665F090C0A5F86B78272E5FC06EF
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXTDmWr........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-UEMUJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-UFB2M.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-UH3HG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-UM2M6.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-UP66R.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-V0C35.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with very long lines (394)
Category:	dropped
Size (bytes):	1016
Entropy (8bit):	5.14617600546358
Encrypted:	false
SSDEEP:	24:WlSZ6zjEYFPeCNQ4BTo/OK3NspSW8bTIjycYExG:qSZ6vHZY0oV3HbTlSxG
MD5:	C9B9D2D4A315E728DC3F2C01B1E0619F
SHA1:	F0CEB44093E813511788B9890CBADE12EB49783E
SHA-256:	FFE07EC780B8772DF43E38A2A161344079338AD60616067CD44A8E92AF31BC53
SHA-512:	0D5732BD157E86C509CA17F61A0CAF0A09F813255023E0A7428A25F6B8CE4A482118AD3566C54347E275A99CE7306FE11EBA03D589D2CF59A72E25AEECC848FC
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Youngs Trichromatic Theory</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="youngs"></A><I>Young's Trichromatic Theory</I></P>..<P>The next major contribution to the understanding of color vision came from Thomas Young (1773-1829). Young thought it unlikely that the eye possessed a different receptor for every visible color and proposed that color vision was derived from the relative stimulation of just three receptors.</P>..<P>Young's trichromatic theory was not confirmed experimentally until almost fifty years later when Maxwell carried out an elegant series of experiments in which he used a spinning disc to produce additive mixtures of various combinations of colors. These experiments showed that virtually any color could be produced by simply adding together three primary colors in different proportions.</P>..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-V86EG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-VAEU9.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	620
Entropy (8bit):	5.116566131884742
Encrypted:	false
SSDEEP:	12:BMQEdOaA9zp6QclfVIgb8RxPDwAhHL91DwmxRLwAhbFAt0Ic87w1qgPC:WnAZpsqgwRxzpL4mxVrt878PC
MD5:	C8828E36B6CB9FE7F9AEBAA4E1F56A16
SHA1:	50FF09FB952BD1D54D3C0D6738DB343EA79863A8
SHA-256:	2F84B8B9A955C9D98FA7D0CCA825EF11A0F1C9CFD08A486961CE486CF208B56F
SHA-512:	754F0D54CE302512694118F7643C532A54AD16AAA1F96B74959DB5705BB05BF96B79503285D8E67CD62A184A6BDC20051437CD94765DD47AB7D1ABA3BC25D49C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Untitled Document</title>.</head>..<frameset rows="" cols="200," frameborder="yes" border="2" framespacing="2">. <frame src="indexList.htm" name="leftFrame" noresize>. <frameset rows="80,*" frameborder="yes" border="2" framespacing="2">. <frame src="nav.htm" name="topFrame" scrolling="NO" noresize>. <frame src="fm5l0u.htm" name="mainFrame">. </frameset>.</frameset>.<noframes><body>.</body></noframes>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-VC0RI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	620
Entropy (8bit):	5.274736574478381
Encrypted:	false
SSDEEP:	12:BMQkzLq2Q8EepfL7nlJRWsMeqNU1awn25GWJcdwnFI2CwT0dJivkRiFYOEo:WlSZ6jZMu1ahGWe4I2LAELFYON
MD5:	83E1AE5BDB9119BFE9326E731A2A3B28
SHA1:	EB2D68BE25D2D333B0F65D19F6FEB2BB20037655
SHA-256:	1D3D83603FD8FAA5B7717B885B195168535904E7F7D5C9D704E295DD3FECA98C
SHA-512:	CEAC6769D13D4BD27C955E3F7922D7C7B4879C9984D168F7B119A8C050451F59839C8969125BAE2A012E25DC1C2EC8E3339289794FA9FE19133C92979390D9E4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">.<TITLE>Personal Information Form</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="personal_information_form"></A><I>Viewing Personal Information</I></P>..<P>Personal details relating to each record is viewed by selecting Personal Information from the View Menu. The form is read only and shows details of the current record including Name, Initials, Reference, Date of Birth, Date of Test, Duration of test and any other Comments.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-VCP61.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-VH1J1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	1132
Entropy (8bit):	4.916068132865607
Encrypted:	false
SSDEEP:	24:WLZpsqgw+tJo6uwDK88ZftlBAeNBAehxQy1SsYREXBrC:KMqgfy6u8781lAenAe7Qy8sYIBrC
MD5:	87645DFC88532C01899AB9BFDCDD2B9A
SHA1:	11ED1DF917A28160527E3B60C38FC8C44DE5B2CF
SHA-256:	988E5D9A88ED374E09EA2841A1606CF5276C36512EC6A86A70D8FC9D728B5739
SHA-512:	087E0766AE43447746BD963AF124FE5CD6059044168AAB98EE599CE90309B8A4619E3A93F172F22770581B2D24F7FB043E5CF3629681E13F515BB175297F899C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Untitled Document</title>.</head>..<body>.<p>PROTAN CONFUSION LOCI</p>.<p>The easiest way of representing the combinations of colors which are confused by color deficient people is with reference to the CIE chromaticity diagram.</p>.<p>The colors which dichromats confuse lie along straight lines when plotted on a chromaticity diagram.</p>.<p>The lines radiate from different points according to the type of defect. These lines are called isochromatic confusion loci.</p>.<p>Dichromats will tend to confuse colors over the whole length of the confusion loci, whereas anomalous trichromats will tend to confuse colors over a more limited ranger.</p>.<p>The line which passes through the whole point and intersects the spectral locaus, indicates the wavelength which will appear "white" or neut

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-VN62F.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\is-VNF96.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.2469559066964067
Encrypted:	false
SSDEEP:	3:PFltl5U9jll/:Pftg9j/
MD5:	7DE4310A6035B195D2CD6A22BED93B0B
SHA1:	22D8A4CF26EDB71C1A8F1A25DBB882346B67AA2F
SHA-256:	644D1481A70C5CB9599D3DD3AC3355BA73A8CED0A6180D893CF147BE93CBB41F
SHA-512:	897C2E3A6A1F3D0A4A0B083A3B885A302FA6064BC68794216207B046F02DE8A7BBCE54920DADA7AF19C97157028C348EE39B2B834BBD00F3796488C7FEA1199D
Malicious:	false
Reputation:	low
Preview:	.................................&... TEXT............................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\html\nav.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, ASCII text, with CR line terminators
Category:	dropped
Size (bytes):	473
Entropy (8bit):	5.384635953507603
Encrypted:	false
SSDEEP:	12:BMQbwMC9zp6QclfVISLrvZMNEqhZMN+HybP0qqUC:WLZpsq4VXqhZJHHkC
MD5:	7728EEBF5A93BDA4B9CC421920A5C8F9
SHA1:	67EB2D44A2A8FC0309340BC328EE2948B61F1349
SHA-256:	5E3020F8EFC4D9618E22329F866622CC3D69CBF0194CDF3FD817A571F7F6A01F
SHA-512:	1317128FC73B11B0CD3627B4D38810CBD3D83B2759E2258D2E30E5D372DD311351AAC71DE1510DEFF27728A865B09D40CD280EC95EC250616F5B8D9D713D07EA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Farnsworth-Munsell 100 Hue Test Scoring Software: Help</title>.</head>..<body>.<HTML>.<HEAD>..<BODY>..<form>..<input type="button" value="Back" onclick="history.back()">.<input type="button" value="Forward" onclick="history.forward()">.FM 100 Hue Help.</form>.</body>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\._bm10.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	64757
Entropy (8bit):	5.513544306180357
Encrypted:	false
SSDEEP:	1536:fX7YULL1SyEpMnRPxLmEpMLRPxL3EpMoRPxL8EpMFRPxLVEpMGRPxLNPj9EX4img:fU9yEpMnRPxLmEpMLRPxL3EpMoRPxL8F
MD5:	B341192EDFF6166348EF7BE261403360
SHA1:	8C7EAD2DEE3CEFDC56C4F9028FC5CE295C52D848
SHA-256:	885BB88E591F96D1A449E6E9DE823159AC0D5E854F94F84CD1851797CAE140CE
SHA-512:	AFE6F8E19F0B74A624B432BCD1E7075DC18B5863DF70037C925A9F18067CA3968496CC2FE2EF96B739BE74F3A0153821D9D29720CCF2C2EF20FEDD816B736EA1
Malicious:	false
Reputation:	low
Preview:	.................................2... .......R....GIFf8BIM.............................................................................................................................................................................................................................................................................................Adobe Photoshop CS2.. . ......J.H...........H...H.......J.H..........8BIM.......J.HGr.ph.bj.....L.......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\._bm14.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	61506
Entropy (8bit):	5.32365048427296
Encrypted:	false
SSDEEP:	1536:n4PpnnZ1yEpMnRPoLmEpMLRPoL3EpMoRPoL8EpMFRPoLVEpMGRPoLNPj9EX4imWA:n+nn3yEpMnRPoLmEpMLRPoL3EpMoRPoH
MD5:	FC68846BCF5F61F9A688DDA39C2C3EE3
SHA1:	68FBD9AC5BF590D5E780099CCD2E2B1D6EFDA834
SHA-256:	4720EF305E4658D99A272B100998EDC5DAA509C88077F7576A93C4FB7BDF2D15
SHA-512:	C454D10CB4F24856950B1A160067CEB300B6EBDB5733256EDEDA57429C6DDCEB8C62C9838B107344F72858CB235F111F04BF84DDC97351B697AD9A0482F3ED46
Malicious:	false
Reputation:	low
Preview:	.................................2... .......R....GIFf8BIM.............................................................................................................................................................................................................................................................................................Adobe Photoshop CS2...........I.M...........H...H.......I.M..........8BIM.......I.MGr.ph.bj.....L.......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\._bm22.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	63292
Entropy (8bit):	5.4246885763998005
Encrypted:	false
SSDEEP:	1536:uuRvEd3WTvEd3WTvEd3WJbyEpMnRPeLmEpMLRPeL3EpMoRPeL8EpMFRPeLVEpMG5:u0EJmEJmEJWyEpMnRPeLmEpMLRPeL3EL
MD5:	FC34F18540CB81828AA7ECDD392DB335
SHA1:	65317F0FB58A8AD622159EFADF10D1AF74584CA1
SHA-256:	39173096804451E59985449F5C4B3B4280D4E7494A269D56785D8C1F209BBED5
SHA-512:	DCD76CEB4EBCEFEA7763A506BD9D057C03DD21BC09A038DB50CF2F3FB2A75C2E51E08586E1F3448BFB71B50D7CFD01BA14A26D6909A21BF5ADBE04164F482120
Malicious:	false
Reputation:	low
Preview:	.................................2... .......R....GIFf8BIM.............................................................................................................................................................................................................................................................................................Adobe Photoshop CS2...........I.I...........H...H.......I.I..........8BIM.......I.IGr.ph.bj.....L.......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\._bm26.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	65456
Entropy (8bit):	5.5498646869323
Encrypted:	false
SSDEEP:	1536:pcG+bUdTYdndndlzyEpMnRP/LmEpMLRP/L3EpMoRP/L8EpMFRP/LVEpMGRP/LNPL:pcGEUudndnddyEpMnRP/LmEpMLRP/L3q
MD5:	9ABDEF69982EA709D578AAA4AC9E4753
SHA1:	9C28CC76FA0752EBEC9CFDA6456217255FAF25AC
SHA-256:	1533A29E9EB73AE5EA9053A8758FABAC465516D4EC2C88552367FB2565E119AB
SHA-512:	E3890E93E46FB7E2B4F794FF4AEFC9E138F165010C2D518B3F3BDB060AC970960866C9C177FECF69980EDB61A90C471D26A275477769394DA9692BA6315D8723
Malicious:	false
Reputation:	low
Preview:	.................................2... .......R...^GIFf8BIM.............................................................................................................................................................................................................................................................................................Adobe Photoshop CS2..!.!......J.H...........H...H.......J.H..........8BIM.......J.HGr.ph.bj.....L.......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\._bm8.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.6897983724188628
Encrypted:	false
SSDEEP:	3:PFltl5Xj//:PftrjX
MD5:	6D6431F71FAAE765A3C35655A81FEFB7
SHA1:	85703A4247EA652D07CB490A67DA856BC185F3EF
SHA-256:	66FD0BF9F5DCF21983E9097F37DAFA108112F55593F98BF283B63A8FEB78C3CA
SHA-512:	5A88EEFFE85745155C39821754ACFD012E31E5566817B7A2B6EC9C79586AD7F3CF8013D7345D7FE38CBFDEC81817217E2818F70584F185EAB116ADB76C181288
Malicious:	false
Reputation:	low
Preview:	.................................&... GIFfMeSa........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\._bm9.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	53685
Entropy (8bit):	4.755130593031549
Encrypted:	false
SSDEEP:	1536:8gHHrF6yEpMnRPkLmEpMLRPkL3EpMoRPkL8EpMFRPkLVEpMGRPkLNPj9EX4imqMW:8gHH56yEpMnRPkLmEpMLRPkL3EpMoRP3
MD5:	D74C87A532632AD9F3869788BC64CD8A
SHA1:	B18B412468A9CA43CF0E35A79BA06DC3C91F69E0
SHA-256:	2CD1A4FF35CE4C6A10C8B547976291F95A47BFBEDFE628F1D91767F767833B7D
SHA-512:	3B2759BC0FB92CA75CBAAB1035E0C17370DB91C36C118184CEE75F35BFFB73DF788B2EC60BDF23901CF9C06F03A5C9D8DCC3249D38FF971E07C41B2465A58D29
Malicious:	false
Reputation:	low
Preview:	.................................2... .......R...cGIFf8BIM...........................................................................................................................................................................................................................................................................................Adobe Photoshop CS2...........).c...........H...H.......).c..........8BIM.......).cGr.ph.bj.....L.......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\._chromaticity.jpg (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.6897983724188628
Encrypted:	false
SSDEEP:	3:PFltl51xX:Pft5x
MD5:	157E107640B55D60F7B0AE8B9854629C
SHA1:	87D20B20FBC46B571E154619C1D83582E7AAF62D
SHA-256:	BCAD9313E0D69DA085CD225D876C598B8FBEC7477E6280279971BE111B167AAA
SHA-512:	DB23CAAC9D28013C1EB4E673B8402F968A16F8474536B516885AC7C0B01895E6CECB5B9FF96E6171D9D73D1A21C7AC2A368D042BCD469E14EED070F59D5CCFAA
Malicious:	false
Reputation:	low
Preview:	.................................&... JPEG8BIM........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\._deutanCIE.jpg (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.6897983724188628
Encrypted:	false
SSDEEP:	3:PFltl51xX:Pft5x
MD5:	157E107640B55D60F7B0AE8B9854629C
SHA1:	87D20B20FBC46B571E154619C1D83582E7AAF62D
SHA-256:	BCAD9313E0D69DA085CD225D876C598B8FBEC7477E6280279971BE111B167AAA
SHA-512:	DB23CAAC9D28013C1EB4E673B8402F968A16F8474536B516885AC7C0B01895E6CECB5B9FF96E6171D9D73D1A21C7AC2A368D042BCD469E14EED070F59D5CCFAA
Malicious:	false
Reputation:	low
Preview:	.................................&... JPEG8BIM........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\._protanCIE.jpg (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.6897983724188628
Encrypted:	false
SSDEEP:	3:PFltl51xX:Pft5x
MD5:	157E107640B55D60F7B0AE8B9854629C
SHA1:	87D20B20FBC46B571E154619C1D83582E7AAF62D
SHA-256:	BCAD9313E0D69DA085CD225D876C598B8FBEC7477E6280279971BE111B167AAA
SHA-512:	DB23CAAC9D28013C1EB4E673B8402F968A16F8474536B516885AC7C0B01895E6CECB5B9FF96E6171D9D73D1A21C7AC2A368D042BCD469E14EED070F59D5CCFAA
Malicious:	false
Reputation:	low
Preview:	.................................&... JPEG8BIM........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\._tritanCIE.jpg (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.6897983724188628
Encrypted:	false
SSDEEP:	3:PFltl51xX:Pft5x
MD5:	157E107640B55D60F7B0AE8B9854629C
SHA1:	87D20B20FBC46B571E154619C1D83582E7AAF62D
SHA-256:	BCAD9313E0D69DA085CD225D876C598B8FBEC7477E6280279971BE111B167AAA
SHA-512:	DB23CAAC9D28013C1EB4E673B8402F968A16F8474536B516885AC7C0B01895E6CECB5B9FF96E6171D9D73D1A21C7AC2A368D042BCD469E14EED070F59D5CCFAA
Malicious:	false
Reputation:	low
Preview:	.................................&... JPEG8BIM........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\bm0.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 245 x 230
Category:	dropped
Size (bytes):	3906
Entropy (8bit):	7.536706229806521
Encrypted:	false
SSDEEP:	96:o7f1QpMi/SLPbUAorWnMAwyltQV834frIAsSThdL:ErLb5M5yltQDrIYPL
MD5:	12828D3D4CDD82D814A71932E906F4CA
SHA1:	A6C4981F85F85A40490977B0A71AFDD4B87C6CA0
SHA-256:	81D535B5DF4BF246380FA2BBC35C7CA654C4358D0EA50ABF9407BEB7F34A2510
SHA-512:	3F7100A8F80E0277BDE09C54B56ABB26BF329637486E7D0F76C4164F341AD7E540236064AC029D1F6F097C23DF0637A7A13091E2D89073D871BFD9863C4453A2
Malicious:	false
Reputation:	low
Preview:	GIF87a.....................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...............H......\....#J.H....3j.... C....cI.'#....K....9p.@..m...0.N.>_..:.'.).f.8....M.".$..R.K......)%..t......r}6).{D..h....Ji>....\|.n.;......B.KX...A...K.rC...bf+..b.P.6..4..yK.D@j.O.a.{3..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\bm1.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 245 x 230
Category:	dropped
Size (bytes):	3906
Entropy (8bit):	7.536706229806521
Encrypted:	false
SSDEEP:	96:o7f1QpMi/SLPbUAorWnMAwyltQV834frIAsSThdL:ErLb5M5yltQDrIYPL
MD5:	12828D3D4CDD82D814A71932E906F4CA
SHA1:	A6C4981F85F85A40490977B0A71AFDD4B87C6CA0
SHA-256:	81D535B5DF4BF246380FA2BBC35C7CA654C4358D0EA50ABF9407BEB7F34A2510
SHA-512:	3F7100A8F80E0277BDE09C54B56ABB26BF329637486E7D0F76C4164F341AD7E540236064AC029D1F6F097C23DF0637A7A13091E2D89073D871BFD9863C4453A2
Malicious:	false
Reputation:	low
Preview:	GIF87a.....................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...............H......\....#J.H....3j.... C....cI.'#....K....9p.@..m...0.N.>_..:.'.).f.8....M.".$..R.K......)%..t......r}6).{D..h....Ji>....\|.n.;......B.KX...A...K.rC...bf+..b.P.6..4..yK.D@j.O.a.{3..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\bm10.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 72 x 74
Category:	dropped
Size (bytes):	3795
Entropy (8bit):	7.440990419987494
Encrypted:	false
SSDEEP:	48:hK0u2XFShm1wVISwdUY3iz0e0pQQJzIWC85AOakncW/8MMWre:l3XFShmOciAe0HdIWC85Ha2/5K
MD5:	5DC7268132B0562F1CCE98CEAB204C9E
SHA1:	DB166FF68F94BFE8BE970047F8D60CA9A7376DA4
SHA-256:	1DA6EC344F2FF1C196780BDFAE055247FB72C67B6C49B11974CA93405B84E920
SHA-512:	58231F4303EE9B955D2F2AB7484FF6A1384E3FC4071251180CAA98527A544C6E7340E74261036BF1CB5A2D1BE5F865CD5582022232EAD4505842C1F1F6335B75
Malicious:	false
Reputation:	low
Preview:	GIF89aH.J........................................................................................................................................................................................................................................................................................................................................................................................~~~}}}xxxvvvuuusssrrrooommmlllkkkiiifffdddaaa```^^^ZZZYYYXXXWWWUUUTTTSSSPPPNNNMMMLLLJJJHHHGGGFFFEEECCCBBB@@@???<<<;;;:::999888777666555444333222000///...---,,,+++**&&&###""" ...........................................................................................................................................................................................................................!.......,....H.J.....o..H......\....#J.H...S...y...<.&..Hr..@SXH......&.x..T....`.r......m.@...-.......Th0.T.......f.j.......r.......4x.`..X..]..A.....".0.......6.... .~{...?\|........"X.A..BA...2...1.....b..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\bm14.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 77 x 73
Category:	dropped
Size (bytes):	3079
Entropy (8bit):	7.406272062451004
Encrypted:	false
SSDEEP:	48:PR5ETp8uDYPhb1xoNVIuar96f0CXbqtiFTGmk7JxrmRClU:Pw+yYR1xoNVIB921rqIGR9xKClU
MD5:	CD81AC9B6DF722AE7ED668A66F10AB83
SHA1:	E58D72A3998EC6D21236818527524B07D9596AF9
SHA-256:	A85EC0D8A1ABB0FDA111BB2E5FB22865B5890A886ED49CDD4CF6BC4D80BCB10F
SHA-512:	02A7D5C319666993DD78F3187A13426B5CFDFED7577EDC41568670AAD885C41960C322664C486A455A5AF5D9A67BF29599283EDF1C768E37A79063173CA07500
Malicious:	false
Reputation:	low
Preview:	GIF89aM.I.......................................................................................................................................................................................................................................................................................................................................................~~~}}}{{{zzzyyyxxxwwwuuutttsssrrrooolllkkkjjjiiifffeeedddbbb\\\[[[ZZZYYYXXXWWWVVVTTTRRRNNNLLLKKKJJJHHHGGGFFFEEEBBBAAA???>>>===;;;:::888777666555222111///...---,,,+++)))((('''!!! .........................................................................................................................................................................................................................................................!.......,....M.I.....[..H......*\....#J.H..E.....c.H."K...S....=.yR....0c.\|...T(s.....L...4p..... ...F:+.b....C.6...Q......(jD7...`...V.].2....K...2\..@..o..}.@k../.d.p._..K.....<...........C.\..S/.[q...p.t

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\bm2.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 384 x 288
Category:	dropped
Size (bytes):	4304
Entropy (8bit):	7.5924730131756535
Encrypted:	false
SSDEEP:	48:+m5CNjtJwsNd0akbhBUiFr6G15FZmwZSMIorealaKjhLb0yAyG61iz0ls40bsqjm:VYNjDFQQet5zuKjNxAM1pC4iYx
MD5:	BC939228247546ED31EB767DA7AC968E
SHA1:	28BA9BDE030F63ED7157EC22B0F4D2D5015B6F78
SHA-256:	48124EFD0503E82B1F3A6CF4B5304506E7796EF28ED750D7DE35CEFFF5769DE9
SHA-512:	801F3468E43285BD5B66904DC82496AFE7DA6FD7C082591C0B2E4D283B8D0860787B6F6FD364796C0C6DE0A91FC5BC9D4EA07D2B474A584DBDEF01EE6D0869CE
Malicious:	false
Reputation:	low
Preview:	GIF87a.. ..................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...... ........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x.....#......+.p_...E...\.#..,.rZ.3....W.Ck.-.tU.SCE....R.c..@. .

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\bm22.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 73 x 73
Category:	dropped
Size (bytes):	3371
Entropy (8bit):	7.4497952238318845
Encrypted:	false
SSDEEP:	48:jZAXJoZcpLLem5/iwDwfcaH+ilFRYFC2fY4QgZV6xLspy9Xud:QJLT9iwDwfrFRYhfAgZsxLL5ud
MD5:	D075014A91FB5B1F24C9A2DE9BCF4509
SHA1:	80E44947F656F5DAE3DB1B480C53847432DB8EB2
SHA-256:	E6A06206F1456B78981C24F595612E8DCE1B4FD28ED6E9D0C81D81E1E869BEA2
SHA-512:	CC83C97CB05A3C8398D481EF5E22B2D811F8E3AFCCF1539FFAA26862DF2AFF9E12DCF0C758F7C0F652AFB9DB3375CB7CA69692AEFED1B592AB501062308B7B51
Malicious:	false
Reputation:	low
Preview:	GIF89aI.I...............................................................................................................................................................................................................................................................................................................................................................................{{{zzzyyywwwrrrqqqppplllkkkhhhfffdddbbbaaa```^^^[[[YYYXXXWWWUUUTTTRRRQQQPPPOOONNNMMMLLLHHHEEEDDDCCCBBBAAA@@@???>>><<<:::999777666555444333222///,,,+++)))(((&&&%%%$$$###!!!..........................................................................................................................................................................................................................................!.......,....I.I.....g..H......\....#J.H..DM..R$..$W..QD.I...4!....0]N....'e....e...........^j."...XxD.......E.f.z....<.9}.......f].mP..\..4V.....\u....q.\|.U...U.h......H4,.U.....U.T.P.\|.0h....t..R.....E

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\bm26.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 72 x 74
Category:	dropped
Size (bytes):	4110
Entropy (8bit):	7.4584861984724675
Encrypted:	false
SSDEEP:	96:RVc3E2/Vbk1o4w4XR2zefgTnPniAQg3g9gD:Ry3E2/R4x2zefgTPnHhg9gD
MD5:	1F69A289B8526EA5F9BA921F2F6300CA
SHA1:	8660295C6D7E1E4AF0C3241D1C8E9B823CEB8F10
SHA-256:	5B5B5EDF0CB50ECAE101FB55AC758CD279347FE2B93025A22D5072A92FBC8198
SHA-512:	49A927302FD8B97D955729C25658EDA52764C3EB8D7471CA4FCCE0F11BD799EB11108B95BDB992BBABC4A52353FB10CC6EA828460955B1E4648B1BE3B5EB80D4
Malicious:	false
Reputation:	low
Preview:	GIF89aH.J.......................................................................................................................................................................................................................................................................................................................................................................................................~~~}}}\|\|\|{{{zzzyyywwwtttsssrrrqqqpppooonnnmmmkkkjjjhhhfffeeecccbbbaaa```___\\\[[[YYYTTTSSSRRRQQQOOONNNLLLKKKJJJIIIHHHGGGFFFEEECCCBBBAAA???>>>===:::999888777666555444333222000,,,+++**)))&&&$$$###!!! ....................................................................................................................................................................................!.......,....H.J........H......\....#J.H.b._.R..u.U/. ...Tg..... 8.....@.@....@^..\...'.....%.'..qT........8x....S.4P..'. ..>l.......6X.-..V.48.SE$....A...U...j..p..m.LU..(..3..m\..2g......p.$8....3=+.}.a....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\bm3.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 384 x 288
Category:	dropped
Size (bytes):	4492
Entropy (8bit):	7.58971495123084
Encrypted:	false
SSDEEP:	48:kmeYAs5qFTR++GW81Z8mmEY63DBR7USE5OV0lh0crC2nN60oMhcFPuXBtKL6/aSE:7YtvW1Z8mVjQSE4K0c2MJhceBKVz
MD5:	971521BE861C321A42C8B61A28A5648D
SHA1:	D9FF84F443460399C4CEC3B1D2F35ED4A287700D
SHA-256:	51BA0178C59F5B4F78C09053953F7169372D9627DEBB9BE703F947F28C9094D3
SHA-512:	BAF61E70CB778E6909C840CDA836C2A973D5ADE314B44C7012C4DC7271CF25D838ECDBBD38C861E853D276A126A6AEF6B165820929A9A697ECB810302C8CF086
Malicious:	false
Reputation:	low
Preview:	GIF87a.. ..................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...... ........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x..........L.....+^....#K.L....3k.......C....4...G.v.._..c.\|-.t.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\bm4.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 384 x 288
Category:	dropped
Size (bytes):	4818
Entropy (8bit):	7.6367849199074005
Encrypted:	false
SSDEEP:	48:kmerHGURL0JYAr/6LlC9Lt/vJpbfccVJWut9N5rFc2tM1JlPhnu0LXF0zHZbgI87:7ERMrChCttHJ5fccVlvFcKc9W8BZxd
MD5:	EEF8AFF62E42E96A4084643C8BDC2EB1
SHA1:	5D3F62DE51637E9E066ADCBCB494A0A600ECFEE7
SHA-256:	39B5479331FE362BCDF9B2E3DA7BC30ACB022AFB0051D8873DABCF572F24D151
SHA-512:	F0301C4A69AE00B0CE44AE368C2E6DE3A86D953B34FAC70909F980BA61A7445DF99703859FF36D8DB022D806C20BF7181A5D5601CEC5CB7732C9CA817447E730
Malicious:	false
Reputation:	low
Preview:	GIF87a.. ..................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...... ........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x..........L.....+^....#K.L....3k.......C....4...G.v.._..c.\|-.t.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\bm5.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 331 x 282
Category:	dropped
Size (bytes):	6459
Entropy (8bit):	7.795298472658523
Encrypted:	false
SSDEEP:	192:HuK5kKySIhrWvs1Z6llVd8kAtx+OvalQJWIdgIncx:HuK/IesabA6OvpsIdJcx
MD5:	7EB67FBD884EE59B9E9167DE26E66898
SHA1:	9A1B3C67AF91AA0C2B8043A1CC50B2A581992000
SHA-256:	0F843A42BE584D8276D96AAFD0370F6ED600F63695BD23C6568A30A46274E4FF
SHA-512:	17102636A724D3611C1963A46B2B9D9A3934878D0CE20BAA6E7C5A7A111C3404037E4A1BA4828CCBA76BCBA588585312203430AF0AE82FDE2862A5CD8199911E
Malicious:	false
Reputation:	low
Preview:	GIF87aK....................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,....K..........H......*\....#J.H....3j.... C..I...(S.\...0c.I....r....O.9...I...B..L...P.J..t....2....X....0..h..}:.......K..X.q..m....3......Z...+^i.`.8./.L9dc...K.......n&.....S.V(..c.\|W.../..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\bm6.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 279 x 247
Category:	dropped
Size (bytes):	8132
Entropy (8bit):	7.852135436848708
Encrypted:	false
SSDEEP:	192:hdkw7q38j7G4j5JzSJ6lKGbnLhTSOowEeS1S:hDeOlcGnZSOowEG
MD5:	74E2973D1826EB678AC1033A552F3FE9
SHA1:	851728CC3945575B856637DD2822C392E1D87BF0
SHA-256:	66EADED01CF97BF91131AFD54FF7DA4B2578CAF0FC17FE55A8C47737F36C8C4F
SHA-512:	B238A364DEB991643126F7D98031D139E53A3BA728C51D3D5F2D5B305E19C8D3A0F85A40E15CF6B898283F4EC673D184722BD093D8CA93A126CA8A3A5B071A79
Malicious:	false
Reputation:	low
Preview:	GIF87a...............@........................................@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...............H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.........@P.@.G.e..!...B.8...R.....(.R.&.+Pk.e.%.-.f.V.Z.jZ....]hw..k..Jxp.k.5.4,\....E[Po..-_Vj7h......\.oL.]..^]..]..~uKyl.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\bm8.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 73 x 73
Category:	dropped
Size (bytes):	4531
Entropy (8bit):	7.438989839400492
Encrypted:	false
SSDEEP:	96:hxLbRXf1w+qbHqp8skPDv5X5uezT0VS7KkKjaVZ9E3Ui9cLycoWvhamUYOqKpWR9:hbWHbHqpNk9X5uezT0VSrnZ9+KLycocL
MD5:	4FE24E60EB6273C1DD57B5FE2B9A575C
SHA1:	19A68E7A948E3E56FB1FAFCE89D72C6F200D9573
SHA-256:	624758037DF43276503AEFE924292E8C3F6342ACBB22405811CFBEF98E40F8AC
SHA-512:	817F9889313FF626D35E27D1BAB49C0BCF923195E0BA33942349FC13D4689D872C8FA287CEDD2A06E3E8A136ECC269BC3CBC9C5C3A8A414C6E5FFB3DF2A240A1
Malicious:	false
Reputation:	low
Preview:	GIF89aI.I...............................................................................................................................................................................................................................................................................................................................................................{{{...www~~~.....................!.......,....I.I.................}.... ....................&............{...04:D^aLLU.\^6M......).......4QUIjRd=A3..."/6ElKbT:.........&3[fcR:..~......A../8`...".,......F.. ....`#..\|...p.O..T..9..A.W.-9.3...1`b...@....~.8 ....H.h ....~j.S.....b".p...,VP..`....D.!......&,HP......phP@IT2q.p.....?..l.......4...#J...[..1eG..(..`....%. .:AM...V.v.g.."rL.. ....Sp.p..x..{*0.....4i..c.E......1f...Z.Dx!&M.?{$`.1EG.....9."..........Q.~t....,`A<...A.h.aR..(F..<.g.. aC......V....Y=...8....} ...P.....TPB..`0@+.....P.`..{....V.1.....b..?.1.."....4.s@.H@...N....>.@..$]...6..@...A..dlP.a.<...mP...{.!..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\bm9.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 99 x 41
Category:	dropped
Size (bytes):	1858
Entropy (8bit):	6.911111727204752
Encrypted:	false
SSDEEP:	24:sKig0f0qmUBwxNNwYWcxW42FAnE+S8r+pgVLkbmzUnE6GhwLYD:sKiJf0qlcNkRF+Nt6pqQmYEDwLYD
MD5:	AF94ABCE48144E917332EBB8D366833A
SHA1:	FC4BF88F1D0352EE0B73AB2CEA9C40F8E96CB468
SHA-256:	67F19CD592A02CAE34B9AB8461F5CA3168A0A4C096CAFF029C64D5EA8213D80A
SHA-512:	568A98BFA3CBC03B1D174E6BC2ECB69A612331D8003036C476C954CF401667DC862D2C15B45653F451E1AD78E6C6A97B228456E248BD2C05A938727427F8C685
Malicious:	false
Reputation:	low
Preview:	GIF89ac.)........................................................................................................................................................................................................................................................................................{{{yyyxxxsssrrrqqqpppooonnnllliiigggfffeeedddcccaaa```]]]\\\[[[ZZZYYYXXXVVVUUUTTTSSSRRRQQQPPPLLLKKKGGGFFFEEEDDDCCCAAA???===<<<888555333.....................................................................................................................................................................................................................................................................................................................................................................!.......,....c.)........H......*\....#J.H....3j....;x..I...$..Y...0c..sg.D3Ln.....@i..J...H...R.".'..H.J...X.j.....'r.~I...h.6 ...p.....C/s..=..a...._ubHa.......Ha.$.#.m ..<3.".....#.d.2%F......0B...z

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\chromaticity.jpg (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 395x415, components 3
Category:	dropped
Size (bytes):	21246
Entropy (8bit):	7.882526000297608
Encrypted:	false
SSDEEP:	384:JjPPPPPPPP/moY3TkBi/R2CyUya3sNEFR1NBmQwayLi6iJZh0S0teu3uCXRKfGOs:ZxYCOR5DyPaz1NYQKLi6iLeS0teu+CQu
MD5:	DD2C92A88D54B1476D5A31B6984451A4
SHA1:	C563CA1302F29BF7EB22B11BE0B885697AEB621A
SHA-256:	C89DDB70716690F0E1584C4126889EC0DACDEDBD887B3A406999EA674DFA22C6
SHA-512:	3F2C957B32E3040EF9C88EC7C0F757291616CF31C4339CB524D79F886620D2A862AE895FC6F4501F82496F7818A8B3907772352C44F5D04EAA6D2F56F051432A
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d...............................................................................................................................................................................................................................................!1A"..Qa..t..6.2....5Uu.Vq.B#S..R.b3$7..C.4%...r.&'......................!..1.AQaq."2......Rb..B...r#3..............?...........................................................x.Wm...Q.R.%.9%m.]PDL2<.)...5.....@A....M.g.v..4V.....=..q.>...G.......<.j\|.....m.K.3m.a.C4A.4.#.............Y..........:...K.dn.-.a4....Ogw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\deutanCIE.jpg (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 447x449, components 3
Category:	dropped
Size (bytes):	29003
Entropy (8bit):	7.898807437754511
Encrypted:	false
SSDEEP:	384:LjyHHHH6fNS6z6reWkxZeJPWbb0B/bGTpSJhZeZcJ5Vy8Nj+O/TbyMJ/joejB8vv:9FSfeWkxiWbb0F+ZcJv1aqKQq0O
MD5:	C856FDE76FA298D3821FD2879E322D57
SHA1:	C5EB1FB0FD6533B2820D26CB3A14E918B645469F
SHA-256:	A996A02A492DFA186AF905A922789726969975CF65128C1DF3BC2375589771E1
SHA-512:	C2CE9EE2D2DF5E657838D97116FCB58861D1B036DA9533CE2C282CBFE77F260BB6B1AD9D2042049C9B746272A92E98ACD9D21596C9BDE2E56525EECCB16E2212
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.............................................................................................................................................................................................................................................!.1.A..Qa."2s..6q....S..TU.BRb#..5.V..r3...Cc$....4D.dt.%.&v......................!1..AQ2aq.."..........RrBb.#.............?..R.....P.T...].q7..#....l....>.. .@yM.r~$._.`...............~...x.?.v/.0\|o...N......@.I.\|.....;..>7...'b..... ~$._.`...............~...x.?.v/.0\|o...N......@.I.\|.....;..>7...'b..... ~$._.`...............~...x.?.v/.0\|o...N......@.I.\|.....;..>7...'b..... ~$._.`...............~...x.?.v/.0\|o...N......@.I.\|.....;..>7...'b..... ~$._.`...............~...x.?.v/.0\|o...N......@.I.\|.....;..>7...'b..... ~$._.`...............~...x.?.v/.0\|o...N......@...R.=un.b...h.4.....Z. .v.i,..+.s,q.dq....FH.d.....s.Aw.^S]A.A.xG...........+.gk..e...d...lL4.iB.......8.{,....d..[

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\is-0C8ME.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 279 x 247
Category:	dropped
Size (bytes):	8132
Entropy (8bit):	7.852135436848708
Encrypted:	false
SSDEEP:	192:hdkw7q38j7G4j5JzSJ6lKGbnLhTSOowEeS1S:hDeOlcGnZSOowEG
MD5:	74E2973D1826EB678AC1033A552F3FE9
SHA1:	851728CC3945575B856637DD2822C392E1D87BF0
SHA-256:	66EADED01CF97BF91131AFD54FF7DA4B2578CAF0FC17FE55A8C47737F36C8C4F
SHA-512:	B238A364DEB991643126F7D98031D139E53A3BA728C51D3D5F2D5B305E19C8D3A0F85A40E15CF6B898283F4EC673D184722BD093D8CA93A126CA8A3A5B071A79
Malicious:	false
Reputation:	low
Preview:	GIF87a...............@........................................@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...............H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.........@P.@.G.e..!...B.8...R.....(.R.&.+Pk.e.%.-.f.V.Z.jZ....]hw..k..Jxp.k.5.4,\....E[Po..-_Vj7h......\.oL.]..^]..]..~uKyl.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\is-0T7M6.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.6897983724188628
Encrypted:	false
SSDEEP:	3:PFltl51xX:Pft5x
MD5:	157E107640B55D60F7B0AE8B9854629C
SHA1:	87D20B20FBC46B571E154619C1D83582E7AAF62D
SHA-256:	BCAD9313E0D69DA085CD225D876C598B8FBEC7477E6280279971BE111B167AAA
SHA-512:	DB23CAAC9D28013C1EB4E673B8402F968A16F8474536B516885AC7C0B01895E6CECB5B9FF96E6171D9D73D1A21C7AC2A368D042BCD469E14EED070F59D5CCFAA
Malicious:	false
Reputation:	low
Preview:	.................................&... JPEG8BIM........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\is-1H7BQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	63292
Entropy (8bit):	5.4246885763998005
Encrypted:	false
SSDEEP:	1536:uuRvEd3WTvEd3WTvEd3WJbyEpMnRPeLmEpMLRPeL3EpMoRPeL8EpMFRPeLVEpMG5:u0EJmEJmEJWyEpMnRPeLmEpMLRPeL3EL
MD5:	FC34F18540CB81828AA7ECDD392DB335
SHA1:	65317F0FB58A8AD622159EFADF10D1AF74584CA1
SHA-256:	39173096804451E59985449F5C4B3B4280D4E7494A269D56785D8C1F209BBED5
SHA-512:	DCD76CEB4EBCEFEA7763A506BD9D057C03DD21BC09A038DB50CF2F3FB2A75C2E51E08586E1F3448BFB71B50D7CFD01BA14A26D6909A21BF5ADBE04164F482120
Malicious:	false
Reputation:	low
Preview:	.................................2... .......R....GIFf8BIM.............................................................................................................................................................................................................................................................................................Adobe Photoshop CS2...........I.I...........H...H.......I.I..........8BIM.......I.IGr.ph.bj.....L.......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\is-1V6HH.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 384 x 288
Category:	dropped
Size (bytes):	4818
Entropy (8bit):	7.6367849199074005
Encrypted:	false
SSDEEP:	48:kmerHGURL0JYAr/6LlC9Lt/vJpbfccVJWut9N5rFc2tM1JlPhnu0LXF0zHZbgI87:7ERMrChCttHJ5fccVlvFcKc9W8BZxd
MD5:	EEF8AFF62E42E96A4084643C8BDC2EB1
SHA1:	5D3F62DE51637E9E066ADCBCB494A0A600ECFEE7
SHA-256:	39B5479331FE362BCDF9B2E3DA7BC30ACB022AFB0051D8873DABCF572F24D151
SHA-512:	F0301C4A69AE00B0CE44AE368C2E6DE3A86D953B34FAC70909F980BA61A7445DF99703859FF36D8DB022D806C20BF7181A5D5601CEC5CB7732C9CA817447E730
Malicious:	false
Reputation:	low
Preview:	GIF87a.. ..................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...... ........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x..........L.....+^....#K.L....3k.......C....4...G.v.._..c.\|-.t.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\is-2TBBO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 446x449, components 3
Category:	dropped
Size (bytes):	30258
Entropy (8bit):	7.90755313396624
Encrypted:	false
SSDEEP:	384:F2G03d553fsWi8voZm59QGoF4M1FF9Uv0cN3s/7661z653ilAXpBs+6iT9ThdMVD:PEd5TqZOQdTBcNc/MZilAXDDD/dE
MD5:	20F7134FC5F34AAC822D8CA8A5F46127
SHA1:	EEDCD83C415666C1BF9924A6CE078A84A6BE0EEA
SHA-256:	E9A7963FF4692D146B13D90956F43070EC9288980A57F0FA68A05AFDBFA5D5C3
SHA-512:	2F2ED435D1CC874680F4E7ABC13D8A9999B7693D9DF8C05A62AB1FD93398A9BDB67C7764905E00652E6C61BFAD7A281B700D97731E7426266EB08528307988FC
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.............................................................................................................................................................................................................................................!.1.A.Qa"2......q.#34Tt.U..G..BR..5uV.br...CS.$...%cs.D....6.'......................!1..AQ.aq...2.....".R.Bbr..3..#.4............?.........'..xqa...h..8.Pc...[..c.7.......#.*.....5..2...w....{....l...2.J....[.-..F...o.X..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\is-661D8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	64757
Entropy (8bit):	5.513544306180357
Encrypted:	false
SSDEEP:	1536:fX7YULL1SyEpMnRPxLmEpMLRPxL3EpMoRPxL8EpMFRPxLVEpMGRPxLNPj9EX4img:fU9yEpMnRPxLmEpMLRPxL3EpMoRPxL8F
MD5:	B341192EDFF6166348EF7BE261403360
SHA1:	8C7EAD2DEE3CEFDC56C4F9028FC5CE295C52D848
SHA-256:	885BB88E591F96D1A449E6E9DE823159AC0D5E854F94F84CD1851797CAE140CE
SHA-512:	AFE6F8E19F0B74A624B432BCD1E7075DC18B5863DF70037C925A9F18067CA3968496CC2FE2EF96B739BE74F3A0153821D9D29720CCF2C2EF20FEDD816B736EA1
Malicious:	false
Reputation:	low
Preview:	.................................2... .......R....GIFf8BIM.............................................................................................................................................................................................................................................................................................Adobe Photoshop CS2.. . ......J.H...........H...H.......J.H..........8BIM.......J.HGr.ph.bj.....L.......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\is-6J5KR.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 72 x 74
Category:	dropped
Size (bytes):	3795
Entropy (8bit):	7.440990419987494
Encrypted:	false
SSDEEP:	48:hK0u2XFShm1wVISwdUY3iz0e0pQQJzIWC85AOakncW/8MMWre:l3XFShmOciAe0HdIWC85Ha2/5K
MD5:	5DC7268132B0562F1CCE98CEAB204C9E
SHA1:	DB166FF68F94BFE8BE970047F8D60CA9A7376DA4
SHA-256:	1DA6EC344F2FF1C196780BDFAE055247FB72C67B6C49B11974CA93405B84E920
SHA-512:	58231F4303EE9B955D2F2AB7484FF6A1384E3FC4071251180CAA98527A544C6E7340E74261036BF1CB5A2D1BE5F865CD5582022232EAD4505842C1F1F6335B75
Malicious:	false
Reputation:	low
Preview:	GIF89aH.J........................................................................................................................................................................................................................................................................................................................................................................................~~~}}}xxxvvvuuusssrrrooommmlllkkkiiifffdddaaa```^^^ZZZYYYXXXWWWUUUTTTSSSPPPNNNMMMLLLJJJHHHGGGFFFEEECCCBBB@@@???<<<;;;:::999888777666555444333222000///...---,,,+++**&&&###""" ...........................................................................................................................................................................................................................!.......,....H.J.....o..H......\....#J.H...S...y...<.&..Hr..@SXH......&.x..T....`.r......m.@...-.......Th0.T.......f.j.......r.......4x.`..X..]..A.....".0.......6.... .~{...?\|........"X.A..BA...2...1.....b..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\is-6MU7L.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 77 x 73
Category:	dropped
Size (bytes):	3079
Entropy (8bit):	7.406272062451004
Encrypted:	false
SSDEEP:	48:PR5ETp8uDYPhb1xoNVIuar96f0CXbqtiFTGmk7JxrmRClU:Pw+yYR1xoNVIB921rqIGR9xKClU
MD5:	CD81AC9B6DF722AE7ED668A66F10AB83
SHA1:	E58D72A3998EC6D21236818527524B07D9596AF9
SHA-256:	A85EC0D8A1ABB0FDA111BB2E5FB22865B5890A886ED49CDD4CF6BC4D80BCB10F
SHA-512:	02A7D5C319666993DD78F3187A13426B5CFDFED7577EDC41568670AAD885C41960C322664C486A455A5AF5D9A67BF29599283EDF1C768E37A79063173CA07500
Malicious:	false
Reputation:	low
Preview:	GIF89aM.I.......................................................................................................................................................................................................................................................................................................................................................~~~}}}{{{zzzyyyxxxwwwuuutttsssrrrooolllkkkjjjiiifffeeedddbbb\\\[[[ZZZYYYXXXWWWVVVTTTRRRNNNLLLKKKJJJHHHGGGFFFEEEBBBAAA???>>>===;;;:::888777666555222111///...---,,,+++)))((('''!!! .........................................................................................................................................................................................................................................................!.......,....M.I.....[..H......*\....#J.H..E.....c.H."K...S....=.yR....0c.\|...T(s.....L...4p..... ...F:+.b....C.6...Q......(jD7...`...V.].2....K...2\..@..o..}.@k../.d.p._..K.....<...........C.\..S/.[q...p.t

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\is-7H7U4.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 245 x 230
Category:	dropped
Size (bytes):	3906
Entropy (8bit):	7.536706229806521
Encrypted:	false
SSDEEP:	96:o7f1QpMi/SLPbUAorWnMAwyltQV834frIAsSThdL:ErLb5M5yltQDrIYPL
MD5:	12828D3D4CDD82D814A71932E906F4CA
SHA1:	A6C4981F85F85A40490977B0A71AFDD4B87C6CA0
SHA-256:	81D535B5DF4BF246380FA2BBC35C7CA654C4358D0EA50ABF9407BEB7F34A2510
SHA-512:	3F7100A8F80E0277BDE09C54B56ABB26BF329637486E7D0F76C4164F341AD7E540236064AC029D1F6F097C23DF0637A7A13091E2D89073D871BFD9863C4453A2
Malicious:	false
Reputation:	low
Preview:	GIF87a.....................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...............H......\....#J.H....3j.... C....cI.'#....K....9p.@..m...0.N.>_..:.'.).f.8....M.".$..R.K......)%..t......r}6).{D..h....Ji>....\|.n.;......B.KX...A...K.rC...bf+..b.P.6..4..yK.D@j.O.a.{3..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\is-8I2RE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	53685
Entropy (8bit):	4.755130593031549
Encrypted:	false
SSDEEP:	1536:8gHHrF6yEpMnRPkLmEpMLRPkL3EpMoRPkL8EpMFRPkLVEpMGRPkLNPj9EX4imqMW:8gHH56yEpMnRPkLmEpMLRPkL3EpMoRP3
MD5:	D74C87A532632AD9F3869788BC64CD8A
SHA1:	B18B412468A9CA43CF0E35A79BA06DC3C91F69E0
SHA-256:	2CD1A4FF35CE4C6A10C8B547976291F95A47BFBEDFE628F1D91767F767833B7D
SHA-512:	3B2759BC0FB92CA75CBAAB1035E0C17370DB91C36C118184CEE75F35BFFB73DF788B2EC60BDF23901CF9C06F03A5C9D8DCC3249D38FF971E07C41B2465A58D29
Malicious:	false
Reputation:	low
Preview:	.................................2... .......R...cGIFf8BIM...........................................................................................................................................................................................................................................................................................Adobe Photoshop CS2...........).c...........H...H.......).c..........8BIM.......).cGr.ph.bj.....L.......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\is-ACDJL.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 331 x 282
Category:	dropped
Size (bytes):	6459
Entropy (8bit):	7.795298472658523
Encrypted:	false
SSDEEP:	192:HuK5kKySIhrWvs1Z6llVd8kAtx+OvalQJWIdgIncx:HuK/IesabA6OvpsIdJcx
MD5:	7EB67FBD884EE59B9E9167DE26E66898
SHA1:	9A1B3C67AF91AA0C2B8043A1CC50B2A581992000
SHA-256:	0F843A42BE584D8276D96AAFD0370F6ED600F63695BD23C6568A30A46274E4FF
SHA-512:	17102636A724D3611C1963A46B2B9D9A3934878D0CE20BAA6E7C5A7A111C3404037E4A1BA4828CCBA76BCBA588585312203430AF0AE82FDE2862A5CD8199911E
Malicious:	false
Reputation:	low
Preview:	GIF87aK....................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,....K..........H......*\....#J.H....3j.... C..I...(S.\...0c.I....r....O.9...I...B..L...P.J..t....2....X....0..h..}:.......K..X.q..m....3......Z...+^i.`.8./.L9dc...K.......n&.....S.V(..c.\|W.../..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\is-APDJ4.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.6897983724188628
Encrypted:	false
SSDEEP:	3:PFltl51xX:Pft5x
MD5:	157E107640B55D60F7B0AE8B9854629C
SHA1:	87D20B20FBC46B571E154619C1D83582E7AAF62D
SHA-256:	BCAD9313E0D69DA085CD225D876C598B8FBEC7477E6280279971BE111B167AAA
SHA-512:	DB23CAAC9D28013C1EB4E673B8402F968A16F8474536B516885AC7C0B01895E6CECB5B9FF96E6171D9D73D1A21C7AC2A368D042BCD469E14EED070F59D5CCFAA
Malicious:	false
Reputation:	low
Preview:	.................................&... JPEG8BIM........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\is-B3OKK.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	61506
Entropy (8bit):	5.32365048427296
Encrypted:	false
SSDEEP:	1536:n4PpnnZ1yEpMnRPoLmEpMLRPoL3EpMoRPoL8EpMFRPoLVEpMGRPoLNPj9EX4imWA:n+nn3yEpMnRPoLmEpMLRPoL3EpMoRPoH
MD5:	FC68846BCF5F61F9A688DDA39C2C3EE3
SHA1:	68FBD9AC5BF590D5E780099CCD2E2B1D6EFDA834
SHA-256:	4720EF305E4658D99A272B100998EDC5DAA509C88077F7576A93C4FB7BDF2D15
SHA-512:	C454D10CB4F24856950B1A160067CEB300B6EBDB5733256EDEDA57429C6DDCEB8C62C9838B107344F72858CB235F111F04BF84DDC97351B697AD9A0482F3ED46
Malicious:	false
Reputation:	low
Preview:	.................................2... .......R....GIFf8BIM.............................................................................................................................................................................................................................................................................................Adobe Photoshop CS2...........I.M...........H...H.......I.M..........8BIM.......I.MGr.ph.bj.....L.......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\is-CFG05.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 99 x 41
Category:	dropped
Size (bytes):	1858
Entropy (8bit):	6.911111727204752
Encrypted:	false
SSDEEP:	24:sKig0f0qmUBwxNNwYWcxW42FAnE+S8r+pgVLkbmzUnE6GhwLYD:sKiJf0qlcNkRF+Nt6pqQmYEDwLYD
MD5:	AF94ABCE48144E917332EBB8D366833A
SHA1:	FC4BF88F1D0352EE0B73AB2CEA9C40F8E96CB468
SHA-256:	67F19CD592A02CAE34B9AB8461F5CA3168A0A4C096CAFF029C64D5EA8213D80A
SHA-512:	568A98BFA3CBC03B1D174E6BC2ECB69A612331D8003036C476C954CF401667DC862D2C15B45653F451E1AD78E6C6A97B228456E248BD2C05A938727427F8C685
Malicious:	false
Reputation:	low
Preview:	GIF89ac.)........................................................................................................................................................................................................................................................................................{{{yyyxxxsssrrrqqqpppooonnnllliiigggfffeeedddcccaaa```]]]\\\[[[ZZZYYYXXXVVVUUUTTTSSSRRRQQQPPPLLLKKKGGGFFFEEEDDDCCCAAA???===<<<888555333.....................................................................................................................................................................................................................................................................................................................................................................!.......,....c.)........H......*\....#J.H....3j....;x..I...$..Y...0c..sg.D3Ln.....@i..J...H...R.".'..H.J...X.j.....'r.~I...h.6 ...p.....C/s..=..a...._ubHa.......Ha.$.#.m ..<3.".....#.d.2%F......0B...z

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\is-FOU0N.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 73 x 73
Category:	dropped
Size (bytes):	3371
Entropy (8bit):	7.4497952238318845
Encrypted:	false
SSDEEP:	48:jZAXJoZcpLLem5/iwDwfcaH+ilFRYFC2fY4QgZV6xLspy9Xud:QJLT9iwDwfrFRYhfAgZsxLL5ud
MD5:	D075014A91FB5B1F24C9A2DE9BCF4509
SHA1:	80E44947F656F5DAE3DB1B480C53847432DB8EB2
SHA-256:	E6A06206F1456B78981C24F595612E8DCE1B4FD28ED6E9D0C81D81E1E869BEA2
SHA-512:	CC83C97CB05A3C8398D481EF5E22B2D811F8E3AFCCF1539FFAA26862DF2AFF9E12DCF0C758F7C0F652AFB9DB3375CB7CA69692AEFED1B592AB501062308B7B51
Malicious:	false
Reputation:	low
Preview:	GIF89aI.I...............................................................................................................................................................................................................................................................................................................................................................................{{{zzzyyywwwrrrqqqppplllkkkhhhfffdddbbbaaa```^^^[[[YYYXXXWWWUUUTTTRRRQQQPPPOOONNNMMMLLLHHHEEEDDDCCCBBBAAA@@@???>>><<<:::999777666555444333222///,,,+++)))(((&&&%%%$$$###!!!..........................................................................................................................................................................................................................................!.......,....I.I.....g..H......\....#J.H..DM..R$..$W..QD.I...4!....0]N....'e....e...........^j."...XxD.......E.f.z....<.9}.......f].mP..\..4V.....\u....q.\|.U...U.h......H4,.U.....U.T.P.\|.0h....t..R.....E

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\is-G7APK.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 245 x 230
Category:	dropped
Size (bytes):	3906
Entropy (8bit):	7.536706229806521
Encrypted:	false
SSDEEP:	96:o7f1QpMi/SLPbUAorWnMAwyltQV834frIAsSThdL:ErLb5M5yltQDrIYPL
MD5:	12828D3D4CDD82D814A71932E906F4CA
SHA1:	A6C4981F85F85A40490977B0A71AFDD4B87C6CA0
SHA-256:	81D535B5DF4BF246380FA2BBC35C7CA654C4358D0EA50ABF9407BEB7F34A2510
SHA-512:	3F7100A8F80E0277BDE09C54B56ABB26BF329637486E7D0F76C4164F341AD7E540236064AC029D1F6F097C23DF0637A7A13091E2D89073D871BFD9863C4453A2
Malicious:	false
Reputation:	low
Preview:	GIF87a.....................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...............H......\....#J.H....3j.... C....cI.'#....K....9p.@..m...0.N.>_..:.'.).f.8....M.".$..R.K......)%..t......r}6).{D..h....Ji>....\|.n.;......B.KX...A...K.rC...bf+..b.P.6..4..yK.D@j.O.a.{3..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\is-GVR9F.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 447x449, components 3
Category:	dropped
Size (bytes):	29003
Entropy (8bit):	7.898807437754511
Encrypted:	false
SSDEEP:	384:LjyHHHH6fNS6z6reWkxZeJPWbb0B/bGTpSJhZeZcJ5Vy8Nj+O/TbyMJ/joejB8vv:9FSfeWkxiWbb0F+ZcJv1aqKQq0O
MD5:	C856FDE76FA298D3821FD2879E322D57
SHA1:	C5EB1FB0FD6533B2820D26CB3A14E918B645469F
SHA-256:	A996A02A492DFA186AF905A922789726969975CF65128C1DF3BC2375589771E1
SHA-512:	C2CE9EE2D2DF5E657838D97116FCB58861D1B036DA9533CE2C282CBFE77F260BB6B1AD9D2042049C9B746272A92E98ACD9D21596C9BDE2E56525EECCB16E2212
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.............................................................................................................................................................................................................................................!.1.A..Qa."2s..6q....S..TU.BRb#..5.V..r3...Cc$....4D.dt.%.&v......................!1..AQ2aq.."..........RrBb.#.............?..R.....P.T...].q7..#....l....>.. .@yM.r~$._.`...............~...x.?.v/.0\|o...N......@.I.\|.....;..>7...'b..... ~$._.`...............~...x.?.v/.0\|o...N......@.I.\|.....;..>7...'b..... ~$._.`...............~...x.?.v/.0\|o...N......@.I.\|.....;..>7...'b..... ~$._.`...............~...x.?.v/.0\|o...N......@.I.\|.....;..>7...'b..... ~$._.`...............~...x.?.v/.0\|o...N......@.I.\|.....;..>7...'b..... ~$._.`...............~...x.?.v/.0\|o...N......@...R.=un.b...h.4.....Z. .v.i,..+.s,q.dq....FH.d.....s.Aw.^S]A.A.xG...........+.gk..e...d...lL4.iB.......8.{,....d..[

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\is-L6UAO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.6897983724188628
Encrypted:	false
SSDEEP:	3:PFltl51xX:Pft5x
MD5:	157E107640B55D60F7B0AE8B9854629C
SHA1:	87D20B20FBC46B571E154619C1D83582E7AAF62D
SHA-256:	BCAD9313E0D69DA085CD225D876C598B8FBEC7477E6280279971BE111B167AAA
SHA-512:	DB23CAAC9D28013C1EB4E673B8402F968A16F8474536B516885AC7C0B01895E6CECB5B9FF96E6171D9D73D1A21C7AC2A368D042BCD469E14EED070F59D5CCFAA
Malicious:	false
Reputation:	low
Preview:	.................................&... JPEG8BIM........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\is-NATQU.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	65456
Entropy (8bit):	5.5498646869323
Encrypted:	false
SSDEEP:	1536:pcG+bUdTYdndndlzyEpMnRP/LmEpMLRP/L3EpMoRP/L8EpMFRP/LVEpMGRP/LNPL:pcGEUudndnddyEpMnRP/LmEpMLRP/L3q
MD5:	9ABDEF69982EA709D578AAA4AC9E4753
SHA1:	9C28CC76FA0752EBEC9CFDA6456217255FAF25AC
SHA-256:	1533A29E9EB73AE5EA9053A8758FABAC465516D4EC2C88552367FB2565E119AB
SHA-512:	E3890E93E46FB7E2B4F794FF4AEFC9E138F165010C2D518B3F3BDB060AC970960866C9C177FECF69980EDB61A90C471D26A275477769394DA9692BA6315D8723
Malicious:	false
Reputation:	low
Preview:	.................................2... .......R...^GIFf8BIM.............................................................................................................................................................................................................................................................................................Adobe Photoshop CS2..!.!......J.H...........H...H.......J.H..........8BIM.......J.HGr.ph.bj.....L.......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\is-OLLBV.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 384 x 288
Category:	dropped
Size (bytes):	4304
Entropy (8bit):	7.5924730131756535
Encrypted:	false
SSDEEP:	48:+m5CNjtJwsNd0akbhBUiFr6G15FZmwZSMIorealaKjhLb0yAyG61iz0ls40bsqjm:VYNjDFQQet5zuKjNxAM1pC4iYx
MD5:	BC939228247546ED31EB767DA7AC968E
SHA1:	28BA9BDE030F63ED7157EC22B0F4D2D5015B6F78
SHA-256:	48124EFD0503E82B1F3A6CF4B5304506E7796EF28ED750D7DE35CEFFF5769DE9
SHA-512:	801F3468E43285BD5B66904DC82496AFE7DA6FD7C082591C0B2E4D283B8D0860787B6F6FD364796C0C6DE0A91FC5BC9D4EA07D2B474A584DBDEF01EE6D0869CE
Malicious:	false
Reputation:	low
Preview:	GIF87a.. ..................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...... ........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x.....#......+.p_...E...\.#..,.rZ.3....W.Ck.-.tU.SCE....R.c..@. .

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\is-S236I.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 384 x 288
Category:	dropped
Size (bytes):	4492
Entropy (8bit):	7.58971495123084
Encrypted:	false
SSDEEP:	48:kmeYAs5qFTR++GW81Z8mmEY63DBR7USE5OV0lh0crC2nN60oMhcFPuXBtKL6/aSE:7YtvW1Z8mVjQSE4K0c2MJhceBKVz
MD5:	971521BE861C321A42C8B61A28A5648D
SHA1:	D9FF84F443460399C4CEC3B1D2F35ED4A287700D
SHA-256:	51BA0178C59F5B4F78C09053953F7169372D9627DEBB9BE703F947F28C9094D3
SHA-512:	BAF61E70CB778E6909C840CDA836C2A973D5ADE314B44C7012C4DC7271CF25D838ECDBBD38C861E853D276A126A6AEF6B165820929A9A697ECB810302C8CF086
Malicious:	false
Reputation:	low
Preview:	GIF87a.. ..................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...... ........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x..........L.....+^....#K.L....3k.......C....4...G.v.._..c.\|-.t.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\is-SJ73L.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 395x415, components 3
Category:	dropped
Size (bytes):	21246
Entropy (8bit):	7.882526000297608
Encrypted:	false
SSDEEP:	384:JjPPPPPPPP/moY3TkBi/R2CyUya3sNEFR1NBmQwayLi6iJZh0S0teu3uCXRKfGOs:ZxYCOR5DyPaz1NYQKLi6iLeS0teu+CQu
MD5:	DD2C92A88D54B1476D5A31B6984451A4
SHA1:	C563CA1302F29BF7EB22B11BE0B885697AEB621A
SHA-256:	C89DDB70716690F0E1584C4126889EC0DACDEDBD887B3A406999EA674DFA22C6
SHA-512:	3F2C957B32E3040EF9C88EC7C0F757291616CF31C4339CB524D79F886620D2A862AE895FC6F4501F82496F7818A8B3907772352C44F5D04EAA6D2F56F051432A
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d...............................................................................................................................................................................................................................................!1A"..Qa..t..6.2....5Uu.Vq.B#S..R.b3$7..C.4%...r.&'......................!..1.AQaq."2......Rb..B...r#3..............?...........................................................x.Wm...Q.R.%.9%m.]PDL2<.)...5.....@A....M.g.v..4V.....=..q.>...G.......<.j\|.....m.K.3m.a.C4A.4.#.............Y..........:...K.dn.-.a4....Ogw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\is-SLRHG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 449x449, components 3
Category:	dropped
Size (bytes):	29069
Entropy (8bit):	7.8909654461222525
Encrypted:	false
SSDEEP:	384:O4zw/TjyqIa8xNUP/MlujbvUYneccc0WB9JSG/pn48HI63RKNmuGQsnr01Bv+J:OH/CM0UPvhneivBOyHn/LQQG+J
MD5:	503071DCBE6825F45EF4092F00AFF04F
SHA1:	088F6C89D992693D42679B45A325B2DE08251C87
SHA-256:	3A5E982AEF0CB895C027A596CD429DBE725A26987F6B96B9BA5D6AD1E12E507B
SHA-512:	C5C12BAF5D59BF4539178AD3171A4DD2278AD660C54665C56787961867513AB6FEDE1A57068C990F7DA0B14679DE88EB9AAAC07802DF74F301CD33B2022C8808
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d...............................................................................................................................................................................................................................................!1A"..Qa....q2R.3t.u.6V..Bbr.#..4.5U..$....c.%Cs.&.SDTd.........................!1..AQ"aq.......2r...#BR..b3....4............?..R.......T.j........................................................v..1.6....K.{.CZ..'..9..J......1....Z..7.\..gF...7Y...4.........e.......n.`..C.-25..h.x.q..y..`..m...).9..$...1ln.Y....Rc....G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\is-SUMEQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.6897983724188628
Encrypted:	false
SSDEEP:	3:PFltl5Xj//:PftrjX
MD5:	6D6431F71FAAE765A3C35655A81FEFB7
SHA1:	85703A4247EA652D07CB490A67DA856BC185F3EF
SHA-256:	66FD0BF9F5DCF21983E9097F37DAFA108112F55593F98BF283B63A8FEB78C3CA
SHA-512:	5A88EEFFE85745155C39821754ACFD012E31E5566817B7A2B6EC9C79586AD7F3CF8013D7345D7FE38CBFDEC81817217E2818F70584F185EAB116ADB76C181288
Malicious:	false
Reputation:	low
Preview:	.................................&... GIFfMeSa........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\is-U0ETM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 73 x 73
Category:	dropped
Size (bytes):	4531
Entropy (8bit):	7.438989839400492
Encrypted:	false
SSDEEP:	96:hxLbRXf1w+qbHqp8skPDv5X5uezT0VS7KkKjaVZ9E3Ui9cLycoWvhamUYOqKpWR9:hbWHbHqpNk9X5uezT0VSrnZ9+KLycocL
MD5:	4FE24E60EB6273C1DD57B5FE2B9A575C
SHA1:	19A68E7A948E3E56FB1FAFCE89D72C6F200D9573
SHA-256:	624758037DF43276503AEFE924292E8C3F6342ACBB22405811CFBEF98E40F8AC
SHA-512:	817F9889313FF626D35E27D1BAB49C0BCF923195E0BA33942349FC13D4689D872C8FA287CEDD2A06E3E8A136ECC269BC3CBC9C5C3A8A414C6E5FFB3DF2A240A1
Malicious:	false
Reputation:	low
Preview:	GIF89aI.I...............................................................................................................................................................................................................................................................................................................................................................{{{...www~~~.....................!.......,....I.I.................}.... ....................&............{...04:D^aLLU.\^6M......).......4QUIjRd=A3..."/6ElKbT:.........&3[fcR:..~......A../8`...".,......F.. ....`#..\|...p.O..T..9..A.W.-9.3...1`b...@....~.8 ....H.h ....~j.S.....b".p...,VP..`....D.!......&,HP......phP@IT2q.p.....?..l.......4...#J...[..1eG..(..`....%. .:AM...V.v.g.."rL.. ....Sp.p..x..{*0.....4i..c.E......1f...Z.Dx!&M.?{$`.1EG.....9."..........Q.~t....,`A<...A.h.aR..(F..<.g.. aC......V....Y=...8....} ...P.....TPB..`0@+.....P.`..{....V.1.....b..?.1.."....4.s@.H@...N....>.@..$]...6..@...A..dlP.a.<...mP...{.!..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\is-U0Q4Q.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 72 x 74
Category:	dropped
Size (bytes):	4110
Entropy (8bit):	7.4584861984724675
Encrypted:	false
SSDEEP:	96:RVc3E2/Vbk1o4w4XR2zefgTnPniAQg3g9gD:Ry3E2/R4x2zefgTPnHhg9gD
MD5:	1F69A289B8526EA5F9BA921F2F6300CA
SHA1:	8660295C6D7E1E4AF0C3241D1C8E9B823CEB8F10
SHA-256:	5B5B5EDF0CB50ECAE101FB55AC758CD279347FE2B93025A22D5072A92FBC8198
SHA-512:	49A927302FD8B97D955729C25658EDA52764C3EB8D7471CA4FCCE0F11BD799EB11108B95BDB992BBABC4A52353FB10CC6EA828460955B1E4648B1BE3B5EB80D4
Malicious:	false
Reputation:	low
Preview:	GIF89aH.J.......................................................................................................................................................................................................................................................................................................................................................................................................~~~}}}\|\|\|{{{zzzyyywwwtttsssrrrqqqpppooonnnmmmkkkjjjhhhfffeeecccbbbaaa```___\\\[[[YYYTTTSSSRRRQQQOOONNNLLLKKKJJJIIIHHHGGGFFFEEECCCBBBAAA???>>>===:::999888777666555444333222000,,,+++**)))&&&$$$###!!! ....................................................................................................................................................................................!.......,....H.J........H......\....#J.H.b._.R..u.U/. ...Tg..... 8.....@.@....@^..\...'.....%.'..qT........8x....S.4P..'. ..>l.......6X.-..V.48.SE$....A...U...j..p..m.LU..(..3..m\..2g......p.$8....3=+.}.a....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\is-UMV8R.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.6897983724188628
Encrypted:	false
SSDEEP:	3:PFltl51xX:Pft5x
MD5:	157E107640B55D60F7B0AE8B9854629C
SHA1:	87D20B20FBC46B571E154619C1D83582E7AAF62D
SHA-256:	BCAD9313E0D69DA085CD225D876C598B8FBEC7477E6280279971BE111B167AAA
SHA-512:	DB23CAAC9D28013C1EB4E673B8402F968A16F8474536B516885AC7C0B01895E6CECB5B9FF96E6171D9D73D1A21C7AC2A368D042BCD469E14EED070F59D5CCFAA
Malicious:	false
Reputation:	low
Preview:	.................................&... JPEG8BIM........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\protanCIE.jpg (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 446x449, components 3
Category:	dropped
Size (bytes):	30258
Entropy (8bit):	7.90755313396624
Encrypted:	false
SSDEEP:	384:F2G03d553fsWi8voZm59QGoF4M1FF9Uv0cN3s/7661z653ilAXpBs+6iT9ThdMVD:PEd5TqZOQdTBcNc/MZilAXDDD/dE
MD5:	20F7134FC5F34AAC822D8CA8A5F46127
SHA1:	EEDCD83C415666C1BF9924A6CE078A84A6BE0EEA
SHA-256:	E9A7963FF4692D146B13D90956F43070EC9288980A57F0FA68A05AFDBFA5D5C3
SHA-512:	2F2ED435D1CC874680F4E7ABC13D8A9999B7693D9DF8C05A62AB1FD93398A9BDB67C7764905E00652E6C61BFAD7A281B700D97731E7426266EB08528307988FC
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.............................................................................................................................................................................................................................................!.1.A.Qa"2......q.#34Tt.U..G..BR..5uV.br...CS.$...%cs.D....6.'......................!1..AQ.aq...2.....".R.Bbr..3..#.4............?.........'..xqa...h..8.Pc...[..c.7.......#.*.....5..2...w....{....l...2.J....[.-..F...o.X..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Italian\images\tritanCIE.jpg (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 449x449, components 3
Category:	dropped
Size (bytes):	29069
Entropy (8bit):	7.8909654461222525
Encrypted:	false
SSDEEP:	384:O4zw/TjyqIa8xNUP/MlujbvUYneccc0WB9JSG/pn48HI63RKNmuGQsnr01Bv+J:OH/CM0UPvhneivBOyHn/LQQG+J
MD5:	503071DCBE6825F45EF4092F00AFF04F
SHA1:	088F6C89D992693D42679B45A325B2DE08251C87
SHA-256:	3A5E982AEF0CB895C027A596CD429DBE725A26987F6B96B9BA5D6AD1E12E507B
SHA-512:	C5C12BAF5D59BF4539178AD3171A4DD2278AD660C54665C56787961867513AB6FEDE1A57068C990F7DA0B14679DE88EB9AAAC07802DF74F301CD33B2022C8808
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d...............................................................................................................................................................................................................................................!1A"..Qa....q2R.3t.u.6V..Bbr.#..4.5U..$....c.%Cs.&.SDTd.........................!1..AQ"aq.......2r...#BR..b3....4............?..R.......T.j........................................................v..1.6....K.{.CZ..'..9..J......1....Z..7.\..gF...7Y...4.........e.......n.`..C.-25..h.x.q..y..`..m...).9..$...1ln.Y....Rc....G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm0001.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	352
Entropy (8bit):	5.421339993798285
Encrypted:	false
SSDEEP:	6:B8FQk+HryftzgYiTdc0iNMeql0grcuFcgCzc5ecg5c5+dQ834T:BMQkzF0m0sMeqfrfz7cCILs
MD5:	35624258E75635E5F676B5F675CC7CBA
SHA1:	DE65EDE73E53FF6590BAC049F142856F1895229F
SHA-256:	CC12631F5EB0312F1CF2F484A44F40FAC5BF626FE2BE59337A8D1843E7207874
SHA-512:	C32340F171FB97EE75B2F96EA265262202FCB7C1B1F6A6D22F0152D53A066E9E5223D0ADB8285006ECD43C09331A6A33F9669A9509426BB534D7390A19410505
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...e</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H1>...e</H1>..<P><A HREF="fm34xa.htm">...o</A></P>..<P><A HREF="fm4eus.htm">FM .q...[.e.X.g</A></P>..<P><A HREF="fm00c1.htm">FM .q...[.e.X.g.._.\.t.g.E.F.A</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm00c1.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	578
Entropy (8bit):	5.536576110980749
Encrypted:	false
SSDEEP:	12:BMQkzF0iEasMeq6BLSb9YIAgdpgAUK9FTS0Cws:WlV9RYIAg0k99S0ps
MD5:	B638EAD90D36DF708F4B3D226D38634B
SHA1:	E5BF692B20423AF65EE2F6E91FC2195CC14DF9CF
SHA-256:	5A1FF81B20D9BBB763CBBE5AEB594DA4C1C53D7D9EB43D4EB1606D965C334363
SHA-512:	5106BCB6916B80E7774B106579E794EBF88D7D24DAA2C05E9871F59C549B516769A1587571F0FBF6B12644AD8449A746DE3AEDEE3D9B0E5B583C7A12F6222E3A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>FM .q...[.e.X.g .v...O....</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="n_46v1"></A>FM .q...[.e.X.g.._.\.t.g.E.F.A</H3>..<P><A HREF="fm3rcn.htm">.T.v</A></P>..<P><A HREF="fm36re.htm">.f.[.^.....</A></P>..<P><A HREF="fm4eox.htm">.f.[.^..\..</A></P>..<P><A HREF="fm7n8x.htm">.f.[.^....</A></P>..<P><A HREF="fm23fl.htm">.f.[.^....</A></P>..<P><A HREF="fm31o3.htm">...j...[</A></P>..<P><A HREF="fm3ueq.htm">.c.[...o.[</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm043d.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	907
Entropy (8bit):	6.052857486025409
Encrypted:	false
SSDEEP:	12:BMQkzF0Hh6X2OsMeqXdbMI2V/66r/AAstkov0pr6h8CpqOWPWn6l5+pUKe60vwd1:WlbXsBAAEv0pq/eHEpUKbZecrXpfX
MD5:	2BA063BDDDF9CC983D69CF60B7FD215D
SHA1:	E6226BF076E9F742F1F420511AFA534B4BD774FE
SHA-256:	E44ED5DD02C18FF74F614FC69996E4C8CE37A362F87AC249FB1C661461EFC55E
SHA-512:	CE624D041EA401234DF1256956F503B7490647A06F6F28185502A1AC3941CDDB0623218AEBA3467CC3F5CA687DF41B72C70458C7472E2040BDF26AD16A30F5C2
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...O......o.......i.t.@.C.....j...[.j</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="fm94h9"></A><I>.t.@.C.....j...[.F...O......o.......</I></P>..<P>..... [...O] .. [....] ..A.e.L.X.g.t.@.C.....X...........B.....A....Windows.....v...O.......P......o.........B</P>..<P>[.t.@.C..] ...j...[.... [...O......o.......] ..I........B[...O..t......] ...\......A.p.X..t.@.C.......w......B</P>..<P>[...[.U.[...] ............f.[.^..A....................B........A....I.......... [....] .@.\............B</P>..<P>.......AWindows..Word..Excel...............\....B</P>..<P>...O.....f.[.^....Windows.v...O......\..t......A[..W] ...j...[.... [...O.......R.s.[] ...g.p............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm05rb.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	631
Entropy (8bit):	6.130525404502342
Encrypted:	false
SSDEEP:	12:BMQkzF0ZjXWsMeq6ofjyIdXs19vgYup5DZgbgBhPCF3WBZviN1+z:WlBNflXs1XupJI8ZXZiN6
MD5:	F606A40D15F8B91D454D7183FC40DA9D
SHA1:	1312F8FCEA86F7A4B40252723F22A463AE38968D
SHA-256:	F466BEB39E84505ADF2FE8DCC95D25390BBA4502BDE1CAE06AD1D0CA15BBE909
SHA-512:	2F6D5FD5F75F6F043F1E5C9ED02B35FF0E73D2CFC5BFBF5FCD0C0BDF7F2E0B251731AA6E466F15E0E8F68BD645BA173791B7B68A0E7C0E5875B813D67B221F92
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>?1.^.F.o........</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="ps49gg"></A><I>?1.^.F.o..........\..</I></P>..<P>....I.v.V......A.R...s...[.^.[.. [.\..] ...j...[....I........B</P>..<P>CIE.F....A...F.........d.....\.........B............F..A1.^.F.o..i..j.............F....B</P>..<P>....A<A HREF="fm8siz.htm">...o..Q</A>...Q.............B</P>..<P>...L.F.\.......F.........F..A.J...[.o..@.\..f.B.X.v...C..f.B.X.v...C.J.[.h............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm0bdx.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	533
Entropy (8bit):	5.732105197672059
Encrypted:	false
SSDEEP:	12:BMQkzF0TslsMeqyEn2sEjm+APD6U0p2OhOdHfzC:Wl7yEn2vE0pSfG
MD5:	CACB3373E87F31F92E406FBA9DD0214F
SHA1:	DA1DEF7036AA94CDF8EBB7BE243B12B84FE3A587
SHA-256:	3E1021BB1F94C086EF719F50F716D724DC1D01CEAB6F58BEAF761105E095F25F
SHA-512:	5DCE96F89D58C74BEC9134793519D30A16E9FE44C7E983D2933FD43CCD7A27911DF73C3619210947A787779672EA01869FA4B220D64A8DC53CA5E589116BB1C9
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.f.[.^.x.[.X..</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="examples_database"></A><I>.f.[.^.x.[.X..</I></P>..<P>.{.v...O.......A.f.[.^...........f.[.^.x.[.X............B...\........F</P>..<P>[.t.@.C..] ...j...[.... [......f.[.^.x.[.X...J..] ..I........B</P>..<P>.f.[.^.x.[.X....X.g......I.......</P>..<P>[.f.[.^.x.[.X..\..] .E.B...h.E......I........B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm0f1q.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (694), with LF, NEL line terminators
Category:	dropped
Size (bytes):	2238
Entropy (8bit):	6.1641514299204685
Encrypted:	false
SSDEEP:	24:Wl0nZzG2t1Uw+vnBAeBDjCBFr9aYjMkk6iZ0JgputyyQm1OOvHcRDvGgU4Hp6ym3:qQLtcfBACDeFbja53pkyZm1OJdHMyxc
MD5:	8CC642417A94FF2A800DE7797EA6AA85
SHA1:	04F33B164E60578C08990FBDC7532601B5393AA4
SHA-256:	F91E21540CFA5C73DB35730898AA711A8E60FDEBFF58FA232BE389D9FF8961EC
SHA-512:	A911F0A00CE17E7DF362CB11F12F107D5D96229FCF53C210690C09A92F650F6001923D17B03657FC48D3C6F3AD7087101E4927560FC498A73638A286857F00A6
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.\.......</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="principles_of_construction"></A>.\.......</H3>..<P>.{.Z.N.V.......A....e.X.g..g.p..I..O....e................A.e.X.g.....o.......g.p........d.v.........B</P>..<P><I>.F....\..F..</I></P>..<P>..A..A.........\..S...F....A...x.i.j...[.g.........F.A........P.x.j..\.......`...[.g..z................B......F...n...I..............A...L.....z........B....}....................A......o.F........................B</P>..<P><IMG SRC="../images/bm5.gif" ALT="" BORDER=0></P>..<P>....A......._...A......F...P......................B.....A....\...K.p.......P................B.l......A.....W......o.....@..........A......F..................`...[.g...............B......A.F....P..........

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm0j5b.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	359
Entropy (8bit):	5.86830054082745
Encrypted:	false
SSDEEP:	6:B8FQk+HryftzgYiTdH/apeOiNMeql966p2c0qMe9tubd+Z54BSkaQ8ROgv/WQnll:BMQkzF0x/apeOsMeqFMeeUZWSvQfgnWk
MD5:	D0EB9339597ABB89BADCE043B9FC67CF
SHA1:	9DD1F7E5B1CFCDC158B2BF536AB89C8EC4A2073A
SHA-256:	ED7EE396000EF980FE3D559C3B2897D7899849A9747A36C435F261C46D19EB31
SHA-512:	B8795B05EF4F952D36BA13D4820A8BF500D0B665428AD9D3150AA60AD737EE44F3FF455119A7DD519C7380F0A4320B6773A958006E101C81BD9866E47BC55B96
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>......i..W...j...[.j</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="edit_menu_undo"></A><I>..W...j...[.F.....</I></P>..<P>....f.[.^...............B..F....J...[.L...b.v.......u........B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm0llx.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (452)
Category:	dropped
Size (bytes):	1546
Entropy (8bit):	5.866658365122497
Encrypted:	false
SSDEEP:	24:Wl7x7adcHkRriC8IUdsMLAJcUJRgT4Ca9U0k0HQMFQMNSZ4otzh:q9ocERr0OMLAJvbgDa9U0/wM2MkK6zh
MD5:	6E0CB4AF03F440995CEA9DEBC4231165
SHA1:	DED6E84BB634E9D6DB2DEB54A79598A5FEF59237
SHA-256:	0F2E80F03CAF361974D3C911926B47F4696B2E5FB04C8605967AB129BB861726
SHA-512:	91B1C2474FE53B24DC28120CC95C8A9D8CF4AC15679333B2167A2E60B502E4BACE2367D8B913049CBD81D79BDE5AABCD69FA74EBB9D9F9AC36AA1EDD752F0AA0
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>..</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="procedure"></A><I>..</I></P>..<P>.....O..P.[.X...c..J...A.....L...b.v...........A...X..p.l......O.......Z.b.g......B.P.[.X.............B.....n...O..A.K...L...b.v........o...o...............B.e.X.g......{.........A.L...b.v........o...o.....................B.L...b.v..z....L.^......A.......p.l....o...o..................B.P.[.X.....A............B........e.X.g...............B</P>..<P>2. ..........F</P>..<P><I>.e.X.g...I..A.J...[.L...b.v.......................B.L...b.v......p.l...i.w............j....A.......p.l...i.w............j.........A.[.....................B.......A.e.p.l.......2.............B.X.s.[.h...u...m...v...d.........A2.....o.......m........A.e.X.g.........s.......

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm120e.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	543
Entropy (8bit):	6.005699473628424
Encrypted:	false
SSDEEP:	12:BMQkzF0L+WsMeq7p+d3IdXs1ligsSZWF3WBZviN1+z:Wla+s8d2Xs1oXSBZiN6
MD5:	E12CE8E9F9CDECB744F434DC96BAFE46
SHA1:	90DAAA70F62CFFCDF996922A35D04BDF45D70E34
SHA-256:	CE419BE4A7E0BCA7F51AEB034F008F496744E00FB00EDE89493FFBBC7589AE03
SHA-512:	15C35C308081EB78D904BD99EB40653E4F742CAF97F5437CF2A793CA891C9FDC5DDD585871C5137AABAF3F723F79597FFE67972B226E528B51F1EBBEA192A7FA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>CIE.F.x.}</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="3o1s_zn"></A><I>CIE.F.x.}..\..</I></P>..<P>....I.v.V......A.R...s...[.^.[.. [.\..] ...j...[....I........B</P>..<P>CIE.F....F......\.........B</P>..<P>....A<A HREF="fm1nug.htm">....\..</A>...Q.............B</P>..<P>...L.F.\.......F.........F..A.J...[.o..@.\..f.B.X.v...C..f.B.X.v...C.J.[.h............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm1nug.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	654
Entropy (8bit):	6.094756360740679
Encrypted:	false
SSDEEP:	12:BMQkzF0dksMeqM3vEnt0lXRSWFVuOR0AR/KBC9XJJq:WlQGM3Mt0ZRWO6AwBSX+
MD5:	0BD58F9A92F512B895F4FC8F18C65A4F
SHA1:	E252BA5A5AE9694605C7A0988701860AD929CCDB
SHA-256:	B366713FD8016ECA34BFAF6772ABF579E43021C02DE4E3AE0531BEB4347472EB
SHA-512:	7764E63F0842270FE9DBE34C1B4CE9F8DDC2B73DC6CCC32EF221BB2C6C8D509ECAB35AC3B7788DE82735F891A62A7044D249ADD13D5D1C82AE532CE0290CE700
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.F.....F..b</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="3i08098"></A>.F.....F..b</H3>..<P>...o..Q.........O..A...o....\....{............d.v....B</P>..<P>....g....F........A..........d.........z.......e...2....K.v.......B.....A.....F.f..1..i.P.F...F.o..j.A2..i2.F.^.F.o..j.A3..i3.F.^.F.o..j...............B</P>..<P><A HREF="fm7lkj.htm">.P.F...F.o..</A></P>..<P><A HREF="fm4r8z.htm">2.F.^.F.o..</A></P>..<P><A HREF="fm7243.htm">3.F.^.F.o..</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm1oxg.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (517), with LF, NEL line terminators
Category:	dropped
Size (bytes):	2113
Entropy (8bit):	6.086067093251559
Encrypted:	false
SSDEEP:	24:WlUGDKn1ZI292JvZb4ZLvG1adRWZEKWnbFMlmUtLkOzN87MtLc5YcNd1pB8qFb9r:qSn1ZI294R0Zlwu4RhPc19DlB
MD5:	EC8B5F5C78E5636C83FF7852EA5DB04F
SHA1:	902E97D8B4BE3AF10C4757BF447B2A1D1AC4F1B8
SHA-256:	8E93EB9E6F0A095F1C41E85A80BFD23F8D6C6C7EA4A9668AFAA2556D1C31467F
SHA-512:	1AEB4D9220A03C84CBF3F847B26D7CB5D9FA4220A6C3F5CA62C2B01ACBD8380398569CC662716CF10811E6326CB7C96AC14A2E441DD140B23003365D54BA31D4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...o..Q....E</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="9ov7m4"></A><I>...o..Q....E</I></P>..<P>...o..Q........y....e....A..Q..^.C.v....x............B2.^3.F.o...A.......x.F..F.......................A.....Q..........B....A2.F.^.F.o........F...F.......A.F..........d..................B</P>..<P>1.^.F.o......2.^.F.o..i...3.F.^.F.o......2.F.^.F.o..j....A..-..-..-...F...................A.g.}.g...n..........................B</P>..<P>1.^.F.o...2.^.F.o...A....F..........X..........B...o..Q......l................F..g.......A.O.q..CIE.F.x.}..Q.....B1944.N..s.b.g.........A2.F.^.F.o...F.x.}....z..............F..........................B..Q.^.C.v......A........_......o.......B...........F.......u.....A.R...s...[.^.[..<A HREF="fm3ncl.htm">.\

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm1xf2.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	840
Entropy (8bit):	5.924080980366292
Encrypted:	false
SSDEEP:	24:WluSRic4tOyf0W5CGpZ7xmOcnIm4crXp0X:qLygslm0m6X
MD5:	CE16EA9FF396DBAC0D8AFBCF3948DDF9
SHA1:	DB28081363B0E806230ACF4BD2F2B939CE549832
SHA-256:	B6A553CB7195EC2D17A18EF1DEEA8D78BB32AD199F991A34967A084E4173CF17
SHA-512:	F5F0FD1A2B8736BD009FCF8FF20D17CBB650B8A43DC86AE3056CCD8523FD3CC2ABE74944C29772707DCDAE38F8C499B8F71DCDC55E2F2D07F2BC500C6BB02475
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.O...t.......o...i.t.@.C.....j...[.j</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="0x.kg."></A><I>.t.@.C.....j...[.F.O...t.......o..</I></P>..<P>.......j.A.O...t..A.r.b.g.}.b.v......X......\....B.....AWindows..v...O.......g.p...A.v...b.g.....\|.[.g.....P....@....B</P>..<P>[.t.@.C..] ...j...[....A[.O...t.......o..] ..I........A.T.u...j...[.... [...] ..... [...j.A] ..I........B.\....... [...O..t......] ..A.p.X..t.@.C.......w......B</P>..<P>.O...t....I..r.b.g.}.b.v.G.f.B.^.[..\...E..W....AWindows..Word..........\.......B</P>..<P>.O...t....Windows.v...O......\..t......A[..W] ...j...[.... [.O...t...R.s.[] ...g.p............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm1zg9.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (513)
Category:	dropped
Size (bytes):	1284
Entropy (8bit):	6.177888865288454
Encrypted:	false
SSDEEP:	24:WlS5Fp4yfM625zg7midqUsidj9NidY9idczW+:qwFyPf5urtj9sYcczW+
MD5:	9C0FA39B17BA3F15A1B0C458C6ED8D16
SHA1:	6DBD87BB67FCD9AEF35901BC9C3C4BE159424BAB
SHA-256:	69AB9A3E081A55BB37AA3A98EADFD71F579B5C15E38ED68C3DF3CC1AA0F9BA8E
SHA-512:	85D9EE0EF9E992B689AADAC566BB8ED47C036ACEF146B5A4D5E7879CFF4ECD0840635D8F5E5D38BDE834505E9CB517ED020F542732F69CC7AA0F700FB049D772
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...3.F.^.F.o</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="anomalous_trichromacy"></A><I>...3.F.^.F.o</I></P>..<P>...3.F.^.F.o...3...~.......F.f.......A3.F.^.F.o.....l..A3.F..S.......F......v........B...........A.J...[.}.b.`...O..K.v..3...v...C.}...[.F.............l......A1............~.......F.f......z..........l........B.p..u1.^3.F.o.v.A.u2.^3.F.o.v.A.u3.^3.F.o.v..A..A..A.......F.f............\......B...3.F.^.F.o...A....3.F.^.F.o...F.o..F.........B......A......3.F.^.F.o.....F..................B..Q..x.......l....................</P>..<P>....A...I....3.F.^.F.o..^.C.v....B</P>..<TABLE cols=3 width=332>..<TR VALIGN="top">.<TD width=42%><B>.^.C.v</B></TD>.<TD width=29%><B>.j.. %</B></TD>.<TD width=29%><B>.... %</B></TD>.</TR>..<TR VALIGN="top">.<TD width=42%>1.^3.F.o</

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm23fl.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	544
Entropy (8bit):	5.973049687757013
Encrypted:	false
SSDEEP:	12:BMQkzF0TjGsMeqJGXdmRjrTVmk7UHIEUJG7d/9gJIhMUvz:WljYt0vPuIRo7Z9g29vz
MD5:	2BBEFC9D9B33DDC9DE6F2CB4694AED1A
SHA1:	56E0AA9A6526593DE6642A7F8AE3E64AEB3082BA
SHA-256:	FEB629D9CA09D88648811284F0653981F3C2D80AEF560F29405A4C5001BA2B4F
SHA-512:	79EF49AEC94FD25E9AD973F3F72E018DB3E62A167B165EB108464D1B125E113ED34F90D7C4E02C48A440378A9E9EA20B8A6170E8F7FE20F1E5DCC92E03249238
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.f.[.^....</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="interpreting_data"></A><I>.f.[.^....</I></P>..<P>.p.^.[.....v...b.g......A.e.X.g....K.v.............A.f.[.^...........l.X....@.........B</P>..<P><A HREF="fm2xpq.htm">....</A></P>..<P><A HREF="fm4c81.htm">.K..f.[.^</A></P>..<P><A HREF="fm7z8q.htm">...o..Q....m</A></P>..<P><A HREF="fm9sfm.htm">....I.v.V....</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm26k5.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	476
Entropy (8bit):	5.910381342481835
Encrypted:	false
SSDEEP:	12:BMQkzF0feKcIsMeqPDKcg9hjctM+IKBYFSV:WlDX6rXj/ZBsW
MD5:	3CCE58BAC1BABDD926058B34770B073E
SHA1:	E3344756ADAF65DC9F3FB276E2BFEE52DFA43AA9
SHA-256:	9AAB232FD0512BC15409935FF42D928B5B3824A17294D07031B1BA7C431DD557
SHA-512:	BBD46980FC761B2D781A0EC1B2B437D04E89EBCB5B6E37C94F50420C8EBEA1D5F2E216C440835C42AEF8590D35C0C761F8E94BEC56B495A2D2136D95212ADF3A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.........v.G...[.X.R.A</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="euxqgu"></A><I>.........v.G...[.X.R.A.F</I></P>..<P>.O...[.v.. [...v.G...[.X.R.A] ..c.....z...............B....A[.........v.G...[.u.X.R.A] ...g.p.......A.....I....z..............B.......A..........v.......g.p.....@.\....B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm29bn.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	664
Entropy (8bit):	6.201508318315941
Encrypted:	false
SSDEEP:	12:BMQkzF0m6XWsMeqHTIC4YiqrzlzkGrtnHVacJeYWvTBwcDFc:WlPVzI0pkGR1a0abKd
MD5:	2BBE285C426D5017DC178CEB33ABD813
SHA1:	8EBC883009854EE84A44587FF28595F0D993A0DE
SHA-256:	75B8B1029EE5541865BD8337D87E92B614D2109135CE673667AE7934163F3A95
SHA-512:	A75FB33AC8C36883B4A8D5D5A1836448973AB4FA50D03A1D23BC89975B025F256D10CA8C165C5816B761646269208031D16A81EFF57BCA0B76E3A764EE1BF5B2
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>?......</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H4><A NAME="confusion_axes"></A><I>?........\..</I></H4>..<P>...o..Q..........o......f.[.^..A...............2...F....W.........G...[....\......B....2._..`........A..................B...............A...o...Q.^.C.v...F.........B</P>..<P>[........\..] ..I.....A....O...t..1.^.F.o..^2.^.F.o..^3.^.F.o....Q.f.[.^..t.......A.f.f............B</P>..<P>.......A<A HREF="fm7z8q.htm">...o..Q....o</A>...Q.............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm2bco.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	828
Entropy (8bit):	6.042324225806053
Encrypted:	false
SSDEEP:	12:BMQkzF0HAeOsMeqoweVyrBmWkNN9ptuWPWn6lwpUK53ZywV8FzP1m5YAqTw:WlaUoNVF9fpMeHwpUKJZHUAYAiw
MD5:	A19FB58E707A4725F0B732A5DDB4E026
SHA1:	DD260D0F415F2D338452D67B14674B3320A84785
SHA-256:	9A338773A828DCA19195DB8337DBBB91C0B52252BDE3F19C1C672049E66D6D75
SHA-512:	7628680F5CDE1C9E4BD49E9E4013BDE477CC2EA24C861BDE458C414B95F0F46AE6E5CA6D2630F444E0163A91F2066C41238A1C2CF4D03272D06FB117C1239AA4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...O..R.s.[.....i..W...j...[.j</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="19vjcs8"></A><I>..W...j...[.F...O..R.s.[.....</I></P>..<P>.......O......AWindows..N...b.v.{.[.h..R.s.[......A....v...O......\..t....\....B.</P>..<P>[..W] ...j...[.... [...O..R.s.[.....] ..I........B</P>..<P>[...[.U.[...] ............f.[.^..A...........R.s.[.......B........A....I.......... [....] .@.\............B</P>..<P>.N...b.v.{.[.h..R.s.[........AWord.t.@.C......R.s.[.......BWord....A.t.@.C.......u..J.[.\.....Z.b.g...A[.\..t..] ..I........B.......A....f.[.^.............\|.[.g..e...................B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm2k85.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	403
Entropy (8bit):	5.7410670865986155
Encrypted:	false
SSDEEP:	12:BMQkzF0wcIsMeq14c4ciQ/kAJuP3Qk30xc9:Wlg6bRikJJk3X9
MD5:	2507D79BA85DDAB6CE4E14751A77B3E6
SHA1:	F9FB211DA834025BA896B6C3501120130B7F525E
SHA-256:	65DEDFC64840363F38B3B997F228D1BCDC5BC2909A0A1D19CDA760180CE06F07
SHA-512:	49DB53210970A0F7E282703ECAB5AD1364768C6EB68002E3B834B0D8CC2FEF7FC81C78799D7673AF2DA94A8FF2C9FCC5181850EF27F4C08B91FCCF4A5B8DF02C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...v.G...[.X.R.A</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="total_error_score"></A><I>...v.G...[.X.R.A</I></P>..<P>[...v.G...[.X.R.A] ..A.e.L...b.v.....v....._......i.G...[.X.R.A..-2.j.B...S..z.u......A[...v.G...[.X.R.A] ...[...i0.j.......B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm2kms.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (466)
Category:	dropped
Size (bytes):	706
Entropy (8bit):	6.132820746969166
Encrypted:	false
SSDEEP:	12:BMQkzF0CsMeqdCt4c9Nmm5m5grRx2Ium0vLLpeBHLxuD+UzIuKBfr+Gio6dresv0:WlvdeZ58g9xYdeBHLP6w61o6dPL0R1
MD5:	DB116BC1E91ACC7EC869717574DE5938
SHA1:	70CCD89B6D0B63123DC82663B901C90E8CDDCEC7
SHA-256:	FAE9F286757A399F0255300F7795162817C0D8B139ED62C9E8D10B78D7C93B98
SHA-512:	A83894D2C40A54B8CEB07884ECC18AB61F6D0F1C21E3FBBE9A06FFD1B93B840EF7E19EC8B6F6F05B4DD923D194B30ACC53345834527C89D1287419E709C9F9F6
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.....</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="opponent"></A><I>...o......</I></P>..<P>.h.C.c..S...w..^.....w......G...@...g.E.w.....O..A1870.N....o...................B.w.....O..A.O.....I...@......A...o..3...d.g...\....................B....3....A1. .......m..I......^.....I......A2. ...F..m..I......^.....I......A3. .....m..I............A..................I...........<I>.P.x</I>....B......_..A<B>......O..@..</B><B></B>.....<B>.w.....O..F.o..</B>.....m.........B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm2ldj.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	790
Entropy (8bit):	5.753606699151382
Encrypted:	false
SSDEEP:	12:BMQkzF0aRLK0sMeqfbbRRLMRyXPYRfw8qyPvUCWkK06NdhbasvT8agg:WlRRLj3RRLMRRRvq6Upn04vT8I
MD5:	9EA4E531CB20C4E9D031F89B9F3ED06C
SHA1:	493DEBFB7F78CCC7203744A9572E5358D1241319
SHA-256:	9138D6432CD4407908496B89C0B77A90BEBF8963785C575C83A23A0439BDB327
SHA-512:	21488CDA06EE90DF8648C82A3E4DD5F633048FC07AB36A92C6E47F7F1EDE8ED98DF5AE1A32AADEEFACF67C66418B784EC6A6270349D3B817C7630D870A7B30D4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...._.C.A...O..E.B...h.E</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="print_dialog_window"></A><I>...._.C.A...O..E.B...h.E</I></P>..<P>...._.C.A...O..E.B...h.E..A.......I.v.V............B</P>..<P>.R.s.[...F.......e.y.[.W..R.s.[..</P>..<P>.J...[....F.f.[.^.\|.C...g...J...[..........I...i.J...[.v.....^.[..p.j</P>..<P>.w.b._.[.F.`.F.b.N.{.b.N.X..`.F.b.N.......A.e.L.X.g.{.b.N.X......e.L.X.g...A.e.y.[.W..w.b._.[..............B.w.b._.[..e.L.X.g..A.v...O......<I>ini</I>.t.@.C.................A.v...O........s...........K.v.........B</P>..<P>.Z.b.g.A.b.v.F.v.....^.[..I.v.V.......W</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm2lyr.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	695
Entropy (8bit):	5.977191225570121
Encrypted:	false
SSDEEP:	12:BMQkzF0HJZsMeqxYj6xsPbP9iSB2U8AeKEoU8y2rQzxLmOTsp75Gc:WlmJR6j661dQAVEo3wxL1Tsp75p
MD5:	6CE89EDA3E90573CCC9D13C30F9A42D7
SHA1:	C4D4EE601726A6F1C41CC136F5A1F09990D1B00D
SHA-256:	F5BA90AC7AFBBB56068C669170DFA487BEE92E27F4863037A6D1B49EEC9D8CB3
SHA-512:	DFA32E0DB665F97A6C9C106CD7C49B673837362491EAEB599E30A564882E78539E3FB23EEADE2B3907725CB7768F9545DAFD1CC40B79ED461E9B18A96D1C3F98
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.G...[.X.R.A..\..</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="displaying_error_scores"></A><I>.G...[.X.R.A..\.. <IMG SRC="../images/bm18.gif" ALT="" BORDER=0></I></P>..<P>.L...b.v.....G...[.X.R.A..A.L...b.v..................L...b.v.............F......v.Z.......B.....O...t..v...b.g.....G...[.X.R.A....</P>..<P>....A.G...[.X.R.A......\......K.v..........A.\.........A.C.R.. <IMG SRC="../images/bm19.gif" ALT="" BORDER=0> ...N...b.N.....A..... [.\..] ...j...[.... [.G...[.X.R.A] ..I..............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm2u5h.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	1457
Entropy (8bit):	6.172546254807452
Encrypted:	false
SSDEEP:	24:WlTH17EcKls6fMjXyNBt8FevxUd4YKnvFEDio:qrjWsUMjXyNB4e243nvF6io
MD5:	E1FF0BBE2681C810C68DB87FBA1DB61B
SHA1:	461F645472002199BB4B167CB848B6C47ED16517
SHA-256:	BD83C106402A9614E1E061ACF2B0BA572FD2482AD0084B544478834BB189088A
SHA-512:	E1F29B66B57664B58981CADDE4DC9D2D9657D336B12360469C7DB88479B8890030C72899F23E5ABF5C8F676A2583D76396EFF447A9332597648538FEC7FBEE94
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>FM .q...[.e.X.g..g.p..I</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H2><A NAME="purpose"></A>FM .q...[.e.X.g..g.p..I</H2>..<P><I>...p.r</I></P>..<P>.t.@...Y...[.X.E.}...Z...F...e.X.g..A...o...........P..s.....@....B.S...I.....J...I....o.....K.p..\..f.[.^...o.......B...p.r.F</P>..<P>.E.@.....F.m.o...u..v.A.u.W...v.A.u..v..e...x.......</P>..<P></P>..<P>.E.@...o..Q..................F.......</P>..<P><I>.p.r..</I></P>..<P>.E.@...i.F.A.J...[.]...A.J...[.}.b.`...O..S................E.....</P>..<P>.E.@...o..Q..^.C.v..x........</P>..<P></P>..<P>.E.@.c.......o.......o</P>..<P></P>..<P>.E.@...C.....K.....f....p</P>..<P></P>..<P>.E.@.J...[..........p.e.X.g...v.f.U.C..</P>..<P></P>..<P>.E.@.............</P>..<P></P>..<P>.E.@....F.o.e.X.g..L.......m.F.E....</P>..<P><I>...L..p.r...g.p........B</I></P>

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm2x5t.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	824
Entropy (8bit):	6.141243687627612
Encrypted:	false
SSDEEP:	12:BMQkzF0TDuK0sMeqMRDu8aHvnJTWtlWFMpigOZRclanYAUPrcToLbe3C7VVFKu:Wlbj6ShJTWt4KLachTFLyuVwu
MD5:	037E4E9637B68867C778914323464CAD
SHA1:	9CE11BF9866A73BDA36D5C67B80C9B8F5BA630DF
SHA-256:	CD4415838B5AB1A90135D8519542775D8C7BB9BD54E49F36A3D71DEFB0E1EFD3
SHA-512:	B01B143E5165976D7DB7BF21507909EB2209E8E842A4C5965F14083A33240410EDDBEFD177ED6AE79B051DE101A8449ED4639214BF9C7D963081E938BD818CAF
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.f.[.^..t.B...^.[....</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="filtering_data"></A><I>.f.[.^..t.B...^.[....</I></P>..<P>[.t.B...^.[] ..`.F.b.N.{.b.N.X...N...b.N.....A.f.[.^...............B.{.v...O......A.f.C.......o.[.`.......A...S...Y.........i1987.N.j...g.p.........B.t.B...^.[.@.\..A.........f.[.^.......A...o..Q................I....f......B</P>..<P>.t.B...^.[.@.\..OFF.......A.`.F.b.N.{.b.N.X....`.F.b.N...O............B</P>..<P><U>.Q..</U></P>..<P>.f.C.. S.J......o.[.` J.i1987.N.j.A.t.@...Y...[.X.E.}...Z..100.q...[.._.e.X.g.................@.i..V.I...o..Q.....j.BOphthal.Physiol.Opt., Vol 7, No. 3, pp 267-280.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm2xpq.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	1614
Entropy (8bit):	6.173728975935784
Encrypted:	false
SSDEEP:	48:q5FavzoavQhlavIjD79igAGuGZQCgO143B2HEu:oCYB9i5l1Q4EB
MD5:	58E37828D5B3042F5325B50DBF28FFA0
SHA1:	12D4E2B5AFB9EC5F6D2050A44C54A6561F2322B8
SHA-256:	AC924149892E9B63A7227CB61225FE4154E02AEC698CAFD10F33AED81271B271
SHA-512:	38D20F6854732115BCEBDACE2B5DDDA765030CCF7ACC694BB4819E582CD85882567A3EA211D43DF51910C4B2EF032ED764FAD7C3D5C4282E7755A5E69C8FE504
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>....</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="classification"></A><I>....</I></P>..<P>......o.\..................F</P>..<P><U>.......</U></P>..<P>.l.......16%..i...o..Q..........j.A.....e.X.g..4..................A......G...[._....16._..........B..................B</P>..<P><U>.........</U></P>..<P>.l....68%..i...o..Q..........j.A.....e.X.g.......20._....100._..........B....................B</P>..<P><U>......</U></P>..<P>.l.......16%..i...o..Q..........j.A.....e.X.g.......100._....G...[._.....o.......B..e.X.g.._...................A.e.X.g.....x...s......._.......................B..e.X.g......A..Q.p.^.[..........................B</P>..<P>....Q..p.^.[....A.{.v...O..........f.[.^.x.[.X...W..i<A HREF="fm0bdx.htm">Exampl

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm2y9i.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	574
Entropy (8bit):	5.846419474911536
Encrypted:	false
SSDEEP:	12:BMQkzF09GeOsMeqQeRtMG8Kp1GuoroF9CEvctxog7aABzpeMUvz:WlULUtJp1wroiDxogW4e9vz
MD5:	A7C03E9C88662E2542DD35F9D3E01F79
SHA1:	166A2E7172061F200DDBDE9D38612CB8AA2632B8
SHA-256:	39C292412CD873EBD7A403A476724B1357A8FC02DA350F97EDCC57C8F6C33254
SHA-512:	68424B8915776C4E769DE3633AADC04689C72511DA809EE32AD280AABAC49F57A9F65A7EF818CBC1711B6B918339E12F7BAE3A991C910E4AF38BE3C21314649D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.I.v.V........i..W...j...[.j</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME=".g2gy6"></A><I>..W...j...[.F.I.v.V....</I></P>..<P>.e.v...O............A[..W] ...j...[.... [.I.v.V....] ..I..............B</P>..<P>.I.v.V.....`....A.l.X....@..v...O.........\....F:</P>..<P><A HREF="fm5a7n.htm">.F..I.v.V....</A></P>..<P><A HREF="fm6i4a.htm">.._.I.v.V....</A></P>..<P><A HREF="fm9sfm.htm">....I.v.V....</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm31o3.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	418
Entropy (8bit):	5.404954706329253
Encrypted:	false
SSDEEP:	6:B8FQk+HryftzgYiTd0oQ0iNMeqlxUfWZdUogXR72TcgtTO4eTcgTbcgp0TTqM4T:BMQkzF0aEsMeqqWZS9XR721BO4e15STk
MD5:	F19433B27B82BDAEFBE1C72BBB1195CE
SHA1:	C314AF32A953CB2C377BDD5DCBD9404ED31030BE
SHA-256:	54432CB166273186CC138ACFBFF9A66C11F4502EF21E289E3F74B752937029A6
SHA-512:	513F4DB72E69016F9CD5FED2F398EA214F03988A920F1CC4FECCF8948920535816DA7149D7A8455AE010436B73CBA3A8AAC9BE97EB2D01C8D686FE664007BC2F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...j...[</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="menus"></A>...j...[</H3>..<P><A HREF="fm8igl.htm">.t.@.C.....j...[</A></P>..<P><A HREF="fm57n9.htm">..W...j...[</A></P>..<P><A HREF="fm3ncl.htm">.\.....j...[</A></P>..<P><A HREF="fm5sol.htm">.w...v...j...[</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm34xa.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	400
Entropy (8bit):	5.503206874563364
Encrypted:	false
SSDEEP:	6:B8FQk+HryftzgYiTdYiNMeqlz+S2cgGIcgTIvuDacgtBnUcgnuuPa4T:BMQkzF0KsMeq1+S2GcTI2OtBngnhPl
MD5:	736D5A0F80A20B9F1A8B51AAC38DC60E
SHA1:	2EE11D9AA486BFB7FD3D4607A9461E3CA5AAD852
SHA-256:	55B3EC3FD896AA5290FA3F94A2933D8F229B41CC81111FF5BD7F467971AAEE63
SHA-512:	21303C3B754AA48845415EE76A1787541BB347D3C7A3316B9205BD87B0A2C4B135C08648661CCBFA18920DA7F274F87ECFC9E274AFEC7953366B36A5E5E3D3F5
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...o</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H1><A NAME="colorvision"></A>...o</H1>..<P><A HREF="fm83zi.htm">.F..m.o</A></P>..<P><A HREF="fm5l0u.htm">...o..._</A></P>..<P><A HREF="fm1nug.htm">.F.....F..b</A></P>..<P><A HREF="fm8siz.htm">...o..Q</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm359j.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	624
Entropy (8bit):	6.00327344885568
Encrypted:	false
SSDEEP:	12:BMQkzF0FsMeqBl7B5YnpKBDXtR7cA0UIL9F+15kVTpcAkeyrw:WlGbB5YnpKJ99c1UD8VTqeys
MD5:	C067B5BB1524240378EC496E4EF0D5AA
SHA1:	023B874E8ADE93BD9007C754B6E001F610B07731
SHA-256:	E5D91D5C69B88C7173AEE639D9A9F439B26FE450D48847466952D5533979A641
SHA-512:	B8BA2D794B19D0893DBB286464C2BD05C561726AD2BFF93C200368308E27F874F56E25DFBE0231611F08770C5484E930CDEEA1F8E69B914672111C754691387B
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.._...@</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="scoring"></A><I>.._...@</I></P>..<P>FM.q...[.e.X.g..._......s.....A..............B....A.R...s...[.^.[.v...O......A.._.....X.s.[.f.B.[..s.......R...s...[.^.[.v...O......g.p.........A<A HREF="fm00c1.htm">FM .q...[.e.X.g.._.\.t.g.E.F.A</A>...Q.............B</P>..<P>PC...g.p.........._....K.v.........A.G.b.N.X...C.g....................B......X.R.A.V.[.g...K.v.......B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm36re.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (397), with CR, NEL line terminators
Category:	dropped
Size (bytes):	1200
Entropy (8bit):	6.010451394311774
Encrypted:	false
SSDEEP:	24:Wllo092YAYhzhn1Tspa+HgfUJym2dJ0lNOPxHXu8i/+jppfSepcMoT:qloFYAGl17Z1Rtxe8i/eaT
MD5:	16CD6555D2B9F644187692560486BF07
SHA1:	87016B4EEC4B19B27FDED0B47336716DD71E3478
SHA-256:	814D69408A6831F361A61098078ABCD1161CD09E778011FCA8CFA57BEA809AE5
SHA-512:	D9BEBE4213378E95CFB226FFFC2C7AE25AC7EAC43F4AE8A12B5B3A1231B747C31207324CBD993EE5E58EE9B048FF46ED7AB7772BFF074D194F65E96B6B2D27AF
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.L...b.v.........</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="2keizvz"></A><I>.f.[.^....i.\...^.z..j<IMG SRC="../images/bm8.gif" ALT="" BORDER=0></I></P>..<P>.......\........A<IMG SRC="../images/bm8.gif" ALT="" BORDER=0> ...N...b.N.....A..... [.\..] ...j...[.... [.f.[.^....] ..I........B</P>..<P>.L...b.v..4...{.b.N.X..z.....AFM.q...[.e.X.g..T...}...\.........B</P>..<P>.L...b.v......._..A............z..........BFM .q...[.._.e.X.g........f.[.^...._.............A......f.B.X.v...C..L...b.v..<I>.h...b.O</I>..<I>.h...b.v</I>..........B.....Windows.........I....@....B.L...b.v....}.E.X..J.[.\.....Z.b.g.........A.}.E.X....{.^.............L...b.v..........u..J.[.\.........A.}.E.X.......[.X......B.L...b.v..V......u.........A....L...b.v...{.b.N.X...............B</P>..<P>.L...b.v..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm3be6.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (1124), with LF, NEL line terminators
Category:	dropped
Size (bytes):	1723
Entropy (8bit):	6.174394389787453
Encrypted:	false
SSDEEP:	24:WlDw/wxVe3Hh3AkLgjg1UToiIPGJdo/vJBYkdgX+Q8BL9VlL1aXpOD:q0/Ye3BEjf0iWGJq5BYkdgt6lLG8
MD5:	AB6F2C9DC6858B3AC3027A029AB5C4FC
SHA1:	584AF5E0D755231A678A7A40304227DF60E23CF4
SHA-256:	30661AFBB8BBFAB53123BEB8A34E7A2578BBA631E0C29D17E9F3A9FA6D48C198
SHA-512:	8F5946A873D82B21D3240B638E125CF6BBE22F96ED8DE8278CF30096BC21ADDFE941C57E08EC44568C9CDFC415F3FF8C344FDC376307D2A4D1A694364C2C0104
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...o.............</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="modern"></A><I>...o.............</I></P>..<P>......3...^.C.v......F.f.......m.F.......A.....O...w.....z...c..O.F..............100.N........B....z.....419 nm..............Z.g..e..i..j.A531 nm................g....e..i..j.A558 nm................g....e..i..j..A.............@......Z.p..p...............i1983.N.A._.[.g.i...j.B3...^.C.v.......A.............z.........B.W.........A...g....q.........54%.A...g....q.........38%.A.Z.g....q.........13%..z..........B............_..A..e......3.`4%......y.....A...S.\|........................B.w.....O...............S.......I...@......x.............i.....1957.N..n.[...B.b.c..W.F.[...\...............L...j.A........M.............

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm3fjn.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	1135
Entropy (8bit):	6.029141473788448
Encrypted:	false
SSDEEP:	24:WllakmLI+0u91TspSeiKxLN8A7veKwpvEEhFW5:qB6cQA7vg5hF4
MD5:	585E36D8E796D8D32BED68DFFEAA7669
SHA1:	2D9D102579D301DA8429635B33BA573B67FFF4CB
SHA-256:	6DF81D4C075809DDF3BC5F4764C4CE9CAC280E777E4DD16340B6DD732ADF30D0
SHA-512:	00BFB339179AFB80CE4FF77A2ED79D9F7EEBBA3FECABB76E9C640A21E3029F473DAA00130198C28E0BF9A47A4F650ED4CAA6F80564673FF99B8061C6171F25FA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.L.^..\..</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="view_records"></A><I>.f.[.^.x.[.X.........L.^..\........ <IMG SRC="../images/bm20.gif" ALT="" BORDER=0></I></P>..<P>.f.[.^.x.[.X.........f.[.^.....A..W.A.\........A.f.[.^.x.[.X..A.C.R.. <IMG SRC="../images/bm21.gif" ALT="" BORDER=0> ...N...b.N.....A..... [.\..] ...j...[.... [.f.[.^.x.[.X] ..I........B....f.[.^.x.[.X............L.^.....X.g.\.........B</P>..<P>.f.[.^.. [...O].A[.Q..].A[...N....].A[.e.X.g....].A[.t.@.C.....].A[.R.....g] ..........A<I>....</I>.p.l....e.{.^.....N...b.N............B.</P>..<P>...[.U.[..f.[.^.L.^..I........A.n.C...C.g.\.... [.I..] .{.^.....N...b.N......B.I.......f.[.^.L.^......\.........B</P>..<P>Ctrl..Shift.L.[...........A........[.U.[......x..I...........\....</P>..<P>......f.[.^.L.^...I.........A.....O...t..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm3ncl.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	759
Entropy (8bit):	5.811300658719902
Encrypted:	false
SSDEEP:	12:BMQkzF0aY4sMeqpJp2lj9I6H2slEeGEIyLus1hvHGcdU7lwZBXwmrH:WlFpb2I6HLlEvOu64cdUxwZ9wmrH
MD5:	310353255C23331B4D9B4EBB2C4D742D
SHA1:	F1FC406C38B83ABD34A4CC986E6D9315483EE17A
SHA-256:	2BFF1BCA8640B0FAFCA75D395AD94357FA8533C35C0E951080720FC93BAE80DF
SHA-512:	88D247CC1DB4589E9904F2DB82D7270D22E461CBFB5431D83928DEF549940AAEBBBFFD2E05CDEA8C56EFCBC0298F6F7059CC06EBB6BED9EDF8ED11350F01DFCA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...j...[..\..</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="view_menu"></A>...j...[..\..</H3>..<P><A HREF="fm36re.htm">.f.[.^......</A></P>..<P><A HREF="fm2lyr.htm">.G...[.X.R.A</A></P>..<P><A HREF="fm6d0t.htm">...[.U.[...</A></P>..<P><A HREF="fm3fjn.htm">.f.[.^.x.[.X</A></P>..<P><A HREF="fm4two.htm">....O...t.i.W...`...j</A></P>..<P><A HREF="fm7560.htm">...j.A.O...t</A></P>..<P><A HREF="fm120e.htm">CIE.F.x.}..\..</A></P>..<P><A HREF="fm05rb.htm">?1.^.F.o........u..\..</A></P>..<P><A HREF="fm4srr.htm">2.^.F.o........u..\..</A></P>..<P><A HREF="fm4b3b.htm">3.^.F.o........u..\..</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm3rcn.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	574
Entropy (8bit):	5.98432004994111
Encrypted:	false
SSDEEP:	12:BMQkzF07sMeqdzbyxE7aX9ettsESQUcYfl/P6Ox/8uDx:WlQdzbyx5y/YN/iOxUix
MD5:	86325F58F83D5C9A2612A2129F6FCF4C
SHA1:	44D2B3CCDA214322808526A3723A3B3AF57288FB
SHA-256:	A2E40D2789A3D1671C4158491EBE75EE51ACBDDBCE12F78E3B1C5A29D74EEE7C
SHA-512:	5F390DE1342DE3DBFFAE9BB7A81820A7997EE1394ABE6ED62413C618F72DE62270C0324F5AFDBEDE634DECAA2D60C5E508B0B66B3BE966D3707567E55F24F8F5
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.T.v</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="overview"></A><I>.T.v</I></P>..<P>FM.q...[.e.X.g.._.\.t.g.E.F.A..AFM.q...[.e.X.g.....f.[.^.i.J...[.L...b.v............j..f............A....E....c.[...........B</P>..<P>.e.X.g.....f.B.X.N.....A.f.B.X.v...C........`...\...A....l.X..A...S...Y.............^.....\....B...l..f.B.X.v...C.A.v.....^.[.A.v...b.^.[......i....O...t...o...\....B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm3ueq.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with CR, NEL line terminators
Category:	dropped
Size (bytes):	868
Entropy (8bit):	5.96251983936539
Encrypted:	false
SSDEEP:	12:BMQkloeVfMeqrJ4nIPKWHpkAUuDAEIODDBRIyDhLmxDTrlkkMH:WllozrVyW60A4XI+hLmNvlkk8
MD5:	83E22B36FBC697273A4CD55F606DB468
SHA1:	DA65191A5C3FD7336B5E9D644D2104C9A951D879
SHA-256:	384AF24B42ABEC005E7E8448D0578378F4991A03B4C29789DB5272A08986A85A
SHA-512:	8488A41E1935620FDAF16D48C08455A2061F06DC553E9D0F154D488B56CB45F89BD12399DC7940FF7562CCBBD8A7931C12DBCCBD2366BC836D259F5AE58C95F6
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.c.[...o.[</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="toolbar"></A>.c.[...o.[</H3>..<P>.X.N...[......c.[...o.[..A.p...g.p....@.\..A.N.Z.X.......f.U.C.............B</P>..<P><IMG SRC="../images/bm22.gif" ALT="" BORDER=0>.w...v..\..</P>..<P><A HREF="fm7n8x.htm"><IMG SRC="../images/bm14.gif" ALT="" BORDER=0>.f.[.^.......</A></P>..<P><A HREF="fm3fjn.htm"><IMG SRC="../images/bm26.gif" ALT="" BORDER=0>.f.[.^.x.[.X.........L.^..\..</A></P>..<P><A HREF="fm36re.htm"><IMG SRC="../images/bm8.gif" ALT="" BORDER=0>.f.[.^....</A></P>..<P><A HREF="fm4two.htm"><IMG SRC="../images/bm10.gif" ALT="" BORDER=0>.f.[.^......v...b.g</A></P>..<P>......@.\..S..A.v..._.E.....j...[......g.p..\....B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm4b3b.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	623
Entropy (8bit):	6.100628459794844
Encrypted:	false
SSDEEP:	12:BMQkzF0KXWsMeqM2IdXs19vgYup5hPbgBhPCF3WBZviN1+z:WlQAXs1Xupjz8ZXZiN6
MD5:	AE5E08E9BB9451794DF9DB711F5511B5
SHA1:	F5D5A0CE416CF77E4A004E8494B367EBDE7105FB
SHA-256:	0D5F5EA49CD79FCC0FE77A7618FF23A6637E6C11C4E72F87F954D209175BB237
SHA-512:	611EF40A6CB9FA9BE818EB5A56F924C3C6AE25CABFDC3C3E250D7DC09BB3FBDE28DA65C5EEAC2E20EF6A31A4950072161814D64BBD5539E51A8878AB613FFF23
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>3.^.F.o........</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="try9gg"></A><I>3.^.F.o..........\..</I></P>..<P>....I.v.V......A.R...s...[.^.[.. [.\..] ...j...[....I........B</P>..<P>CIE.F....A...F.........d.....\.........B............F..A3.^.F.o..............F....B</P>..<P>....A<A HREF="fm8siz.htm">...o..Q</A>...Q.............B</P>..<P>...L.F.\.......F.........F..A.J...[.o..@.\..f.B.X.v...C..f.B.X.v...C.J.[.h............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm4c81.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (574), with LF, NEL line terminators
Category:	dropped
Size (bytes):	4411
Entropy (8bit):	6.1205217596619335
Encrypted:	false
SSDEEP:	48:qYM6eqGanIX0MXl0aXE1GXK2gXpltXZWjXDBwXZDXXE18XaUXWRMiF+M6wV+lClt:UaBRFNt/PionY4jXC/
MD5:	921B4DB7FB8463C1C70CBAC0429A6D30
SHA1:	BAA77DADEF2BFC0C9606A42FA81679B604F1A86D
SHA-256:	F22A5F33E9AFF2F60D71CE98E3C8B444B4F623AF92A1B252319EE3174598768A
SHA-512:	881ADCFB2785A1DE6FD2E6509373CB30F8D18362505AB210844A86F32615A7D75508C225F83870B9AA15BBB523BC8E7D6DFD2FF99F9DDAEF45A2005873CAB1FB
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.K..f.[.^</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="normative_data"></A><I>.K..f.[.^</I></P>..<P><B><U>...v.G...[.u.X.R.A....z</U></B></P>..<P>.e.O...[.v......G...[._.......e.[.u....W............B<B>.u..I...v</B>..A........15.....45...l.......G...[._...........B<B>.u....v</B><B></B>..A.^.y...L...[.J.[............p............A.F.....E..i.V.F.[.h....A...{....A...{.Z.p.j.......300.l..................B<B>.u.o.....v</B>..A.....A.~...A.v...X.`.b.N.A.e.L.X.^.C...A.y.C...g...[.J.[....F......{.......3.N....20.N..o........A150.l..e.X.g........W...........B.V.F.[.h....A.J...[.}.b.`...O.A...F.A....A.......A...F.A.H......g...E.........B</P>..<TABLE cols=4 width=451>..<TR VALIGN="top">.<TD width=28%><U>.O...[.v.....</U></TD>.<TD colspan=3 width=72%><U>.G...[._...........</U></TD>.</T

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm4eox.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (312), with CR, NEL line terminators
Category:	dropped
Size (bytes):	2345
Entropy (8bit):	6.167178930134144
Encrypted:	false
SSDEEP:	48:qloJMO1MCmvtTvyHaCUMu0G6+bEmFOgxhlWCozK:jMtTvyBUDE2L
MD5:	E432177208078EDDFDE49ED4F43C9BC1
SHA1:	745E447BDDB93905DECE601E73342A0B8EB4F0F2
SHA-256:	963994616AD4DDF95703BD7B66A0D0FB60718B72362C2072D4C6130AB1CCBF32
SHA-512:	76C6FEB50F6BAE702B01EF4272B77F84B4797918D1B00FB0CA84A570A643F3F44277293BCDB2875D2573A9B7AF2868B3FC8ED9B01CE8C74B653616203BAB6C18
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.f.[.^..\..</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="displaying_data"></A><I>.f.[.^..\..</I></P>..<P>.f.[.^..v...b.g...@..2........F....O...t.......j.A.O...t</P>.<P>.A.N.Z.X......A.c.[...o.[.....A.C.R.. <IMG SRC="../images/bm10.gif" ALT="" BORDER=0> ...N...b.N.....A[.\..] ...j...[.... [....O...t] ..... [...j.A.O...t] ..I........B</P>. .<P><A NAME="polar_graph"></A><I>....O...t</I></P>..<P>.L...b.v....i1.`85.j..........\.........B.i...L.F........p......A....s.............B.j</P>..<P>[.G...[.X.R.A] ..e.L...b.v..v...b.g....A...~..u2.v..X.R.A..\......i.......L...b.v.....j.B.u5.v..u10.v....G...[.X.R.A..C.G....~..A.O...t.................\.........B</P>..<P>.F.......\...100%......A.S...L...b.v............z.u......B......A.S.L...b.v..u2.v..X.R.A....A....O...t....~.....^.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm4eus.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	441
Entropy (8bit):	5.569413685371745
Encrypted:	false
SSDEEP:	6:B8FQk+HryftzgYiTdjYj0x0iNMeqlzM6u8gLR6Ic5r7UcgfO13cgBgcgTF0D4T:BMQkzF0iDsMeq16LR6rB7gf6KTeg
MD5:	F6CF3BD11008429E2C76BC9114F973CC
SHA1:	1F2B4B9576AD87B2439E1825241EE45C363394CE
SHA-256:	FF20320D2259F3CF3358F8DDA067D78BD9C5185AD8B82CEA6536B4A99267CE97
SHA-512:	E610F144762A6D9D18D7F22BF9D3B14EA3F878B38879FA8768B912C1C412498E213F2937DBFB806A3372E9F9641C74CAB486CB6470EA8365CA100138FF99C0E2
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>FM .q...[.e.X.g</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H1><A NAME="fm_hue_test"></A>FM .q...[.e.X.g</H1>..<P><A HREF="fm2u5h.htm">FM .q...[.e.X.g..g.p..I</A></P>..<P><A HREF="fm52sz.htm">.}.e...A..</A></P>..<P><A HREF="fm97vy.htm">.e.X.g.....</A></P>..<P><A HREF="fm0f1q.htm">.\.......</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm4ndz.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (363)
Category:	dropped
Size (bytes):	1024
Entropy (8bit):	6.243398521614836
Encrypted:	false
SSDEEP:	12:BMQkzF0hsMeq9oiaauvyJVPerkw6pWay1CPm42jedtM8DADhsgr+JU1jkgZ415FS:Wl65lfeg0QqUvADhsgrqgAgS7FV69SW
MD5:	EE306112F410E5E537AFAA3F33B827AE
SHA1:	56B32A4A121B66A44F58EA3243A02EB304006DE0
SHA-256:	86B804F9C86A4BFC4016A4C7A400768EB7FCA77F884F5AB7DD512268E76667FB
SHA-512:	7B53C01B2A8F23B0E94C50A365B5889CF192077D58B764DE6FAA5EA4C33143FE96134D3CDDC0997AA114629CDF42E1FDEC5995A1220E3144FA65F5B48030F824
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="lighting"></A><I>...</I></P>..<P>.W........g.p............A.f.[.^................B.....P...r.....x..6,740...i.W.....C............j.A 25.t.B.[.g.............D....B..........A.G.b.N.X...C.g....i.uSpectraLight II.v....6500..K..^...O.X.e...n...Q........p........\....B</P>..<P>...R........g.p.......A..........k......A.......K.x................A.e.X.g.....{............B.G.b.N.X...C.g...Judge...i.....A.....u.....i6500...j...K.v..............B...R..............A.f.[.^.....A.W........g.p.....e.X.g................B.e.X.g...{....A......M.........OFF...................B</P>..<P>.e.X.g..............u..A.......e.[.u..........u....B.........A....p.x..90...A..@.p.x..60.........Z.b.g...........

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm4qex.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	1154
Entropy (8bit):	5.991074965529433
Encrypted:	false
SSDEEP:	24:WlU4snHMSvidpid8pyid2did53188MMnD:qcMvg8pv285p
MD5:	108C6C1F2E837740A2A7516C9F68125B
SHA1:	A0828AE2523AF9AF07BE4306F083B07282ED3F27
SHA-256:	E1BC4264EAD9E87C35D905692845F86001D6F94DA2ECD552A04D29E21D129887
SHA-512:	FB5D616C1A6E4D9E1EAC24125867DD5B941C2025FB0FB697607204F91ED424998F6CC6B27F0B9B6817D41D47685CACBED73F6E17C37C79E02B17A56DAE77DF46
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>2.F.^.F.o</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="dichromacy"></A><I>2.F.^.F.o</I></P>..<P>2.F.^.F.o...A.~.......F.f..2..........A....2.F....S.......F......v.........\....B2.F.^.F.o.......A1.^2.F.o.i...g....F.f....j.A2.^2.F.o.i...g....F.f....j.A3.^2.F.o.i.Z.g....F.f....j..............B</P>..<P>....A...I..2.F.^.F.o..^.C.v....B</P>..<TABLE cols=3 width=303>..<TR VALIGN="top">.<TD width=37%><B>.^.C.v</B></TD>.<TD width=31%><B>.j.. %</B></TD>.<TD width=32%><B>.... %</B></TD>.</TR>..<TR VALIGN="top">.<TD width=37%>1.^2.F.o</TD>.<TD width=31%>1.0</TD>.<TD width=32%>0.02</TD>.</TR>..<TR VALIGN="top">.<TD width=37%>2.^2.F.o</TD>.<TD width=31%>1.1</TD>.<TD width=32%>0.01</TD>.</TR>..<TR VALIGN="top">.<TD width=37%>3.^2.F.o</TD>.<TD width=31%>0.001</TD>.<TD width=32%>0.001</TD>.</TR>.</TABLE><BR><P>2.F.^.F.o...A3.F.^.F.o...

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm4r8z.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (564)
Category:	dropped
Size (bytes):	1526
Entropy (8bit):	6.07434753599678
Encrypted:	false
SSDEEP:	24:WlgcJN9CDo1VsOzV4BVR6vCCtas0KxafTK7KxyfU8jV7/nnKaSHzQu88fkTjKSdX:q7rCyuBVR6vCEaHQQe7QlY9/KaIku89D
MD5:	1CECFCF043BBA005A40095C4D2E8CBA9
SHA1:	DFABC6D6ECF7A9ACE0D8072C0133AC9443195D3E
SHA-256:	6F56F8EE4078A0FB417695061DC17C19FC2B6FAD7F834CBE2DF223168AA43817
SHA-512:	443D7B048D5CB6746CC4DCA46116C66E3202AB638E63E27092AC72C40CC2DE9A5C01B95CDB8559FBA8EFABA12D5DED6FF17B7339F22C94FF1891D1E25445B810
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>2.F.^.F.o..</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="dichromats"></A><I>2.F.^.F.o..</I></P>..<P><IMG SRC="../images/bm3.gif" ALT="" BORDER=0></P>..<P>2.......F.f......l..A<B>2.F.^.F.o..</B>........B2.......F.f.iP1.....P2.j......z....A....g..................A.X.y.N.g..............d........B<I>A</I>..<I>B</I>..\.......2.....p.b.`.......A.....<I>A</I>...v.....<I>B</I>....x............s..\.......B......R..A2.......F.f......z......<I>A</I>...q.....A.........F.f......z......<I>B</I>...q.....v............B<I>A</I>..<I>B</I>....x................A2.......F.f......e..............B.]....A.g.............f..\....B</P>..<P>..................B</P>..<P><IMG SRC="../images/bm4.gif" ALT="" BORDER=0></P>..<P><I>A</I>.....A<I>B</I>..<I>C</I>..........2.....p.b.`.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm4s11.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	613
Entropy (8bit):	5.9396167547356535
Encrypted:	false
SSDEEP:	12:BMQkzF0UeOsMeque00pcM9/0pbFLmQU9Ioiokkovaw3:Wl+UD00pcM10JN+Wotol
MD5:	9CDD9ECDE701D197902980BA9A3901B3
SHA1:	0C0103EA529CAA7CAD661F4BD3607D491A0B6721
SHA-256:	39E5047464827FA3D1003D5C2AC782F4E6BD2CAC7CDD1D794678705E036E7028
SHA-512:	F784672E9368575B70172E4BD4F0EDCD2B3D0C7079F07523EDDF3477186F9D7A21751EE7260A9B6F32778459D34EB03C13F9ADDA671B73901EAFF147553C591C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.V.L.^.i..W...j...[.j</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="5igc0ze"></A><I>..W...j...[.F.V.L.^</I></P>..<P>[.t.@.C..] ...j...[.... [.V.L.^] ..I.......A.L...b.v................Z.b.g.......B</P>..<P>.....A.c.[...o.[..A.C.R.. <IMG SRC="../images/bm15.gif" ALT="" BORDER=0> ...N...b.N......s..............B</P>..<P>.....f.[.^..................A.L...b.v.........Z.b.g....O......f.[.^................b.Z.[.W...\.........B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm4srr.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	633
Entropy (8bit):	6.130253431195335
Encrypted:	false
SSDEEP:	12:BMQkzF0YXWsMeqp0mIdXs19vgYup5Ao7bgBhPCF3WBZviN1+z:Wl0WlXs1XupSoX8ZXZiN6
MD5:	75AD9836627DFB1A92C820414746663B
SHA1:	45830A80ADD54BBE8A9472CC7E4BBE62C0DFDB46
SHA-256:	CC9F29C24A8E1078D6C4952C41A57024625B5EE8F3138567B51912EE8FA9086B
SHA-512:	48EB4DFBBA96C686BE4A2A02D2BDAB7F4FF436B81BA5E40CF20E002A52D1773B90C2A2F1BC18E842ED18A9FE26FC7D32B46AB08959091170A9552F31358CFE51
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>?2.^.F.o........</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="df09gg"></A><I>2.^.F.o..........\..</I></P>..<P>....I.v.V......A.R...s...[.^.[.. [.\..] ...j...[....I........B</P>..<P>CIE.F....A...F.........d.....\.........B............F..A?2..^.F.o..i..j.............F....B</P>..<P>....A<A HREF="fm8siz.htm">...o..Q</A>...Q.............B</P>..<P>...L.F.\.......F.........F..A.J...[.o..@.\..f.B.X.v...C..f.B.X.v...C.J.[.h............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm4two.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (312), with LF, NEL line terminators
Category:	dropped
Size (bytes):	1840
Entropy (8bit):	6.245447878169407
Encrypted:	false
SSDEEP:	48:qbUZlmMCsvtTpylaCUMu0GIEenhrW4oht:2IRtTpyrUeu
MD5:	4D79FDBC12C2272CF9A3D4C986D131BD
SHA1:	1DAA8A2763C50D169FB5AEFE665E99313F1682F8
SHA-256:	08A6543EC482743AC34D19A2CAD74CF97F0B5B387DBB57457E83FDA76A81CCE6
SHA-512:	ABA0E8BD82D69483994E8D250245B90DDD8177CDC5CAB882808A198C8EB8D14C2ABC10C87440ADEA79FBBEEE10185D306DC729944C5C559E8A8271191C06DF57
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>....O...t</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="polar_graph"></A><I>....O...t <IMG SRC="../images/bm10.gif" ALT="" BORDER=0></I></P>..<P>.f.[.^......O...t..\........A.c.[...o.[..A.C.R.. <IMG SRC="../images/bm11.gif" ALT="" BORDER=0> ...N...b.N.....A..... [.\..] ...j...[.... ....O...t] ..I..............B</P>..<P>.L...b.v....i1.`85.j..........\.........B.i...L.F........p......A....s.............B.j</P>..<P>[.G...[.X.R.A] ..e.L...b.v..v...b.g....A...~..u2.v..X.R.A..\......i.......L...b.v.....j.B.u5.v..u10.v....G...[.X.R.A..C.G....~..A.O...t.................\.........B</P>..<P>.F.......\...100%......A.S...L...b.v............z.u......B......A.S.L...b.v..u2.v..X.R.A....A....O...t....~.....^.~...\.........B</P>..<P>.....100%...............A....O...t.......A.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm52sz.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (307), with LF, NEL line terminators
Category:	dropped
Size (bytes):	1163
Entropy (8bit):	5.943080303111754
Encrypted:	false
SSDEEP:	24:Wl00RNP4L2mEjr6hNxm+DBxbRU2IK4G4t2owk6hA9nu25u:qza1E3obncG4rfnu25u
MD5:	4B33DB8F91B6F24424CDF4795CBDC33D
SHA1:	5B3244C8F438BA90A9F1FC1B428C061434C45729
SHA-256:	FE3F8E403B803025F48A8BF785D5E55A5B9F649388FE05BC87EB2FB4D8A7FFBF
SHA-512:	81540BD64B53ECA654185656CB0E2A15A5751B9F6CB6894C50A9BA81F9C4453E4B24591C24E7D1249BF353AA3EC266803294A8EBF0171DE2260F9F0EC719158B
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.}.e...A..</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="materials"></A>.}.e...A..</H3>..<P>FM100.q...[.._.e.X.g...A93.F..v...X.`.b.N...L...b.v..4...P.[.X....[..........B.e.P.[.X..2...q...W.t...p.l....\..........A....t......O....\..85...J...[.L...b.v..4..............B.i.e.P.[.X....[..L...b.v..2..........A.L...b.v...v....93.....B.j</P>..<P>.J...[.L...b.v..........g.p..........B...........A...w......i.v.I........A.L...b.v............................B</P>..<P>.J...[.L...b.v..A...p.x....................o.......}.b.g.d...............A.w...t................B...X......f.f.e.X.g..e..........A......t.............L...b.v..K........................B....g.p.......A.L...b.v..2.N....4.N.............................B</P>..<P>FM 100 .q...[.._.e.X.g...AWindows.o.[.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm549z.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (350)
Category:	dropped
Size (bytes):	830
Entropy (8bit):	5.986742367005849
Encrypted:	false
SSDEEP:	24:Wl1w1+j/Ev/+W0Pbnqz+nAxeAjbInLNnzICK:qq1+M0Pbnqz+AxeAnynJK
MD5:	6A3DC88AA5783F4AF24D629515540285
SHA1:	8A2A627ED24194E02F5C30ABBDBBF62BF3929DCB
SHA-256:	9CE23421033319B6AF4671DCC11A01F525C99BEABBB4D158A67716504BB55EF7
SHA-512:	344624CC982D8670153BF2F447CDA4CA809009F35C926120B16138F5CC391079C5479C9206BD09803A5301B0539A628873CD04C1AC86D5AEFB7C5B6D8AC5BE0C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.X.P.[..</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="scaling"></A><I>.X.P.[..</I></P>..<P>FM.F...`...[.g..X.P.[....14..............B...........I..\...........A...x....o..Q..........G...[.X.R.A..14.......A.O...t.....................B</P>..<P>.......X.P.[....A[.X.P.[..] .p.l....\............B...X.P.[.....X......A....{.b.N.X..V.................A..... [....] ..I..............B[....] ...I............A...X.P.[........I..A.....f.[.^.Z.b.g........G...[.X.R.A.........B...X.P.[....W...l.i14.j....Z.b.g......A[.W..] ..I..............B</P>..<P>...X.P.[.....K..4.`50...g.p............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm57n9.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	652
Entropy (8bit):	5.6551640143191335
Encrypted:	false
SSDEEP:	12:BMQkzF0hersMeqxfeW9KGHJxjh6VkhZkh1BB05Nji3ptCwn:Wlf34+bHr1pyLB05NO3/jn
MD5:	9C046E414D51598C9E165BB6BD56B7D4
SHA1:	17C29BCD3D2BB240858E7AE816FDFCABA41EBA17
SHA-256:	510A49BD5044AE8A47BD227D6D5C63DAE62D69EA9A3BE673D05D3EF0716BE0ED
SHA-512:	489FBAB353C485824DD2F7F53EAC75925CC6F2E55B13220A3607DD34A9CBB4CBA85925BC948FCE6236B7F7BD9332EA06F5B0F3C2E4AFCFC10144003F64C19CB0
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>..W...j...[</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="edit_menu"></A>..W...j...[</H3>..<P><A HREF="fm0j5b.htm">.....</A></P>..<P><A HREF="fm6q01.htm">.O...t...R.s.[</A></P>..<P><A HREF="fm5tbb.htm">.X.R.A...R.s.[</A></P>..<P><A HREF="fm2bco.htm">...O.......R.s.[</A></P>..<P><A HREF="fm4s11.htm">.V.L.^</A></P>..<P><A HREF="fm6rj8.htm">.L.^..I..</A></P>..<P><A HREF="fm68mt.htm">.L.^....</A></P>..<P><A HREF="fm59v4.htm">.....L.^....</A></P>..<P><A HREF="fm2y9i.htm">.I.v.V....</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm59da.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	566
Entropy (8bit):	5.844503022631328
Encrypted:	false
SSDEEP:	12:BMQkzF0h12/GsMeqrUI2QzW0pVFCJtdzrEXPz8g3Gr:Wl2rNW0pVFCJnE//Gr
MD5:	689B2C34A4BC7907FB159C10F843C44E
SHA1:	43B4049163405995440174E697CD510800D26928
SHA-256:	8CB790AC902A2C885FAD4CDA418E9A9BF0B5084EBFD04C2B7C7F06CDDD0CB506
SHA-512:	5426B81E72921CCE4F986DED585D28302184FF7AF560C637609D4D525AC4890D965C5A9003A40689A5A7948930E7C4D4B43D1CDD04C7985C1A954EFC499FA0F4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.J...i.t.@.C.....j...[)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="file_menu_open"></A><I>.t.@.C.....j...[.F.J..</I></P>..<P>......f.[.^.x.[.X...J.....A[.t.@.C..] ...j...[.... [.J..] ..I..............B.\.....X.g....f.[.^.x.[.X..I........B.V.K.f.[.^.x.[.X....O...A...C...t.H.[....^.C.g...o.[..\.........B</P>..<P>.V.....L.^.....f.[.^.x.[.X........A......f.[.^.x.[.X...Q..............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm59v4.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	943
Entropy (8bit):	6.061576398180222
Encrypted:	false
SSDEEP:	24:WlAUZS0wv/z/Oqj37X1Tep3MiW0kAsw6u:q9P0/z/V3uMiqAz
MD5:	9CB82CB97B39186C3A78D8D8E3BC42A2
SHA1:	F01A2DBAEC7D8BEDF5485E1CBE8492139B1951C2
SHA-256:	05015852F66C440F3B4924E0AB46243795ECF55F6BBEF1CA3166ECB4FA920D70
SHA-512:	592FEE0C50876F1EDBFCE70065FE00725D35245C74D5E0D7B4B56E1EC27DDB47CBE7C29C8F4DCE51830038C88773654B303D218F2F379A549C2BC9DEF5F7AA35
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.....L.^.....i..W...j...[.j</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="2xz83ip"></A><I>..W...j...[.F.....L.^....</I></P>..<P>.{.v...O......V...v....f.[.^.x.[.X.....p...A....L.^....P..A.N.Z.X.E.Q.......B.g.p....f.[.^.x.[.X....A...C...t.H.[....^.C.g...o.[..\.........B</P>..<P>.L...b.v..FM .q...[.._.e.X.g..L...b.v...v......f.B.X.v...C..z.u...A.c.[...o.[.. <IMG SRC="../images/bm17.gif" ALT="" BORDER=0> ...N...b.N.....A..... [..W] ...j...[.... [.....L.^....] ...N...b.N....f.[.^...f.[.^.x.[.X..........B....A.......Q................B..... {OK} ...N...b.N.....A.f.[.^........[.U.[....f.[.^.x.[.X...........B.......A.f.[.^.x.[.X.........Q........B<A HREF="fm3fjn.htm">.i.u.\.....j...[.F.f.[.^.x.[.X.v.Q..j</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm5a7n.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	753
Entropy (8bit):	5.99420324006467
Encrypted:	false
SSDEEP:	12:BMQkzF0NfsMeqR+uX6gc1zVAfVGrXJiokkPXjTfi48VzU5kPgbS+QKQrvGC6:WlW3NIR9sotPjTi48VzHUbEGC6
MD5:	5FE6DE74B7E6B3776F2EF861DD156883
SHA1:	32A5EDC3A54BDECA97C17538400B8C95F71DA831
SHA-256:	B4C7168270821F85842C84F51740300D69A5A3AC10353BA4FF54F2D4140F0992
SHA-512:	6E0D1CFB74F30BFE1F77C271FC8BBAA88C907289861FB667C2B1D672D929AEA0D5CD63CF54B7902F69F8AB37DCAB4F38CF41AC3AD663D3B2CC3220A6867C18D9
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.F..I.v.V....</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="color_options"></A><I>.F..I.v.V....</I></P>..<P>FM.q...[.e.X.g..f.B.X.v...C.........F..A.f.[.^........A....E...j.A.O...t.......T.\|.[.g......B.R...s...[.^.[..S...F...\............A.J...[.f.B.U...g.p.......B....A.........A.f.[.^.............L...b.v..........................B</P>..<P>..........A[..W] ...j...[.. <A HREF="fm2y9i.htm">[.I.v.V....]</A> ..A.N.Z.X...A.J...[..................B...........L...b.v..O...[..\............A.J...[...x.....O...t...........B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm5asz.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (303), with LF, NEL line terminators
Category:	dropped
Size (bytes):	923
Entropy (8bit):	6.04399034802647
Encrypted:	false
SSDEEP:	12:BMQkzF02j3sMeqGjJSLDpV2P/g7LC7uwQWEuEUklu4nVkHbseuaQpA9rtPn5Yinn:WltGS6/g7LCPQW2UAneHbuyrtPnz
MD5:	2BE2917BB70362FB262831DA92CFEC22
SHA1:	88491FABC3F8B7CE7F2E6EE969547F5ADC7FB389
SHA-256:	46A507B363C6AC543ECF0108057C6192D885715B2B43A0D10EFDCA8CC1F9B01B
SHA-512:	63C47087EE2819604C8F5489911EBABA8456D3A17DEB8A66DF9FFF9E2E640359D4684621EE1744A45448F94C812BF3F4DB464A2E9050D802FB57976A60140E63
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.j...[.g....@.......</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="newtons"></A><I>.j...[.g....@.......</I></P>..<P>...o..............A.A.C.U.b.N.E.j...[.g....................B......A.P...u...b.W..w......w...........v...Y....u...A.J.................v...Y............Z.b.g........B......A.v...Y...............A.F..............@........B....A.....F..g.........A........\............@........B.......j...[.g....A................F......\................._............B................A..........F..g...................A.g....F.............................B....A.j...[.g....<I>.......F...t........</I>....f...A.u.F.v......I......A.S...I.................B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm5dgl.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	738
Entropy (8bit):	6.122905667937323
Encrypted:	false
SSDEEP:	12:BMQkzF0FlsMeq3jL8hfzn85tRAqdTxospbuoIFtZSkmAJuWq8feBd574UPu:WlI3jUD8/TNxxpb3IBq8W5tW
MD5:	76FBC53D9DFDB87D74D5FF0DDB772F5D
SHA1:	CD6BB63DABC1561B3F37165AEB552535A28146AE
SHA-256:	9B795225C56B925F46F81C9D4E0EF06212E06A9D07855DDD086C1E0D841BEF7C
SHA-512:	9BF3CA8CD803EFFB9B109917BE385E327EB65984FFC7D2992EAC4308CAA93CAD4EAC87B5641DC47D996C93EA61AABEB91D25E72BFC286AEAB485EB6E93BBCFA7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.].[....._</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="zone"></A><I>.].[....._</I></P>..<P>.....O...w.....z...c..O.F............O..@....A..........T.\|.[.g....A........F..................A.F........I.......K.....................B....2....._..A1881.N..h...f...X..<B>.].[....._</B>..................B</P>..<P>......_.....A.J...[.......o.H...A..].[...A.....1.....x....................3.F.^.F.o................B....R...Z.v.g..A...o................`............B</P>..<P><IMG SRC="../images/bm0.gif" ALT="" BORDER=0></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm5fw3.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	1012
Entropy (8bit):	6.178632132066476
Encrypted:	false
SSDEEP:	24:WlTJzg5D4JSh72RDV+MilwLzR2QQ7ZEs3MLE:qSJwSd2RDVbgkzAtP8o
MD5:	D3EB45B50865DB8420AA122C8A15FD65
SHA1:	F31E2AE1CB07F0969EF16C8848473D15498D7AEF
SHA-256:	9EAB8D23015F8E675D46CA1EAA84ED248B20FEDD3D62E436D77C0F7776147328
SHA-512:	A50350A2C550B6E9140B4166A3921717CE909642B1A036576F675109FA95E9BA231DD7AD5D880A36BEA86CDDAC5A6A46CD09E338A8940113D2E2F1CD5F873C1C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>Vingrys....</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="vingrys_analysis"></A><I>Vingrys....</I></P>..<P>[Vingrys....] ..f.[.^..x.N.g........s...A.f.[.^......A.....A......L.q....C...f.b.N.X...o.......B</P>..<P>[.....C...f.b.N.X].iC.C...f.b.N.X.j..A......F..x....\......B.L...b.v....S.z.u..AC.C...f.b.N.X...u1.0.v.......B</P>..<P>[...U.C...f.b.N.X].iS.C...f.b.N.X.j..A.L...b.v.z.......i............_.....j..\......B.L...b.v....S.z.u..AS.C...f.b.N.X...u1.28.v.......B</P>..<P>.p.x..A.L...b.v.z........\......B</P>..<P>Vingrys.....f.[.^.....A.b..f.f..g.p......B</P>..<P><U>.X.^..._.[.h</U></P>..<P>.{............p.r....L...Q.............B</P>..<P>Vingrys, A.J. and King-Smith, P.E..i1980.N.j...o..p.l...e.X.g.........._...@.BInvestigative Ophthalmology and Visual Science, Vol 29, No 1, pp 50-63.</P>..</BO

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm5l0u.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	739
Entropy (8bit):	6.106219796954308
Encrypted:	false
SSDEEP:	12:BMQkzF0T8sMeqrXMv+bmSGlXpT4uS76ljhHR+H5TStxz5YL78p:Wl8urcG6SKitWHR+H5SG7k
MD5:	AA0C99F025C3EE21F5AB82976A081FE6
SHA1:	C2E929ECA13F2AFF61A94993362763929ACD4FB2
SHA-256:	F9870BBB504727DBF3F0D7D775CE84C1BC5666AD3E923967E7AD82C645DC812A
SHA-512:	8F82FEEE6C7C9FAAF14BCDE30AFBE9B6687C106793BAE93DD6840F2CECB53246F461FF584651BA574F75D5075378CAA2E0CD8913E4272BDDB213056C972C150F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...o.F..._</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="30j5h."></A>...o.F..._</H3>..<P>.l.....o.....q......B.......o......l..A..700......F..V.F.[.h............................B.................s...A...o.........m....v..............B</P>..<P><A HREF="fm5asz.htm">.j...[.g....@.......</A></P>..<P><A HREF="fm7rub.htm">.....O..O.F..</A></P>..<P><A HREF="fm8vi2.htm">.....O...w.....z...c..O.F..</A></P>..<P><A HREF="fm2kms.htm">...o......</A></P>..<P><A HREF="fm5dgl.htm">.].[....._</A></P>..<P><A HREF="fm3be6.htm">........o........</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm5sol.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	305
Entropy (8bit):	5.6010149203082245
Encrypted:	false
SSDEEP:	6:B8FQk+HryftzgYiTdcqwQ0iNMeqlxMZcqsUCEmTqVu8L5XtT:BMQkzF0qsMeqiPCPQbn
MD5:	8F2404171408D26E814116B4C9D4B9AD
SHA1:	CE50057BC065F2273B0D57932CB92787177CD8FE
SHA-256:	F7E538B4E9BB00187A9B96AF834FE978B384AAED7E51A55F69B765B22A8B95FC
SHA-512:	424688161102D7B7FF77CD63982E85F2C34FB44DC111033E5AA2D71AD4A53D0C6E667CC3D78204580877FF7ED2A625EBE8F84578E5DE5CCD937F6C182F083CD9
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.w...v...j...[</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="help_menu"></A>.w...v...j...[</H3>..<P>.w...v...j...[..v...O.............\........B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm5tbb.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	961
Entropy (8bit):	5.857968535052985
Encrypted:	false
SSDEEP:	24:Wl+Ueh9A1pPrGY2p4iulpBhQAoJqBuyCV:qLr9rffByAodym
MD5:	6F342BB739BAC5C54BC825E47670BBE6
SHA1:	307F0D51BDCEBC874A06B44A8D82A82936ABB412
SHA-256:	6D9086A8736ED5D49DCF78923A98A663731DAE77B5C899E22B351EB672FF6BDB
SHA-512:	26136209AE3210580F45F7662FA4B54716C75836BC52F291AF5C1992973E30F76B06C617D108E9F7EB87985B0B910922D89122215F17C66D0F14ECC33F4CFE50
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.X.R.A...R.s.[.i..W...j...[.j</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="2mwdzwg"></A><I>..W...j...[.F.X.R.A...R.s.[</I></P>..<P>.f.[.^.i.L...b.v.....j..AWindows..N...b.v.{.[.h..R.s.[......A....v...O......\..t....\....B.</P>..<P>.f.[.^...N...b.v.{.[.h..R.s.[......A[..W] ...j...[.... [.X.R.A...R.s.[] ..I........B<B></B>.....G...[.X.R.A...R.s.[.......A.T.u...j...[.... [.G...[.f._] ..I........B...._....A[.G...[.X.R.A -2] ..I.v.V......I.....A2................._.......R.s.[.......B</P>..<P>.N...b.v.{.[.h..Z.b.g.....f.[.^..AExcel.V.[.g....\..t.........BExcel....A.V.[.g.....u..J.[.\.....Z.b.g...A[.\..t..] ..I........B.G...[.X.R.A..A.I.........Z....A...I...........B</P>..<P>....@.\..f.[.^....`....v...b.g...A.......v......s......B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm68mt.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	608
Entropy (8bit):	5.926054139699847
Encrypted:	false
SSDEEP:	12:BMQkzF0e34eOsMeqsqegpmhBj8KpgQGuhO0ymbu7u3Ma7puJ7Y:WlZlUk4MpgQ9uo1
MD5:	BF7FF48B96D07EB13C796EAC9C48F381
SHA1:	02F2E29E261460B72898F89E0AFCA2BC1A2BB49D
SHA-256:	1BC976E31DD5A321D5EA92A8DC71ECEC45101DC52B52C330AE9F5A656232496D
SHA-512:	EADE426CF13DF69E7E4D7F63508EC3FACCCF02F17559F04A54824F26ABAF1C814657A139D0F10EBDA27929B848296249DDBFFCBC474F9C9966E8CD34574C99A7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.L.^.....i..W...j...[.j</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="3bic_yu"></A><I>..W...j...[.F.L.^....</I></P>..<P>.f.[.^.x.[.X.........L.^..........A[..W] ...j...[.... [.L.^....] ..I..............B</P>..<P>.f.[.^.x.[.X..........O.....X.g.\.........B......f.[.^.....N...b.N....n.C...C.g.\.....A[..] .{.^.....N...b.N......B</P>..<P>......f.[.^.L.^..I.....A[..] .{.^.....N...b.N......x.................</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm6d0t.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	521
Entropy (8bit):	6.12382326236626
Encrypted:	false
SSDEEP:	12:BMQkzF0zU0sMeqNU2xBDespSufG9DZ5dE8dStNr9b8Vo:Wlt2u2xcspDfG9DZFdSzpbqo
MD5:	803449BC0450A415F44B64876C80EDE6
SHA1:	134D4748048EFEA719531DE66C4CE0716FC2E628
SHA-256:	E9E2ACA4CE14713FEF941F9CDAC89BFDC073500DD8FF6595ED0ACF4BCB3646C0
SHA-512:	E4C2F5DC962FAD611272D15D62D1942EB30607C39DDDB6F69E94ECFE5D994454EB7150710100EB7289EE0294CE2EF700FBE6111174C6C18D8794A075B4DEBF46
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...[.U.[....f.[.^.p..</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="personal_information_form"></A><I>...[.U.[....\..</I></P>..<P>.e.L.^........[.U.[....\........A[.\..] ...j...[.... [...[.U.[...] ..I..............B.f.[.^.p.........p.........A...O.A.C.j.V.....A.Q..f.[.^.A...N.....A.e.X.g.....A.e.X.g........A.....L.^....\........B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm6i4a.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	687
Entropy (8bit):	5.972985912756829
Encrypted:	false
SSDEEP:	12:BMQkzF0su0sMeqyAz+MotHm2tlHo87IgEinW+BtloNR68KpYwkPd8c:WlVXzzotHm2tlHo85fTtlhpZkt
MD5:	401A78C8753A91F6E4800081697F3297
SHA1:	9811F0793717C3C43138ECB860EF3F8709DFBF72
SHA-256:	A50CE36A539FF2114C278E768C3482F8E6305B5E10056E3B000E6DE38BA44CF7
SHA-512:	DD2BBEC3DF2943409FB8CA72593D0EE7F7E0FD067747002EE63F8BB0CF4BDD2DFD5C684688EB664E0312B471910AFD4A7117BB85B9ACF8C6388CDAEE90B71CD5
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>Standard;Kinnear;Plotting methods</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="bye5mz"></A><I>.._.I.v.V....</I></P>..<P>.G...[.X.R.A...v...b.g......@..Q........F</P>..<P>[.W..] ..A<B>.C.G....L...b.v...</B>......G...[.X.R.A...v...b.g......B.........................@....B</P>..<P>[.L.j.A] ..A.L...b.v..<B>..u</B>......G...[.X.R.A...v...b.g......B.......@......g.p...........B</P>..<P>.v...b.g...@...X......A[..W] ...j...[.... [<A HREF="fm2y9i.htm">.I.v.V....</A>] ..A.N.Z.X............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm6m3u.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	875
Entropy (8bit):	5.885969924337027
Encrypted:	false
SSDEEP:	12:BMQkzF0Lq2OsMeqQI27A77B3stkWv0WdVsp7Gqir9bqZq/wGbfAXhUu18vwdjnw0:Wln9/1e0WdGp7RirZzfAXJnUPcrXpPX
MD5:	E18176FF2352CBE466F38EFF5BDD4399
SHA1:	D675F719E9BD4D0F267AC49CF47ECD1536B88F2A
SHA-256:	B6D9B8659E83ADAB61A2DBB921A1764331D0AA665AA6946F1468A3EACC4F5A2E
SHA-512:	F195AA0F9DC434308B1C0C3FD8A343777112FDFE898C897E8E223C9A4BE2E6B6292BE5671E746D228C873C409B88BB19157F29BA422E166A680E120119DC8C2A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.X.R.A.......o...i.t.@.C.....j...[.j</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="1mx2ojj"></A><I>.t.@.C.....j...[.F.X.R.A.......o..</I></P>..<P>.G...[.X.R.A..A.e.L.X.g.t.@.C...................B.......A.f.[.^..Windows.....v...O.......P......o..............B</P>..<P>[.t.@.C..] ...j...[....A[.X.R.A.......o..] ..I........A.T.u...j...[.... [.G...[.X.R.A -2] ..... [.G...[.f._] ..I........B.\....... [...O..t......] ..A.p.X..t.@.C.......w......B</P>..<P>.f.[.^.....`...F</P>..<P>.L...b.v..u.A.G...[.X.R.A.iCR.j</P>..<P>.f.[.^..AWindows..Word..Excel..........\....B</P>..<P>.X.R.A....Windows.v...O......\..t......A[..W] ...j...[.... [.X.R.A...R.s.[] ...g.p............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm6q01.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	1020
Entropy (8bit):	5.828317400132831
Encrypted:	false
SSDEEP:	24:WluSxUJFWMn9ymyImHRp0rbWHaX7Vy/kXMx5GtUAYsq:qLUAmyhsrkaXZyZGtUAYR
MD5:	67377D3323747870DA0AAE5344496579
SHA1:	F0C23C33B63E2E50A3B6CE16AE6F55DDDEBC794F
SHA-256:	736584311F8E0BB522CC4AE75828E5880A3DCC539AC58FF118BFA7A2169D3BF5
SHA-512:	42A3D0FB467ED6BDA9B84E4FFCB497538A455A5C2825BF2BFA72A03D7672C847C986C421A8916DD242D1020E5589E184E1C716E07F7E1D5F854337BC52DB628C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.O...t...R.s.[.i..W...j...[.j</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="3.ne_qa"></A><I>..W...j...[.F.O...t...R.s.[</I></P>..<P>..........`..O...t..AWindows..N...b.v.{.[.h..R.s.[......A....v...O......\..t....\....B.</P>..<P>.O...t...N...b.v.{.[.h..Z.b.g......A.O...t..K.{.`....f.B.X.v...C.\........A[..W] ...j...[.... [.O...t...R.s.[] ..I........B<B></B>.T.u...j...[....A[.r.b.g.}.b.v] ..... [...^.t.@.C..] ..I........B<B></B></P>..<P><I>.r.b.g.}.b.v.`....A[.y.C...g] ....p.b.P.[.W...g.p.....W.......B</I></P>..<P><I>...^.t.@.C...`..........e............A.I.u.W.F.N.g.x.[.X..`..p.b.P.[.W...W..\....B</I></P>..<P>.N...b.v.{.[.h..Z.b.g.....v...b.g..AWord.t.@.C......R.s.[.......BWord....A.t.@.C.......u..J.[.\.....Z.b.g...A[.\..t..] ..I........B.......A............P..................B</

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm6rj8.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	1075
Entropy (8bit):	6.026913348431452
Encrypted:	false
SSDEEP:	24:WlFUd4cVpgPW70zKxLN8A7vPdqwpvEEhFW5:q3OxQA7vPF5hF4
MD5:	46455D433EC2A5E8A4B35194D23E6AA5
SHA1:	6CFC5373823B060C8E4E69361054172B8BBFA20D
SHA-256:	D0982BA9D4D791D225385B5F230EDCB1B420FAAA1258CB2244D47EA71BE52CCC
SHA-512:	03E59A8DDA991F46E5A943C009E31F762E9E25F7FB1F4F96D9B8A023C0714731B2AFC29C689CA48E51DF9404037B27AEAEC4C2EBF3A36F98EFEA700BD71A96CC
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.L.^..I...i..W...j...[.j</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="11cfrtd"></A><I>..W...j...[.F.L.^..I..</I></P>..<P>.f.[.^.x.[.X.........L.^.....A..W.A.\........A[..W] ...j...[.... [.L.^..I..] ...N...b.N.....A.....c.[...o.[..f.[.^.x.[.X.A.C.R.. <IMG SRC="../images/bm16.gif" ALT="" BORDER=0> ...N...b.N......B....f.[.^.x.[.X............L.^.....X.g.\.........B</P>..<P>.f.[.^.. [...O].A[.Q..].A[...N....].A[.e.X.g....].A[.t.@.C.....].A[.R.....g] ..........A<I>....</I>.p.l....e.{.^.....N...b.N............B.</P>..<P>.L.^.....N...b.N....n.C...C.g.\.....A[.I..] .{.^.....N...b.N......B.I.......f.[.^.L.^......\.........B</P>..<P>Ctrl..Shift.L.[...........A........[.U.[......x..I...........\....</P>..<P>......f.[.^.L.^...I.........A.....O...t.........F..\.........B.e.f.[.^...A.....[.U.[...

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm7243.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (538), with LF, NEL line terminators
Category:	dropped
Size (bytes):	1242
Entropy (8bit):	6.240496476782609
Encrypted:	false
SSDEEP:	24:WlTf+k3IO4TM6tmWRAE1UoH4MdDDvy/0wWGU:qSk3qYWb/YMdDKs3
MD5:	D4A828126B5E3E69B0C663F796CDF8CE
SHA1:	34E652E0F09F5DB530DF4CEFD0121A767113DEFF
SHA-256:	FD385EFC430F4B436E7DEAEA95F487313752AF9B5651E54FFD83A09FE8661C03
SHA-512:	AD11E4D90571D461C0F122125142FBDED7C6C174562F5C6BBBFAC67EC790702F2BC874FBA6E87DC64BC220546E26B2F12E4504F2DADAFE7A1A25E061C31269DF
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>3.F.^.F.o..</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="trichromats"></A><I>3.F.^.F.o..</I></P>..<P>.S...w.I.A.....w.I.A..U.w.I............A.........<B>3...</B>.^.C.v......F.f.......................B......o.\.......l..A<B>3.F.^.F.o..</B>........B..L............A3.F.^.F.o...S...g......v.........3...g.........K.v.......B</P>..<P>3...v...C.}...[.F.....g.p.....J...[.}.b.`...O..A.F..\......p...t.....b...`........BCIE.i...........j..1931.N..A.u.W.......v........v....O.F.......F...w....A.W...V.X.e.....l.....'.B.Z.p.I....R.......ACIE.....v...C.}...[.F..X.AY.AZ..i..A..A.......j.w........B.J...[.}.b.`...O..K.v..X.AY.AZ.......A........x.Ay.Az..\.........Bx+y+z..1.......Az..l..Ax..y..l....m.F.......B.......A.w.....P.x..F.......S...F..Axy.O..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm7560.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	959
Entropy (8bit):	6.039657749190735
Encrypted:	false
SSDEEP:	12:BMQkzF06usMeqMvC49sPfVUDUnbd9mOTspLot5+j/ZAXGkbrRi4unGgenhr7aABa:WlGiC4WlbP1TspCKZA2ujLgenhrW4oht
MD5:	E6102B63FB9BFE10E017D12B12DEAC78
SHA1:	D0B00B0A1C3D6E1ABB80DB9E8CEE3D9028BA9E13
SHA-256:	ECB6D41056BEB1AF8740F1221C918747915FCA9A839D312D048B38D286E6BCCA
SHA-512:	156F7C826AFA59D8BDADBF65E9E6B27631056A65DA57084171BD7CAD142EA916BE411BC5A3635B7257476E4197832B174F4ACDDAFD35433C20AFDD22175C404F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...j.A.O...t</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="linear_graph"></A><I>...j.A.O...t <IMG SRC="../images/bm12.gif" ALT="" BORDER=0></I></P>..<P>.f.[.^.....j.A.O...t..\........A.c.[...o.[..A.C.R.. <IMG SRC="../images/bm13.gif" ALT="" BORDER=0> ...N...b.N.....A..... [.\..] ...j...[.... [...j.A.O...t] ..I..............B.L...b.v....i1.`85.j..X.........\......A.G...[.X.R.A..Y........v...b.g.......B....`........g.p...........B</P>..<P>.f.[.^.`....\.....@...A........g.p..\....B</P>..<P><A HREF="fm6i4a.htm">.._.I.v.V....</A></P>..<P><A HREF="fm549z.htm">.X.P.[..</A></P>..<P><A HREF="fm29bn.htm">?........\..</A></P>..<P><A HREF="fm5a7n.htm">.F..I.v.V....</A></P>..<P><A HREF="fm2x5t.htm">.f.[.^..t.B...^.[....</A></P>..<P><A HREF="fm7ppd.htm">.f.[.^......</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm760n.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	898
Entropy (8bit):	6.056942189970071
Encrypted:	false
SSDEEP:	24:WlNrfbwVoqFqmoBBQnW0pVFCzL8vmE/Eyt:qq6HL6WCCzovmE/EU
MD5:	8C34C304B424588F4B13E5CA92497CDF
SHA1:	58E5BF277D84050FDC2324493673FD211682CC66
SHA-256:	03B3A312F32601013084D983490579A9AD556985D9390C158F8E65D286948CFE
SHA-512:	E2A1B69B4E773A3B11CD3CDDD99D2B390B04227C33F50276C51D2B51CE9AF43577EABABAC8F1D457E85BF0A44F5F5E00208B041B17E370636217DAD9412FCA8F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.V.K.i.t.@.C.....j...[)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="file_menu_new"></A><I>.t.@.C.....j...[.F.V.K</I></P>..<P>.p.r......A1.....f.[.^.x.[.X...K.v.............B....A...............f.[.^.x.[.X...................B.a.@...A.a..i...A.a.A..`.....o..Q...j......f.[.^.L.^............K.v...........B</P>..<P>.V.K.f.[.^.x.[.X...J.....A[.t.@.C..] ...j...[.... [.J..] ..I..............B._.C.A...O.{.b.N.X..V.....f.[.^.x.[.X............B.V.K.f.[.^.x.[.X.....A...C...t.H.[....^.C.g...o.[..\.........B</P>..<P>.x...F......f.[.^.x.[.X........O..f.[.^.x.[.X.........A....f.[.^.x.[.X..S...L.^...........B</P>..<P>.f.[.^.x.[.X.t.@.C.......g...q..<I>.hdb</I>....B.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm7dgf.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	261
Entropy (8bit):	5.428176699942735
Encrypted:	false
SSDEEP:	6:B8FQk+HryftzgYiTdJhdiNMeqlnKJyTZacWTcvyltT:BMQkzF07sMeqkJyTc9AKr
MD5:	636DB8196A55F32DE387C1B146ED3797
SHA1:	07B2B474FAF722925B7C0F3C2F4628CED14A5A9C
SHA-256:	63500A782C6531B2CA7A5008AA1DE583E12D87788B03B86ACBBFC9C58080EF7B
SHA-512:	CBDF3CAA4062FF70C42BF893759737CBAD3BC1873D0771F17A8CE172149D26A0D38662963E138A08B56BF4A645342FBFE1B537CA59C46C48EBD5289326AA327C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.i....j</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">..<P><A NAME="0_olb_"></A><I>.I..</I></P>..<P>.v...O.......I........B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm7hf5.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	665
Entropy (8bit):	6.140974166130882
Encrypted:	false
SSDEEP:	12:BMQkzF0HvsMeqWjQ3TjcBsHQMTk44YEyjclgd3jc6aEyTFTkEASZf0tM2CFc:Wl4cEc0EXlgm6TQf0K2V
MD5:	ED8407B02494A8C08B6DC4D016B9F830
SHA1:	BDC76EF67291F8850F43F128DBD2CC081217CD5F
SHA-256:	381B55B64EB79EBDDB0DD8EFEC723DAF41B13CD1D02C230F411731A226E2E89F
SHA-512:	CEF9AA75287A59D0D492734D419BEC02C05F4B4D66566A58101CCC2D691FE33218FC3FAAE6D838D6207AFA01423F6689FDFEC19318248549D857077FD3F71C69
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.....F....</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="percentile_1"></A><I>.....i....A..I...T...v...j</I></P>..<P>..... [...v.G...[.X.R.A] ......B.....e.X.g.......A15..`45...u..I...v.O...[.v............. [...v.G...[.X.R.A].B</P>..<P>....90%...A ..... [...v.G...[.X.R.A] ...A.J...[.}.b.`...O..o........g.b.v10%......\......B</P>..<P>........A.u..I...v.O...[.v.....494.l..................B</P>..<P>.......A[<A HREF="fm4c81.htm">..E..</A>] ...Q.............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm7hf6.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	699
Entropy (8bit):	6.122985433099435
Encrypted:	false
SSDEEP:	12:BMQkzF0JsMeqWwmEjcB6/IDbjclgd3jc6arFmNitDVVD9qr0tM2CFc:Wl2/qr4lgm6KJVDUr0K2V
MD5:	E7D5700AF0FC326AA719111CA5062A76
SHA1:	01F665D33E37D300C29B4D2DB30C4D4F31F707F5
SHA-256:	03033F9EDE96F6C9FA147111DC75CD99F36612ACC56122296464D563B765B51E
SHA-512:	54249FBDBE8AFD23A34215089CB00A9D53948DC87F627E8D4978971A8CAE938D8DA11094DDE5A1769CEC70E8D464DEB5CE4D2C843564567E1DA6715F3F0F37DC
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.....i.o.....j</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="percentile_2"></A><I>.....i.J...[.}.b.`...O..o.....j</I></P>..<P>..... [...v.G...[.X.R.A] ......B.J...[.}.b.`...O..o.............O...[.v.. [...v.G...[.X.R.A].B</P>..<P>....90%...A ..... [...v.G...[.X.R.A] ...A.J...[.}.b.`...O..o..........g.b.v10%......\......B</P>..<P>.y.C...g...[.J.[..F....E.i.V.F.[.h....A...{....A...{.Z.p.j....i....].....A...300.l..e.X.g.................B</P>..<P>.......A[<A HREF="fm4c81.htm">..E..</A>] ...Q.............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm7hf7.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	710
Entropy (8bit):	6.094092479680522
Encrypted:	false
SSDEEP:	12:BMQkzF0iU+0sMeqW+Em2jcB6Yybjclgd3jcysB1ijvw6tx9o0tM2CFc:Wl6+2K8ZPlgmysLXCxe0K2V
MD5:	E929459546DE8FA6A5200E1EE547257B
SHA1:	E0704A6FA0346031B8FA2B733A22CA639D4A6C0B
SHA-256:	722CE59E15BB50A21E5E02E0F39925907DB4A37D917C03A540CBB281394B1B6A
SHA-512:	6B20C70D14E5213F50BF088A0FB3E84CEBCC988889DFBAF7D80682331D20316174A3AB10BA57E4040B5C4E14572A419B910C0EB1EB8830CFBB0F8731B59B0E37
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.....F.o....</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="percentile_3"></A><I>.....i.J...[.}.b.`...O..o.....j</I></P>..<P>..... [...v.G...[.X.R.A] ......B.J...[.}.b.`...O..o...L.x.....O...[.v.. [...v.G...[.X.R.A].B</P>..<P>....90%...A ..... [...v.G...[.X.R.A] ...J...[.}.b.`...O..o......g.b.v10%..\......B</P>..<P>.....A.....A.~...A.v...X.`.b.N.A.e.L.X.^.C...A.y.C...g...[.J.[....F......{.......3.N....20.N..o........A150.l..e.X.g........W...........B</P>..<P>.......A[<A HREF="fm4c81.htm">..E..</A>] ...Q.............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm7kqh.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	872
Entropy (8bit):	6.099926272707079
Encrypted:	false
SSDEEP:	12:BMQkzF0Lb1h0sMeqWn1yXvMX5U8h6Ib7c7lP1A8Owc5dvMQFPhZ8YKJjjKh:WlS8W1Wv85Uo7fpd5tNxB
MD5:	0EC7FA1C0217B36025121B7744800B6D
SHA1:	343FF4E7ABD566022A9F0171D628EAC384975D50
SHA-256:	4E58974C5D9C7EAFC6F4C743AB7AA30B30CD977232D43A83F1D96ACCEDB5C990
SHA-512:	D29CB2A668DA4CB33941E8E9D6F858C40A934326FB786CED3D7656089DD7C78583B91F00FFC037E94789430FCC88E38E3DCC9C69854DA5D739503DA383AD9DE4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.S.F.o...</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="monochromacy"></A><I>.S.F.o...</I></P>..<P>.S.F.o.....A..........F..S.......F...v........B.S.F.o.....A.g.............................A......<I>.F..</I>..........B</P>..<P>.S.F.o.....2...^.C.v.........B.W..2.F.^.F.o...A.....W................A.....e....@.\..........B.]....A...............A.............i.....j.....o...R........A.....\|....U..............P.[.X.........B.W..2.F.^.F.o..A0.001%..j....e........B</P>..<P>....1.F.^.F.o...1...^.C.v.....i.....j...........]....A...I....o..R..........A.W..2.F.^.F.o.......y............B...................B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm7lkj.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (626)
Category:	dropped
Size (bytes):	1003
Entropy (8bit):	5.967762875334052
Encrypted:	false
SSDEEP:	24:WloOWiNS9KGMCeUqjl9fRn7ABy8Pw6VOQa2nTG4h:qo4gKjRr9Jehtzh
MD5:	3E6C3A212828E760CD5E31AF75B45CEE
SHA1:	493913F573B98C8432100218E868C5AAC143EB1E
SHA-256:	7045E591B243C0028CD8FA222B444A11D341DEE2CDB2593F13BF2FAD4A832919
SHA-512:	EC73482BD9F7C4338BB3B90DE7ADEA6F767AFC9E022911DEB854B44101C9C5BAB3F28852688B368C68CE9279FFC99D45F70F03EFBF2BF6B36E1716328F8152DA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.P.F...F.o..</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="monochromats"></A><I>.P.F...F.o..</I></P>..<P>.....F.f..1.........l..A<B>.P.F...F.o..</B>...........B</P>..<P><IMG SRC="../images/bm2.gif" ALT="" BORDER=0></P>..<P>..L..O...t..A...z......F.f......z...X.y.N.g.....\............B.g....<I>A</I>......A.....F.f..z........\............A.g....<I>B</I>......A.z.....................B<I>A</I>..z....<I>B</I>..2.{...\.............A.....F.f..z.......g....<I>.m..].n..........B</I>........G.l...M.[...A<I>A</I>.....<I>B</I>...............A.P.x..............x.........A.g......................B.....A<I>A</I>....x..2.{.....A<I>B</I>..P.x...v........A2...g........F..........B.......A.P.F...F.o...g..........F...............A<I>.F..</I>..l.........B</P>..</BODY>.</HTM

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm7n8x.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (310), with CR, NEL line terminators
Category:	dropped
Size (bytes):	1038
Entropy (8bit):	6.037209672583791
Encrypted:	false
SSDEEP:	24:WlloXS1hX0/wIky+0pm3H6lLPWumW2PaLJ/95zs:qloivX044+/3aZ/+PMv4
MD5:	68DE450CC619D1E5591F4E144BD122D5
SHA1:	6E6974CC94E89E1F8C3C766B486693C3E0BF7DC9
SHA-256:	32913B88ED346B16BDCC21DDFAE97A237265502F004B7D8A1A84615BE4C2643B
SHA-512:	604FC9CB0CC9EB14FF636A020A8C1D9F9BC360A99E4916A5F5EDC393C5E38C11426397249990BE7DE5103928C67ACB0842344A933E7E064475C3CE5186F620A2
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.O...t....</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="7k9r.q"></A><I>.f.[.^.... <IMG SRC="../images/bm14.gif" ALT="" BORDER=0></I></P>..<P>.f.[.^.....AOS..T.\|.[.g.....v.....^.[...........B.........A.c.[...o.[....v.....^.[..A.C.R.....N...b.N.....A..... [.t.@.C..] ...j...[.... [...] ..I........B.f.[.^..O...t..A[.t.@.C..].^[.....o..] ....PDF.............A[..W] ...j...[....N...b.v.{.[.h..R.s.[.........\....B</P>..<P>.f.[.^.....A....f.B.X.v...C..\.............`...i..F...j.A.^....^.t.B...^.[.....^.t.B...^.[....j..v...b.g.......B..............v.f.[.^..A.O...t.............B...v.f.[.^..I........A[......].iMac..A.v...P.[.V.....j.A..... [..W].iWindows..A.v...P.[.V.....j...g.p......B</P>..<P>......f.[.^.Z.b.g....f.[.^..........A............A.....A.e.X.g.....A...v.G...[.X.R.A

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm7ppd.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	574
Entropy (8bit):	6.034101941227209
Encrypted:	false
SSDEEP:	12:BMQkzF0fRsMeq7sxRgSySs+JHSAiVNIyB3Fc:Wla7sCaAG
MD5:	B06199CC130E8375E2398EEB7FE94C77
SHA1:	9ACFC2CB8C4E9F3D0F122A485CAB6FD04BAD05A0
SHA-256:	298657EFC5CD2B0209970750E5787C53C963AB34FD685973F3FA904705A4B828
SHA-512:	8D47CAB2398AB21112C3D02A93CA913F6B70A476940C3866726E20D2F83F9C99A1F03C73499ECA7D0F48E94218BE0077DC821693A7F60756F262772253116252
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.......</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="averaging_data"></A><I>.f.[.^......</I></P>..<P>...l..f.[.^........A.p.^.[................B</P>..<P>.............L.^...f.[.^.x.[.X....I.....A[....] .@.\...N...b.N......B</P>..<P><I>...L.F[....] .@.\..A2.....f.[.^...I..........L......B</I>.</P>..<P>.......A<A HREF="fm3fjn.htm">.f.[.^.x.[.X.........L.^..\..</A>...Q.............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm7rub.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	727
Entropy (8bit):	6.121310037882762
Encrypted:	false
SSDEEP:	12:BMQkzF0PLWsMeqv7ohb8O6+hAdn1dnG0fmjYMvbuThZU+mbBUakuzVKAA/bAT2Ss:Wl8Lsjmb8Ow+0f4YMvOZUVKKRVs
MD5:	021FAA240164CEFE493A7A96F595B7D9
SHA1:	52906BC6E369DB8B9E99BFFB046608A1ED368B00
SHA-256:	E4D747684D7017DCBB9877E20570B0E0A572A96D1EBD1826345B304B93033AC0
SHA-512:	072229E95EA36FDD31085AD3EE7C6CA8BAD4181BDEF45E73B703C106AD2498916F3EFC11A5587E114353EEC8336E22DC7AE3EC6105DBD6DA49161537AE1CC197
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.....O..O.F..</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="youngs"></A><I>.....O..O.F..</I></P>..<P>...o.......v.......2.........A.g.[.}.X.E.....O...........i1773.N.`1829.N.j.B.....O..A.l......S...F.........e.............._.........A...o.......3.F...e.......................B</P>..<P>.....O..O.F.....50.N..A.}.b.N.X.E.F......A..]....p.....l.X..F..g.........@...F...s......A...........m.F.........B............A3.F..v...C.}...[.F.....................A....F..........................B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm7z8q.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	1659
Entropy (8bit):	6.222330607109118
Encrypted:	false
SSDEEP:	24:Wlduj7Nu085vCprpahUeG/+HZ5+vhfBONnyF9Q06tJZtOnIttXguD3t:qoIX4prIGSkxAn1tTtOIttXguLt
MD5:	BC91FE945E4310E0ECA520F1BC318DCB
SHA1:	596E860228F0380271EA66AA3ACFBC4A51447B28
SHA-256:	0CA115417DEF5415D812B5F464F5F369BAF8ACD06427C8EAB953F786AF20B060
SHA-512:	F7D27D524F89C68021446F21A304E7B53F0A5B6CA9C44597510582F3ADD25037B93439F411E71185BBF2990E56448312CD8F698BB74B7474D82D61515ED37203
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>FM .q...[.._.e.X.g.....o..Q.....o......</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="3h_y_oj"></A><I>FM .q...[.._.e.X.g.....o..Q.....o......</I></P>..<P>FM .q...[.._.e.X.g.........o..Q..p.^.[....A...............2......W.........G...[.........o.........o.......B.G...[..................A...o...Q.^.C.v.....o.......B</P>..<P>...o..Q......l..T.^.I..p.^.[....A.{.v...O..........f.[.^.x.[.X...W..i<A HREF="fm0bdx.htm">Example.hdb</A>.j............B</P>..<P>..Q..x....u..N.v...............B...x...Q..A.G...[.X.R.A...............m....B............A......u..N.v.......v.G...[.X.R.A...\.........B..D.....\.......y......A.u..N.v...\.......A.{.e.X.g.....o........B</P>..<P>.p.^.[.........G...[..._...u.i..N......j..A...o..Q..^.C.v.....o......B..Q.^.C.v.....o.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm83zi.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (393), with LF, NEL line terminators
Category:	dropped
Size (bytes):	1404
Entropy (8bit):	6.117184984067254
Encrypted:	false
SSDEEP:	24:WlMsE9YzoS0Bhyrn+O3sDBAywqBccKL6c5S3W2Yh8Mep1kBjPeW:qy9rh2+O3sVA8GR321MvBGW
MD5:	CD1EE29F86ACC66FDFA538D9AE554730
SHA1:	08F8B65C6D422588C0AFB85EB0135C1D73D779F6
SHA-256:	E22422552CB0592BBF7A621EEA4E32787D8F3A7703BA0C1568761BF2D21C0AC2
SHA-512:	4E837E637FFCC76051F6951850C86EB0DD78BB1B9A0A5E53FC30D3349CB32E45DAA332451380DB049250F91610DEA2392FC8DCEB4B562FDADA7A52D2AD326217
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.F..m.o</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="color_perception"></A><I>.F..m.o</I></H3>..<P>.u.F.v..l.....o.....A......I......v.f....B..x...........F.....A.........s........\......A.u.F.v..m.o..................B.....e...r......A.J...[...................A<I>.L....</I>..................B...R...i....m.N....^..........B.{....F...............\..................B</P>..<P>.u.F.v..A....................................B.d.v....b.Z.[.W..F..V.O.i....\.........B....A...<I>..</I>.....<I>..~</I>..\...A...<I>.O.i</I>..<I>.I.[...C</I>...........B.F.....A..E.i..F.d.C.z...A.d.q...i.A.p.C.v...C...A.K.X.{...x.A..i.e..j......L...g.p..........B....@....A.F....V.X.e.....R...Z.v.g....K..A......w.K...@.......p..........B</P>..<P>......\.N.......A.R...s..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm8igl.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	604
Entropy (8bit):	5.644895307131875
Encrypted:	false
SSDEEP:	12:BMQkzF0fI2rsMeqQ022W9/Rqja+felUVxymQ5PAUpv+c:WlMhQd/AnfYUXymM2c
MD5:	7B2AFF5293CEE97EC1DA80C968B9BC95
SHA1:	CAEE2F2F6AB3E7CFE098A169C2500BD560F44BDF
SHA-256:	AD3FBD20A566149167EC950C253C9F09F72F9C5610CA7F89AC661FC6DA1ABB13
SHA-512:	0ACE97C1EF80015B6E64C243BD9B0B615B38A097D484D2A194B218FC714E99C3EA8022FAA8AF6C5D4B9C04AD57B89EB10A1631C5C3EAE6EF7BBD24AFB42FA622
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.t.@.C.....j...[</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="file_menu"></A>.t.@.C.....j...[</H3>..<P><A HREF="fm760n.htm">.V.K</A></P>..<P><A HREF="fm59da.htm">.J..</A></P>..<P><A HREF="fm9i7k.htm">...O..t......</A></P>..<P><A HREF="fm1xf2.htm">.O...t......o..</A></P>..<P><A HREF="fm6m3u.htm">.X.R.A......o..</A></P>..<P><A HREF="fm043d.htm">...O...........o..</A></P>..<P><A HREF="fm7n8x.htm">...</A></P>..<P><A HREF="fm7dgf.htm">.I..</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm8iie.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	494
Entropy (8bit):	5.842959926002597
Encrypted:	false
SSDEEP:	12:BMQkzF0DksMeq8fAZcNhidAcqmVk9AcaOnAcrTd/Y:WlJ8fACjidJqmGJaOnJrTZY
MD5:	F5DF32010028ED61276CEEEF9CC11DF9
SHA1:	3BABDC9FA91CF6297ADE5C5E40754DA5DF59660F
SHA-256:	473A7C406745B817DA7D0018ED285463AB114352CFC2C8406E537977589D79DF
SHA-512:	4CAC477BDA35BC21F644C6D4682AADE650ECD9F1DA2E52AEA0F5BF1D0C21EAD02D22D5CAE4E89465EA0B4F6880653206C5D46FFD601A571F802DDA6E81F79865
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>....</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="146r.h6"></A><I>....</I></P>..<P>.....A...v.G...[.X.R.A....... [..].A[....].A[..] ...........B</P>..<P>..F...v.G...[.X.R.A .. 16</P>..<P>....F...v.G...[.X.R.A 16.`100</P>..<P>..F...v.G...[.X.R.A > 100</P>..<P>.....A<A HREF="fm4c81.htm">.K..f.[.^</A>................B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm8siz.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (563), with LF, NEL line terminators
Category:	dropped
Size (bytes):	1514
Entropy (8bit):	6.236556673488591
Encrypted:	false
SSDEEP:	24:WlkqfW4vVClAUfzNVSHAohkuB0NQr+J27I91C1WqnVpEmmRceCokfHZ2OPP+wnrw:qhrClAyNVcAoGg0i+O41C1VnVpE/Rcet
MD5:	62550B0A2B9BE9979BC9C28461F96398
SHA1:	33EE1DE06E4A9B430B134CBC41CB8710260BC7F0
SHA-256:	A26BD4348387477B91BD71BD2B70AB6ADE8273F9C74A8DAB102CC2141E55C1BF
SHA-512:	54D063386180E2BCC4AD9C25832A2F494A43179DDE9DC59F52E03C36E1C97C0E3F8F827CC6F64C158C6662113BC7B0EE77B239A3F5EB935B535266AD904192F2
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...o.F..Q</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="2p8e2k"></A>...o..Q</H3>..<P>1794.N..A.W.....E.h...g..........o..Q...........s........B.....A.Z....F..................A...g..o..................B.h...g.....g..Z.........Q................A..............I......A.F.t.....{.....g.p...........J.n........B.h...g....A..........q..t.......F......m.M........B..........A....g...v......<I>....</I>..................B....A.u..V...F..v.......A.........o..Q..\...p......g.p..........B</P>..<P>..V.I...o..Q..A......F.f...`............B...o..Q.......`....A.......j..............B......A1..........O.....^.C.v..............A3......^.C.v...1....A..........x........F.f..................B.......A...o..Q...........A......

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm8vi2.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (369)
Category:	dropped
Size (bytes):	654
Entropy (8bit):	5.974227560446152
Encrypted:	false
SSDEEP:	12:BMQkzF0PC8WsMeqvZC89P8oDFg5njtTNgnF76nPbx+CLumk6zkVbBDGYl:Wl8vsfBDF2xT0tMP0mHAGK
MD5:	1C38B4390D70B017B73D7BCA3992B20C
SHA1:	AA01A762838B31BB207F25D6F91B1A48EE33B834
SHA-256:	66B1DF09B71BD897CE80E94C2AE6B8E60559A5E3D07C145212938593E52F5B31
SHA-512:	F1FAF4671B0628106757DB06B2D5B4C047FE6D1E4159E95CCCF137880712C499352055BD6DBD077197E5EB25AEF42A75CE63BF064B3854B571E1A5BFF209AC4F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.....O...w.....z...c..O.F..</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="young_helmholtz"></A><I>.....O...w.....z...c..O.F..</I></P>..<P>.w...}...E.t.H...E.w.....z...c..A.................s..........A..........O................B.....A.S.......F...O.F.......v..........................B..............A3.......e.........x...d..............\......C.t........B.w.....z...c..O.F.....x.....A...<B>.....O...w.....z...c..O.F..</B>.....m..............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm97vy.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	355
Entropy (8bit):	5.526489341029745
Encrypted:	false
SSDEEP:	6:B8FQk+HryftzgYiTdGIQ0iNMeqlxYMWI7k3UogdjBacgVC8cgdtog4T:BMQkzF0JQ0sMeq5Y3U9dsvo
MD5:	320F1BD0F1C01B1C6D7CD521E7E3184F
SHA1:	98D6E192111942485B57D96BEAB0DFCF8B8ABD96
SHA-256:	9494B8BE66FF4121E79EAEA947D515C6CAF5AF6FB52E103731120E12CD0903BD
SHA-512:	E5AE8EE4926068452278D61A261FA0B0D36472BC2B6990BB766EC2D5C661E13B9121219CF5149152C48B2C6FC6F33DBFA5A5C32F8A521A609FCED2A7DFA18ED5
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="administration"></A>.e.X.g.....</H3>..<P><A HREF="fm4ndz.htm">...</A></P>..<P><A HREF="fm0llx.htm">..</A></P>..<P><A HREF="fm359j.htm">.._...@</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm9i7k.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	593
Entropy (8bit):	5.956893743302825
Encrypted:	false
SSDEEP:	12:BMQkzF0Hzl2OsMeqfAI2pdjA/nmhAKenJYAIO+XEHbt:WlgfYDT4jt
MD5:	A23498E396E32B65CB138982C2CC2F35
SHA1:	8918B91AAE535806D5E8FA7F0388B6A4F0F43020
SHA-256:	4F3B3A592B5F67762BEE69CDA39A5845BDB862AD08612BEDB2F80ACEBD48A20B
SHA-512:	04DDD31631666799F16EBAC022AD4DEEB9786697345528986BB53BC94C2FFA9CFCE9ED43AE27945653600960FB49BEA07AC50652D102DE0130DFBDC31BFBCA29
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...O..t.......i.t.@.C.....j...[.j</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="3_gii4p"></A><I>.t.@.C.....j...[.F...O..t......</I></P>..<P>....@.\..A.....f.[.^.x.[.X....t.@.C...........A.V.K.f.[.^.x.[.X......g.p....f.[.^.x.[.X..w......B.....A.f.[.^.x.[.X..o.b.N.A.b.v................@....B</P>..<P>.x...F......f.[.^.x.[.X........O..f.[.^.x.[.X.........A......f.[.^.x.[.X....S...L.^...........B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm9p4j.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (312)
Category:	dropped
Size (bytes):	759
Entropy (8bit):	6.125162469839702
Encrypted:	false
SSDEEP:	12:BMQkzF0ORdsMeqPptADAWHoARNUqoOApeCmnNRM+atGmoTA4q7e:WlbxQRHTGqYLmXM+8G/Td
MD5:	A368A2FA52805030206B35211C7F87AC
SHA1:	F878A37FA743619211E44EFE80D2D56DE62B1052
SHA-256:	9CE8E90B932775E02D8BBC9ABB91717FA01894B5999A0F4B2159A18E2DCF7730
SHA-512:	99DAB7E25B07B8D6C097EC8C8DF669A427191576FF67FB043D3EA53BC5C917ECF2CDE972DD61A3A77A9365AD4D5E3245E769756FBE7576E7522A3B084AB4B8A4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>..V....Q</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="acquired_defects"></A><I>..V.....o..Q</I></P>..<P>.F.o..A.l.........................B...........A.................x..............B.F.o......A...I..a.C....a.C.A.g...E.}.A..A.L........I.o........A.....................B..V....Q...V.I...Q......A1........................A.j........e........B</P>..<P>.a.C....F.o...e....A..N...F.m................B......R.....A..V....Q....F...\.....e.....A........o.e.X.g...^....Q.......o.................B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\fm9sfm.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	887
Entropy (8bit):	6.035626227419261
Encrypted:	false
SSDEEP:	12:BMQkzF0qsMeqAv5Hz9HJTJB8X0md8s5pcEl/KG8T2SkDh/GCvrHk:WlnAvdz9HuSE5D8JkDVGUE
MD5:	26421A76CE96F422DF8FBDCDA7742606
SHA1:	50D65546069A61D99573C5F0712D2D2461218706
SHA-256:	F2F6BEC66307222A0969F0402C85D9FC5DAE768AE322845AB944E96962F2AE3E
SHA-512:	BCE861C0439CE3D194E51E19734196FD08E2AA5931339B7D6E0F9829CC90D2241E9A83A3E9D9FD4A9070F445104A69DA32A89069943CB131C2CBEC200357769B
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>....</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="6wkrur"></A><I>....I.v.V....</I></P>..<P>.{.v...O.......A.p...t.......c.[................B........ [....] .E.B...h.E..\......A.O...t..............B</P>..<P>.\..........e..I........A[..W] ...j...[.. [.I.v.V....] ..A.N.Z.X............B</P>..<P>..........g.p..\....F</P>..<P><A HREF="fm2k85.htm">...v.G...[.X.R.A</A></P>..<P><A HREF="fm26k5.htm">.........v.G...[.u.X.R.A.F</A></P>..<P><A HREF="fm5fw3.htm">Vingrys....</A></P>..<P><A HREF="fm8iie.htm">....</A></P>..<P><A HREF="fm7hf5.htm">.....i....A..I...T...v...j</A></P>..<P><A HREF="fm7hf6.htm">.....i.J...[.}.b.`...O..o.....j</A></P>..<P><A HREF="fm7hf7.htm">.....i.J...[.}.b.`...O..o.....j</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\index.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with CR, NEL line terminators
Category:	dropped
Size (bytes):	614
Entropy (8bit):	5.336199792612837
Encrypted:	false
SSDEEP:	12:BMQEdOaA9zFUl3OxPDwAhHL91DwmxRLwAhbFAtT87w1qgPC:WnAZeUxzpL4mxVA878PC
MD5:	9FAB6E5FDC3200753274666DA8A87519
SHA1:	2A2D8393644084B6ECA88892012BC1760BC7A1A6
SHA-256:	0150928E6CA3517D38F867C76E1A6B231B9BAF7DD26017FC0DD18EB6BF016175
SHA-512:	07C399F211EDB211D789E7FA61BE19D8C0D5088EFBEDF3E6F10778F32587323AD13BBB47B4E01224A3B30060FEA453ABFEC34E2D4A9A2CB4370F0955B6959BCF
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">.<html>.<head>.<meta charset="SHIFT_JIS">.<title>.t.@...Y...[.X.E.}...Z..100.q...[.._.\.t.g.E.F.A.F.w...v</title>.</head>..<frameset rows="" cols="200," frameborder="yes" border="2" framespacing="2">. <frame src="indexList.htm" name="leftFrame" noresize>. <frameset rows="80,*" frameborder="yes" border="2" framespacing="2">. <frame src="nav.htm" name="topFrame" scrolling="NO" noresize>. <frame src="fm0001.htm" name="mainFrame">. </frameset>.</frameset>.<noframes><body>.</body></noframes>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\indexCIE.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with CR, NEL line terminators
Category:	dropped
Size (bytes):	994
Entropy (8bit):	6.220056890697585
Encrypted:	false
SSDEEP:	24:WLZyU+6tbgjWRAwN1Uo704Mdf3vy/1a4EidiC:KUu6WdH/lMF3Kda4EidiC
MD5:	63DA3456A8B628587140C8FD948B4808
SHA1:	5052FBBE22A044A14565CF30CA1F2F02E526FCE7
SHA-256:	83293D60257008F25A5384D3906C2A8A123BD73C6B13C567741BE8B7C1FE06D5
SHA-512:	9C7E871666050C44E8DEC73A45B46EFC6185FB82172FBAAED9B20DF2F5F2E2CE81E7E37CD0BE31D4CB177BB64BAA0769AE95B47473EE62775BC44452301C9FED
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta charset="SHIFT_JIS">.<title>.....h.L.......g</title>.</head>..<body>.<p> </p>.<p>CIE.F.x.}</p>.<p>3...v...C.}...[.F.....g.p.....J...[.}.b.`...O..A.F..\......p...t.....b...`........B</p>.<p>CIE.i...........j..1931.N..A.u.W.......v........v....O.F.......F...w....A.W...V.X.e.....l.........B</p>.<p>.Z.p.I....R.......ACIE.....v...C.}...[.F..X.AY.AZ..i..A..A.......j.w.......</p>.<p>.J...[.}.b.`...O..K.v..X.AY.AZ.......A........x.Ay.Az..\.........B</p>.<p>x+y+z..1.......Az..l..Ax..y..l....m.F.......B</p>.<p>.......A.w.....P.x..F.......S...F..Axy.O...t..\.........Bx..y..2.......e..F.x.}...........B</p>.<p>.....F..A.}............z.......B......3...v...C.}...[.F..........A.}..............B</p>.<p><img src="../images/chromaticity.jpg"></p>.</body>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\indexCV.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with CR, NEL line terminators
Category:	dropped
Size (bytes):	575
Entropy (8bit):	5.21590616468708
Encrypted:	false
SSDEEP:	12:BMQEdOaA9zF43KUxPDwAhHL91DwmxRLwAhbFAt0Ic87w1qgPC:WnAZqxzpL4mxVrt878PC
MD5:	7E6A044828CD208E1F3AA5597E7B3BAB
SHA1:	BC252AD3839C75020A9029A14265827918FB6DD3
SHA-256:	DC0E62A21264C4D0E187737D2B82017ED1CB399040C8B9E6304DF6A1E6E85ECC
SHA-512:	71B21A6079D9EE7FF0A8F802FD2A63FC8D47B5390FEFE380C3A2A997C1AD044B47AA3632AF31EEBDE4DCFA9F1EB4B059D73EE764D5B3519FA51BFD62ACB13D96
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">.<html>.<head>.<meta charset="SHIFT_JIS">.<title>.....h.L.......g</title>.</head>..<frameset rows="" cols="200," frameborder="yes" border="2" framespacing="2">. <frame src="indexList.htm" name="leftFrame" noresize>. <frameset rows="80,*" frameborder="yes" border="2" framespacing="2">. <frame src="nav.htm" name="topFrame" scrolling="NO" noresize>. <frame src="fm5l0u.htm" name="mainFrame">. </frameset>.</frameset>.<noframes><body>.</body></noframes>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\indexDT.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with CR, NEL line terminators
Category:	dropped
Size (bytes):	804
Entropy (8bit):	6.176840190226909
Encrypted:	false
SSDEEP:	12:BMQbwMC9zF43KyH9JERF4qc24whd+EKW3FIzp9kUMhouF010YUC:WLZM4nzca+EKWVsbFMhouFq0tC
MD5:	65A319D43C8418BE0A885A44A61C540F
SHA1:	8EC40C5E47B96AFB75B8EC02D09B9A24833E5619
SHA-256:	D20B33C34307484E8612CD89DC7C05356C6C0839D4DBC1D246BFAE86274F12B6
SHA-512:	3F0BFC070C71825D44E5F561A51FEBD75442679B69928407BF4927AE55A31A2884B8A95D85EFC1EBC5742F48D531FD8EE26C4001EA38CAB7744A98ECA45BF7AA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta charset="SHIFT_JIS">.<title>.....h.L.......g</title>.</head>..<body>.<p>?2.^.F.o........u</p>.<p>...o..Q......l................F..g.......ACIE.F.x.}..Q.....B</p>.<p>2.F.^.F.o...A.F.x.}..v...b.g.............F............B</p>.<p>..Q.^.C.v......A........_......o.......B.......A...F.......u............B</p>.<p>2.F.^.F.o...A......u..S.........F.............A...3.F.^.F.o......................F.........................B</p>.<p>.S...\|.C...g......A......u............A...o..Q.......u...v.....j...[.g......g...........B</p>.<p align="center"><img src="../images/deutanCIE.jpg"></p>.</body>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\indexFM.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with CR, NEL line terminators
Category:	dropped
Size (bytes):	575
Entropy (8bit):	5.2030315094460065
Encrypted:	false
SSDEEP:	12:BMQEdOaA9zF43KUxPDwAhHL91DwmxRLwAhbFAtj87w1qgPC:WnAZqxzpL4mxVk878PC
MD5:	E668C5EF80DA4B06DA539E4811F990D4
SHA1:	02EAABC0EC0E0905DABCC0ED663A5A429B5D3A36
SHA-256:	435C3B86568BB4C1776FB6BB0FB5ECBA3E4B15FE19B7C8853A2BC989185C9522
SHA-512:	06831E40B1B55EA3508BD74C5461DEC0772AA6947E894F37E3EF5D9ED93A5459A925966388BE3F3866A191A8F8FE89304B95824186158D15A41E2DE5B8726CD8
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">.<html>.<head>.<meta charset="SHIFT_JIS">.<title>.....h.L.......g</title>.</head>..<frameset rows="" cols="200," frameborder="yes" border="2" framespacing="2">. <frame src="indexList.htm" name="leftFrame" noresize>. <frameset rows="80,*" frameborder="yes" border="2" framespacing="2">. <frame src="nav.htm" name="topFrame" scrolling="NO" noresize>. <frame src="fm4eus.htm" name="mainFrame">. </frameset>.</frameset>.<noframes><body>.</body></noframes>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\indexFS.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with CR, NEL line terminators
Category:	dropped
Size (bytes):	575
Entropy (8bit):	5.205924419283641
Encrypted:	false
SSDEEP:	12:BMQEdOaA9zF43KUxPDwAhHL91DwmxRLwAhbFAts87w1qgPC:WnAZqxzpL4mxVX878PC
MD5:	9279D76F36FDDE82867E411BEC9B4774
SHA1:	59E250D63C72F58F20E78E976B11A56A719D031F
SHA-256:	CF9C918CCA0B221944D679F0318D76A5A40B425C789D3558784E052056032B04
SHA-512:	7CB36203A4092AA4B2193990018460DA680115E7EFD356C4B97D1F0E1D1C661B29ED71A9C74E138007F55F6622326DCF66B39B3C9443A010460E3BD1AC7B3485
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">.<html>.<head>.<meta charset="SHIFT_JIS">.<title>.....h.L.......g</title>.</head>..<frameset rows="" cols="200," frameborder="yes" border="2" framespacing="2">. <frame src="indexList.htm" name="leftFrame" noresize>. <frameset rows="80,*" frameborder="yes" border="2" framespacing="2">. <frame src="nav.htm" name="topFrame" scrolling="NO" noresize>. <frame src="fm00c1.htm" name="mainFrame">. </frameset>.</frameset>.<noframes><body>.</body></noframes>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\indexList.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with CR, NEL line terminators
Category:	dropped
Size (bytes):	18565
Entropy (8bit):	4.942771314590956
Encrypted:	false
SSDEEP:	384:KzHLeoeEXZEX/EXh+eEXhGWXhQEXYEXheEXhg+eEXAEXh7EXhiEXhDeEXEEXhaEj:KzCoeEXZEX/EXh+eEXhGWXhQEXYEXheD
MD5:	B2D399B9A332A338126D101241C76939
SHA1:	676EF8181B88D54C614AB219B12979874DC08EF4
SHA-256:	1E28C4541A1AA13E0AC638A080138FF4449A118C1A7130C6B57B16C8EAD2BF3C
SHA-512:	5260A394D97E33CDF18D900621CCFBDFD352355C578F3B294EF828DAF3B0F9FBE094B9AC3B34F215219C098D3F9D7528641ADE9C37C71A291F66EECA44379B52
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta charset="SHIFT_JIS">.<title>.t.@...Y...[.X.E.}...Z..100.q...[.._.\.t.g.E.F.A: .w...v</title>.<style type="text/css">. .span.s3 {color: #000000}.table.t1 {border-collapse: collapse}. td.td1 {border-style: solid; border-width: 1.0px 1.0px 1.0px 1.0px;.. border-color: #bfbfbf #bfbfbf #bfbfbf #bfbfbf; .. padding: 0.0px 0.0px 0.0px 0.0px.. }.. p.p1 {margin: 0.0px 0.0px 0.0px 0.0px; font: 10.0px Arial; color: #0000ff}. p.p2 {margin: 0.0px 0.0px 0.0px 0.0px; font: 10.0px Arial}. p.p3 {margin: 0.0px 0.0px 0.0px 0.0px; font: 10.0px Arial; color: #008000}. p.p4 {margin: 0.0px 0.0px 0.0px 0.0px; font: 10.0px Arial; min-height: 11.0px}. p.p5 {margin: 0.0px 0.0px 0.0px 0.0px; font: 36.0px Arial; color: #0000ff}. p.p6 {margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Arial}. p.p7 {margin: 12.0px 0.0px 3.0px 0.0px; font: 10.0px Arial; color: #0000ff; min-hei

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\indexPR.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with CR, NEL line terminators
Category:	dropped
Size (bytes):	818
Entropy (8bit):	6.181462446059109
Encrypted:	false
SSDEEP:	12:BMQbwMC9zF43Kybm9JERF4qc24whd+EKW3FIzp9kUMhouF01H2GoUC:WLZt4nzca+EKWVsbFMhouFqHrC
MD5:	1CD6E7CFC808AAA1D66BC253B7A8B22A
SHA1:	C4B170D79F3DA01495D5AC065DF81E88B3E325F7
SHA-256:	3086A892476880FD846080501BE0A443639FB8EA4B377620CAA0C96DC8ACF144
SHA-512:	2FBDB8E66578B50B2925A0A2E254F4935726FCC81E4898F29E82481BDBB69197AB3C94312D40CE82CB812D4B89EC1D8EB8491E656E8A57C7F09B2B0DBB66AC58
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta charset="SHIFT_JIS">.<title>.....h.L.......g</title>.</head>..<body>.<p>?1.^.F.o........u</p>.<p>...o..Q......l................F..g.......ACIE.F.x.}..Q.....B</p>.<p>2.F.^.F.o...A.F.x.}..v...b.g.............F............B</p>.<p>..Q.^.C.v......A........_......o.......B.......A...F.......u............B</p>.<p>2.F.^.F.o...A......u..S.........F.............A...3.F.^.F.o......................F.........................B</p>.<p>.S...\|.C...g......A......u............A...o..Q.......u...v.....j...[.g......g...........B</p>.<p align="center"><img src="../images/protanCIE.jpg"></p>.<p> </p>.</body>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\indexTR.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with CR, NEL line terminators
Category:	dropped
Size (bytes):	791
Entropy (8bit):	6.178518039290916
Encrypted:	false
SSDEEP:	12:BMQbwMC9zF43KyL9JERF4qc24whd01cEKW3FIzp9kUMhouF01qUC:WLZA4nzcaqcEKWVsbFMhouFqrC
MD5:	10F03B6A38066BD3B2D1FF45642546F2
SHA1:	DDDC962A6119CE89693942026F69DA148CC061DD
SHA-256:	605EEBBB6286D88B67B61FD99C08232279FDA88CA2E4FB48335E0C1BDE912532
SHA-512:	5B40957371E989414A5EF3BC4004616E3B4CEB1783FB560EB7DDF2D6A2027B44CFF3EFABE1D05B3D8C8545D00851E612496E17C329A3A0D1927A1359EB9C6FD7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta charset="SHIFT_JIS">.<title>.....h.L.......g</title>.</head>..<body>.<p>...o..Q......l................F..g.......ACIE.F.x.}..Q.....B</p>.<p>2.F.^.F.o...A.F.x.}..v...b.g.............F............B</p>.<p>..Q.^.C.v......A........_......o.......B.......A...F.......u............B</p>.<p align="center">2.F.^.F.o...A......u..S.........F.............A...3.F.^.F.o......................F.........................B</p>.<p>.S...\|.C...g......A......u............A...o..Q.......u...v.....j...[.g......g...........B</p>.<p align="center"><img src="../images/tritanCIE.jpg"></p>.</body>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-00232.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	608
Entropy (8bit):	5.926054139699847
Encrypted:	false
SSDEEP:	12:BMQkzF0e34eOsMeqsqegpmhBj8KpgQGuhO0ymbu7u3Ma7puJ7Y:WlZlUk4MpgQ9uo1
MD5:	BF7FF48B96D07EB13C796EAC9C48F381
SHA1:	02F2E29E261460B72898F89E0AFCA2BC1A2BB49D
SHA-256:	1BC976E31DD5A321D5EA92A8DC71ECEC45101DC52B52C330AE9F5A656232496D
SHA-512:	EADE426CF13DF69E7E4D7F63508EC3FACCCF02F17559F04A54824F26ABAF1C814657A139D0F10EBDA27929B848296249DDBFFCBC474F9C9966E8CD34574C99A7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.L.^.....i..W...j...[.j</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="3bic_yu"></A><I>..W...j...[.F.L.^....</I></P>..<P>.f.[.^.x.[.X.........L.^..........A[..W] ...j...[.... [.L.^....] ..I..............B</P>..<P>.f.[.^.x.[.X..........O.....X.g.\.........B......f.[.^.....N...b.N....n.C...C.g.\.....A[..] .{.^.....N...b.N......B</P>..<P>......f.[.^.L.^..I.....A[..] .{.^.....N...b.N......x.................</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-01U4P.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (307), with LF, NEL line terminators
Category:	dropped
Size (bytes):	1163
Entropy (8bit):	5.943080303111754
Encrypted:	false
SSDEEP:	24:Wl00RNP4L2mEjr6hNxm+DBxbRU2IK4G4t2owk6hA9nu25u:qza1E3obncG4rfnu25u
MD5:	4B33DB8F91B6F24424CDF4795CBDC33D
SHA1:	5B3244C8F438BA90A9F1FC1B428C061434C45729
SHA-256:	FE3F8E403B803025F48A8BF785D5E55A5B9F649388FE05BC87EB2FB4D8A7FFBF
SHA-512:	81540BD64B53ECA654185656CB0E2A15A5751B9F6CB6894C50A9BA81F9C4453E4B24591C24E7D1249BF353AA3EC266803294A8EBF0171DE2260F9F0EC719158B
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.}.e...A..</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="materials"></A>.}.e...A..</H3>..<P>FM100.q...[.._.e.X.g...A93.F..v...X.`.b.N...L...b.v..4...P.[.X....[..........B.e.P.[.X..2...q...W.t...p.l....\..........A....t......O....\..85...J...[.L...b.v..4..............B.i.e.P.[.X....[..L...b.v..2..........A.L...b.v...v....93.....B.j</P>..<P>.J...[.L...b.v..........g.p..........B...........A...w......i.v.I........A.L...b.v............................B</P>..<P>.J...[.L...b.v..A...p.x....................o.......}.b.g.d...............A.w...t................B...X......f.f.e.X.g..e..........A......t.............L...b.v..K........................B....g.p.......A.L...b.v..2.N....4.N.............................B</P>..<P>FM 100 .q...[.._.e.X.g...AWindows.o.[.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-0BU78.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	593
Entropy (8bit):	5.956893743302825
Encrypted:	false
SSDEEP:	12:BMQkzF0Hzl2OsMeqfAI2pdjA/nmhAKenJYAIO+XEHbt:WlgfYDT4jt
MD5:	A23498E396E32B65CB138982C2CC2F35
SHA1:	8918B91AAE535806D5E8FA7F0388B6A4F0F43020
SHA-256:	4F3B3A592B5F67762BEE69CDA39A5845BDB862AD08612BEDB2F80ACEBD48A20B
SHA-512:	04DDD31631666799F16EBAC022AD4DEEB9786697345528986BB53BC94C2FFA9CFCE9ED43AE27945653600960FB49BEA07AC50652D102DE0130DFBDC31BFBCA29
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...O..t.......i.t.@.C.....j...[.j</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="3_gii4p"></A><I>.t.@.C.....j...[.F...O..t......</I></P>..<P>....@.\..A.....f.[.^.x.[.X....t.@.C...........A.V.K.f.[.^.x.[.X......g.p....f.[.^.x.[.X..w......B.....A.f.[.^.x.[.X..o.b.N.A.b.v................@....B</P>..<P>.x...F......f.[.^.x.[.X........O..f.[.^.x.[.X.........A......f.[.^.x.[.X....S...L.^...........B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-0CCNH.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (452)
Category:	dropped
Size (bytes):	1546
Entropy (8bit):	5.866658365122497
Encrypted:	false
SSDEEP:	24:Wl7x7adcHkRriC8IUdsMLAJcUJRgT4Ca9U0k0HQMFQMNSZ4otzh:q9ocERr0OMLAJvbgDa9U0/wM2MkK6zh
MD5:	6E0CB4AF03F440995CEA9DEBC4231165
SHA1:	DED6E84BB634E9D6DB2DEB54A79598A5FEF59237
SHA-256:	0F2E80F03CAF361974D3C911926B47F4696B2E5FB04C8605967AB129BB861726
SHA-512:	91B1C2474FE53B24DC28120CC95C8A9D8CF4AC15679333B2167A2E60B502E4BACE2367D8B913049CBD81D79BDE5AABCD69FA74EBB9D9F9AC36AA1EDD752F0AA0
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>..</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="procedure"></A><I>..</I></P>..<P>.....O..P.[.X...c..J...A.....L...b.v...........A...X..p.l......O.......Z.b.g......B.P.[.X.............B.....n...O..A.K...L...b.v........o...o...............B.e.X.g......{.........A.L...b.v........o...o.....................B.L...b.v..z....L.^......A.......p.l....o...o..................B.P.[.X.....A............B........e.X.g...............B</P>..<P>2. ..........F</P>..<P><I>.e.X.g...I..A.J...[.L...b.v.......................B.L...b.v......p.l...i.w............j....A.......p.l...i.w............j.........A.[.....................B.......A.e.p.l.......2.............B.X.s.[.h...u...m...v...d.........A2.....o.......m........A.e.X.g.........s.......

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-0FFJV.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (312), with CR, NEL line terminators
Category:	dropped
Size (bytes):	2345
Entropy (8bit):	6.167178930134144
Encrypted:	false
SSDEEP:	48:qloJMO1MCmvtTvyHaCUMu0G6+bEmFOgxhlWCozK:jMtTvyBUDE2L
MD5:	E432177208078EDDFDE49ED4F43C9BC1
SHA1:	745E447BDDB93905DECE601E73342A0B8EB4F0F2
SHA-256:	963994616AD4DDF95703BD7B66A0D0FB60718B72362C2072D4C6130AB1CCBF32
SHA-512:	76C6FEB50F6BAE702B01EF4272B77F84B4797918D1B00FB0CA84A570A643F3F44277293BCDB2875D2573A9B7AF2868B3FC8ED9B01CE8C74B653616203BAB6C18
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.f.[.^..\..</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="displaying_data"></A><I>.f.[.^..\..</I></P>..<P>.f.[.^..v...b.g...@..2........F....O...t.......j.A.O...t</P>.<P>.A.N.Z.X......A.c.[...o.[.....A.C.R.. <IMG SRC="../images/bm10.gif" ALT="" BORDER=0> ...N...b.N.....A[.\..] ...j...[.... [....O...t] ..... [...j.A.O...t] ..I........B</P>. .<P><A NAME="polar_graph"></A><I>....O...t</I></P>..<P>.L...b.v....i1.`85.j..........\.........B.i...L.F........p......A....s.............B.j</P>..<P>[.G...[.X.R.A] ..e.L...b.v..v...b.g....A...~..u2.v..X.R.A..\......i.......L...b.v.....j.B.u5.v..u10.v....G...[.X.R.A..C.G....~..A.O...t.................\.........B</P>..<P>.F.......\...100%......A.S...L...b.v............z.u......B......A.S.L...b.v..u2.v..X.R.A....A....O...t....~.....^.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-0SPSG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (397), with CR, NEL line terminators
Category:	dropped
Size (bytes):	1200
Entropy (8bit):	6.010451394311774
Encrypted:	false
SSDEEP:	24:Wllo092YAYhzhn1Tspa+HgfUJym2dJ0lNOPxHXu8i/+jppfSepcMoT:qloFYAGl17Z1Rtxe8i/eaT
MD5:	16CD6555D2B9F644187692560486BF07
SHA1:	87016B4EEC4B19B27FDED0B47336716DD71E3478
SHA-256:	814D69408A6831F361A61098078ABCD1161CD09E778011FCA8CFA57BEA809AE5
SHA-512:	D9BEBE4213378E95CFB226FFFC2C7AE25AC7EAC43F4AE8A12B5B3A1231B747C31207324CBD993EE5E58EE9B048FF46ED7AB7772BFF074D194F65E96B6B2D27AF
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.L...b.v.........</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="2keizvz"></A><I>.f.[.^....i.\...^.z..j<IMG SRC="../images/bm8.gif" ALT="" BORDER=0></I></P>..<P>.......\........A<IMG SRC="../images/bm8.gif" ALT="" BORDER=0> ...N...b.N.....A..... [.\..] ...j...[.... [.f.[.^....] ..I........B</P>..<P>.L...b.v..4...{.b.N.X..z.....AFM.q...[.e.X.g..T...}...\.........B</P>..<P>.L...b.v......._..A............z..........BFM .q...[.._.e.X.g........f.[.^...._.............A......f.B.X.v...C..L...b.v..<I>.h...b.O</I>..<I>.h...b.v</I>..........B.....Windows.........I....@....B.L...b.v....}.E.X..J.[.\.....Z.b.g.........A.}.E.X....{.^.............L...b.v..........u..J.[.\.........A.}.E.X.......[.X......B.L...b.v..V......u.........A....L...b.v...{.b.N.X...............B</P>..<P>.L...b.v..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-0U8F2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	790
Entropy (8bit):	5.753606699151382
Encrypted:	false
SSDEEP:	12:BMQkzF0aRLK0sMeqfbbRRLMRyXPYRfw8qyPvUCWkK06NdhbasvT8agg:WlRRLj3RRLMRRRvq6Upn04vT8I
MD5:	9EA4E531CB20C4E9D031F89B9F3ED06C
SHA1:	493DEBFB7F78CCC7203744A9572E5358D1241319
SHA-256:	9138D6432CD4407908496B89C0B77A90BEBF8963785C575C83A23A0439BDB327
SHA-512:	21488CDA06EE90DF8648C82A3E4DD5F633048FC07AB36A92C6E47F7F1EDE8ED98DF5AE1A32AADEEFACF67C66418B784EC6A6270349D3B817C7630D870A7B30D4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...._.C.A...O..E.B...h.E</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="print_dialog_window"></A><I>...._.C.A...O..E.B...h.E</I></P>..<P>...._.C.A...O..E.B...h.E..A.......I.v.V............B</P>..<P>.R.s.[...F.......e.y.[.W..R.s.[..</P>..<P>.J...[....F.f.[.^.\|.C...g...J...[..........I...i.J...[.v.....^.[..p.j</P>..<P>.w.b._.[.F.`.F.b.N.{.b.N.X..`.F.b.N.......A.e.L.X.g.{.b.N.X......e.L.X.g...A.e.y.[.W..w.b._.[..............B.w.b._.[..e.L.X.g..A.v...O......<I>ini</I>.t.@.C.................A.v...O........s...........K.v.........B</P>..<P>.Z.b.g.A.b.v.F.v.....^.[..I.v.V.......W</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-15A3H.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	907
Entropy (8bit):	6.052857486025409
Encrypted:	false
SSDEEP:	12:BMQkzF0Hh6X2OsMeqXdbMI2V/66r/AAstkov0pr6h8CpqOWPWn6l5+pUKe60vwd1:WlbXsBAAEv0pq/eHEpUKbZecrXpfX
MD5:	2BA063BDDDF9CC983D69CF60B7FD215D
SHA1:	E6226BF076E9F742F1F420511AFA534B4BD774FE
SHA-256:	E44ED5DD02C18FF74F614FC69996E4C8CE37A362F87AC249FB1C661461EFC55E
SHA-512:	CE624D041EA401234DF1256956F503B7490647A06F6F28185502A1AC3941CDDB0623218AEBA3467CC3F5CA687DF41B72C70458C7472E2040BDF26AD16A30F5C2
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...O......o.......i.t.@.C.....j...[.j</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="fm94h9"></A><I>.t.@.C.....j...[.F...O......o.......</I></P>..<P>..... [...O] .. [....] ..A.e.L.X.g.t.@.C.....X...........B.....A....Windows.....v...O.......P......o.........B</P>..<P>[.t.@.C..] ...j...[.... [...O......o.......] ..I........B[...O..t......] ...\......A.p.X..t.@.C.......w......B</P>..<P>[...[.U.[...] ............f.[.^..A....................B........A....I.......... [....] .@.\............B</P>..<P>.......AWindows..Word..Excel...............\....B</P>..<P>...O.....f.[.^....Windows.v...O......\..t......A[..W] ...j...[.... [...O.......R.s.[] ...g.p............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-16P8A.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	695
Entropy (8bit):	5.977191225570121
Encrypted:	false
SSDEEP:	12:BMQkzF0HJZsMeqxYj6xsPbP9iSB2U8AeKEoU8y2rQzxLmOTsp75Gc:WlmJR6j661dQAVEo3wxL1Tsp75p
MD5:	6CE89EDA3E90573CCC9D13C30F9A42D7
SHA1:	C4D4EE601726A6F1C41CC136F5A1F09990D1B00D
SHA-256:	F5BA90AC7AFBBB56068C669170DFA487BEE92E27F4863037A6D1B49EEC9D8CB3
SHA-512:	DFA32E0DB665F97A6C9C106CD7C49B673837362491EAEB599E30A564882E78539E3FB23EEADE2B3907725CB7768F9545DAFD1CC40B79ED461E9B18A96D1C3F98
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.G...[.X.R.A..\..</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="displaying_error_scores"></A><I>.G...[.X.R.A..\.. <IMG SRC="../images/bm18.gif" ALT="" BORDER=0></I></P>..<P>.L...b.v.....G...[.X.R.A..A.L...b.v..................L...b.v.............F......v.Z.......B.....O...t..v...b.g.....G...[.X.R.A....</P>..<P>....A.G...[.X.R.A......\......K.v..........A.\.........A.C.R.. <IMG SRC="../images/bm19.gif" ALT="" BORDER=0> ...N...b.N.....A..... [.\..] ...j...[.... [.G...[.X.R.A] ..I..............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-1D1AE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	544
Entropy (8bit):	5.973049687757013
Encrypted:	false
SSDEEP:	12:BMQkzF0TjGsMeqJGXdmRjrTVmk7UHIEUJG7d/9gJIhMUvz:WljYt0vPuIRo7Z9g29vz
MD5:	2BBEFC9D9B33DDC9DE6F2CB4694AED1A
SHA1:	56E0AA9A6526593DE6642A7F8AE3E64AEB3082BA
SHA-256:	FEB629D9CA09D88648811284F0653981F3C2D80AEF560F29405A4C5001BA2B4F
SHA-512:	79EF49AEC94FD25E9AD973F3F72E018DB3E62A167B165EB108464D1B125E113ED34F90D7C4E02C48A440378A9E9EA20B8A6170E8F7FE20F1E5DCC92E03249238
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.f.[.^....</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="interpreting_data"></A><I>.f.[.^....</I></P>..<P>.p.^.[.....v...b.g......A.e.X.g....K.v.............A.f.[.^...........l.X....@.........B</P>..<P><A HREF="fm2xpq.htm">....</A></P>..<P><A HREF="fm4c81.htm">.K..f.[.^</A></P>..<P><A HREF="fm7z8q.htm">...o..Q....m</A></P>..<P><A HREF="fm9sfm.htm">....I.v.V....</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-1KP9M.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	739
Entropy (8bit):	6.106219796954308
Encrypted:	false
SSDEEP:	12:BMQkzF0T8sMeqrXMv+bmSGlXpT4uS76ljhHR+H5TStxz5YL78p:Wl8urcG6SKitWHR+H5SG7k
MD5:	AA0C99F025C3EE21F5AB82976A081FE6
SHA1:	C2E929ECA13F2AFF61A94993362763929ACD4FB2
SHA-256:	F9870BBB504727DBF3F0D7D775CE84C1BC5666AD3E923967E7AD82C645DC812A
SHA-512:	8F82FEEE6C7C9FAAF14BCDE30AFBE9B6687C106793BAE93DD6840F2CECB53246F461FF584651BA574F75D5075378CAA2E0CD8913E4272BDDB213056C972C150F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...o.F..._</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="30j5h."></A>...o.F..._</H3>..<P>.l.....o.....q......B.......o......l..A..700......F..V.F.[.h............................B.................s...A...o.........m....v..............B</P>..<P><A HREF="fm5asz.htm">.j...[.g....@.......</A></P>..<P><A HREF="fm7rub.htm">.....O..O.F..</A></P>..<P><A HREF="fm8vi2.htm">.....O...w.....z...c..O.F..</A></P>..<P><A HREF="fm2kms.htm">...o......</A></P>..<P><A HREF="fm5dgl.htm">.].[....._</A></P>..<P><A HREF="fm3be6.htm">........o........</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-2C1I1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (310), with CR, NEL line terminators
Category:	dropped
Size (bytes):	1038
Entropy (8bit):	6.037209672583791
Encrypted:	false
SSDEEP:	24:WlloXS1hX0/wIky+0pm3H6lLPWumW2PaLJ/95zs:qloivX044+/3aZ/+PMv4
MD5:	68DE450CC619D1E5591F4E144BD122D5
SHA1:	6E6974CC94E89E1F8C3C766B486693C3E0BF7DC9
SHA-256:	32913B88ED346B16BDCC21DDFAE97A237265502F004B7D8A1A84615BE4C2643B
SHA-512:	604FC9CB0CC9EB14FF636A020A8C1D9F9BC360A99E4916A5F5EDC393C5E38C11426397249990BE7DE5103928C67ACB0842344A933E7E064475C3CE5186F620A2
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.O...t....</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="7k9r.q"></A><I>.f.[.^.... <IMG SRC="../images/bm14.gif" ALT="" BORDER=0></I></P>..<P>.f.[.^.....AOS..T.\|.[.g.....v.....^.[...........B.........A.c.[...o.[....v.....^.[..A.C.R.....N...b.N.....A..... [.t.@.C..] ...j...[.... [...] ..I........B.f.[.^..O...t..A[.t.@.C..].^[.....o..] ....PDF.............A[..W] ...j...[....N...b.v.{.[.h..R.s.[.........\....B</P>..<P>.f.[.^.....A....f.B.X.v...C..\.............`...i..F...j.A.^....^.t.B...^.[.....^.t.B...^.[....j..v...b.g.......B..............v.f.[.^..A.O...t.............B...v.f.[.^..I........A[......].iMac..A.v...P.[.V.....j.A..... [..W].iWindows..A.v...P.[.V.....j...g.p......B</P>..<P>......f.[.^.Z.b.g....f.[.^..........A............A.....A.e.X.g.....A...v.G...[.X.R.A

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-2RGVV.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	633
Entropy (8bit):	6.130253431195335
Encrypted:	false
SSDEEP:	12:BMQkzF0YXWsMeqp0mIdXs19vgYup5Ao7bgBhPCF3WBZviN1+z:Wl0WlXs1XupSoX8ZXZiN6
MD5:	75AD9836627DFB1A92C820414746663B
SHA1:	45830A80ADD54BBE8A9472CC7E4BBE62C0DFDB46
SHA-256:	CC9F29C24A8E1078D6C4952C41A57024625B5EE8F3138567B51912EE8FA9086B
SHA-512:	48EB4DFBBA96C686BE4A2A02D2BDAB7F4FF436B81BA5E40CF20E002A52D1773B90C2A2F1BC18E842ED18A9FE26FC7D32B46AB08959091170A9552F31358CFE51
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>?2.^.F.o........</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="df09gg"></A><I>2.^.F.o..........\..</I></P>..<P>....I.v.V......A.R...s...[.^.[.. [.\..] ...j...[....I........B</P>..<P>CIE.F....A...F.........d.....\.........B............F..A?2..^.F.o..i..j.............F....B</P>..<P>....A<A HREF="fm8siz.htm">...o..Q</A>...Q.............B</P>..<P>...L.F.\.......F.........F..A.J...[.o..@.\..f.B.X.v...C..f.B.X.v...C.J.[.h............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-2UF32.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	943
Entropy (8bit):	6.061576398180222
Encrypted:	false
SSDEEP:	24:WlAUZS0wv/z/Oqj37X1Tep3MiW0kAsw6u:q9P0/z/V3uMiqAz
MD5:	9CB82CB97B39186C3A78D8D8E3BC42A2
SHA1:	F01A2DBAEC7D8BEDF5485E1CBE8492139B1951C2
SHA-256:	05015852F66C440F3B4924E0AB46243795ECF55F6BBEF1CA3166ECB4FA920D70
SHA-512:	592FEE0C50876F1EDBFCE70065FE00725D35245C74D5E0D7B4B56E1EC27DDB47CBE7C29C8F4DCE51830038C88773654B303D218F2F379A549C2BC9DEF5F7AA35
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.....L.^.....i..W...j...[.j</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="2xz83ip"></A><I>..W...j...[.F.....L.^....</I></P>..<P>.{.v...O......V...v....f.[.^.x.[.X.....p...A....L.^....P..A.N.Z.X.E.Q.......B.g.p....f.[.^.x.[.X....A...C...t.H.[....^.C.g...o.[..\.........B</P>..<P>.L...b.v..FM .q...[.._.e.X.g..L...b.v...v......f.B.X.v...C..z.u...A.c.[...o.[.. <IMG SRC="../images/bm17.gif" ALT="" BORDER=0> ...N...b.N.....A..... [..W] ...j...[.... [.....L.^....] ...N...b.N....f.[.^...f.[.^.x.[.X..........B....A.......Q................B..... {OK} ...N...b.N.....A.f.[.^........[.U.[....f.[.^.x.[.X...........B.......A.f.[.^.x.[.X.........Q........B<A HREF="fm3fjn.htm">.i.u.\.....j...[.F.f.[.^.x.[.X.v.Q..j</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-3Q8IT.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	613
Entropy (8bit):	5.9396167547356535
Encrypted:	false
SSDEEP:	12:BMQkzF0UeOsMeque00pcM9/0pbFLmQU9Ioiokkovaw3:Wl+UD00pcM10JN+Wotol
MD5:	9CDD9ECDE701D197902980BA9A3901B3
SHA1:	0C0103EA529CAA7CAD661F4BD3607D491A0B6721
SHA-256:	39E5047464827FA3D1003D5C2AC782F4E6BD2CAC7CDD1D794678705E036E7028
SHA-512:	F784672E9368575B70172E4BD4F0EDCD2B3D0C7079F07523EDDF3477186F9D7A21751EE7260A9B6F32778459D34EB03C13F9ADDA671B73901EAFF147553C591C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.V.L.^.i..W...j...[.j</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="5igc0ze"></A><I>..W...j...[.F.V.L.^</I></P>..<P>[.t.@.C..] ...j...[.... [.V.L.^] ..I.......A.L...b.v................Z.b.g.......B</P>..<P>.....A.c.[...o.[..A.C.R.. <IMG SRC="../images/bm15.gif" ALT="" BORDER=0> ...N...b.N......s..............B</P>..<P>.....f.[.^..................A.L...b.v.........Z.b.g....O......f.[.^................b.Z.[.W...\.........B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-4I2RD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	898
Entropy (8bit):	6.056942189970071
Encrypted:	false
SSDEEP:	24:WlNrfbwVoqFqmoBBQnW0pVFCzL8vmE/Eyt:qq6HL6WCCzovmE/EU
MD5:	8C34C304B424588F4B13E5CA92497CDF
SHA1:	58E5BF277D84050FDC2324493673FD211682CC66
SHA-256:	03B3A312F32601013084D983490579A9AD556985D9390C158F8E65D286948CFE
SHA-512:	E2A1B69B4E773A3B11CD3CDDD99D2B390B04227C33F50276C51D2B51CE9AF43577EABABAC8F1D457E85BF0A44F5F5E00208B041B17E370636217DAD9412FCA8F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.V.K.i.t.@.C.....j...[)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="file_menu_new"></A><I>.t.@.C.....j...[.F.V.K</I></P>..<P>.p.r......A1.....f.[.^.x.[.X...K.v.............B....A...............f.[.^.x.[.X...................B.a.@...A.a..i...A.a.A..`.....o..Q...j......f.[.^.L.^............K.v...........B</P>..<P>.V.K.f.[.^.x.[.X...J.....A[.t.@.C..] ...j...[.... [.J..] ..I..............B._.C.A...O.{.b.N.X..V.....f.[.^.x.[.X............B.V.K.f.[.^.x.[.X.....A...C...t.H.[....^.C.g...o.[..\.........B</P>..<P>.x...F......f.[.^.x.[.X........O..f.[.^.x.[.X.........A....f.[.^.x.[.X..S...L.^...........B</P>..<P>.f.[.^.x.[.X.t.@.C.......g...q..<I>.hdb</I>....B.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-4PID0.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	355
Entropy (8bit):	5.526489341029745
Encrypted:	false
SSDEEP:	6:B8FQk+HryftzgYiTdGIQ0iNMeqlxYMWI7k3UogdjBacgVC8cgdtog4T:BMQkzF0JQ0sMeq5Y3U9dsvo
MD5:	320F1BD0F1C01B1C6D7CD521E7E3184F
SHA1:	98D6E192111942485B57D96BEAB0DFCF8B8ABD96
SHA-256:	9494B8BE66FF4121E79EAEA947D515C6CAF5AF6FB52E103731120E12CD0903BD
SHA-512:	E5AE8EE4926068452278D61A261FA0B0D36472BC2B6990BB766EC2D5C661E13B9121219CF5149152C48B2C6FC6F33DBFA5A5C32F8A521A609FCED2A7DFA18ED5
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="administration"></A>.e.X.g.....</H3>..<P><A HREF="fm4ndz.htm">...</A></P>..<P><A HREF="fm0llx.htm">..</A></P>..<P><A HREF="fm359j.htm">.._...@</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-5BNMG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with CR, NEL line terminators
Category:	dropped
Size (bytes):	614
Entropy (8bit):	5.336199792612837
Encrypted:	false
SSDEEP:	12:BMQEdOaA9zFUl3OxPDwAhHL91DwmxRLwAhbFAtT87w1qgPC:WnAZeUxzpL4mxVA878PC
MD5:	9FAB6E5FDC3200753274666DA8A87519
SHA1:	2A2D8393644084B6ECA88892012BC1760BC7A1A6
SHA-256:	0150928E6CA3517D38F867C76E1A6B231B9BAF7DD26017FC0DD18EB6BF016175
SHA-512:	07C399F211EDB211D789E7FA61BE19D8C0D5088EFBEDF3E6F10778F32587323AD13BBB47B4E01224A3B30060FEA453ABFEC34E2D4A9A2CB4370F0955B6959BCF
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">.<html>.<head>.<meta charset="SHIFT_JIS">.<title>.t.@...Y...[.X.E.}...Z..100.q...[.._.\.t.g.E.F.A.F.w...v</title>.</head>..<frameset rows="" cols="200," frameborder="yes" border="2" framespacing="2">. <frame src="indexList.htm" name="leftFrame" noresize>. <frameset rows="80,*" frameborder="yes" border="2" framespacing="2">. <frame src="nav.htm" name="topFrame" scrolling="NO" noresize>. <frame src="fm0001.htm" name="mainFrame">. </frameset>.</frameset>.<noframes><body>.</body></noframes>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-64Q4P.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	494
Entropy (8bit):	5.842959926002597
Encrypted:	false
SSDEEP:	12:BMQkzF0DksMeq8fAZcNhidAcqmVk9AcaOnAcrTd/Y:WlJ8fACjidJqmGJaOnJrTZY
MD5:	F5DF32010028ED61276CEEEF9CC11DF9
SHA1:	3BABDC9FA91CF6297ADE5C5E40754DA5DF59660F
SHA-256:	473A7C406745B817DA7D0018ED285463AB114352CFC2C8406E537977589D79DF
SHA-512:	4CAC477BDA35BC21F644C6D4682AADE650ECD9F1DA2E52AEA0F5BF1D0C21EAD02D22D5CAE4E89465EA0B4F6880653206C5D46FFD601A571F802DDA6E81F79865
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>....</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="146r.h6"></A><I>....</I></P>..<P>.....A...v.G...[.X.R.A....... [..].A[....].A[..] ...........B</P>..<P>..F...v.G...[.X.R.A .. 16</P>..<P>....F...v.G...[.X.R.A 16.`100</P>..<P>..F...v.G...[.X.R.A > 100</P>..<P>.....A<A HREF="fm4c81.htm">.K..f.[.^</A>................B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-6VKFT.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (363)
Category:	dropped
Size (bytes):	1024
Entropy (8bit):	6.243398521614836
Encrypted:	false
SSDEEP:	12:BMQkzF0hsMeq9oiaauvyJVPerkw6pWay1CPm42jedtM8DADhsgr+JU1jkgZ415FS:Wl65lfeg0QqUvADhsgrqgAgS7FV69SW
MD5:	EE306112F410E5E537AFAA3F33B827AE
SHA1:	56B32A4A121B66A44F58EA3243A02EB304006DE0
SHA-256:	86B804F9C86A4BFC4016A4C7A400768EB7FCA77F884F5AB7DD512268E76667FB
SHA-512:	7B53C01B2A8F23B0E94C50A365B5889CF192077D58B764DE6FAA5EA4C33143FE96134D3CDDC0997AA114629CDF42E1FDEC5995A1220E3144FA65F5B48030F824
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="lighting"></A><I>...</I></P>..<P>.W........g.p............A.f.[.^................B.....P...r.....x..6,740...i.W.....C............j.A 25.t.B.[.g.............D....B..........A.G.b.N.X...C.g....i.uSpectraLight II.v....6500..K..^...O.X.e...n...Q........p........\....B</P>..<P>...R........g.p.......A..........k......A.......K.x................A.e.X.g.....{............B.G.b.N.X...C.g...Judge...i.....A.....u.....i6500...j...K.v..............B...R..............A.f.[.^.....A.W........g.p.....e.X.g................B.e.X.g...{....A......M.........OFF...................B</P>..<P>.e.X.g..............u..A.......e.[.u..........u....B.........A....p.x..90...A..@.p.x..60.........Z.b.g...........

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-73CJI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	521
Entropy (8bit):	6.12382326236626
Encrypted:	false
SSDEEP:	12:BMQkzF0zU0sMeqNU2xBDespSufG9DZ5dE8dStNr9b8Vo:Wlt2u2xcspDfG9DZFdSzpbqo
MD5:	803449BC0450A415F44B64876C80EDE6
SHA1:	134D4748048EFEA719531DE66C4CE0716FC2E628
SHA-256:	E9E2ACA4CE14713FEF941F9CDAC89BFDC073500DD8FF6595ED0ACF4BCB3646C0
SHA-512:	E4C2F5DC962FAD611272D15D62D1942EB30607C39DDDB6F69E94ECFE5D994454EB7150710100EB7289EE0294CE2EF700FBE6111174C6C18D8794A075B4DEBF46
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...[.U.[....f.[.^.p..</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="personal_information_form"></A><I>...[.U.[....\..</I></P>..<P>.e.L.^........[.U.[....\........A[.\..] ...j...[.... [...[.U.[...] ..I..............B.f.[.^.p.........p.........A...O.A.C.j.V.....A.Q..f.[.^.A...N.....A.e.X.g.....A.e.X.g........A.....L.^....\........B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-76EII.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (538), with LF, NEL line terminators
Category:	dropped
Size (bytes):	1242
Entropy (8bit):	6.240496476782609
Encrypted:	false
SSDEEP:	24:WlTf+k3IO4TM6tmWRAE1UoH4MdDDvy/0wWGU:qSk3qYWb/YMdDKs3
MD5:	D4A828126B5E3E69B0C663F796CDF8CE
SHA1:	34E652E0F09F5DB530DF4CEFD0121A767113DEFF
SHA-256:	FD385EFC430F4B436E7DEAEA95F487313752AF9B5651E54FFD83A09FE8661C03
SHA-512:	AD11E4D90571D461C0F122125142FBDED7C6C174562F5C6BBBFAC67EC790702F2BC874FBA6E87DC64BC220546E26B2F12E4504F2DADAFE7A1A25E061C31269DF
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>3.F.^.F.o..</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="trichromats"></A><I>3.F.^.F.o..</I></P>..<P>.S...w.I.A.....w.I.A..U.w.I............A.........<B>3...</B>.^.C.v......F.f.......................B......o.\.......l..A<B>3.F.^.F.o..</B>........B..L............A3.F.^.F.o...S...g......v.........3...g.........K.v.......B</P>..<P>3...v...C.}...[.F.....g.p.....J...[.}.b.`...O..A.F..\......p...t.....b...`........BCIE.i...........j..1931.N..A.u.W.......v........v....O.F.......F...w....A.W...V.X.e.....l.....'.B.Z.p.I....R.......ACIE.....v...C.}...[.F..X.AY.AZ..i..A..A.......j.w........B.J...[.}.b.`...O..K.v..X.AY.AZ.......A........x.Ay.Az..\.........Bx+y+z..1.......Az..l..Ax..y..l....m.F.......B.......A.w.....P.x..F.......S...F..Axy.O..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-7MQ6L.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (694), with LF, NEL line terminators
Category:	dropped
Size (bytes):	2238
Entropy (8bit):	6.1641514299204685
Encrypted:	false
SSDEEP:	24:Wl0nZzG2t1Uw+vnBAeBDjCBFr9aYjMkk6iZ0JgputyyQm1OOvHcRDvGgU4Hp6ym3:qQLtcfBACDeFbja53pkyZm1OJdHMyxc
MD5:	8CC642417A94FF2A800DE7797EA6AA85
SHA1:	04F33B164E60578C08990FBDC7532601B5393AA4
SHA-256:	F91E21540CFA5C73DB35730898AA711A8E60FDEBFF58FA232BE389D9FF8961EC
SHA-512:	A911F0A00CE17E7DF362CB11F12F107D5D96229FCF53C210690C09A92F650F6001923D17B03657FC48D3C6F3AD7087101E4927560FC498A73638A286857F00A6
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.\.......</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="principles_of_construction"></A>.\.......</H3>..<P>.{.Z.N.V.......A....e.X.g..g.p..I..O....e................A.e.X.g.....o.......g.p........d.v.........B</P>..<P><I>.F....\..F..</I></P>..<P>..A..A.........\..S...F....A...x.i.j...[.g.........F.A........P.x.j..\.......`...[.g..z................B......F...n...I..............A...L.....z........B....}....................A......o.F........................B</P>..<P><IMG SRC="../images/bm5.gif" ALT="" BORDER=0></P>..<P>....A......._...A......F...P......................B.....A....\...K.p.......P................B.l......A.....W......o.....@..........A......F..................`...[.g...............B......A.F....P..........

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-8RL3G.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	959
Entropy (8bit):	6.039657749190735
Encrypted:	false
SSDEEP:	12:BMQkzF06usMeqMvC49sPfVUDUnbd9mOTspLot5+j/ZAXGkbrRi4unGgenhr7aABa:WlGiC4WlbP1TspCKZA2ujLgenhrW4oht
MD5:	E6102B63FB9BFE10E017D12B12DEAC78
SHA1:	D0B00B0A1C3D6E1ABB80DB9E8CEE3D9028BA9E13
SHA-256:	ECB6D41056BEB1AF8740F1221C918747915FCA9A839D312D048B38D286E6BCCA
SHA-512:	156F7C826AFA59D8BDADBF65E9E6B27631056A65DA57084171BD7CAD142EA916BE411BC5A3635B7257476E4197832B174F4ACDDAFD35433C20AFDD22175C404F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...j.A.O...t</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="linear_graph"></A><I>...j.A.O...t <IMG SRC="../images/bm12.gif" ALT="" BORDER=0></I></P>..<P>.f.[.^.....j.A.O...t..\........A.c.[...o.[..A.C.R.. <IMG SRC="../images/bm13.gif" ALT="" BORDER=0> ...N...b.N.....A..... [.\..] ...j...[.... [...j.A.O...t] ..I..............B.L...b.v....i1.`85.j..X.........\......A.G...[.X.R.A..Y........v...b.g.......B....`........g.p...........B</P>..<P>.f.[.^.`....\.....@...A........g.p..\....B</P>..<P><A HREF="fm6i4a.htm">.._.I.v.V....</A></P>..<P><A HREF="fm549z.htm">.X.P.[..</A></P>..<P><A HREF="fm29bn.htm">?........\..</A></P>..<P><A HREF="fm5a7n.htm">.F..I.v.V....</A></P>..<P><A HREF="fm2x5t.htm">.f.[.^..t.B...^.[....</A></P>..<P><A HREF="fm7ppd.htm">.f.[.^......</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-9D4Q0.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	759
Entropy (8bit):	5.811300658719902
Encrypted:	false
SSDEEP:	12:BMQkzF0aY4sMeqpJp2lj9I6H2slEeGEIyLus1hvHGcdU7lwZBXwmrH:WlFpb2I6HLlEvOu64cdUxwZ9wmrH
MD5:	310353255C23331B4D9B4EBB2C4D742D
SHA1:	F1FC406C38B83ABD34A4CC986E6D9315483EE17A
SHA-256:	2BFF1BCA8640B0FAFCA75D395AD94357FA8533C35C0E951080720FC93BAE80DF
SHA-512:	88D247CC1DB4589E9904F2DB82D7270D22E461CBFB5431D83928DEF549940AAEBBBFFD2E05CDEA8C56EFCBC0298F6F7059CC06EBB6BED9EDF8ED11350F01DFCA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...j...[..\..</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="view_menu"></A>...j...[..\..</H3>..<P><A HREF="fm36re.htm">.f.[.^......</A></P>..<P><A HREF="fm2lyr.htm">.G...[.X.R.A</A></P>..<P><A HREF="fm6d0t.htm">...[.U.[...</A></P>..<P><A HREF="fm3fjn.htm">.f.[.^.x.[.X</A></P>..<P><A HREF="fm4two.htm">....O...t.i.W...`...j</A></P>..<P><A HREF="fm7560.htm">...j.A.O...t</A></P>..<P><A HREF="fm120e.htm">CIE.F.x.}..\..</A></P>..<P><A HREF="fm05rb.htm">?1.^.F.o........u..\..</A></P>..<P><A HREF="fm4srr.htm">2.^.F.o........u..\..</A></P>..<P><A HREF="fm4b3b.htm">3.^.F.o........u..\..</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-9DBOS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	574
Entropy (8bit):	5.846419474911536
Encrypted:	false
SSDEEP:	12:BMQkzF09GeOsMeqQeRtMG8Kp1GuoroF9CEvctxog7aABzpeMUvz:WlULUtJp1wroiDxogW4e9vz
MD5:	A7C03E9C88662E2542DD35F9D3E01F79
SHA1:	166A2E7172061F200DDBDE9D38612CB8AA2632B8
SHA-256:	39C292412CD873EBD7A403A476724B1357A8FC02DA350F97EDCC57C8F6C33254
SHA-512:	68424B8915776C4E769DE3633AADC04689C72511DA809EE32AD280AABAC49F57A9F65A7EF818CBC1711B6B918339E12F7BAE3A991C910E4AF38BE3C21314649D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.I.v.V........i..W...j...[.j</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME=".g2gy6"></A><I>..W...j...[.F.I.v.V....</I></P>..<P>.e.v...O............A[..W] ...j...[.... [.I.v.V....] ..I..............B</P>..<P>.I.v.V.....`....A.l.X....@..v...O.........\....F:</P>..<P><A HREF="fm5a7n.htm">.F..I.v.V....</A></P>..<P><A HREF="fm6i4a.htm">.._.I.v.V....</A></P>..<P><A HREF="fm9sfm.htm">....I.v.V....</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-9FSI9.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with CR, NEL line terminators
Category:	dropped
Size (bytes):	575
Entropy (8bit):	5.2030315094460065
Encrypted:	false
SSDEEP:	12:BMQEdOaA9zF43KUxPDwAhHL91DwmxRLwAhbFAtj87w1qgPC:WnAZqxzpL4mxVk878PC
MD5:	E668C5EF80DA4B06DA539E4811F990D4
SHA1:	02EAABC0EC0E0905DABCC0ED663A5A429B5D3A36
SHA-256:	435C3B86568BB4C1776FB6BB0FB5ECBA3E4B15FE19B7C8853A2BC989185C9522
SHA-512:	06831E40B1B55EA3508BD74C5461DEC0772AA6947E894F37E3EF5D9ED93A5459A925966388BE3F3866A191A8F8FE89304B95824186158D15A41E2DE5B8726CD8
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">.<html>.<head>.<meta charset="SHIFT_JIS">.<title>.....h.L.......g</title>.</head>..<frameset rows="" cols="200," frameborder="yes" border="2" framespacing="2">. <frame src="indexList.htm" name="leftFrame" noresize>. <frameset rows="80,*" frameborder="yes" border="2" framespacing="2">. <frame src="nav.htm" name="topFrame" scrolling="NO" noresize>. <frame src="fm4eus.htm" name="mainFrame">. </frameset>.</frameset>.<noframes><body>.</body></noframes>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-9IUKK.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (369)
Category:	dropped
Size (bytes):	654
Entropy (8bit):	5.974227560446152
Encrypted:	false
SSDEEP:	12:BMQkzF0PC8WsMeqvZC89P8oDFg5njtTNgnF76nPbx+CLumk6zkVbBDGYl:Wl8vsfBDF2xT0tMP0mHAGK
MD5:	1C38B4390D70B017B73D7BCA3992B20C
SHA1:	AA01A762838B31BB207F25D6F91B1A48EE33B834
SHA-256:	66B1DF09B71BD897CE80E94C2AE6B8E60559A5E3D07C145212938593E52F5B31
SHA-512:	F1FAF4671B0628106757DB06B2D5B4C047FE6D1E4159E95CCCF137880712C499352055BD6DBD077197E5EB25AEF42A75CE63BF064B3854B571E1A5BFF209AC4F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.....O...w.....z...c..O.F..</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="young_helmholtz"></A><I>.....O...w.....z...c..O.F..</I></P>..<P>.w...}...E.t.H...E.w.....z...c..A.................s..........A..........O................B.....A.S.......F...O.F.......v..........................B..............A3.......e.........x...d..............\......C.t........B.w.....z...c..O.F.....x.....A...<B>.....O...w.....z...c..O.F..</B>.....m..............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-9M4B1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	961
Entropy (8bit):	5.857968535052985
Encrypted:	false
SSDEEP:	24:Wl+Ueh9A1pPrGY2p4iulpBhQAoJqBuyCV:qLr9rffByAodym
MD5:	6F342BB739BAC5C54BC825E47670BBE6
SHA1:	307F0D51BDCEBC874A06B44A8D82A82936ABB412
SHA-256:	6D9086A8736ED5D49DCF78923A98A663731DAE77B5C899E22B351EB672FF6BDB
SHA-512:	26136209AE3210580F45F7662FA4B54716C75836BC52F291AF5C1992973E30F76B06C617D108E9F7EB87985B0B910922D89122215F17C66D0F14ECC33F4CFE50
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.X.R.A...R.s.[.i..W...j...[.j</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="2mwdzwg"></A><I>..W...j...[.F.X.R.A...R.s.[</I></P>..<P>.f.[.^.i.L...b.v.....j..AWindows..N...b.v.{.[.h..R.s.[......A....v...O......\..t....\....B.</P>..<P>.f.[.^...N...b.v.{.[.h..R.s.[......A[..W] ...j...[.... [.X.R.A...R.s.[] ..I........B<B></B>.....G...[.X.R.A...R.s.[.......A.T.u...j...[.... [.G...[.f._] ..I........B...._....A[.G...[.X.R.A -2] ..I.v.V......I.....A2................._.......R.s.[.......B</P>..<P>.N...b.v.{.[.h..Z.b.g.....f.[.^..AExcel.V.[.g....\..t.........BExcel....A.V.[.g.....u..J.[.\.....Z.b.g...A[.\..t..] ..I........B.G...[.X.R.A..A.I.........Z....A...I...........B</P>..<P>....@.\..f.[.^....`....v...b.g...A.......v......s......B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-9OQ4B.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	654
Entropy (8bit):	6.094756360740679
Encrypted:	false
SSDEEP:	12:BMQkzF0dksMeqM3vEnt0lXRSWFVuOR0AR/KBC9XJJq:WlQGM3Mt0ZRWO6AwBSX+
MD5:	0BD58F9A92F512B895F4FC8F18C65A4F
SHA1:	E252BA5A5AE9694605C7A0988701860AD929CCDB
SHA-256:	B366713FD8016ECA34BFAF6772ABF579E43021C02DE4E3AE0531BEB4347472EB
SHA-512:	7764E63F0842270FE9DBE34C1B4CE9F8DDC2B73DC6CCC32EF221BB2C6C8D509ECAB35AC3B7788DE82735F891A62A7044D249ADD13D5D1C82AE532CE0290CE700
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.F.....F..b</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="3i08098"></A>.F.....F..b</H3>..<P>...o..Q.........O..A...o....\....{............d.v....B</P>..<P>....g....F........A..........d.........z.......e...2....K.v.......B.....A.....F.f..1..i.P.F...F.o..j.A2..i2.F.^.F.o..j.A3..i3.F.^.F.o..j...............B</P>..<P><A HREF="fm7lkj.htm">.P.F...F.o..</A></P>..<P><A HREF="fm4r8z.htm">2.F.^.F.o..</A></P>..<P><A HREF="fm7243.htm">3.F.^.F.o..</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-ADG8A.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	887
Entropy (8bit):	6.035626227419261
Encrypted:	false
SSDEEP:	12:BMQkzF0qsMeqAv5Hz9HJTJB8X0md8s5pcEl/KG8T2SkDh/GCvrHk:WlnAvdz9HuSE5D8JkDVGUE
MD5:	26421A76CE96F422DF8FBDCDA7742606
SHA1:	50D65546069A61D99573C5F0712D2D2461218706
SHA-256:	F2F6BEC66307222A0969F0402C85D9FC5DAE768AE322845AB944E96962F2AE3E
SHA-512:	BCE861C0439CE3D194E51E19734196FD08E2AA5931339B7D6E0F9829CC90D2241E9A83A3E9D9FD4A9070F445104A69DA32A89069943CB131C2CBEC200357769B
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>....</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="6wkrur"></A><I>....I.v.V....</I></P>..<P>.{.v...O.......A.p...t.......c.[................B........ [....] .E.B...h.E..\......A.O...t..............B</P>..<P>.\..........e..I........A[..W] ...j...[.. [.I.v.V....] ..A.N.Z.X............B</P>..<P>..........g.p..\....F</P>..<P><A HREF="fm2k85.htm">...v.G...[.X.R.A</A></P>..<P><A HREF="fm26k5.htm">.........v.G...[.u.X.R.A.F</A></P>..<P><A HREF="fm5fw3.htm">Vingrys....</A></P>..<P><A HREF="fm8iie.htm">....</A></P>..<P><A HREF="fm7hf5.htm">.....i....A..I...T...v...j</A></P>..<P><A HREF="fm7hf6.htm">.....i.J...[.}.b.`...O..o.....j</A></P>..<P><A HREF="fm7hf7.htm">.....i.J...[.}.b.`...O..o.....j</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-AFMTE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	753
Entropy (8bit):	5.99420324006467
Encrypted:	false
SSDEEP:	12:BMQkzF0NfsMeqR+uX6gc1zVAfVGrXJiokkPXjTfi48VzU5kPgbS+QKQrvGC6:WlW3NIR9sotPjTi48VzHUbEGC6
MD5:	5FE6DE74B7E6B3776F2EF861DD156883
SHA1:	32A5EDC3A54BDECA97C17538400B8C95F71DA831
SHA-256:	B4C7168270821F85842C84F51740300D69A5A3AC10353BA4FF54F2D4140F0992
SHA-512:	6E0D1CFB74F30BFE1F77C271FC8BBAA88C907289861FB667C2B1D672D929AEA0D5CD63CF54B7902F69F8AB37DCAB4F38CF41AC3AD663D3B2CC3220A6867C18D9
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.F..I.v.V....</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="color_options"></A><I>.F..I.v.V....</I></P>..<P>FM.q...[.e.X.g..f.B.X.v...C.........F..A.f.[.^........A....E...j.A.O...t.......T.\|.[.g......B.R...s...[.^.[..S...F...\............A.J...[.f.B.U...g.p.......B....A.........A.f.[.^.............L...b.v..........................B</P>..<P>..........A[..W] ...j...[.. <A HREF="fm2y9i.htm">[.I.v.V....]</A> ..A.N.Z.X...A.J...[..................B...........L...b.v..O...[..\............A.J...[...x.....O...t...........B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-ASJ4T.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	1012
Entropy (8bit):	6.178632132066476
Encrypted:	false
SSDEEP:	24:WlTJzg5D4JSh72RDV+MilwLzR2QQ7ZEs3MLE:qSJwSd2RDVbgkzAtP8o
MD5:	D3EB45B50865DB8420AA122C8A15FD65
SHA1:	F31E2AE1CB07F0969EF16C8848473D15498D7AEF
SHA-256:	9EAB8D23015F8E675D46CA1EAA84ED248B20FEDD3D62E436D77C0F7776147328
SHA-512:	A50350A2C550B6E9140B4166A3921717CE909642B1A036576F675109FA95E9BA231DD7AD5D880A36BEA86CDDAC5A6A46CD09E338A8940113D2E2F1CD5F873C1C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>Vingrys....</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="vingrys_analysis"></A><I>Vingrys....</I></P>..<P>[Vingrys....] ..f.[.^..x.N.g........s...A.f.[.^......A.....A......L.q....C...f.b.N.X...o.......B</P>..<P>[.....C...f.b.N.X].iC.C...f.b.N.X.j..A......F..x....\......B.L...b.v....S.z.u..AC.C...f.b.N.X...u1.0.v.......B</P>..<P>[...U.C...f.b.N.X].iS.C...f.b.N.X.j..A.L...b.v.z.......i............_.....j..\......B.L...b.v....S.z.u..AS.C...f.b.N.X...u1.28.v.......B</P>..<P>.p.x..A.L...b.v.z........\......B</P>..<P>Vingrys.....f.[.^.....A.b..f.f..g.p......B</P>..<P><U>.X.^..._.[.h</U></P>..<P>.{............p.r....L...Q.............B</P>..<P>Vingrys, A.J. and King-Smith, P.E..i1980.N.j...o..p.l...e.X.g.........._...@.BInvestigative Ophthalmology and Visual Science, Vol 29, No 1, pp 50-63.</P>..</BO

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-BC399.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with CR, NEL line terminators
Category:	dropped
Size (bytes):	804
Entropy (8bit):	6.176840190226909
Encrypted:	false
SSDEEP:	12:BMQbwMC9zF43KyH9JERF4qc24whd+EKW3FIzp9kUMhouF010YUC:WLZM4nzca+EKWVsbFMhouFq0tC
MD5:	65A319D43C8418BE0A885A44A61C540F
SHA1:	8EC40C5E47B96AFB75B8EC02D09B9A24833E5619
SHA-256:	D20B33C34307484E8612CD89DC7C05356C6C0839D4DBC1D246BFAE86274F12B6
SHA-512:	3F0BFC070C71825D44E5F561A51FEBD75442679B69928407BF4927AE55A31A2884B8A95D85EFC1EBC5742F48D531FD8EE26C4001EA38CAB7744A98ECA45BF7AA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta charset="SHIFT_JIS">.<title>.....h.L.......g</title>.</head>..<body>.<p>?2.^.F.o........u</p>.<p>...o..Q......l................F..g.......ACIE.F.x.}..Q.....B</p>.<p>2.F.^.F.o...A.F.x.}..v...b.g.............F............B</p>.<p>..Q.^.C.v......A........_......o.......B.......A...F.......u............B</p>.<p>2.F.^.F.o...A......u..S.........F.............A...3.F.^.F.o......................F.........................B</p>.<p>.S...\|.C...g......A......u............A...o..Q.......u...v.....j...[.g......g...........B</p>.<p align="center"><img src="../images/deutanCIE.jpg"></p>.</body>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-BPSG0.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	652
Entropy (8bit):	5.6551640143191335
Encrypted:	false
SSDEEP:	12:BMQkzF0hersMeqxfeW9KGHJxjh6VkhZkh1BB05Nji3ptCwn:Wlf34+bHr1pyLB05NO3/jn
MD5:	9C046E414D51598C9E165BB6BD56B7D4
SHA1:	17C29BCD3D2BB240858E7AE816FDFCABA41EBA17
SHA-256:	510A49BD5044AE8A47BD227D6D5C63DAE62D69EA9A3BE673D05D3EF0716BE0ED
SHA-512:	489FBAB353C485824DD2F7F53EAC75925CC6F2E55B13220A3607DD34A9CBB4CBA85925BC948FCE6236B7F7BD9332EA06F5B0F3C2E4AFCFC10144003F64C19CB0
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>..W...j...[</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="edit_menu"></A>..W...j...[</H3>..<P><A HREF="fm0j5b.htm">.....</A></P>..<P><A HREF="fm6q01.htm">.O...t...R.s.[</A></P>..<P><A HREF="fm5tbb.htm">.X.R.A...R.s.[</A></P>..<P><A HREF="fm2bco.htm">...O.......R.s.[</A></P>..<P><A HREF="fm4s11.htm">.V.L.^</A></P>..<P><A HREF="fm6rj8.htm">.L.^..I..</A></P>..<P><A HREF="fm68mt.htm">.L.^....</A></P>..<P><A HREF="fm59v4.htm">.....L.^....</A></P>..<P><A HREF="fm2y9i.htm">.I.v.V....</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-C1S0C.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (563), with LF, NEL line terminators
Category:	dropped
Size (bytes):	1514
Entropy (8bit):	6.236556673488591
Encrypted:	false
SSDEEP:	24:WlkqfW4vVClAUfzNVSHAohkuB0NQr+J27I91C1WqnVpEmmRceCokfHZ2OPP+wnrw:qhrClAyNVcAoGg0i+O41C1VnVpE/Rcet
MD5:	62550B0A2B9BE9979BC9C28461F96398
SHA1:	33EE1DE06E4A9B430B134CBC41CB8710260BC7F0
SHA-256:	A26BD4348387477B91BD71BD2B70AB6ADE8273F9C74A8DAB102CC2141E55C1BF
SHA-512:	54D063386180E2BCC4AD9C25832A2F494A43179DDE9DC59F52E03C36E1C97C0E3F8F827CC6F64C158C6662113BC7B0EE77B239A3F5EB935B535266AD904192F2
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...o.F..Q</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="2p8e2k"></A>...o..Q</H3>..<P>1794.N..A.W.....E.h...g..........o..Q...........s........B.....A.Z....F..................A...g..o..................B.h...g.....g..Z.........Q................A..............I......A.F.t.....{.....g.p...........J.n........B.h...g....A..........q..t.......F......m.M........B..........A....g...v......<I>....</I>..................B....A.u..V...F..v.......A.........o..Q..\...p......g.p..........B</P>..<P>..V.I...o..Q..A......F.f...`............B...o..Q.......`....A.......j..............B......A1..........O.....^.C.v..............A3......^.C.v...1....A..........x........F.f..................B.......A...o..Q...........A......

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-CJNK7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	824
Entropy (8bit):	6.141243687627612
Encrypted:	false
SSDEEP:	12:BMQkzF0TDuK0sMeqMRDu8aHvnJTWtlWFMpigOZRclanYAUPrcToLbe3C7VVFKu:Wlbj6ShJTWt4KLachTFLyuVwu
MD5:	037E4E9637B68867C778914323464CAD
SHA1:	9CE11BF9866A73BDA36D5C67B80C9B8F5BA630DF
SHA-256:	CD4415838B5AB1A90135D8519542775D8C7BB9BD54E49F36A3D71DEFB0E1EFD3
SHA-512:	B01B143E5165976D7DB7BF21507909EB2209E8E842A4C5965F14083A33240410EDDBEFD177ED6AE79B051DE101A8449ED4639214BF9C7D963081E938BD818CAF
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.f.[.^..t.B...^.[....</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="filtering_data"></A><I>.f.[.^..t.B...^.[....</I></P>..<P>[.t.B...^.[] ..`.F.b.N.{.b.N.X...N...b.N.....A.f.[.^...............B.{.v...O......A.f.C.......o.[.`.......A...S...Y.........i1987.N.j...g.p.........B.t.B...^.[.@.\..A.........f.[.^.......A...o..Q................I....f......B</P>..<P>.t.B...^.[.@.\..OFF.......A.`.F.b.N.{.b.N.X....`.F.b.N...O............B</P>..<P><U>.Q..</U></P>..<P>.f.C.. S.J......o.[.` J.i1987.N.j.A.t.@...Y...[.X.E.}...Z..100.q...[.._.e.X.g.................@.i..V.I...o..Q.....j.BOphthal.Physiol.Opt., Vol 7, No. 3, pp 267-280.</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-COA10.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with CR, NEL line terminators
Category:	dropped
Size (bytes):	432
Entropy (8bit):	5.6288202415306126
Encrypted:	false
SSDEEP:	12:BMQbwMC9zFUl38QvZMNEqhZMN+Hu0qqUC:WLZetXqhZJHNkC
MD5:	7F9DA0346B6CD1705C609384AE638C35
SHA1:	E8A8925EC6896672588B5E232E795C7DECFF7FA8
SHA-256:	7A4A49EE687103F20BB97986F57F2F028BF791DFB4D4EFD17CFCF19C7891C32A
SHA-512:	64BFA810AD87D41154954E67F5ED275F3054A19F23E0F1C5DA90A6A4A299B3E4749FAE7FB4F8A0C53DA19F6A2C4CBBEB477494615C335F98444ECA4DFF04C945
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta charset="SHIFT_JIS">.<title>.t.@...Y...[.X.E.}...Z..100.q...[.e.X.g.._.\.t.g.E.F.A.F.w...v</title>.</head>..<body>.<HTML>.<HEAD>..<BODY>..<form>..<input type="button" value="Back" onclick="history.back()">.<input type="button" value="Forward" onclick="history.forward()">FM 100 .w...v</form>.</body>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-E5V1K.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	664
Entropy (8bit):	6.201508318315941
Encrypted:	false
SSDEEP:	12:BMQkzF0m6XWsMeqHTIC4YiqrzlzkGrtnHVacJeYWvTBwcDFc:WlPVzI0pkGR1a0abKd
MD5:	2BBE285C426D5017DC178CEB33ABD813
SHA1:	8EBC883009854EE84A44587FF28595F0D993A0DE
SHA-256:	75B8B1029EE5541865BD8337D87E92B614D2109135CE673667AE7934163F3A95
SHA-512:	A75FB33AC8C36883B4A8D5D5A1836448973AB4FA50D03A1D23BC89975B025F256D10CA8C165C5816B761646269208031D16A81EFF57BCA0B76E3A764EE1BF5B2
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>?......</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H4><A NAME="confusion_axes"></A><I>?........\..</I></H4>..<P>...o..Q..........o......f.[.^..A...............2...F....W.........G...[....\......B....2._..`........A..................B...............A...o...Q.^.C.v...F.........B</P>..<P>[........\..] ..I.....A....O...t..1.^.F.o..^2.^.F.o..^3.^.F.o....Q.f.[.^..t.......A.f.f............B</P>..<P>.......A<A HREF="fm7z8q.htm">...o..Q....o</A>...Q.............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-ESJ12.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (626)
Category:	dropped
Size (bytes):	1003
Entropy (8bit):	5.967762875334052
Encrypted:	false
SSDEEP:	24:WloOWiNS9KGMCeUqjl9fRn7ABy8Pw6VOQa2nTG4h:qo4gKjRr9Jehtzh
MD5:	3E6C3A212828E760CD5E31AF75B45CEE
SHA1:	493913F573B98C8432100218E868C5AAC143EB1E
SHA-256:	7045E591B243C0028CD8FA222B444A11D341DEE2CDB2593F13BF2FAD4A832919
SHA-512:	EC73482BD9F7C4338BB3B90DE7ADEA6F767AFC9E022911DEB854B44101C9C5BAB3F28852688B368C68CE9279FFC99D45F70F03EFBF2BF6B36E1716328F8152DA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.P.F...F.o..</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="monochromats"></A><I>.P.F...F.o..</I></P>..<P>.....F.f..1.........l..A<B>.P.F...F.o..</B>...........B</P>..<P><IMG SRC="../images/bm2.gif" ALT="" BORDER=0></P>..<P>..L..O...t..A...z......F.f......z...X.y.N.g.....\............B.g....<I>A</I>......A.....F.f..z........\............A.g....<I>B</I>......A.z.....................B<I>A</I>..z....<I>B</I>..2.{...\.............A.....F.f..z.......g....<I>.m..].n..........B</I>........G.l...M.[...A<I>A</I>.....<I>B</I>...............A.P.x..............x.........A.g......................B.....A<I>A</I>....x..2.{.....A<I>B</I>..P.x...v........A2...g........F..........B.......A.P.F...F.o...g..........F...............A<I>.F..</I>..l.........B</P>..</BODY>.</HTM

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-FD4D8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with CR, NEL line terminators
Category:	dropped
Size (bytes):	818
Entropy (8bit):	6.181462446059109
Encrypted:	false
SSDEEP:	12:BMQbwMC9zF43Kybm9JERF4qc24whd+EKW3FIzp9kUMhouF01H2GoUC:WLZt4nzca+EKWVsbFMhouFqHrC
MD5:	1CD6E7CFC808AAA1D66BC253B7A8B22A
SHA1:	C4B170D79F3DA01495D5AC065DF81E88B3E325F7
SHA-256:	3086A892476880FD846080501BE0A443639FB8EA4B377620CAA0C96DC8ACF144
SHA-512:	2FBDB8E66578B50B2925A0A2E254F4935726FCC81E4898F29E82481BDBB69197AB3C94312D40CE82CB812D4B89EC1D8EB8491E656E8A57C7F09B2B0DBB66AC58
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta charset="SHIFT_JIS">.<title>.....h.L.......g</title>.</head>..<body>.<p>?1.^.F.o........u</p>.<p>...o..Q......l................F..g.......ACIE.F.x.}..Q.....B</p>.<p>2.F.^.F.o...A.F.x.}..v...b.g.............F............B</p>.<p>..Q.^.C.v......A........_......o.......B.......A...F.......u............B</p>.<p>2.F.^.F.o...A......u..S.........F.............A...3.F.^.F.o......................F.........................B</p>.<p>.S...\|.C...g......A......u............A...o..Q.......u...v.....j...[.g......g...........B</p>.<p align="center"><img src="../images/protanCIE.jpg"></p>.<p> </p>.</body>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-G3SQQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	1075
Entropy (8bit):	6.026913348431452
Encrypted:	false
SSDEEP:	24:WlFUd4cVpgPW70zKxLN8A7vPdqwpvEEhFW5:q3OxQA7vPF5hF4
MD5:	46455D433EC2A5E8A4B35194D23E6AA5
SHA1:	6CFC5373823B060C8E4E69361054172B8BBFA20D
SHA-256:	D0982BA9D4D791D225385B5F230EDCB1B420FAAA1258CB2244D47EA71BE52CCC
SHA-512:	03E59A8DDA991F46E5A943C009E31F762E9E25F7FB1F4F96D9B8A023C0714731B2AFC29C689CA48E51DF9404037B27AEAEC4C2EBF3A36F98EFEA700BD71A96CC
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.L.^..I...i..W...j...[.j</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="11cfrtd"></A><I>..W...j...[.F.L.^..I..</I></P>..<P>.f.[.^.x.[.X.........L.^.....A..W.A.\........A[..W] ...j...[.... [.L.^..I..] ...N...b.N.....A.....c.[...o.[..f.[.^.x.[.X.A.C.R.. <IMG SRC="../images/bm16.gif" ALT="" BORDER=0> ...N...b.N......B....f.[.^.x.[.X............L.^.....X.g.\.........B</P>..<P>.f.[.^.. [...O].A[.Q..].A[...N....].A[.e.X.g....].A[.t.@.C.....].A[.R.....g] ..........A<I>....</I>.p.l....e.{.^.....N...b.N............B.</P>..<P>.L.^.....N...b.N....n.C...C.g.\.....A[.I..] .{.^.....N...b.N......B.I.......f.[.^.L.^......\.........B</P>..<P>Ctrl..Shift.L.[...........A........[.U.[......x..I...........\....</P>..<P>......f.[.^.L.^...I.........A.....O...t.........F..\.........B.e.f.[.^...A.....[.U.[...

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-GCMMM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (466)
Category:	dropped
Size (bytes):	706
Entropy (8bit):	6.132820746969166
Encrypted:	false
SSDEEP:	12:BMQkzF0CsMeqdCt4c9Nmm5m5grRx2Ium0vLLpeBHLxuD+UzIuKBfr+Gio6dresv0:WlvdeZ58g9xYdeBHLP6w61o6dPL0R1
MD5:	DB116BC1E91ACC7EC869717574DE5938
SHA1:	70CCD89B6D0B63123DC82663B901C90E8CDDCEC7
SHA-256:	FAE9F286757A399F0255300F7795162817C0D8B139ED62C9E8D10B78D7C93B98
SHA-512:	A83894D2C40A54B8CEB07884ECC18AB61F6D0F1C21E3FBBE9A06FFD1B93B840EF7E19EC8B6F6F05B4DD923D194B30ACC53345834527C89D1287419E709C9F9F6
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.....</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="opponent"></A><I>...o......</I></P>..<P>.h.C.c..S...w..^.....w......G...@...g.E.w.....O..A1870.N....o...................B.w.....O..A.O.....I...@......A...o..3...d.g...\....................B....3....A1. .......m..I......^.....I......A2. ...F..m..I......^.....I......A3. .....m..I............A..................I...........<I>.P.x</I>....B......_..A<B>......O..@..</B><B></B>.....<B>.w.....O..F.o..</B>.....m.........B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-GFNT4.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	604
Entropy (8bit):	5.644895307131875
Encrypted:	false
SSDEEP:	12:BMQkzF0fI2rsMeqQ022W9/Rqja+felUVxymQ5PAUpv+c:WlMhQd/AnfYUXymM2c
MD5:	7B2AFF5293CEE97EC1DA80C968B9BC95
SHA1:	CAEE2F2F6AB3E7CFE098A169C2500BD560F44BDF
SHA-256:	AD3FBD20A566149167EC950C253C9F09F72F9C5610CA7F89AC661FC6DA1ABB13
SHA-512:	0ACE97C1EF80015B6E64C243BD9B0B615B38A097D484D2A194B218FC714E99C3EA8022FAA8AF6C5D4B9C04AD57B89EB10A1631C5C3EAE6EF7BBD24AFB42FA622
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.t.@.C.....j...[</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="file_menu"></A>.t.@.C.....j...[</H3>..<P><A HREF="fm760n.htm">.V.K</A></P>..<P><A HREF="fm59da.htm">.J..</A></P>..<P><A HREF="fm9i7k.htm">...O..t......</A></P>..<P><A HREF="fm1xf2.htm">.O...t......o..</A></P>..<P><A HREF="fm6m3u.htm">.X.R.A......o..</A></P>..<P><A HREF="fm043d.htm">...O...........o..</A></P>..<P><A HREF="fm7n8x.htm">...</A></P>..<P><A HREF="fm7dgf.htm">.I..</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-GGQV0.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (574), with LF, NEL line terminators
Category:	dropped
Size (bytes):	4411
Entropy (8bit):	6.1205217596619335
Encrypted:	false
SSDEEP:	48:qYM6eqGanIX0MXl0aXE1GXK2gXpltXZWjXDBwXZDXXE18XaUXWRMiF+M6wV+lClt:UaBRFNt/PionY4jXC/
MD5:	921B4DB7FB8463C1C70CBAC0429A6D30
SHA1:	BAA77DADEF2BFC0C9606A42FA81679B604F1A86D
SHA-256:	F22A5F33E9AFF2F60D71CE98E3C8B444B4F623AF92A1B252319EE3174598768A
SHA-512:	881ADCFB2785A1DE6FD2E6509373CB30F8D18362505AB210844A86F32615A7D75508C225F83870B9AA15BBB523BC8E7D6DFD2FF99F9DDAEF45A2005873CAB1FB
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.K..f.[.^</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="normative_data"></A><I>.K..f.[.^</I></P>..<P><B><U>...v.G...[.u.X.R.A....z</U></B></P>..<P>.e.O...[.v......G...[._.......e.[.u....W............B<B>.u..I...v</B>..A........15.....45...l.......G...[._...........B<B>.u....v</B><B></B>..A.^.y...L...[.J.[............p............A.F.....E..i.V.F.[.h....A...{....A...{.Z.p.j.......300.l..................B<B>.u.o.....v</B>..A.....A.~...A.v...X.`.b.N.A.e.L.X.^.C...A.y.C...g...[.J.[....F......{.......3.N....20.N..o........A150.l..e.X.g........W...........B.V.F.[.h....A.J...[.}.b.`...O.A...F.A....A.......A...F.A.H......g...E.........B</P>..<TABLE cols=4 width=451>..<TR VALIGN="top">.<TD width=28%><U>.O...[.v.....</U></TD>.<TD colspan=3 width=72%><U>.G...[._...........</U></TD>.</T

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-GJL5B.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (564)
Category:	dropped
Size (bytes):	1526
Entropy (8bit):	6.07434753599678
Encrypted:	false
SSDEEP:	24:WlgcJN9CDo1VsOzV4BVR6vCCtas0KxafTK7KxyfU8jV7/nnKaSHzQu88fkTjKSdX:q7rCyuBVR6vCEaHQQe7QlY9/KaIku89D
MD5:	1CECFCF043BBA005A40095C4D2E8CBA9
SHA1:	DFABC6D6ECF7A9ACE0D8072C0133AC9443195D3E
SHA-256:	6F56F8EE4078A0FB417695061DC17C19FC2B6FAD7F834CBE2DF223168AA43817
SHA-512:	443D7B048D5CB6746CC4DCA46116C66E3202AB638E63E27092AC72C40CC2DE9A5C01B95CDB8559FBA8EFABA12D5DED6FF17B7339F22C94FF1891D1E25445B810
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>2.F.^.F.o..</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="dichromats"></A><I>2.F.^.F.o..</I></P>..<P><IMG SRC="../images/bm3.gif" ALT="" BORDER=0></P>..<P>2.......F.f......l..A<B>2.F.^.F.o..</B>........B2.......F.f.iP1.....P2.j......z....A....g..................A.X.y.N.g..............d........B<I>A</I>..<I>B</I>..\.......2.....p.b.`.......A.....<I>A</I>...v.....<I>B</I>....x............s..\.......B......R..A2.......F.f......z......<I>A</I>...q.....A.........F.f......z......<I>B</I>...q.....v............B<I>A</I>..<I>B</I>....x................A2.......F.f......e..............B.]....A.g.............f..\....B</P>..<P>..................B</P>..<P><IMG SRC="../images/bm4.gif" ALT="" BORDER=0></P>..<P><I>A</I>.....A<I>B</I>..<I>C</I>..........2.....p.b.`.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-H2RSE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (393), with LF, NEL line terminators
Category:	dropped
Size (bytes):	1404
Entropy (8bit):	6.117184984067254
Encrypted:	false
SSDEEP:	24:WlMsE9YzoS0Bhyrn+O3sDBAywqBccKL6c5S3W2Yh8Mep1kBjPeW:qy9rh2+O3sVA8GR321MvBGW
MD5:	CD1EE29F86ACC66FDFA538D9AE554730
SHA1:	08F8B65C6D422588C0AFB85EB0135C1D73D779F6
SHA-256:	E22422552CB0592BBF7A621EEA4E32787D8F3A7703BA0C1568761BF2D21C0AC2
SHA-512:	4E837E637FFCC76051F6951850C86EB0DD78BB1B9A0A5E53FC30D3349CB32E45DAA332451380DB049250F91610DEA2392FC8DCEB4B562FDADA7A52D2AD326217
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.F..m.o</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="color_perception"></A><I>.F..m.o</I></H3>..<P>.u.F.v..l.....o.....A......I......v.f....B..x...........F.....A.........s........\......A.u.F.v..m.o..................B.....e...r......A.J...[...................A<I>.L....</I>..................B...R...i....m.N....^..........B.{....F...............\..................B</P>..<P>.u.F.v..A....................................B.d.v....b.Z.[.W..F..V.O.i....\.........B....A...<I>..</I>.....<I>..~</I>..\...A...<I>.O.i</I>..<I>.I.[...C</I>...........B.F.....A..E.i..F.d.C.z...A.d.q...i.A.p.C.v...C...A.K.X.{...x.A..i.e..j......L...g.p..........B....@....A.F....V.X.e.....R...Z.v.g....K..A......w.K...@.......p..........B</P>..<P>......\.N.......A.R...s..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-H5PDP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	1614
Entropy (8bit):	6.173728975935784
Encrypted:	false
SSDEEP:	48:q5FavzoavQhlavIjD79igAGuGZQCgO143B2HEu:oCYB9i5l1Q4EB
MD5:	58E37828D5B3042F5325B50DBF28FFA0
SHA1:	12D4E2B5AFB9EC5F6D2050A44C54A6561F2322B8
SHA-256:	AC924149892E9B63A7227CB61225FE4154E02AEC698CAFD10F33AED81271B271
SHA-512:	38D20F6854732115BCEBDACE2B5DDDA765030CCF7ACC694BB4819E582CD85882567A3EA211D43DF51910C4B2EF032ED764FAD7C3D5C4282E7755A5E69C8FE504
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>....</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="classification"></A><I>....</I></P>..<P>......o.\..................F</P>..<P><U>.......</U></P>..<P>.l.......16%..i...o..Q..........j.A.....e.X.g..4..................A......G...[._....16._..........B..................B</P>..<P><U>.........</U></P>..<P>.l....68%..i...o..Q..........j.A.....e.X.g.......20._....100._..........B....................B</P>..<P><U>......</U></P>..<P>.l.......16%..i...o..Q..........j.A.....e.X.g.......100._....G...[._.....o.......B..e.X.g.._...................A.e.X.g.....x...s......._.......................B..e.X.g......A..Q.p.^.[..........................B</P>..<P>....Q..p.^.[....A.{.v...O..........f.[.^.x.[.X...W..i<A HREF="fm0bdx.htm">Exampl

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-HCD2O.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	1457
Entropy (8bit):	6.172546254807452
Encrypted:	false
SSDEEP:	24:WlTH17EcKls6fMjXyNBt8FevxUd4YKnvFEDio:qrjWsUMjXyNB4e243nvF6io
MD5:	E1FF0BBE2681C810C68DB87FBA1DB61B
SHA1:	461F645472002199BB4B167CB848B6C47ED16517
SHA-256:	BD83C106402A9614E1E061ACF2B0BA572FD2482AD0084B544478834BB189088A
SHA-512:	E1F29B66B57664B58981CADDE4DC9D2D9657D336B12360469C7DB88479B8890030C72899F23E5ABF5C8F676A2583D76396EFF447A9332597648538FEC7FBEE94
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>FM .q...[.e.X.g..g.p..I</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H2><A NAME="purpose"></A>FM .q...[.e.X.g..g.p..I</H2>..<P><I>...p.r</I></P>..<P>.t.@...Y...[.X.E.}...Z...F...e.X.g..A...o...........P..s.....@....B.S...I.....J...I....o.....K.p..\..f.[.^...o.......B...p.r.F</P>..<P>.E.@.....F.m.o...u..v.A.u.W...v.A.u..v..e...x.......</P>..<P></P>..<P>.E.@...o..Q..................F.......</P>..<P><I>.p.r..</I></P>..<P>.E.@...i.F.A.J...[.]...A.J...[.}.b.`...O..S................E.....</P>..<P>.E.@...o..Q..^.C.v..x........</P>..<P></P>..<P>.E.@.c.......o.......o</P>..<P></P>..<P>.E.@...C.....K.....f....p</P>..<P></P>..<P>.E.@.J...[..........p.e.X.g...v.f.U.C..</P>..<P></P>..<P>.E.@.............</P>..<P></P>..<P>.E.@....F.o.e.X.g..L.......m.F.E....</P>..<P><I>...L..p.r...g.p........B</I></P>

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-HJTQF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	727
Entropy (8bit):	6.121310037882762
Encrypted:	false
SSDEEP:	12:BMQkzF0PLWsMeqv7ohb8O6+hAdn1dnG0fmjYMvbuThZU+mbBUakuzVKAA/bAT2Ss:Wl8Lsjmb8Ow+0f4YMvOZUVKKRVs
MD5:	021FAA240164CEFE493A7A96F595B7D9
SHA1:	52906BC6E369DB8B9E99BFFB046608A1ED368B00
SHA-256:	E4D747684D7017DCBB9877E20570B0E0A572A96D1EBD1826345B304B93033AC0
SHA-512:	072229E95EA36FDD31085AD3EE7C6CA8BAD4181BDEF45E73B703C106AD2498916F3EFC11A5587E114353EEC8336E22DC7AE3EC6105DBD6DA49161537AE1CC197
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.....O..O.F..</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="youngs"></A><I>.....O..O.F..</I></P>..<P>...o.......v.......2.........A.g.[.}.X.E.....O...........i1773.N.`1829.N.j.B.....O..A.l......S...F.........e.............._.........A...o.......3.F...e.......................B</P>..<P>.....O..O.F.....50.N..A.}.b.N.X.E.F......A..]....p.....l.X..F..g.........@...F...s......A...........m.F.........B............A3.F..v...C.}...[.F.....................A....F..........................B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-HKC5U.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with CR, NEL line terminators
Category:	dropped
Size (bytes):	868
Entropy (8bit):	5.96251983936539
Encrypted:	false
SSDEEP:	12:BMQkloeVfMeqrJ4nIPKWHpkAUuDAEIODDBRIyDhLmxDTrlkkMH:WllozrVyW60A4XI+hLmNvlkk8
MD5:	83E22B36FBC697273A4CD55F606DB468
SHA1:	DA65191A5C3FD7336B5E9D644D2104C9A951D879
SHA-256:	384AF24B42ABEC005E7E8448D0578378F4991A03B4C29789DB5272A08986A85A
SHA-512:	8488A41E1935620FDAF16D48C08455A2061F06DC553E9D0F154D488B56CB45F89BD12399DC7940FF7562CCBBD8A7931C12DBCCBD2366BC836D259F5AE58C95F6
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.c.[...o.[</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="toolbar"></A>.c.[...o.[</H3>..<P>.X.N...[......c.[...o.[..A.p...g.p....@.\..A.N.Z.X.......f.U.C.............B</P>..<P><IMG SRC="../images/bm22.gif" ALT="" BORDER=0>.w...v..\..</P>..<P><A HREF="fm7n8x.htm"><IMG SRC="../images/bm14.gif" ALT="" BORDER=0>.f.[.^.......</A></P>..<P><A HREF="fm3fjn.htm"><IMG SRC="../images/bm26.gif" ALT="" BORDER=0>.f.[.^.x.[.X.........L.^..\..</A></P>..<P><A HREF="fm36re.htm"><IMG SRC="../images/bm8.gif" ALT="" BORDER=0>.f.[.^....</A></P>..<P><A HREF="fm4two.htm"><IMG SRC="../images/bm10.gif" ALT="" BORDER=0>.f.[.^......v...b.g</A></P>..<P>......@.\..S..A.v..._.E.....j...[......g.p..\....B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-HO836.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	738
Entropy (8bit):	6.122905667937323
Encrypted:	false
SSDEEP:	12:BMQkzF0FlsMeq3jL8hfzn85tRAqdTxospbuoIFtZSkmAJuWq8feBd574UPu:WlI3jUD8/TNxxpb3IBq8W5tW
MD5:	76FBC53D9DFDB87D74D5FF0DDB772F5D
SHA1:	CD6BB63DABC1561B3F37165AEB552535A28146AE
SHA-256:	9B795225C56B925F46F81C9D4E0EF06212E06A9D07855DDD086C1E0D841BEF7C
SHA-512:	9BF3CA8CD803EFFB9B109917BE385E327EB65984FFC7D2992EAC4308CAA93CAD4EAC87B5641DC47D996C93EA61AABEB91D25E72BFC286AEAB485EB6E93BBCFA7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.].[....._</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="zone"></A><I>.].[....._</I></P>..<P>.....O...w.....z...c..O.F............O..@....A..........T.\|.[.g....A........F..................A.F........I.......K.....................B....2....._..A1881.N..h...f...X..<B>.].[....._</B>..................B</P>..<P>......_.....A.J...[.......o.H...A..].[...A.....1.....x....................3.F.^.F.o................B....R...Z.v.g..A...o................`............B</P>..<P><IMG SRC="../images/bm0.gif" ALT="" BORDER=0></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-I1SAK.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	566
Entropy (8bit):	5.844503022631328
Encrypted:	false
SSDEEP:	12:BMQkzF0h12/GsMeqrUI2QzW0pVFCJtdzrEXPz8g3Gr:Wl2rNW0pVFCJnE//Gr
MD5:	689B2C34A4BC7907FB159C10F843C44E
SHA1:	43B4049163405995440174E697CD510800D26928
SHA-256:	8CB790AC902A2C885FAD4CDA418E9A9BF0B5084EBFD04C2B7C7F06CDDD0CB506
SHA-512:	5426B81E72921CCE4F986DED585D28302184FF7AF560C637609D4D525AC4890D965C5A9003A40689A5A7948930E7C4D4B43D1CDD04C7985C1A954EFC499FA0F4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.J...i.t.@.C.....j...[)</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="file_menu_open"></A><I>.t.@.C.....j...[.F.J..</I></P>..<P>......f.[.^.x.[.X...J.....A[.t.@.C..] ...j...[.... [.J..] ..I..............B.\.....X.g....f.[.^.x.[.X..I........B.V.K.f.[.^.x.[.X....O...A...C...t.H.[....^.C.g...o.[..\.........B</P>..<P>.V.....L.^.....f.[.^.x.[.X........A......f.[.^.x.[.X...Q..............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-I8U8G.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	418
Entropy (8bit):	5.404954706329253
Encrypted:	false
SSDEEP:	6:B8FQk+HryftzgYiTd0oQ0iNMeqlxUfWZdUogXR72TcgtTO4eTcgTbcgp0TTqM4T:BMQkzF0aEsMeqqWZS9XR721BO4e15STk
MD5:	F19433B27B82BDAEFBE1C72BBB1195CE
SHA1:	C314AF32A953CB2C377BDD5DCBD9404ED31030BE
SHA-256:	54432CB166273186CC138ACFBFF9A66C11F4502EF21E289E3F74B752937029A6
SHA-512:	513F4DB72E69016F9CD5FED2F398EA214F03988A920F1CC4FECCF8948920535816DA7149D7A8455AE010436B73CBA3A8AAC9BE97EB2D01C8D686FE664007BC2F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...j...[</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="menus"></A>...j...[</H3>..<P><A HREF="fm8igl.htm">.t.@.C.....j...[</A></P>..<P><A HREF="fm57n9.htm">..W...j...[</A></P>..<P><A HREF="fm3ncl.htm">.\.....j...[</A></P>..<P><A HREF="fm5sol.htm">.w...v...j...[</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-ICLV8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	687
Entropy (8bit):	5.972985912756829
Encrypted:	false
SSDEEP:	12:BMQkzF0su0sMeqyAz+MotHm2tlHo87IgEinW+BtloNR68KpYwkPd8c:WlVXzzotHm2tlHo85fTtlhpZkt
MD5:	401A78C8753A91F6E4800081697F3297
SHA1:	9811F0793717C3C43138ECB860EF3F8709DFBF72
SHA-256:	A50CE36A539FF2114C278E768C3482F8E6305B5E10056E3B000E6DE38BA44CF7
SHA-512:	DD2BBEC3DF2943409FB8CA72593D0EE7F7E0FD067747002EE63F8BB0CF4BDD2DFD5C684688EB664E0312B471910AFD4A7117BB85B9ACF8C6388CDAEE90B71CD5
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>Standard;Kinnear;Plotting methods</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="bye5mz"></A><I>.._.I.v.V....</I></P>..<P>.G...[.X.R.A...v...b.g......@..Q........F</P>..<P>[.W..] ..A<B>.C.G....L...b.v...</B>......G...[.X.R.A...v...b.g......B.........................@....B</P>..<P>[.L.j.A] ..A.L...b.v..<B>..u</B>......G...[.X.R.A...v...b.g......B.......@......g.p...........B</P>..<P>.v...b.g...@...X......A[..W] ...j...[.... [<A HREF="fm2y9i.htm">.I.v.V....</A>] ..A.N.Z.X............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-IICJG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	624
Entropy (8bit):	6.00327344885568
Encrypted:	false
SSDEEP:	12:BMQkzF0FsMeqBl7B5YnpKBDXtR7cA0UIL9F+15kVTpcAkeyrw:WlGbB5YnpKJ99c1UD8VTqeys
MD5:	C067B5BB1524240378EC496E4EF0D5AA
SHA1:	023B874E8ADE93BD9007C754B6E001F610B07731
SHA-256:	E5D91D5C69B88C7173AEE639D9A9F439B26FE450D48847466952D5533979A641
SHA-512:	B8BA2D794B19D0893DBB286464C2BD05C561726AD2BFF93C200368308E27F874F56E25DFBE0231611F08770C5484E930CDEEA1F8E69B914672111C754691387B
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.._...@</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="scoring"></A><I>.._...@</I></P>..<P>FM.q...[.e.X.g..._......s.....A..............B....A.R...s...[.^.[.v...O......A.._.....X.s.[.f.B.[..s.......R...s...[.^.[.v...O......g.p.........A<A HREF="fm00c1.htm">FM .q...[.e.X.g.._.\.t.g.E.F.A</A>...Q.............B</P>..<P>PC...g.p.........._....K.v.........A.G.b.N.X...C.g....................B......X.R.A.V.[.g...K.v.......B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-IRP3D.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	631
Entropy (8bit):	6.130525404502342
Encrypted:	false
SSDEEP:	12:BMQkzF0ZjXWsMeq6ofjyIdXs19vgYup5DZgbgBhPCF3WBZviN1+z:WlBNflXs1XupJI8ZXZiN6
MD5:	F606A40D15F8B91D454D7183FC40DA9D
SHA1:	1312F8FCEA86F7A4B40252723F22A463AE38968D
SHA-256:	F466BEB39E84505ADF2FE8DCC95D25390BBA4502BDE1CAE06AD1D0CA15BBE909
SHA-512:	2F6D5FD5F75F6F043F1E5C9ED02B35FF0E73D2CFC5BFBF5FCD0C0BDF7F2E0B251731AA6E466F15E0E8F68BD645BA173791B7B68A0E7C0E5875B813D67B221F92
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>?1.^.F.o........</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="ps49gg"></A><I>?1.^.F.o..........\..</I></P>..<P>....I.v.V......A.R...s...[.^.[.. [.\..] ...j...[....I........B</P>..<P>CIE.F....A...F.........d.....\.........B............F..A1.^.F.o..i..j.............F....B</P>..<P>....A<A HREF="fm8siz.htm">...o..Q</A>...Q.............B</P>..<P>...L.F.\.......F.........F..A.J...[.o..@.\..f.B.X.v...C..f.B.X.v...C.J.[.h............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-IT9KH.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	872
Entropy (8bit):	6.099926272707079
Encrypted:	false
SSDEEP:	12:BMQkzF0Lb1h0sMeqWn1yXvMX5U8h6Ib7c7lP1A8Owc5dvMQFPhZ8YKJjjKh:WlS8W1Wv85Uo7fpd5tNxB
MD5:	0EC7FA1C0217B36025121B7744800B6D
SHA1:	343FF4E7ABD566022A9F0171D628EAC384975D50
SHA-256:	4E58974C5D9C7EAFC6F4C743AB7AA30B30CD977232D43A83F1D96ACCEDB5C990
SHA-512:	D29CB2A668DA4CB33941E8E9D6F858C40A934326FB786CED3D7656089DD7C78583B91F00FFC037E94789430FCC88E38E3DCC9C69854DA5D739503DA383AD9DE4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.S.F.o...</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="monochromacy"></A><I>.S.F.o...</I></P>..<P>.S.F.o.....A..........F..S.......F...v........B.S.F.o.....A.g.............................A......<I>.F..</I>..........B</P>..<P>.S.F.o.....2...^.C.v.........B.W..2.F.^.F.o...A.....W................A.....e....@.\..........B.]....A...............A.............i.....j.....o...R........A.....\|....U..............P.[.X.........B.W..2.F.^.F.o..A0.001%..j....e........B</P>..<P>....1.F.^.F.o...1...^.C.v.....i.....j...........]....A...I....o..R..........A.W..2.F.^.F.o.......y............B...................B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-J0S8L.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	1135
Entropy (8bit):	6.029141473788448
Encrypted:	false
SSDEEP:	24:WllakmLI+0u91TspSeiKxLN8A7veKwpvEEhFW5:qB6cQA7vg5hF4
MD5:	585E36D8E796D8D32BED68DFFEAA7669
SHA1:	2D9D102579D301DA8429635B33BA573B67FFF4CB
SHA-256:	6DF81D4C075809DDF3BC5F4764C4CE9CAC280E777E4DD16340B6DD732ADF30D0
SHA-512:	00BFB339179AFB80CE4FF77A2ED79D9F7EEBBA3FECABB76E9C640A21E3029F473DAA00130198C28E0BF9A47A4F650ED4CAA6F80564673FF99B8061C6171F25FA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.L.^..\..</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="view_records"></A><I>.f.[.^.x.[.X.........L.^..\........ <IMG SRC="../images/bm20.gif" ALT="" BORDER=0></I></P>..<P>.f.[.^.x.[.X.........f.[.^.....A..W.A.\........A.f.[.^.x.[.X..A.C.R.. <IMG SRC="../images/bm21.gif" ALT="" BORDER=0> ...N...b.N.....A..... [.\..] ...j...[.... [.f.[.^.x.[.X] ..I........B....f.[.^.x.[.X............L.^.....X.g.\.........B</P>..<P>.f.[.^.. [...O].A[.Q..].A[...N....].A[.e.X.g....].A[.t.@.C.....].A[.R.....g] ..........A<I>....</I>.p.l....e.{.^.....N...b.N............B.</P>..<P>...[.U.[..f.[.^.L.^..I........A.n.C...C.g.\.... [.I..] .{.^.....N...b.N......B.I.......f.[.^.L.^......\.........B</P>..<P>Ctrl..Shift.L.[...........A........[.U.[......x..I...........\....</P>..<P>......f.[.^.L.^...I.........A.....O...t..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-JBN1K.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	578
Entropy (8bit):	5.536576110980749
Encrypted:	false
SSDEEP:	12:BMQkzF0iEasMeq6BLSb9YIAgdpgAUK9FTS0Cws:WlV9RYIAg0k99S0ps
MD5:	B638EAD90D36DF708F4B3D226D38634B
SHA1:	E5BF692B20423AF65EE2F6E91FC2195CC14DF9CF
SHA-256:	5A1FF81B20D9BBB763CBBE5AEB594DA4C1C53D7D9EB43D4EB1606D965C334363
SHA-512:	5106BCB6916B80E7774B106579E794EBF88D7D24DAA2C05E9871F59C549B516769A1587571F0FBF6B12644AD8449A746DE3AEDEE3D9B0E5B583C7A12F6222E3A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>FM .q...[.e.X.g .v...O....</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="n_46v1"></A>FM .q...[.e.X.g.._.\.t.g.E.F.A</H3>..<P><A HREF="fm3rcn.htm">.T.v</A></P>..<P><A HREF="fm36re.htm">.f.[.^.....</A></P>..<P><A HREF="fm4eox.htm">.f.[.^..\..</A></P>..<P><A HREF="fm7n8x.htm">.f.[.^....</A></P>..<P><A HREF="fm23fl.htm">.f.[.^....</A></P>..<P><A HREF="fm31o3.htm">...j...[</A></P>..<P><A HREF="fm3ueq.htm">.c.[...o.[</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-JK7MH.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with CR, NEL line terminators
Category:	dropped
Size (bytes):	575
Entropy (8bit):	5.21590616468708
Encrypted:	false
SSDEEP:	12:BMQEdOaA9zF43KUxPDwAhHL91DwmxRLwAhbFAt0Ic87w1qgPC:WnAZqxzpL4mxVrt878PC
MD5:	7E6A044828CD208E1F3AA5597E7B3BAB
SHA1:	BC252AD3839C75020A9029A14265827918FB6DD3
SHA-256:	DC0E62A21264C4D0E187737D2B82017ED1CB399040C8B9E6304DF6A1E6E85ECC
SHA-512:	71B21A6079D9EE7FF0A8F802FD2A63FC8D47B5390FEFE380C3A2A997C1AD044B47AA3632AF31EEBDE4DCFA9F1EB4B059D73EE764D5B3519FA51BFD62ACB13D96
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">.<html>.<head>.<meta charset="SHIFT_JIS">.<title>.....h.L.......g</title>.</head>..<frameset rows="" cols="200," frameborder="yes" border="2" framespacing="2">. <frame src="indexList.htm" name="leftFrame" noresize>. <frameset rows="80,*" frameborder="yes" border="2" framespacing="2">. <frame src="nav.htm" name="topFrame" scrolling="NO" noresize>. <frame src="fm5l0u.htm" name="mainFrame">. </frameset>.</frameset>.<noframes><body>.</body></noframes>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-JKFNK.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with CR, NEL line terminators
Category:	dropped
Size (bytes):	575
Entropy (8bit):	5.205924419283641
Encrypted:	false
SSDEEP:	12:BMQEdOaA9zF43KUxPDwAhHL91DwmxRLwAhbFAts87w1qgPC:WnAZqxzpL4mxVX878PC
MD5:	9279D76F36FDDE82867E411BEC9B4774
SHA1:	59E250D63C72F58F20E78E976B11A56A719D031F
SHA-256:	CF9C918CCA0B221944D679F0318D76A5A40B425C789D3558784E052056032B04
SHA-512:	7CB36203A4092AA4B2193990018460DA680115E7EFD356C4B97D1F0E1D1C661B29ED71A9C74E138007F55F6622326DCF66B39B3C9443A010460E3BD1AC7B3485
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">.<html>.<head>.<meta charset="SHIFT_JIS">.<title>.....h.L.......g</title>.</head>..<frameset rows="" cols="200," frameborder="yes" border="2" framespacing="2">. <frame src="indexList.htm" name="leftFrame" noresize>. <frameset rows="80,*" frameborder="yes" border="2" framespacing="2">. <frame src="nav.htm" name="topFrame" scrolling="NO" noresize>. <frame src="fm00c1.htm" name="mainFrame">. </frameset>.</frameset>.<noframes><body>.</body></noframes>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-JNKNS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	875
Entropy (8bit):	5.885969924337027
Encrypted:	false
SSDEEP:	12:BMQkzF0Lq2OsMeqQI27A77B3stkWv0WdVsp7Gqir9bqZq/wGbfAXhUu18vwdjnw0:Wln9/1e0WdGp7RirZzfAXJnUPcrXpPX
MD5:	E18176FF2352CBE466F38EFF5BDD4399
SHA1:	D675F719E9BD4D0F267AC49CF47ECD1536B88F2A
SHA-256:	B6D9B8659E83ADAB61A2DBB921A1764331D0AA665AA6946F1468A3EACC4F5A2E
SHA-512:	F195AA0F9DC434308B1C0C3FD8A343777112FDFE898C897E8E223C9A4BE2E6B6292BE5671E746D228C873C409B88BB19157F29BA422E166A680E120119DC8C2A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.X.R.A.......o...i.t.@.C.....j...[.j</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="1mx2ojj"></A><I>.t.@.C.....j...[.F.X.R.A.......o..</I></P>..<P>.G...[.X.R.A..A.e.L.X.g.t.@.C...................B.......A.f.[.^..Windows.....v...O.......P......o..............B</P>..<P>[.t.@.C..] ...j...[....A[.X.R.A.......o..] ..I........A.T.u...j...[.... [.G...[.X.R.A -2] ..... [.G...[.f._] ..I........B.\....... [...O..t......] ..A.p.X..t.@.C.......w......B</P>..<P>.f.[.^.....`...F</P>..<P>.L...b.v..u.A.G...[.X.R.A.iCR.j</P>..<P>.f.[.^..AWindows..Word..Excel..........\....B</P>..<P>.X.R.A....Windows.v...O......\..t......A[..W] ...j...[.... [.X.R.A...R.s.[] ...g.p............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-KBH37.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	261
Entropy (8bit):	5.428176699942735
Encrypted:	false
SSDEEP:	6:B8FQk+HryftzgYiTdJhdiNMeqlnKJyTZacWTcvyltT:BMQkzF07sMeqkJyTc9AKr
MD5:	636DB8196A55F32DE387C1B146ED3797
SHA1:	07B2B474FAF722925B7C0F3C2F4628CED14A5A9C
SHA-256:	63500A782C6531B2CA7A5008AA1DE583E12D87788B03B86ACBBFC9C58080EF7B
SHA-512:	CBDF3CAA4062FF70C42BF893759737CBAD3BC1873D0771F17A8CE172149D26A0D38662963E138A08B56BF4A645342FBFE1B537CA59C46C48EBD5289326AA327C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.i....j</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">..<P><A NAME="0_olb_"></A><I>.I..</I></P>..<P>.v...O.......I........B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-KPK1E.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (513)
Category:	dropped
Size (bytes):	1284
Entropy (8bit):	6.177888865288454
Encrypted:	false
SSDEEP:	24:WlS5Fp4yfM625zg7midqUsidj9NidY9idczW+:qwFyPf5urtj9sYcczW+
MD5:	9C0FA39B17BA3F15A1B0C458C6ED8D16
SHA1:	6DBD87BB67FCD9AEF35901BC9C3C4BE159424BAB
SHA-256:	69AB9A3E081A55BB37AA3A98EADFD71F579B5C15E38ED68C3DF3CC1AA0F9BA8E
SHA-512:	85D9EE0EF9E992B689AADAC566BB8ED47C036ACEF146B5A4D5E7879CFF4ECD0840635D8F5E5D38BDE834505E9CB517ED020F542732F69CC7AA0F700FB049D772
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...3.F.^.F.o</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="anomalous_trichromacy"></A><I>...3.F.^.F.o</I></P>..<P>...3.F.^.F.o...3...~.......F.f.......A3.F.^.F.o.....l..A3.F..S.......F......v........B...........A.J...[.}.b.`...O..K.v..3...v...C.}...[.F.............l......A1............~.......F.f......z..........l........B.p..u1.^3.F.o.v.A.u2.^3.F.o.v.A.u3.^3.F.o.v..A..A..A.......F.f............\......B...3.F.^.F.o...A....3.F.^.F.o...F.o..F.........B......A......3.F.^.F.o.....F..................B..Q..x.......l....................</P>..<P>....A...I....3.F.^.F.o..^.C.v....B</P>..<TABLE cols=3 width=332>..<TR VALIGN="top">.<TD width=42%><B>.^.C.v</B></TD>.<TD width=29%><B>.j.. %</B></TD>.<TD width=29%><B>.... %</B></TD>.</TR>..<TR VALIGN="top">.<TD width=42%>1.^3.F.o</

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-KQQHT.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	533
Entropy (8bit):	5.732105197672059
Encrypted:	false
SSDEEP:	12:BMQkzF0TslsMeqyEn2sEjm+APD6U0p2OhOdHfzC:Wl7yEn2vE0pSfG
MD5:	CACB3373E87F31F92E406FBA9DD0214F
SHA1:	DA1DEF7036AA94CDF8EBB7BE243B12B84FE3A587
SHA-256:	3E1021BB1F94C086EF719F50F716D724DC1D01CEAB6F58BEAF761105E095F25F
SHA-512:	5DCE96F89D58C74BEC9134793519D30A16E9FE44C7E983D2933FD43CCD7A27911DF73C3619210947A787779672EA01869FA4B220D64A8DC53CA5E589116BB1C9
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.f.[.^.x.[.X..</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="examples_database"></A><I>.f.[.^.x.[.X..</I></P>..<P>.{.v...O.......A.f.[.^...........f.[.^.x.[.X............B...\........F</P>..<P>[.t.@.C..] ...j...[.... [......f.[.^.x.[.X...J..] ..I........B</P>..<P>.f.[.^.x.[.X....X.g......I.......</P>..<P>[.f.[.^.x.[.X..\..] .E.B...h.E......I........B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-LA7BK.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	699
Entropy (8bit):	6.122985433099435
Encrypted:	false
SSDEEP:	12:BMQkzF0JsMeqWwmEjcB6/IDbjclgd3jc6arFmNitDVVD9qr0tM2CFc:Wl2/qr4lgm6KJVDUr0K2V
MD5:	E7D5700AF0FC326AA719111CA5062A76
SHA1:	01F665D33E37D300C29B4D2DB30C4D4F31F707F5
SHA-256:	03033F9EDE96F6C9FA147111DC75CD99F36612ACC56122296464D563B765B51E
SHA-512:	54249FBDBE8AFD23A34215089CB00A9D53948DC87F627E8D4978971A8CAE938D8DA11094DDE5A1769CEC70E8D464DEB5CE4D2C843564567E1DA6715F3F0F37DC
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.....i.o.....j</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="percentile_2"></A><I>.....i.J...[.}.b.`...O..o.....j</I></P>..<P>..... [...v.G...[.X.R.A] ......B.J...[.}.b.`...O..o.............O...[.v.. [...v.G...[.X.R.A].B</P>..<P>....90%...A ..... [...v.G...[.X.R.A] ...A.J...[.}.b.`...O..o..........g.b.v10%......\......B</P>..<P>.y.C...g...[.J.[..F....E.i.V.F.[.h....A...{....A...{.Z.p.j....i....].....A...300.l..e.X.g.................B</P>..<P>.......A[<A HREF="fm4c81.htm">..E..</A>] ...Q.............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-LGQPK.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with CR, NEL line terminators
Category:	dropped
Size (bytes):	994
Entropy (8bit):	6.220056890697585
Encrypted:	false
SSDEEP:	24:WLZyU+6tbgjWRAwN1Uo704Mdf3vy/1a4EidiC:KUu6WdH/lMF3Kda4EidiC
MD5:	63DA3456A8B628587140C8FD948B4808
SHA1:	5052FBBE22A044A14565CF30CA1F2F02E526FCE7
SHA-256:	83293D60257008F25A5384D3906C2A8A123BD73C6B13C567741BE8B7C1FE06D5
SHA-512:	9C7E871666050C44E8DEC73A45B46EFC6185FB82172FBAAED9B20DF2F5F2E2CE81E7E37CD0BE31D4CB177BB64BAA0769AE95B47473EE62775BC44452301C9FED
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta charset="SHIFT_JIS">.<title>.....h.L.......g</title>.</head>..<body>.<p> </p>.<p>CIE.F.x.}</p>.<p>3...v...C.}...[.F.....g.p.....J...[.}.b.`...O..A.F..\......p...t.....b...`........B</p>.<p>CIE.i...........j..1931.N..A.u.W.......v........v....O.F.......F...w....A.W...V.X.e.....l.........B</p>.<p>.Z.p.I....R.......ACIE.....v...C.}...[.F..X.AY.AZ..i..A..A.......j.w.......</p>.<p>.J...[.}.b.`...O..K.v..X.AY.AZ.......A........x.Ay.Az..\.........B</p>.<p>x+y+z..1.......Az..l..Ax..y..l....m.F.......B</p>.<p>.......A.w.....P.x..F.......S...F..Axy.O...t..\.........Bx..y..2.......e..F.x.}...........B</p>.<p>.....F..A.}............z.......B......3...v...C.}...[.F..........A.}..............B</p>.<p><img src="../images/chromaticity.jpg"></p>.</body>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-LK9JU.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	574
Entropy (8bit):	5.98432004994111
Encrypted:	false
SSDEEP:	12:BMQkzF07sMeqdzbyxE7aX9ettsESQUcYfl/P6Ox/8uDx:WlQdzbyx5y/YN/iOxUix
MD5:	86325F58F83D5C9A2612A2129F6FCF4C
SHA1:	44D2B3CCDA214322808526A3723A3B3AF57288FB
SHA-256:	A2E40D2789A3D1671C4158491EBE75EE51ACBDDBCE12F78E3B1C5A29D74EEE7C
SHA-512:	5F390DE1342DE3DBFFAE9BB7A81820A7997EE1394ABE6ED62413C618F72DE62270C0324F5AFDBEDE634DECAA2D60C5E508B0B66B3BE966D3707567E55F24F8F5
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.T.v</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="overview"></A><I>.T.v</I></P>..<P>FM.q...[.e.X.g.._.\.t.g.E.F.A..AFM.q...[.e.X.g.....f.[.^.i.J...[.L...b.v............j..f............A....E....c.[...........B</P>..<P>.e.X.g.....f.B.X.N.....A.f.B.X.v...C........`...\...A....l.X..A...S...Y.............^.....\....B...l..f.B.X.v...C.A.v.....^.[.A.v...b.^.[......i....O...t...o...\....B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-LSSJM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	840
Entropy (8bit):	5.924080980366292
Encrypted:	false
SSDEEP:	24:WluSRic4tOyf0W5CGpZ7xmOcnIm4crXp0X:qLygslm0m6X
MD5:	CE16EA9FF396DBAC0D8AFBCF3948DDF9
SHA1:	DB28081363B0E806230ACF4BD2F2B939CE549832
SHA-256:	B6A553CB7195EC2D17A18EF1DEEA8D78BB32AD199F991A34967A084E4173CF17
SHA-512:	F5F0FD1A2B8736BD009FCF8FF20D17CBB650B8A43DC86AE3056CCD8523FD3CC2ABE74944C29772707DCDAE38F8C499B8F71DCDC55E2F2D07F2BC500C6BB02475
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.O...t.......o...i.t.@.C.....j...[.j</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="0x.kg."></A><I>.t.@.C.....j...[.F.O...t.......o..</I></P>..<P>.......j.A.O...t..A.r.b.g.}.b.v......X......\....B.....AWindows..v...O.......g.p...A.v...b.g.....\|.[.g.....P....@....B</P>..<P>[.t.@.C..] ...j...[....A[.O...t.......o..] ..I........A.T.u...j...[.... [...] ..... [...j.A] ..I........B.\....... [...O..t......] ..A.p.X..t.@.C.......w......B</P>..<P>.O...t....I..r.b.g.}.b.v.G.f.B.^.[..\...E..W....AWindows..Word..........\.......B</P>..<P>.O...t....Windows.v...O......\..t......A[..W] ...j...[.... [.O...t...R.s.[] ...g.p............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-MQLH2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	623
Entropy (8bit):	6.100628459794844
Encrypted:	false
SSDEEP:	12:BMQkzF0KXWsMeqM2IdXs19vgYup5hPbgBhPCF3WBZviN1+z:WlQAXs1Xupjz8ZXZiN6
MD5:	AE5E08E9BB9451794DF9DB711F5511B5
SHA1:	F5D5A0CE416CF77E4A004E8494B367EBDE7105FB
SHA-256:	0D5F5EA49CD79FCC0FE77A7618FF23A6637E6C11C4E72F87F954D209175BB237
SHA-512:	611EF40A6CB9FA9BE818EB5A56F924C3C6AE25CABFDC3C3E250D7DC09BB3FBDE28DA65C5EEAC2E20EF6A31A4950072161814D64BBD5539E51A8878AB613FFF23
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>3.^.F.o........</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="try9gg"></A><I>3.^.F.o..........\..</I></P>..<P>....I.v.V......A.R...s...[.^.[.. [.\..] ...j...[....I........B</P>..<P>CIE.F....A...F.........d.....\.........B............F..A3.^.F.o..............F....B</P>..<P>....A<A HREF="fm8siz.htm">...o..Q</A>...Q.............B</P>..<P>...L.F.\.......F.........F..A.J...[.o..@.\..f.B.X.v...C..f.B.X.v...C.J.[.h............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-OPC49.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	1154
Entropy (8bit):	5.991074965529433
Encrypted:	false
SSDEEP:	24:WlU4snHMSvidpid8pyid2did53188MMnD:qcMvg8pv285p
MD5:	108C6C1F2E837740A2A7516C9F68125B
SHA1:	A0828AE2523AF9AF07BE4306F083B07282ED3F27
SHA-256:	E1BC4264EAD9E87C35D905692845F86001D6F94DA2ECD552A04D29E21D129887
SHA-512:	FB5D616C1A6E4D9E1EAC24125867DD5B941C2025FB0FB697607204F91ED424998F6CC6B27F0B9B6817D41D47685CACBED73F6E17C37C79E02B17A56DAE77DF46
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>2.F.^.F.o</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="dichromacy"></A><I>2.F.^.F.o</I></P>..<P>2.F.^.F.o...A.~.......F.f..2..........A....2.F....S.......F......v.........\....B2.F.^.F.o.......A1.^2.F.o.i...g....F.f....j.A2.^2.F.o.i...g....F.f....j.A3.^2.F.o.i.Z.g....F.f....j..............B</P>..<P>....A...I..2.F.^.F.o..^.C.v....B</P>..<TABLE cols=3 width=303>..<TR VALIGN="top">.<TD width=37%><B>.^.C.v</B></TD>.<TD width=31%><B>.j.. %</B></TD>.<TD width=32%><B>.... %</B></TD>.</TR>..<TR VALIGN="top">.<TD width=37%>1.^2.F.o</TD>.<TD width=31%>1.0</TD>.<TD width=32%>0.02</TD>.</TR>..<TR VALIGN="top">.<TD width=37%>2.^2.F.o</TD>.<TD width=31%>1.1</TD>.<TD width=32%>0.01</TD>.</TR>..<TR VALIGN="top">.<TD width=37%>3.^2.F.o</TD>.<TD width=31%>0.001</TD>.<TD width=32%>0.001</TD>.</TR>.</TABLE><BR><P>2.F.^.F.o...A3.F.^.F.o...

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-P36AA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	1020
Entropy (8bit):	5.828317400132831
Encrypted:	false
SSDEEP:	24:WluSxUJFWMn9ymyImHRp0rbWHaX7Vy/kXMx5GtUAYsq:qLUAmyhsrkaXZyZGtUAYR
MD5:	67377D3323747870DA0AAE5344496579
SHA1:	F0C23C33B63E2E50A3B6CE16AE6F55DDDEBC794F
SHA-256:	736584311F8E0BB522CC4AE75828E5880A3DCC539AC58FF118BFA7A2169D3BF5
SHA-512:	42A3D0FB467ED6BDA9B84E4FFCB497538A455A5C2825BF2BFA72A03D7672C847C986C421A8916DD242D1020E5589E184E1C716E07F7E1D5F854337BC52DB628C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.O...t...R.s.[.i..W...j...[.j</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="3.ne_qa"></A><I>..W...j...[.F.O...t...R.s.[</I></P>..<P>..........`..O...t..AWindows..N...b.v.{.[.h..R.s.[......A....v...O......\..t....\....B.</P>..<P>.O...t...N...b.v.{.[.h..Z.b.g......A.O...t..K.{.`....f.B.X.v...C.\........A[..W] ...j...[.... [.O...t...R.s.[] ..I........B<B></B>.T.u...j...[....A[.r.b.g.}.b.v] ..... [...^.t.@.C..] ..I........B<B></B></P>..<P><I>.r.b.g.}.b.v.`....A[.y.C...g] ....p.b.P.[.W...g.p.....W.......B</I></P>..<P><I>...^.t.@.C...`..........e............A.I.u.W.F.N.g.x.[.X..`..p.b.P.[.W...W..\....B</I></P>..<P>.N...b.v.{.[.h..Z.b.g.....v...b.g..AWord.t.@.C......R.s.[.......BWord....A.t.@.C.......u..J.[.\.....Z.b.g...A[.\..t..] ..I........B.......A............P..................B</

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-P3VBG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with CR, NEL line terminators
Category:	dropped
Size (bytes):	18565
Entropy (8bit):	4.942771314590956
Encrypted:	false
SSDEEP:	384:KzHLeoeEXZEX/EXh+eEXhGWXhQEXYEXheEXhg+eEXAEXh7EXhiEXhDeEXEEXhaEj:KzCoeEXZEX/EXh+eEXhGWXhQEXYEXheD
MD5:	B2D399B9A332A338126D101241C76939
SHA1:	676EF8181B88D54C614AB219B12979874DC08EF4
SHA-256:	1E28C4541A1AA13E0AC638A080138FF4449A118C1A7130C6B57B16C8EAD2BF3C
SHA-512:	5260A394D97E33CDF18D900621CCFBDFD352355C578F3B294EF828DAF3B0F9FBE094B9AC3B34F215219C098D3F9D7528641ADE9C37C71A291F66EECA44379B52
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta charset="SHIFT_JIS">.<title>.t.@...Y...[.X.E.}...Z..100.q...[.._.\.t.g.E.F.A: .w...v</title>.<style type="text/css">. .span.s3 {color: #000000}.table.t1 {border-collapse: collapse}. td.td1 {border-style: solid; border-width: 1.0px 1.0px 1.0px 1.0px;.. border-color: #bfbfbf #bfbfbf #bfbfbf #bfbfbf; .. padding: 0.0px 0.0px 0.0px 0.0px.. }.. p.p1 {margin: 0.0px 0.0px 0.0px 0.0px; font: 10.0px Arial; color: #0000ff}. p.p2 {margin: 0.0px 0.0px 0.0px 0.0px; font: 10.0px Arial}. p.p3 {margin: 0.0px 0.0px 0.0px 0.0px; font: 10.0px Arial; color: #008000}. p.p4 {margin: 0.0px 0.0px 0.0px 0.0px; font: 10.0px Arial; min-height: 11.0px}. p.p5 {margin: 0.0px 0.0px 0.0px 0.0px; font: 36.0px Arial; color: #0000ff}. p.p6 {margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Arial}. p.p7 {margin: 12.0px 0.0px 3.0px 0.0px; font: 10.0px Arial; color: #0000ff; min-hei

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-P6EBN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (312)
Category:	dropped
Size (bytes):	759
Entropy (8bit):	6.125162469839702
Encrypted:	false
SSDEEP:	12:BMQkzF0ORdsMeqPptADAWHoARNUqoOApeCmnNRM+atGmoTA4q7e:WlbxQRHTGqYLmXM+8G/Td
MD5:	A368A2FA52805030206B35211C7F87AC
SHA1:	F878A37FA743619211E44EFE80D2D56DE62B1052
SHA-256:	9CE8E90B932775E02D8BBC9ABB91717FA01894B5999A0F4B2159A18E2DCF7730
SHA-512:	99DAB7E25B07B8D6C097EC8C8DF669A427191576FF67FB043D3EA53BC5C917ECF2CDE972DD61A3A77A9365AD4D5E3245E769756FBE7576E7522A3B084AB4B8A4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>..V....Q</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="acquired_defects"></A><I>..V.....o..Q</I></P>..<P>.F.o..A.l.........................B...........A.................x..............B.F.o......A...I..a.C....a.C.A.g...E.}.A..A.L........I.o........A.....................B..V....Q...V.I...Q......A1........................A.j........e........B</P>..<P>.a.C....F.o...e....A..N...F.m................B......R.....A..V....Q....F...\.....e.....A........o.e.X.g...^....Q.......o.................B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-PE4U3.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	828
Entropy (8bit):	6.042324225806053
Encrypted:	false
SSDEEP:	12:BMQkzF0HAeOsMeqoweVyrBmWkNN9ptuWPWn6lwpUK53ZywV8FzP1m5YAqTw:WlaUoNVF9fpMeHwpUKJZHUAYAiw
MD5:	A19FB58E707A4725F0B732A5DDB4E026
SHA1:	DD260D0F415F2D338452D67B14674B3320A84785
SHA-256:	9A338773A828DCA19195DB8337DBBB91C0B52252BDE3F19C1C672049E66D6D75
SHA-512:	7628680F5CDE1C9E4BD49E9E4013BDE477CC2EA24C861BDE458C414B95F0F46AE6E5CA6D2630F444E0163A91F2066C41238A1C2CF4D03272D06FB117C1239AA4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...O..R.s.[.....i..W...j...[.j</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="19vjcs8"></A><I>..W...j...[.F...O..R.s.[.....</I></P>..<P>.......O......AWindows..N...b.v.{.[.h..R.s.[......A....v...O......\..t....\....B.</P>..<P>[..W] ...j...[.... [...O..R.s.[.....] ..I........B</P>..<P>[...[.U.[...] ............f.[.^..A...........R.s.[.......B........A....I.......... [....] .@.\............B</P>..<P>.N...b.v.{.[.h..R.s.[........AWord.t.@.C......R.s.[.......BWord....A.t.@.C.......u..J.[.\.....Z.b.g...A[.\..t..] ..I........B.......A....f.[.^.............\|.[.g..e...................B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-QEU93.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	441
Entropy (8bit):	5.569413685371745
Encrypted:	false
SSDEEP:	6:B8FQk+HryftzgYiTdjYj0x0iNMeqlzM6u8gLR6Ic5r7UcgfO13cgBgcgTF0D4T:BMQkzF0iDsMeq16LR6rB7gf6KTeg
MD5:	F6CF3BD11008429E2C76BC9114F973CC
SHA1:	1F2B4B9576AD87B2439E1825241EE45C363394CE
SHA-256:	FF20320D2259F3CF3358F8DDA067D78BD9C5185AD8B82CEA6536B4A99267CE97
SHA-512:	E610F144762A6D9D18D7F22BF9D3B14EA3F878B38879FA8768B912C1C412498E213F2937DBFB806A3372E9F9641C74CAB486CB6470EA8365CA100138FF99C0E2
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>FM .q...[.e.X.g</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H1><A NAME="fm_hue_test"></A>FM .q...[.e.X.g</H1>..<P><A HREF="fm2u5h.htm">FM .q...[.e.X.g..g.p..I</A></P>..<P><A HREF="fm52sz.htm">.}.e...A..</A></P>..<P><A HREF="fm97vy.htm">.e.X.g.....</A></P>..<P><A HREF="fm0f1q.htm">.\.......</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-QNUV6.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (517), with LF, NEL line terminators
Category:	dropped
Size (bytes):	2113
Entropy (8bit):	6.086067093251559
Encrypted:	false
SSDEEP:	24:WlUGDKn1ZI292JvZb4ZLvG1adRWZEKWnbFMlmUtLkOzN87MtLc5YcNd1pB8qFb9r:qSn1ZI294R0Zlwu4RhPc19DlB
MD5:	EC8B5F5C78E5636C83FF7852EA5DB04F
SHA1:	902E97D8B4BE3AF10C4757BF447B2A1D1AC4F1B8
SHA-256:	8E93EB9E6F0A095F1C41E85A80BFD23F8D6C6C7EA4A9668AFAA2556D1C31467F
SHA-512:	1AEB4D9220A03C84CBF3F847B26D7CB5D9FA4220A6C3F5CA62C2B01ACBD8380398569CC662716CF10811E6326CB7C96AC14A2E441DD140B23003365D54BA31D4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...o..Q....E</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="9ov7m4"></A><I>...o..Q....E</I></P>..<P>...o..Q........y....e....A..Q..^.C.v....x............B2.^3.F.o...A.......x.F..F.......................A.....Q..........B....A2.F.^.F.o........F...F.......A.F..........d..................B</P>..<P>1.^.F.o......2.^.F.o..i...3.F.^.F.o......2.F.^.F.o..j....A..-..-..-...F...................A.g.}.g...n..........................B</P>..<P>1.^.F.o...2.^.F.o...A....F..........X..........B...o..Q......l................F..g.......A.O.q..CIE.F.x.}..Q.....B1944.N..s.b.g.........A2.F.^.F.o...F.x.}....z..............F..........................B..Q.^.C.v......A........_......o.......B...........F.......u.....A.R...s...[.^.[..<A HREF="fm3ncl.htm">.\

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-RAPB2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	710
Entropy (8bit):	6.094092479680522
Encrypted:	false
SSDEEP:	12:BMQkzF0iU+0sMeqW+Em2jcB6Yybjclgd3jcysB1ijvw6tx9o0tM2CFc:Wl6+2K8ZPlgmysLXCxe0K2V
MD5:	E929459546DE8FA6A5200E1EE547257B
SHA1:	E0704A6FA0346031B8FA2B733A22CA639D4A6C0B
SHA-256:	722CE59E15BB50A21E5E02E0F39925907DB4A37D917C03A540CBB281394B1B6A
SHA-512:	6B20C70D14E5213F50BF088A0FB3E84CEBCC988889DFBAF7D80682331D20316174A3AB10BA57E4040B5C4E14572A419B910C0EB1EB8830CFBB0F8731B59B0E37
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.....F.o....</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="percentile_3"></A><I>.....i.J...[.}.b.`...O..o.....j</I></P>..<P>..... [...v.G...[.X.R.A] ......B.J...[.}.b.`...O..o...L.x.....O...[.v.. [...v.G...[.X.R.A].B</P>..<P>....90%...A ..... [...v.G...[.X.R.A] ...J...[.}.b.`...O..o......g.b.v10%..\......B</P>..<P>.....A.....A.~...A.v...X.`.b.N.A.e.L.X.^.C...A.y.C...g...[.J.[....F......{.......3.N....20.N..o........A150.l..e.X.g........W...........B</P>..<P>.......A[<A HREF="fm4c81.htm">..E..</A>] ...Q.............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-RD4CJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	476
Entropy (8bit):	5.910381342481835
Encrypted:	false
SSDEEP:	12:BMQkzF0feKcIsMeqPDKcg9hjctM+IKBYFSV:WlDX6rXj/ZBsW
MD5:	3CCE58BAC1BABDD926058B34770B073E
SHA1:	E3344756ADAF65DC9F3FB276E2BFEE52DFA43AA9
SHA-256:	9AAB232FD0512BC15409935FF42D928B5B3824A17294D07031B1BA7C431DD557
SHA-512:	BBD46980FC761B2D781A0EC1B2B437D04E89EBCB5B6E37C94F50420C8EBEA1D5F2E216C440835C42AEF8590D35C0C761F8E94BEC56B495A2D2136D95212ADF3A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.........v.G...[.X.R.A</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="euxqgu"></A><I>.........v.G...[.X.R.A.F</I></P>..<P>.O...[.v.. [...v.G...[.X.R.A] ..c.....z...............B....A[.........v.G...[.u.X.R.A] ...g.p.......A.....I....z..............B.......A..........v.......g.p.....@.\....B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-RHFRJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	665
Entropy (8bit):	6.140974166130882
Encrypted:	false
SSDEEP:	12:BMQkzF0HvsMeqWjQ3TjcBsHQMTk44YEyjclgd3jc6aEyTFTkEASZf0tM2CFc:Wl4cEc0EXlgm6TQf0K2V
MD5:	ED8407B02494A8C08B6DC4D016B9F830
SHA1:	BDC76EF67291F8850F43F128DBD2CC081217CD5F
SHA-256:	381B55B64EB79EBDDB0DD8EFEC723DAF41B13CD1D02C230F411731A226E2E89F
SHA-512:	CEF9AA75287A59D0D492734D419BEC02C05F4B4D66566A58101CCC2D691FE33218FC3FAAE6D838D6207AFA01423F6689FDFEC19318248549D857077FD3F71C69
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.....F....</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="percentile_1"></A><I>.....i....A..I...T...v...j</I></P>..<P>..... [...v.G...[.X.R.A] ......B.....e.X.g.......A15..`45...u..I...v.O...[.v............. [...v.G...[.X.R.A].B</P>..<P>....90%...A ..... [...v.G...[.X.R.A] ...A.J...[.}.b.`...O..o........g.b.v10%......\......B</P>..<P>........A.u..I...v.O...[.v.....494.l..................B</P>..<P>.......A[<A HREF="fm4c81.htm">..E..</A>] ...Q.............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-RQQBP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	359
Entropy (8bit):	5.86830054082745
Encrypted:	false
SSDEEP:	6:B8FQk+HryftzgYiTdH/apeOiNMeql966p2c0qMe9tubd+Z54BSkaQ8ROgv/WQnll:BMQkzF0x/apeOsMeqFMeeUZWSvQfgnWk
MD5:	D0EB9339597ABB89BADCE043B9FC67CF
SHA1:	9DD1F7E5B1CFCDC158B2BF536AB89C8EC4A2073A
SHA-256:	ED7EE396000EF980FE3D559C3B2897D7899849A9747A36C435F261C46D19EB31
SHA-512:	B8795B05EF4F952D36BA13D4820A8BF500D0B665428AD9D3150AA60AD737EE44F3FF455119A7DD519C7380F0A4320B6773A958006E101C81BD9866E47BC55B96
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>......i..W...j...[.j</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="edit_menu_undo"></A><I>..W...j...[.F.....</I></P>..<P>....f.[.^...............B..F....J...[.L...b.v.......u........B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-SBJHG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	352
Entropy (8bit):	5.421339993798285
Encrypted:	false
SSDEEP:	6:B8FQk+HryftzgYiTdc0iNMeql0grcuFcgCzc5ecg5c5+dQ834T:BMQkzF0m0sMeqfrfz7cCILs
MD5:	35624258E75635E5F676B5F675CC7CBA
SHA1:	DE65EDE73E53FF6590BAC049F142856F1895229F
SHA-256:	CC12631F5EB0312F1CF2F484A44F40FAC5BF626FE2BE59337A8D1843E7207874
SHA-512:	C32340F171FB97EE75B2F96EA265262202FCB7C1B1F6A6D22F0152D53A066E9E5223D0ADB8285006ECD43C09331A6A33F9669A9509426BB534D7390A19410505
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...e</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H1>...e</H1>..<P><A HREF="fm34xa.htm">...o</A></P>..<P><A HREF="fm4eus.htm">FM .q...[.e.X.g</A></P>..<P><A HREF="fm00c1.htm">FM .q...[.e.X.g.._.\.t.g.E.F.A</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-SEDCL.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	403
Entropy (8bit):	5.7410670865986155
Encrypted:	false
SSDEEP:	12:BMQkzF0wcIsMeq14c4ciQ/kAJuP3Qk30xc9:Wlg6bRikJJk3X9
MD5:	2507D79BA85DDAB6CE4E14751A77B3E6
SHA1:	F9FB211DA834025BA896B6C3501120130B7F525E
SHA-256:	65DEDFC64840363F38B3B997F228D1BCDC5BC2909A0A1D19CDA760180CE06F07
SHA-512:	49DB53210970A0F7E282703ECAB5AD1364768C6EB68002E3B834B0D8CC2FEF7FC81C78799D7673AF2DA94A8FF2C9FCC5181850EF27F4C08B91FCCF4A5B8DF02C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...v.G...[.X.R.A</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="total_error_score"></A><I>...v.G...[.X.R.A</I></P>..<P>[...v.G...[.X.R.A] ..A.e.L...b.v.....v....._......i.G...[.X.R.A..-2.j.B...S..z.u......A[...v.G...[.X.R.A] ...[...i0.j.......B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-SGMJ4.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (350)
Category:	dropped
Size (bytes):	830
Entropy (8bit):	5.986742367005849
Encrypted:	false
SSDEEP:	24:Wl1w1+j/Ev/+W0Pbnqz+nAxeAjbInLNnzICK:qq1+M0Pbnqz+AxeAnynJK
MD5:	6A3DC88AA5783F4AF24D629515540285
SHA1:	8A2A627ED24194E02F5C30ABBDBBF62BF3929DCB
SHA-256:	9CE23421033319B6AF4671DCC11A01F525C99BEABBB4D158A67716504BB55EF7
SHA-512:	344624CC982D8670153BF2F447CDA4CA809009F35C926120B16138F5CC391079C5479C9206BD09803A5301B0539A628873CD04C1AC86D5AEFB7C5B6D8AC5BE0C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.X.P.[..</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="scaling"></A><I>.X.P.[..</I></P>..<P>FM.F...`...[.g..X.P.[....14..............B...........I..\...........A...x....o..Q..........G...[.X.R.A..14.......A.O...t.....................B</P>..<P>.......X.P.[....A[.X.P.[..] .p.l....\............B...X.P.[.....X......A....{.b.N.X..V.................A..... [....] ..I..............B[....] ...I............A...X.P.[........I..A.....f.[.^.Z.b.g........G...[.X.R.A.........B...X.P.[....W...l.i14.j....Z.b.g......A[.W..] ..I..............B</P>..<P>...X.P.[.....K..4.`50...g.p............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-TH4TO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	1659
Entropy (8bit):	6.222330607109118
Encrypted:	false
SSDEEP:	24:Wlduj7Nu085vCprpahUeG/+HZ5+vhfBONnyF9Q06tJZtOnIttXguD3t:qoIX4prIGSkxAn1tTtOIttXguLt
MD5:	BC91FE945E4310E0ECA520F1BC318DCB
SHA1:	596E860228F0380271EA66AA3ACFBC4A51447B28
SHA-256:	0CA115417DEF5415D812B5F464F5F369BAF8ACD06427C8EAB953F786AF20B060
SHA-512:	F7D27D524F89C68021446F21A304E7B53F0A5B6CA9C44597510582F3ADD25037B93439F411E71185BBF2990E56448312CD8F698BB74B7474D82D61515ED37203
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>FM .q...[.._.e.X.g.....o..Q.....o......</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="3h_y_oj"></A><I>FM .q...[.._.e.X.g.....o..Q.....o......</I></P>..<P>FM .q...[.._.e.X.g.........o..Q..p.^.[....A...............2......W.........G...[.........o.........o.......B.G...[..................A...o...Q.^.C.v.....o.......B</P>..<P>...o..Q......l..T.^.I..p.^.[....A.{.v...O..........f.[.^.x.[.X...W..i<A HREF="fm0bdx.htm">Example.hdb</A>.j............B</P>..<P>..Q..x....u..N.v...............B...x...Q..A.G...[.X.R.A...............m....B............A......u..N.v.......v.G...[.X.R.A...\.........B..D.....\.......y......A.u..N.v...\.......A.{.e.X.g.....o........B</P>..<P>.p.^.[.........G...[..._...u.i..N......j..A...o..Q..^.C.v.....o......B..Q.^.C.v.....o.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-TK7FI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (312), with LF, NEL line terminators
Category:	dropped
Size (bytes):	1840
Entropy (8bit):	6.245447878169407
Encrypted:	false
SSDEEP:	48:qbUZlmMCsvtTpylaCUMu0GIEenhrW4oht:2IRtTpyrUeu
MD5:	4D79FDBC12C2272CF9A3D4C986D131BD
SHA1:	1DAA8A2763C50D169FB5AEFE665E99313F1682F8
SHA-256:	08A6543EC482743AC34D19A2CAD74CF97F0B5B387DBB57457E83FDA76A81CCE6
SHA-512:	ABA0E8BD82D69483994E8D250245B90DDD8177CDC5CAB882808A198C8EB8D14C2ABC10C87440ADEA79FBBEEE10185D306DC729944C5C559E8A8271191C06DF57
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>....O...t</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="polar_graph"></A><I>....O...t <IMG SRC="../images/bm10.gif" ALT="" BORDER=0></I></P>..<P>.f.[.^......O...t..\........A.c.[...o.[..A.C.R.. <IMG SRC="../images/bm11.gif" ALT="" BORDER=0> ...N...b.N.....A..... [.\..] ...j...[.... ....O...t] ..I..............B</P>..<P>.L...b.v....i1.`85.j..........\.........B.i...L.F........p......A....s.............B.j</P>..<P>[.G...[.X.R.A] ..e.L...b.v..v...b.g....A...~..u2.v..X.R.A..\......i.......L...b.v.....j.B.u5.v..u10.v....G...[.X.R.A..C.G....~..A.O...t.................\.........B</P>..<P>.F.......\...100%......A.S...L...b.v............z.u......B......A.S.L...b.v..u2.v..X.R.A....A....O...t....~.....^.~...\.........B</P>..<P>.....100%...............A....O...t.......A.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-TPO2M.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (303), with LF, NEL line terminators
Category:	dropped
Size (bytes):	923
Entropy (8bit):	6.04399034802647
Encrypted:	false
SSDEEP:	12:BMQkzF02j3sMeqGjJSLDpV2P/g7LC7uwQWEuEUklu4nVkHbseuaQpA9rtPn5Yinn:WltGS6/g7LCPQW2UAneHbuyrtPnz
MD5:	2BE2917BB70362FB262831DA92CFEC22
SHA1:	88491FABC3F8B7CE7F2E6EE969547F5ADC7FB389
SHA-256:	46A507B363C6AC543ECF0108057C6192D885715B2B43A0D10EFDCA8CC1F9B01B
SHA-512:	63C47087EE2819604C8F5489911EBABA8456D3A17DEB8A66DF9FFF9E2E640359D4684621EE1744A45448F94C812BF3F4DB464A2E9050D802FB57976A60140E63
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.j...[.g....@.......</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="newtons"></A><I>.j...[.g....@.......</I></P>..<P>...o..............A.A.C.U.b.N.E.j...[.g....................B......A.P...u...b.W..w......w...........v...Y....u...A.J.................v...Y............Z.b.g........B......A.v...Y...............A.F..............@........B....A.....F..g.........A........\............@........B.......j...[.g....A................F......\................._............B................A..........F..g...................A.g....F.............................B....A.j...[.g....<I>.......F...t........</I>....f...A.u.F.v......I......A.S...I.................B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-UBOD5.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with CR, NEL line terminators
Category:	dropped
Size (bytes):	791
Entropy (8bit):	6.178518039290916
Encrypted:	false
SSDEEP:	12:BMQbwMC9zF43KyL9JERF4qc24whd01cEKW3FIzp9kUMhouF01qUC:WLZA4nzcaqcEKWVsbFMhouFqrC
MD5:	10F03B6A38066BD3B2D1FF45642546F2
SHA1:	DDDC962A6119CE89693942026F69DA148CC061DD
SHA-256:	605EEBBB6286D88B67B61FD99C08232279FDA88CA2E4FB48335E0C1BDE912532
SHA-512:	5B40957371E989414A5EF3BC4004616E3B4CEB1783FB560EB7DDF2D6A2027B44CFF3EFABE1D05B3D8C8545D00851E612496E17C329A3A0D1927A1359EB9C6FD7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta charset="SHIFT_JIS">.<title>.....h.L.......g</title>.</head>..<body>.<p>...o..Q......l................F..g.......ACIE.F.x.}..Q.....B</p>.<p>2.F.^.F.o...A.F.x.}..v...b.g.............F............B</p>.<p>..Q.^.C.v......A........_......o.......B.......A...F.......u............B</p>.<p align="center">2.F.^.F.o...A......u..S.........F.............A...3.F.^.F.o......................F.........................B</p>.<p>.S...\|.C...g......A......u............A...o..Q.......u...v.....j...[.g......g...........B</p>.<p align="center"><img src="../images/tritanCIE.jpg"></p>.</body>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-UI8DK.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	543
Entropy (8bit):	6.005699473628424
Encrypted:	false
SSDEEP:	12:BMQkzF0L+WsMeq7p+d3IdXs1ligsSZWF3WBZviN1+z:Wla+s8d2Xs1oXSBZiN6
MD5:	E12CE8E9F9CDECB744F434DC96BAFE46
SHA1:	90DAAA70F62CFFCDF996922A35D04BDF45D70E34
SHA-256:	CE419BE4A7E0BCA7F51AEB034F008F496744E00FB00EDE89493FFBBC7589AE03
SHA-512:	15C35C308081EB78D904BD99EB40653E4F742CAF97F5437CF2A793CA891C9FDC5DDD585871C5137AABAF3F723F79597FFE67972B226E528B51F1EBBEA192A7FA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>CIE.F.x.}</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="3o1s_zn"></A><I>CIE.F.x.}..\..</I></P>..<P>....I.v.V......A.R...s...[.^.[.. [.\..] ...j...[....I........B</P>..<P>CIE.F....F......\.........B</P>..<P>....A<A HREF="fm1nug.htm">....\..</A>...Q.............B</P>..<P>...L.F.\.......F.........F..A.J...[.o..@.\..f.B.X.v...C..f.B.X.v...C.J.[.h............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-VFBTL.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (1124), with LF, NEL line terminators
Category:	dropped
Size (bytes):	1723
Entropy (8bit):	6.174394389787453
Encrypted:	false
SSDEEP:	24:WlDw/wxVe3Hh3AkLgjg1UToiIPGJdo/vJBYkdgX+Q8BL9VlL1aXpOD:q0/Ye3BEjf0iWGJq5BYkdgt6lLG8
MD5:	AB6F2C9DC6858B3AC3027A029AB5C4FC
SHA1:	584AF5E0D755231A678A7A40304227DF60E23CF4
SHA-256:	30661AFBB8BBFAB53123BEB8A34E7A2578BBA631E0C29D17E9F3A9FA6D48C198
SHA-512:	8F5946A873D82B21D3240B638E125CF6BBE22F96ED8DE8278CF30096BC21ADDFE941C57E08EC44568C9CDFC415F3FF8C344FDC376307D2A4D1A694364C2C0104
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...o.............</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="modern"></A><I>...o.............</I></P>..<P>......3...^.C.v......F.f.......m.F.......A.....O...w.....z...c..O.F..............100.N........B....z.....419 nm..............Z.g..e..i..j.A531 nm................g....e..i..j.A558 nm................g....e..i..j..A.............@......Z.p..p...............i1983.N.A._.[.g.i...j.B3...^.C.v.......A.............z.........B.W.........A...g....q.........54%.A...g....q.........38%.A.Z.g....q.........13%..z..........B............_..A..e......3.`4%......y.....A...S.\|........................B.w.....O...............S.......I...@......x.............i.....1957.N..n.[...B.b.c..W.F.[...\...............L...j.A........M.............

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-VIG22.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	574
Entropy (8bit):	6.034101941227209
Encrypted:	false
SSDEEP:	12:BMQkzF0fRsMeq7sxRgSySs+JHSAiVNIyB3Fc:Wla7sCaAG
MD5:	B06199CC130E8375E2398EEB7FE94C77
SHA1:	9ACFC2CB8C4E9F3D0F122A485CAB6FD04BAD05A0
SHA-256:	298657EFC5CD2B0209970750E5787C53C963AB34FD685973F3FA904705A4B828
SHA-512:	8D47CAB2398AB21112C3D02A93CA913F6B70A476940C3866726E20D2F83F9C99A1F03C73499ECA7D0F48E94218BE0077DC821693A7F60756F262772253116252
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.......</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<P><A NAME="averaging_data"></A><I>.f.[.^......</I></P>..<P>...l..f.[.^........A.p.^.[................B</P>..<P>.............L.^...f.[.^.x.[.X....I.....A[....] .@.\...N...b.N......B</P>..<P><I>...L.F[....] .@.\..A2.....f.[.^...I..........L......B</I>.</P>..<P>.......A<A HREF="fm3fjn.htm">.f.[.^.x.[.X.........L.^..\..</A>...Q.............B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-VUAES.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with LF, NEL line terminators
Category:	dropped
Size (bytes):	305
Entropy (8bit):	5.6010149203082245
Encrypted:	false
SSDEEP:	6:B8FQk+HryftzgYiTdcqwQ0iNMeqlxMZcqsUCEmTqVu8L5XtT:BMQkzF0qsMeqiPCPQbn
MD5:	8F2404171408D26E814116B4C9D4B9AD
SHA1:	CE50057BC065F2273B0D57932CB92787177CD8FE
SHA-256:	F7E538B4E9BB00187A9B96AF834FE978B384AAED7E51A55F69B765B22A8B95FC
SHA-512:	424688161102D7B7FF77CD63982E85F2C34FB44DC111033E5AA2D71AD4A53D0C6E667CC3D78204580877FF7ED2A625EBE8F84578E5DE5CCD937F6C182F083CD9
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>.w...v...j...[</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H3><A NAME="help_menu"></A>.w...v...j...[</H3>..<P>.w...v...j...[..v...O.............\........B</P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\is-VVKFV.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	dropped
Size (bytes):	400
Entropy (8bit):	5.503206874563364
Encrypted:	false
SSDEEP:	6:B8FQk+HryftzgYiTdYiNMeqlz+S2cgGIcgTIvuDacgtBnUcgnuuPa4T:BMQkzF0KsMeq1+S2GcTI2OtBngnhPl
MD5:	736D5A0F80A20B9F1A8B51AAC38DC60E
SHA1:	2EE11D9AA486BFB7FD3D4607A9461E3CA5AAD852
SHA-256:	55B3EC3FD896AA5290FA3F94A2933D8F229B41CC81111FF5BD7F467971AAEE63
SHA-512:	21303C3B754AA48845415EE76A1787541BB347D3C7A3316B9205BD87B0A2C4B135C08648661CCBFA18920DA7F274F87ECFC9E274AFEC7953366B36A5E5E3D3F5
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">.<HTML>.<HEAD>.<meta charset="SHIFT_JIS">.<TITLE>...o</TITLE>.</HEAD>..<BODY BGCOLOR="#FFFFFF" TEXT="#000000">....<H1><A NAME="colorvision"></A>...o</H1>..<P><A HREF="fm83zi.htm">.F..m.o</A></P>..<P><A HREF="fm5l0u.htm">...o..._</A></P>..<P><A HREF="fm1nug.htm">.F.....F..b</A></P>..<P><A HREF="fm8siz.htm">...o..Q</A></P>..</BODY>.</HTML>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\html\nav.htm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	HTML document, Non-ISO extended-ASCII text, with CR, NEL line terminators
Category:	dropped
Size (bytes):	432
Entropy (8bit):	5.6288202415306126
Encrypted:	false
SSDEEP:	12:BMQbwMC9zFUl38QvZMNEqhZMN+Hu0qqUC:WLZetXqhZJHNkC
MD5:	7F9DA0346B6CD1705C609384AE638C35
SHA1:	E8A8925EC6896672588B5E232E795C7DECFF7FA8
SHA-256:	7A4A49EE687103F20BB97986F57F2F028BF791DFB4D4EFD17CFCF19C7891C32A
SHA-512:	64BFA810AD87D41154954E67F5ED275F3054A19F23E0F1C5DA90A6A4A299B3E4749FAE7FB4F8A0C53DA19F6A2C4CBBEB477494615C335F98444ECA4DFF04C945
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta charset="SHIFT_JIS">.<title>.t.@...Y...[.X.E.}...Z..100.q...[.e.X.g.._.\.t.g.E.F.A.F.w...v</title>.</head>..<body>.<HTML>.<HEAD>..<BODY>..<form>..<input type="button" value="Back" onclick="history.back()">.<input type="button" value="Forward" onclick="history.forward()">FM 100 .w...v</form>.</body>.</html>.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\._bm10.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	64757
Entropy (8bit):	5.513544306180357
Encrypted:	false
SSDEEP:	1536:fX7YULL1SyEpMnRPxLmEpMLRPxL3EpMoRPxL8EpMFRPxLVEpMGRPxLNPj9EX4img:fU9yEpMnRPxLmEpMLRPxL3EpMoRPxL8F
MD5:	B341192EDFF6166348EF7BE261403360
SHA1:	8C7EAD2DEE3CEFDC56C4F9028FC5CE295C52D848
SHA-256:	885BB88E591F96D1A449E6E9DE823159AC0D5E854F94F84CD1851797CAE140CE
SHA-512:	AFE6F8E19F0B74A624B432BCD1E7075DC18B5863DF70037C925A9F18067CA3968496CC2FE2EF96B739BE74F3A0153821D9D29720CCF2C2EF20FEDD816B736EA1
Malicious:	false
Reputation:	low
Preview:	.................................2... .......R....GIFf8BIM.............................................................................................................................................................................................................................................................................................Adobe Photoshop CS2.. . ......J.H...........H...H.......J.H..........8BIM.......J.HGr.ph.bj.....L.......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\._bm14.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	61506
Entropy (8bit):	5.32365048427296
Encrypted:	false
SSDEEP:	1536:n4PpnnZ1yEpMnRPoLmEpMLRPoL3EpMoRPoL8EpMFRPoLVEpMGRPoLNPj9EX4imWA:n+nn3yEpMnRPoLmEpMLRPoL3EpMoRPoH
MD5:	FC68846BCF5F61F9A688DDA39C2C3EE3
SHA1:	68FBD9AC5BF590D5E780099CCD2E2B1D6EFDA834
SHA-256:	4720EF305E4658D99A272B100998EDC5DAA509C88077F7576A93C4FB7BDF2D15
SHA-512:	C454D10CB4F24856950B1A160067CEB300B6EBDB5733256EDEDA57429C6DDCEB8C62C9838B107344F72858CB235F111F04BF84DDC97351B697AD9A0482F3ED46
Malicious:	false
Reputation:	low
Preview:	.................................2... .......R....GIFf8BIM.............................................................................................................................................................................................................................................................................................Adobe Photoshop CS2...........I.M...........H...H.......I.M..........8BIM.......I.MGr.ph.bj.....L.......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\._bm22.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	63292
Entropy (8bit):	5.4246885763998005
Encrypted:	false
SSDEEP:	1536:uuRvEd3WTvEd3WTvEd3WJbyEpMnRPeLmEpMLRPeL3EpMoRPeL8EpMFRPeLVEpMG5:u0EJmEJmEJWyEpMnRPeLmEpMLRPeL3EL
MD5:	FC34F18540CB81828AA7ECDD392DB335
SHA1:	65317F0FB58A8AD622159EFADF10D1AF74584CA1
SHA-256:	39173096804451E59985449F5C4B3B4280D4E7494A269D56785D8C1F209BBED5
SHA-512:	DCD76CEB4EBCEFEA7763A506BD9D057C03DD21BC09A038DB50CF2F3FB2A75C2E51E08586E1F3448BFB71B50D7CFD01BA14A26D6909A21BF5ADBE04164F482120
Malicious:	false
Reputation:	low
Preview:	.................................2... .......R....GIFf8BIM.............................................................................................................................................................................................................................................................................................Adobe Photoshop CS2...........I.I...........H...H.......I.I..........8BIM.......I.IGr.ph.bj.....L.......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\._bm26.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	65456
Entropy (8bit):	5.5498646869323
Encrypted:	false
SSDEEP:	1536:pcG+bUdTYdndndlzyEpMnRP/LmEpMLRP/L3EpMoRP/L8EpMFRP/LVEpMGRP/LNPL:pcGEUudndnddyEpMnRP/LmEpMLRP/L3q
MD5:	9ABDEF69982EA709D578AAA4AC9E4753
SHA1:	9C28CC76FA0752EBEC9CFDA6456217255FAF25AC
SHA-256:	1533A29E9EB73AE5EA9053A8758FABAC465516D4EC2C88552367FB2565E119AB
SHA-512:	E3890E93E46FB7E2B4F794FF4AEFC9E138F165010C2D518B3F3BDB060AC970960866C9C177FECF69980EDB61A90C471D26A275477769394DA9692BA6315D8723
Malicious:	false
Reputation:	low
Preview:	.................................2... .......R...^GIFf8BIM.............................................................................................................................................................................................................................................................................................Adobe Photoshop CS2..!.!......J.H...........H...H.......J.H..........8BIM.......J.HGr.ph.bj.....L.......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\._bm8.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.6897983724188628
Encrypted:	false
SSDEEP:	3:PFltl5Xj//:PftrjX
MD5:	6D6431F71FAAE765A3C35655A81FEFB7
SHA1:	85703A4247EA652D07CB490A67DA856BC185F3EF
SHA-256:	66FD0BF9F5DCF21983E9097F37DAFA108112F55593F98BF283B63A8FEB78C3CA
SHA-512:	5A88EEFFE85745155C39821754ACFD012E31E5566817B7A2B6EC9C79586AD7F3CF8013D7345D7FE38CBFDEC81817217E2818F70584F185EAB116ADB76C181288
Malicious:	false
Reputation:	low
Preview:	.................................&... GIFfMeSa........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\._bm9.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	53685
Entropy (8bit):	4.755130593031549
Encrypted:	false
SSDEEP:	1536:8gHHrF6yEpMnRPkLmEpMLRPkL3EpMoRPkL8EpMFRPkLVEpMGRPkLNPj9EX4imqMW:8gHH56yEpMnRPkLmEpMLRPkL3EpMoRP3
MD5:	D74C87A532632AD9F3869788BC64CD8A
SHA1:	B18B412468A9CA43CF0E35A79BA06DC3C91F69E0
SHA-256:	2CD1A4FF35CE4C6A10C8B547976291F95A47BFBEDFE628F1D91767F767833B7D
SHA-512:	3B2759BC0FB92CA75CBAAB1035E0C17370DB91C36C118184CEE75F35BFFB73DF788B2EC60BDF23901CF9C06F03A5C9D8DCC3249D38FF971E07C41B2465A58D29
Malicious:	false
Reputation:	low
Preview:	.................................2... .......R...cGIFf8BIM...........................................................................................................................................................................................................................................................................................Adobe Photoshop CS2...........).c...........H...H.......).c..........8BIM.......).cGr.ph.bj.....L.......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\._chromaticity.jpg (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.6897983724188628
Encrypted:	false
SSDEEP:	3:PFltl51xX:Pft5x
MD5:	157E107640B55D60F7B0AE8B9854629C
SHA1:	87D20B20FBC46B571E154619C1D83582E7AAF62D
SHA-256:	BCAD9313E0D69DA085CD225D876C598B8FBEC7477E6280279971BE111B167AAA
SHA-512:	DB23CAAC9D28013C1EB4E673B8402F968A16F8474536B516885AC7C0B01895E6CECB5B9FF96E6171D9D73D1A21C7AC2A368D042BCD469E14EED070F59D5CCFAA
Malicious:	false
Reputation:	low
Preview:	.................................&... JPEG8BIM........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\._deutanCIE.jpg (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.6897983724188628
Encrypted:	false
SSDEEP:	3:PFltl51xX:Pft5x
MD5:	157E107640B55D60F7B0AE8B9854629C
SHA1:	87D20B20FBC46B571E154619C1D83582E7AAF62D
SHA-256:	BCAD9313E0D69DA085CD225D876C598B8FBEC7477E6280279971BE111B167AAA
SHA-512:	DB23CAAC9D28013C1EB4E673B8402F968A16F8474536B516885AC7C0B01895E6CECB5B9FF96E6171D9D73D1A21C7AC2A368D042BCD469E14EED070F59D5CCFAA
Malicious:	false
Reputation:	low
Preview:	.................................&... JPEG8BIM........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\._protanCIE.jpg (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.6897983724188628
Encrypted:	false
SSDEEP:	3:PFltl51xX:Pft5x
MD5:	157E107640B55D60F7B0AE8B9854629C
SHA1:	87D20B20FBC46B571E154619C1D83582E7AAF62D
SHA-256:	BCAD9313E0D69DA085CD225D876C598B8FBEC7477E6280279971BE111B167AAA
SHA-512:	DB23CAAC9D28013C1EB4E673B8402F968A16F8474536B516885AC7C0B01895E6CECB5B9FF96E6171D9D73D1A21C7AC2A368D042BCD469E14EED070F59D5CCFAA
Malicious:	false
Reputation:	low
Preview:	.................................&... JPEG8BIM........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\._tritanCIE.jpg (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.6897983724188628
Encrypted:	false
SSDEEP:	3:PFltl51xX:Pft5x
MD5:	157E107640B55D60F7B0AE8B9854629C
SHA1:	87D20B20FBC46B571E154619C1D83582E7AAF62D
SHA-256:	BCAD9313E0D69DA085CD225D876C598B8FBEC7477E6280279971BE111B167AAA
SHA-512:	DB23CAAC9D28013C1EB4E673B8402F968A16F8474536B516885AC7C0B01895E6CECB5B9FF96E6171D9D73D1A21C7AC2A368D042BCD469E14EED070F59D5CCFAA
Malicious:	false
Reputation:	low
Preview:	.................................&... JPEG8BIM........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\bm0.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 245 x 230
Category:	dropped
Size (bytes):	3906
Entropy (8bit):	7.536706229806521
Encrypted:	false
SSDEEP:	96:o7f1QpMi/SLPbUAorWnMAwyltQV834frIAsSThdL:ErLb5M5yltQDrIYPL
MD5:	12828D3D4CDD82D814A71932E906F4CA
SHA1:	A6C4981F85F85A40490977B0A71AFDD4B87C6CA0
SHA-256:	81D535B5DF4BF246380FA2BBC35C7CA654C4358D0EA50ABF9407BEB7F34A2510
SHA-512:	3F7100A8F80E0277BDE09C54B56ABB26BF329637486E7D0F76C4164F341AD7E540236064AC029D1F6F097C23DF0637A7A13091E2D89073D871BFD9863C4453A2
Malicious:	false
Reputation:	low
Preview:	GIF87a.....................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...............H......\....#J.H....3j.... C....cI.'#....K....9p.@..m...0.N.>_..:.'.).f.8....M.".$..R.K......)%..t......r}6).{D..h....Ji>....\|.n.;......B.KX...A...K.rC...bf+..b.P.6..4..yK.D@j.O.a.{3..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\bm1.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 245 x 230
Category:	dropped
Size (bytes):	3906
Entropy (8bit):	7.536706229806521
Encrypted:	false
SSDEEP:	96:o7f1QpMi/SLPbUAorWnMAwyltQV834frIAsSThdL:ErLb5M5yltQDrIYPL
MD5:	12828D3D4CDD82D814A71932E906F4CA
SHA1:	A6C4981F85F85A40490977B0A71AFDD4B87C6CA0
SHA-256:	81D535B5DF4BF246380FA2BBC35C7CA654C4358D0EA50ABF9407BEB7F34A2510
SHA-512:	3F7100A8F80E0277BDE09C54B56ABB26BF329637486E7D0F76C4164F341AD7E540236064AC029D1F6F097C23DF0637A7A13091E2D89073D871BFD9863C4453A2
Malicious:	false
Reputation:	low
Preview:	GIF87a.....................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...............H......\....#J.H....3j.... C....cI.'#....K....9p.@..m...0.N.>_..:.'.).f.8....M.".$..R.K......)%..t......r}6).{D..h....Ji>....\|.n.;......B.KX...A...K.rC...bf+..b.P.6..4..yK.D@j.O.a.{3..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\bm10.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 72 x 74
Category:	dropped
Size (bytes):	3795
Entropy (8bit):	7.440990419987494
Encrypted:	false
SSDEEP:	48:hK0u2XFShm1wVISwdUY3iz0e0pQQJzIWC85AOakncW/8MMWre:l3XFShmOciAe0HdIWC85Ha2/5K
MD5:	5DC7268132B0562F1CCE98CEAB204C9E
SHA1:	DB166FF68F94BFE8BE970047F8D60CA9A7376DA4
SHA-256:	1DA6EC344F2FF1C196780BDFAE055247FB72C67B6C49B11974CA93405B84E920
SHA-512:	58231F4303EE9B955D2F2AB7484FF6A1384E3FC4071251180CAA98527A544C6E7340E74261036BF1CB5A2D1BE5F865CD5582022232EAD4505842C1F1F6335B75
Malicious:	false
Reputation:	low
Preview:	GIF89aH.J........................................................................................................................................................................................................................................................................................................................................................................................~~~}}}xxxvvvuuusssrrrooommmlllkkkiiifffdddaaa```^^^ZZZYYYXXXWWWUUUTTTSSSPPPNNNMMMLLLJJJHHHGGGFFFEEECCCBBB@@@???<<<;;;:::999888777666555444333222000///...---,,,+++**&&&###""" ...........................................................................................................................................................................................................................!.......,....H.J.....o..H......\....#J.H...S...y...<.&..Hr..@SXH......&.x..T....`.r......m.@...-.......Th0.T.......f.j.......r.......4x.`..X..]..A.....".0.......6.... .~{...?\|........"X.A..BA...2...1.....b..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\bm14.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 77 x 73
Category:	dropped
Size (bytes):	3079
Entropy (8bit):	7.406272062451004
Encrypted:	false
SSDEEP:	48:PR5ETp8uDYPhb1xoNVIuar96f0CXbqtiFTGmk7JxrmRClU:Pw+yYR1xoNVIB921rqIGR9xKClU
MD5:	CD81AC9B6DF722AE7ED668A66F10AB83
SHA1:	E58D72A3998EC6D21236818527524B07D9596AF9
SHA-256:	A85EC0D8A1ABB0FDA111BB2E5FB22865B5890A886ED49CDD4CF6BC4D80BCB10F
SHA-512:	02A7D5C319666993DD78F3187A13426B5CFDFED7577EDC41568670AAD885C41960C322664C486A455A5AF5D9A67BF29599283EDF1C768E37A79063173CA07500
Malicious:	false
Reputation:	low
Preview:	GIF89aM.I.......................................................................................................................................................................................................................................................................................................................................................~~~}}}{{{zzzyyyxxxwwwuuutttsssrrrooolllkkkjjjiiifffeeedddbbb\\\[[[ZZZYYYXXXWWWVVVTTTRRRNNNLLLKKKJJJHHHGGGFFFEEEBBBAAA???>>>===;;;:::888777666555222111///...---,,,+++)))((('''!!! .........................................................................................................................................................................................................................................................!.......,....M.I.....[..H......*\....#J.H..E.....c.H."K...S....=.yR....0c.\|...T(s.....L...4p..... ...F:+.b....C.6...Q......(jD7...`...V.].2....K...2\..@..o..}.@k../.d.p._..K.....<...........C.\..S/.[q...p.t

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\bm2.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 384 x 288
Category:	dropped
Size (bytes):	4304
Entropy (8bit):	7.5924730131756535
Encrypted:	false
SSDEEP:	48:+m5CNjtJwsNd0akbhBUiFr6G15FZmwZSMIorealaKjhLb0yAyG61iz0ls40bsqjm:VYNjDFQQet5zuKjNxAM1pC4iYx
MD5:	BC939228247546ED31EB767DA7AC968E
SHA1:	28BA9BDE030F63ED7157EC22B0F4D2D5015B6F78
SHA-256:	48124EFD0503E82B1F3A6CF4B5304506E7796EF28ED750D7DE35CEFFF5769DE9
SHA-512:	801F3468E43285BD5B66904DC82496AFE7DA6FD7C082591C0B2E4D283B8D0860787B6F6FD364796C0C6DE0A91FC5BC9D4EA07D2B474A584DBDEF01EE6D0869CE
Malicious:	false
Reputation:	low
Preview:	GIF87a.. ..................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...... ........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x.....#......+.p_...E...\.#..,.rZ.3....W.Ck.-.tU.SCE....R.c..@. .

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\bm22.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 73 x 73
Category:	dropped
Size (bytes):	3371
Entropy (8bit):	7.4497952238318845
Encrypted:	false
SSDEEP:	48:jZAXJoZcpLLem5/iwDwfcaH+ilFRYFC2fY4QgZV6xLspy9Xud:QJLT9iwDwfrFRYhfAgZsxLL5ud
MD5:	D075014A91FB5B1F24C9A2DE9BCF4509
SHA1:	80E44947F656F5DAE3DB1B480C53847432DB8EB2
SHA-256:	E6A06206F1456B78981C24F595612E8DCE1B4FD28ED6E9D0C81D81E1E869BEA2
SHA-512:	CC83C97CB05A3C8398D481EF5E22B2D811F8E3AFCCF1539FFAA26862DF2AFF9E12DCF0C758F7C0F652AFB9DB3375CB7CA69692AEFED1B592AB501062308B7B51
Malicious:	false
Reputation:	low
Preview:	GIF89aI.I...............................................................................................................................................................................................................................................................................................................................................................................{{{zzzyyywwwrrrqqqppplllkkkhhhfffdddbbbaaa```^^^[[[YYYXXXWWWUUUTTTRRRQQQPPPOOONNNMMMLLLHHHEEEDDDCCCBBBAAA@@@???>>><<<:::999777666555444333222///,,,+++)))(((&&&%%%$$$###!!!..........................................................................................................................................................................................................................................!.......,....I.I.....g..H......\....#J.H..DM..R$..$W..QD.I...4!....0]N....'e....e...........^j."...XxD.......E.f.z....<.9}.......f].mP..\..4V.....\u....q.\|.U...U.h......H4,.U.....U.T.P.\|.0h....t..R.....E

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\bm26.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 72 x 74
Category:	dropped
Size (bytes):	4110
Entropy (8bit):	7.4584861984724675
Encrypted:	false
SSDEEP:	96:RVc3E2/Vbk1o4w4XR2zefgTnPniAQg3g9gD:Ry3E2/R4x2zefgTPnHhg9gD
MD5:	1F69A289B8526EA5F9BA921F2F6300CA
SHA1:	8660295C6D7E1E4AF0C3241D1C8E9B823CEB8F10
SHA-256:	5B5B5EDF0CB50ECAE101FB55AC758CD279347FE2B93025A22D5072A92FBC8198
SHA-512:	49A927302FD8B97D955729C25658EDA52764C3EB8D7471CA4FCCE0F11BD799EB11108B95BDB992BBABC4A52353FB10CC6EA828460955B1E4648B1BE3B5EB80D4
Malicious:	false
Reputation:	low
Preview:	GIF89aH.J.......................................................................................................................................................................................................................................................................................................................................................................................................~~~}}}\|\|\|{{{zzzyyywwwtttsssrrrqqqpppooonnnmmmkkkjjjhhhfffeeecccbbbaaa```___\\\[[[YYYTTTSSSRRRQQQOOONNNLLLKKKJJJIIIHHHGGGFFFEEECCCBBBAAA???>>>===:::999888777666555444333222000,,,+++**)))&&&$$$###!!! ....................................................................................................................................................................................!.......,....H.J........H......\....#J.H.b._.R..u.U/. ...Tg..... 8.....@.@....@^..\...'.....%.'..qT........8x....S.4P..'. ..>l.......6X.-..V.48.SE$....A...U...j..p..m.LU..(..3..m\..2g......p.$8....3=+.}.a....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\bm3.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 384 x 288
Category:	dropped
Size (bytes):	4492
Entropy (8bit):	7.58971495123084
Encrypted:	false
SSDEEP:	48:kmeYAs5qFTR++GW81Z8mmEY63DBR7USE5OV0lh0crC2nN60oMhcFPuXBtKL6/aSE:7YtvW1Z8mVjQSE4K0c2MJhceBKVz
MD5:	971521BE861C321A42C8B61A28A5648D
SHA1:	D9FF84F443460399C4CEC3B1D2F35ED4A287700D
SHA-256:	51BA0178C59F5B4F78C09053953F7169372D9627DEBB9BE703F947F28C9094D3
SHA-512:	BAF61E70CB778E6909C840CDA836C2A973D5ADE314B44C7012C4DC7271CF25D838ECDBBD38C861E853D276A126A6AEF6B165820929A9A697ECB810302C8CF086
Malicious:	false
Reputation:	low
Preview:	GIF87a.. ..................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...... ........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x..........L.....+^....#K.L....3k.......C....4...G.v.._..c.\|-.t.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\bm4.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 384 x 288
Category:	dropped
Size (bytes):	4818
Entropy (8bit):	7.6367849199074005
Encrypted:	false
SSDEEP:	48:kmerHGURL0JYAr/6LlC9Lt/vJpbfccVJWut9N5rFc2tM1JlPhnu0LXF0zHZbgI87:7ERMrChCttHJ5fccVlvFcKc9W8BZxd
MD5:	EEF8AFF62E42E96A4084643C8BDC2EB1
SHA1:	5D3F62DE51637E9E066ADCBCB494A0A600ECFEE7
SHA-256:	39B5479331FE362BCDF9B2E3DA7BC30ACB022AFB0051D8873DABCF572F24D151
SHA-512:	F0301C4A69AE00B0CE44AE368C2E6DE3A86D953B34FAC70909F980BA61A7445DF99703859FF36D8DB022D806C20BF7181A5D5601CEC5CB7732C9CA817447E730
Malicious:	false
Reputation:	low
Preview:	GIF87a.. ..................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...... ........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x..........L.....+^....#K.L....3k.......C....4...G.v.._..c.\|-.t.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\bm5.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 331 x 282
Category:	dropped
Size (bytes):	6459
Entropy (8bit):	7.795298472658523
Encrypted:	false
SSDEEP:	192:HuK5kKySIhrWvs1Z6llVd8kAtx+OvalQJWIdgIncx:HuK/IesabA6OvpsIdJcx
MD5:	7EB67FBD884EE59B9E9167DE26E66898
SHA1:	9A1B3C67AF91AA0C2B8043A1CC50B2A581992000
SHA-256:	0F843A42BE584D8276D96AAFD0370F6ED600F63695BD23C6568A30A46274E4FF
SHA-512:	17102636A724D3611C1963A46B2B9D9A3934878D0CE20BAA6E7C5A7A111C3404037E4A1BA4828CCBA76BCBA588585312203430AF0AE82FDE2862A5CD8199911E
Malicious:	false
Reputation:	low
Preview:	GIF87aK....................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,....K..........H......*\....#J.H....3j.... C..I...(S.\...0c.I....r....O.9...I...B..L...P.J..t....2....X....0..h..}:.......K..X.q..m....3......Z...+^i.`.8./.L9dc...K.......n&.....S.V(..c.\|W.../..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\bm6.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 279 x 247
Category:	dropped
Size (bytes):	8132
Entropy (8bit):	7.852135436848708
Encrypted:	false
SSDEEP:	192:hdkw7q38j7G4j5JzSJ6lKGbnLhTSOowEeS1S:hDeOlcGnZSOowEG
MD5:	74E2973D1826EB678AC1033A552F3FE9
SHA1:	851728CC3945575B856637DD2822C392E1D87BF0
SHA-256:	66EADED01CF97BF91131AFD54FF7DA4B2578CAF0FC17FE55A8C47737F36C8C4F
SHA-512:	B238A364DEB991643126F7D98031D139E53A3BA728C51D3D5F2D5B305E19C8D3A0F85A40E15CF6B898283F4EC673D184722BD093D8CA93A126CA8A3A5B071A79
Malicious:	false
Reputation:	low
Preview:	GIF87a...............@........................................@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...............H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.........@P.@.G.e..!...B.8...R.....(.R.&.+Pk.e.%.-.f.V.Z.jZ....]hw..k..Jxp.k.5.4,\....E[Po..-_Vj7h......\.oL.]..^]..]..~uKyl.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\bm8.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 73 x 73
Category:	dropped
Size (bytes):	4531
Entropy (8bit):	7.438989839400492
Encrypted:	false
SSDEEP:	96:hxLbRXf1w+qbHqp8skPDv5X5uezT0VS7KkKjaVZ9E3Ui9cLycoWvhamUYOqKpWR9:hbWHbHqpNk9X5uezT0VSrnZ9+KLycocL
MD5:	4FE24E60EB6273C1DD57B5FE2B9A575C
SHA1:	19A68E7A948E3E56FB1FAFCE89D72C6F200D9573
SHA-256:	624758037DF43276503AEFE924292E8C3F6342ACBB22405811CFBEF98E40F8AC
SHA-512:	817F9889313FF626D35E27D1BAB49C0BCF923195E0BA33942349FC13D4689D872C8FA287CEDD2A06E3E8A136ECC269BC3CBC9C5C3A8A414C6E5FFB3DF2A240A1
Malicious:	false
Reputation:	low
Preview:	GIF89aI.I...............................................................................................................................................................................................................................................................................................................................................................{{{...www~~~.....................!.......,....I.I.................}.... ....................&............{...04:D^aLLU.\^6M......).......4QUIjRd=A3..."/6ElKbT:.........&3[fcR:..~......A../8`...".,......F.. ....`#..\|...p.O..T..9..A.W.-9.3...1`b...@....~.8 ....H.h ....~j.S.....b".p...,VP..`....D.!......&,HP......phP@IT2q.p.....?..l.......4...#J...[..1eG..(..`....%. .:AM...V.v.g.."rL.. ....Sp.p..x..{*0.....4i..c.E......1f...Z.Dx!&M.?{$`.1EG.....9."..........Q.~t....,`A<...A.h.aR..(F..<.g.. aC......V....Y=...8....} ...P.....TPB..`0@+.....P.`..{....V.1.....b..?.1.."....4.s@.H@...N....>.@..$]...6..@...A..dlP.a.<...mP...{.!..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\bm9.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 99 x 41
Category:	dropped
Size (bytes):	1858
Entropy (8bit):	6.911111727204752
Encrypted:	false
SSDEEP:	24:sKig0f0qmUBwxNNwYWcxW42FAnE+S8r+pgVLkbmzUnE6GhwLYD:sKiJf0qlcNkRF+Nt6pqQmYEDwLYD
MD5:	AF94ABCE48144E917332EBB8D366833A
SHA1:	FC4BF88F1D0352EE0B73AB2CEA9C40F8E96CB468
SHA-256:	67F19CD592A02CAE34B9AB8461F5CA3168A0A4C096CAFF029C64D5EA8213D80A
SHA-512:	568A98BFA3CBC03B1D174E6BC2ECB69A612331D8003036C476C954CF401667DC862D2C15B45653F451E1AD78E6C6A97B228456E248BD2C05A938727427F8C685
Malicious:	false
Reputation:	low
Preview:	GIF89ac.)........................................................................................................................................................................................................................................................................................{{{yyyxxxsssrrrqqqpppooonnnllliiigggfffeeedddcccaaa```]]]\\\[[[ZZZYYYXXXVVVUUUTTTSSSRRRQQQPPPLLLKKKGGGFFFEEEDDDCCCAAA???===<<<888555333.....................................................................................................................................................................................................................................................................................................................................................................!.......,....c.)........H......*\....#J.H....3j....;x..I...$..Y...0c..sg.D3Ln.....@i..J...H...R.".'..H.J...X.j.....'r.~I...h.6 ...p.....C/s..=..a...._ubHa.......Ha.$.#.m ..<3.".....#.d.2%F......0B...z

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\chromaticity.jpg (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 395x415, components 3
Category:	dropped
Size (bytes):	21246
Entropy (8bit):	7.882526000297608
Encrypted:	false
SSDEEP:	384:JjPPPPPPPP/moY3TkBi/R2CyUya3sNEFR1NBmQwayLi6iJZh0S0teu3uCXRKfGOs:ZxYCOR5DyPaz1NYQKLi6iLeS0teu+CQu
MD5:	DD2C92A88D54B1476D5A31B6984451A4
SHA1:	C563CA1302F29BF7EB22B11BE0B885697AEB621A
SHA-256:	C89DDB70716690F0E1584C4126889EC0DACDEDBD887B3A406999EA674DFA22C6
SHA-512:	3F2C957B32E3040EF9C88EC7C0F757291616CF31C4339CB524D79F886620D2A862AE895FC6F4501F82496F7818A8B3907772352C44F5D04EAA6D2F56F051432A
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d...............................................................................................................................................................................................................................................!1A"..Qa..t..6.2....5Uu.Vq.B#S..R.b3$7..C.4%...r.&'......................!..1.AQaq."2......Rb..B...r#3..............?...........................................................x.Wm...Q.R.%.9%m.]PDL2<.)...5.....@A....M.g.v..4V.....=..q.>...G.......<.j\|.....m.K.3m.a.C4A.4.#.............Y..........:...K.dn.-.a4....Ogw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\deutanCIE.jpg (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 447x449, components 3
Category:	dropped
Size (bytes):	29003
Entropy (8bit):	7.898807437754511
Encrypted:	false
SSDEEP:	384:LjyHHHH6fNS6z6reWkxZeJPWbb0B/bGTpSJhZeZcJ5Vy8Nj+O/TbyMJ/joejB8vv:9FSfeWkxiWbb0F+ZcJv1aqKQq0O
MD5:	C856FDE76FA298D3821FD2879E322D57
SHA1:	C5EB1FB0FD6533B2820D26CB3A14E918B645469F
SHA-256:	A996A02A492DFA186AF905A922789726969975CF65128C1DF3BC2375589771E1
SHA-512:	C2CE9EE2D2DF5E657838D97116FCB58861D1B036DA9533CE2C282CBFE77F260BB6B1AD9D2042049C9B746272A92E98ACD9D21596C9BDE2E56525EECCB16E2212
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.............................................................................................................................................................................................................................................!.1.A..Qa."2s..6q....S..TU.BRb#..5.V..r3...Cc$....4D.dt.%.&v......................!1..AQ2aq.."..........RrBb.#.............?..R.....P.T...].q7..#....l....>.. .@yM.r~$._.`...............~...x.?.v/.0\|o...N......@.I.\|.....;..>7...'b..... ~$._.`...............~...x.?.v/.0\|o...N......@.I.\|.....;..>7...'b..... ~$._.`...............~...x.?.v/.0\|o...N......@.I.\|.....;..>7...'b..... ~$._.`...............~...x.?.v/.0\|o...N......@.I.\|.....;..>7...'b..... ~$._.`...............~...x.?.v/.0\|o...N......@.I.\|.....;..>7...'b..... ~$._.`...............~...x.?.v/.0\|o...N......@...R.=un.b...h.4.....Z. .v.i,..+.s,q.dq....FH.d.....s.Aw.^S]A.A.xG...........+.gk..e...d...lL4.iB.......8.{,....d..[

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\is-0253P.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 245 x 230
Category:	dropped
Size (bytes):	3906
Entropy (8bit):	7.536706229806521
Encrypted:	false
SSDEEP:	96:o7f1QpMi/SLPbUAorWnMAwyltQV834frIAsSThdL:ErLb5M5yltQDrIYPL
MD5:	12828D3D4CDD82D814A71932E906F4CA
SHA1:	A6C4981F85F85A40490977B0A71AFDD4B87C6CA0
SHA-256:	81D535B5DF4BF246380FA2BBC35C7CA654C4358D0EA50ABF9407BEB7F34A2510
SHA-512:	3F7100A8F80E0277BDE09C54B56ABB26BF329637486E7D0F76C4164F341AD7E540236064AC029D1F6F097C23DF0637A7A13091E2D89073D871BFD9863C4453A2
Malicious:	false
Reputation:	low
Preview:	GIF87a.....................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...............H......\....#J.H....3j.... C....cI.'#....K....9p.@..m...0.N.>_..:.'.).f.8....M.".$..R.K......)%..t......r}6).{D..h....Ji>....\|.n.;......B.KX...A...K.rC...bf+..b.P.6..4..yK.D@j.O.a.{3..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\is-2C7VF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 73 x 73
Category:	dropped
Size (bytes):	3371
Entropy (8bit):	7.4497952238318845
Encrypted:	false
SSDEEP:	48:jZAXJoZcpLLem5/iwDwfcaH+ilFRYFC2fY4QgZV6xLspy9Xud:QJLT9iwDwfrFRYhfAgZsxLL5ud
MD5:	D075014A91FB5B1F24C9A2DE9BCF4509
SHA1:	80E44947F656F5DAE3DB1B480C53847432DB8EB2
SHA-256:	E6A06206F1456B78981C24F595612E8DCE1B4FD28ED6E9D0C81D81E1E869BEA2
SHA-512:	CC83C97CB05A3C8398D481EF5E22B2D811F8E3AFCCF1539FFAA26862DF2AFF9E12DCF0C758F7C0F652AFB9DB3375CB7CA69692AEFED1B592AB501062308B7B51
Malicious:	false
Reputation:	low
Preview:	GIF89aI.I...............................................................................................................................................................................................................................................................................................................................................................................{{{zzzyyywwwrrrqqqppplllkkkhhhfffdddbbbaaa```^^^[[[YYYXXXWWWUUUTTTRRRQQQPPPOOONNNMMMLLLHHHEEEDDDCCCBBBAAA@@@???>>><<<:::999777666555444333222///,,,+++)))(((&&&%%%$$$###!!!..........................................................................................................................................................................................................................................!.......,....I.I.....g..H......\....#J.H..DM..R$..$W..QD.I...4!....0]N....'e....e...........^j."...XxD.......E.f.z....<.9}.......f].mP..\..4V.....\u....q.\|.U...U.h......H4,.U.....U.T.P.\|.0h....t..R.....E

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\is-3O76G.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 449x449, components 3
Category:	dropped
Size (bytes):	29069
Entropy (8bit):	7.8909654461222525
Encrypted:	false
SSDEEP:	384:O4zw/TjyqIa8xNUP/MlujbvUYneccc0WB9JSG/pn48HI63RKNmuGQsnr01Bv+J:OH/CM0UPvhneivBOyHn/LQQG+J
MD5:	503071DCBE6825F45EF4092F00AFF04F
SHA1:	088F6C89D992693D42679B45A325B2DE08251C87
SHA-256:	3A5E982AEF0CB895C027A596CD429DBE725A26987F6B96B9BA5D6AD1E12E507B
SHA-512:	C5C12BAF5D59BF4539178AD3171A4DD2278AD660C54665C56787961867513AB6FEDE1A57068C990F7DA0B14679DE88EB9AAAC07802DF74F301CD33B2022C8808
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d...............................................................................................................................................................................................................................................!1A"..Qa....q2R.3t.u.6V..Bbr.#..4.5U..$....c.%Cs.&.SDTd.........................!1..AQ"aq.......2r...#BR..b3....4............?..R.......T.j........................................................v..1.6....K.{.CZ..'..9..J......1....Z..7.\..gF...7Y...4.........e.......n.`..C.-25..h.x.q..y..`..m...).9..$...1ln.Y....Rc....G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\is-3ULQA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 77 x 73
Category:	dropped
Size (bytes):	3079
Entropy (8bit):	7.406272062451004
Encrypted:	false
SSDEEP:	48:PR5ETp8uDYPhb1xoNVIuar96f0CXbqtiFTGmk7JxrmRClU:Pw+yYR1xoNVIB921rqIGR9xKClU
MD5:	CD81AC9B6DF722AE7ED668A66F10AB83
SHA1:	E58D72A3998EC6D21236818527524B07D9596AF9
SHA-256:	A85EC0D8A1ABB0FDA111BB2E5FB22865B5890A886ED49CDD4CF6BC4D80BCB10F
SHA-512:	02A7D5C319666993DD78F3187A13426B5CFDFED7577EDC41568670AAD885C41960C322664C486A455A5AF5D9A67BF29599283EDF1C768E37A79063173CA07500
Malicious:	false
Reputation:	low
Preview:	GIF89aM.I.......................................................................................................................................................................................................................................................................................................................................................~~~}}}{{{zzzyyyxxxwwwuuutttsssrrrooolllkkkjjjiiifffeeedddbbb\\\[[[ZZZYYYXXXWWWVVVTTTRRRNNNLLLKKKJJJHHHGGGFFFEEEBBBAAA???>>>===;;;:::888777666555222111///...---,,,+++)))((('''!!! .........................................................................................................................................................................................................................................................!.......,....M.I.....[..H......*\....#J.H..E.....c.H."K...S....=.yR....0c.\|...T(s.....L...4p..... ...F:+.b....C.6...Q......(jD7...`...V.].2....K...2\..@..o..}.@k../.d.p._..K.....<...........C.\..S/.[q...p.t

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\is-4GDAF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 384 x 288
Category:	dropped
Size (bytes):	4304
Entropy (8bit):	7.5924730131756535
Encrypted:	false
SSDEEP:	48:+m5CNjtJwsNd0akbhBUiFr6G15FZmwZSMIorealaKjhLb0yAyG61iz0ls40bsqjm:VYNjDFQQet5zuKjNxAM1pC4iYx
MD5:	BC939228247546ED31EB767DA7AC968E
SHA1:	28BA9BDE030F63ED7157EC22B0F4D2D5015B6F78
SHA-256:	48124EFD0503E82B1F3A6CF4B5304506E7796EF28ED750D7DE35CEFFF5769DE9
SHA-512:	801F3468E43285BD5B66904DC82496AFE7DA6FD7C082591C0B2E4D283B8D0860787B6F6FD364796C0C6DE0A91FC5BC9D4EA07D2B474A584DBDEF01EE6D0869CE
Malicious:	false
Reputation:	low
Preview:	GIF87a.. ..................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...... ........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x.....#......+.p_...E...\.#..,.rZ.3....W.Ck.-.tU.SCE....R.c..@. .

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\is-5T6OH.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 72 x 74
Category:	dropped
Size (bytes):	3795
Entropy (8bit):	7.440990419987494
Encrypted:	false
SSDEEP:	48:hK0u2XFShm1wVISwdUY3iz0e0pQQJzIWC85AOakncW/8MMWre:l3XFShmOciAe0HdIWC85Ha2/5K
MD5:	5DC7268132B0562F1CCE98CEAB204C9E
SHA1:	DB166FF68F94BFE8BE970047F8D60CA9A7376DA4
SHA-256:	1DA6EC344F2FF1C196780BDFAE055247FB72C67B6C49B11974CA93405B84E920
SHA-512:	58231F4303EE9B955D2F2AB7484FF6A1384E3FC4071251180CAA98527A544C6E7340E74261036BF1CB5A2D1BE5F865CD5582022232EAD4505842C1F1F6335B75
Malicious:	false
Reputation:	low
Preview:	GIF89aH.J........................................................................................................................................................................................................................................................................................................................................................................................~~~}}}xxxvvvuuusssrrrooommmlllkkkiiifffdddaaa```^^^ZZZYYYXXXWWWUUUTTTSSSPPPNNNMMMLLLJJJHHHGGGFFFEEECCCBBB@@@???<<<;;;:::999888777666555444333222000///...---,,,+++**&&&###""" ...........................................................................................................................................................................................................................!.......,....H.J.....o..H......\....#J.H...S...y...<.&..Hr..@SXH......&.x..T....`.r......m.@...-.......Th0.T.......f.j.......r.......4x.`..X..]..A.....".0.......6.... .~{...?\|........"X.A..BA...2...1.....b..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\is-66LR1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 245 x 230
Category:	dropped
Size (bytes):	3906
Entropy (8bit):	7.536706229806521
Encrypted:	false
SSDEEP:	96:o7f1QpMi/SLPbUAorWnMAwyltQV834frIAsSThdL:ErLb5M5yltQDrIYPL
MD5:	12828D3D4CDD82D814A71932E906F4CA
SHA1:	A6C4981F85F85A40490977B0A71AFDD4B87C6CA0
SHA-256:	81D535B5DF4BF246380FA2BBC35C7CA654C4358D0EA50ABF9407BEB7F34A2510
SHA-512:	3F7100A8F80E0277BDE09C54B56ABB26BF329637486E7D0F76C4164F341AD7E540236064AC029D1F6F097C23DF0637A7A13091E2D89073D871BFD9863C4453A2
Malicious:	false
Reputation:	low
Preview:	GIF87a.....................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...............H......\....#J.H....3j.... C....cI.'#....K....9p.@..m...0.N.>_..:.'.).f.8....M.".$..R.K......)%..t......r}6).{D..h....Ji>....\|.n.;......B.KX...A...K.rC...bf+..b.P.6..4..yK.D@j.O.a.{3..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\is-87DIH.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 395x415, components 3
Category:	dropped
Size (bytes):	21246
Entropy (8bit):	7.882526000297608
Encrypted:	false
SSDEEP:	384:JjPPPPPPPP/moY3TkBi/R2CyUya3sNEFR1NBmQwayLi6iJZh0S0teu3uCXRKfGOs:ZxYCOR5DyPaz1NYQKLi6iLeS0teu+CQu
MD5:	DD2C92A88D54B1476D5A31B6984451A4
SHA1:	C563CA1302F29BF7EB22B11BE0B885697AEB621A
SHA-256:	C89DDB70716690F0E1584C4126889EC0DACDEDBD887B3A406999EA674DFA22C6
SHA-512:	3F2C957B32E3040EF9C88EC7C0F757291616CF31C4339CB524D79F886620D2A862AE895FC6F4501F82496F7818A8B3907772352C44F5D04EAA6D2F56F051432A
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d...............................................................................................................................................................................................................................................!1A"..Qa..t..6.2....5Uu.Vq.B#S..R.b3$7..C.4%...r.&'......................!..1.AQaq."2......Rb..B...r#3..............?...........................................................x.Wm...Q.R.%.9%m.]PDL2<.)...5.....@A....M.g.v..4V.....=..q.>...G.......<.j\|.....m.K.3m.a.C4A.4.#.............Y..........:...K.dn.-.a4....Ogw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@.ww.......gw...J..@

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\is-918E0.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	61506
Entropy (8bit):	5.32365048427296
Encrypted:	false
SSDEEP:	1536:n4PpnnZ1yEpMnRPoLmEpMLRPoL3EpMoRPoL8EpMFRPoLVEpMGRPoLNPj9EX4imWA:n+nn3yEpMnRPoLmEpMLRPoL3EpMoRPoH
MD5:	FC68846BCF5F61F9A688DDA39C2C3EE3
SHA1:	68FBD9AC5BF590D5E780099CCD2E2B1D6EFDA834
SHA-256:	4720EF305E4658D99A272B100998EDC5DAA509C88077F7576A93C4FB7BDF2D15
SHA-512:	C454D10CB4F24856950B1A160067CEB300B6EBDB5733256EDEDA57429C6DDCEB8C62C9838B107344F72858CB235F111F04BF84DDC97351B697AD9A0482F3ED46
Malicious:	false
Reputation:	low
Preview:	.................................2... .......R....GIFf8BIM.............................................................................................................................................................................................................................................................................................Adobe Photoshop CS2...........I.M...........H...H.......I.M..........8BIM.......I.MGr.ph.bj.....L.......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\is-A7VA2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 331 x 282
Category:	dropped
Size (bytes):	6459
Entropy (8bit):	7.795298472658523
Encrypted:	false
SSDEEP:	192:HuK5kKySIhrWvs1Z6llVd8kAtx+OvalQJWIdgIncx:HuK/IesabA6OvpsIdJcx
MD5:	7EB67FBD884EE59B9E9167DE26E66898
SHA1:	9A1B3C67AF91AA0C2B8043A1CC50B2A581992000
SHA-256:	0F843A42BE584D8276D96AAFD0370F6ED600F63695BD23C6568A30A46274E4FF
SHA-512:	17102636A724D3611C1963A46B2B9D9A3934878D0CE20BAA6E7C5A7A111C3404037E4A1BA4828CCBA76BCBA588585312203430AF0AE82FDE2862A5CD8199911E
Malicious:	false
Reputation:	low
Preview:	GIF87aK....................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,....K..........H......*\....#J.H....3j.... C..I...(S.\...0c.I....r....O.9...I...B..L...P.J..t....2....X....0..h..}:.......K..X.q..m....3......Z...+^i.`.8./.L9dc...K.......n&.....S.V(..c.\|W.../..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\is-B4B7S.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	63292
Entropy (8bit):	5.4246885763998005
Encrypted:	false
SSDEEP:	1536:uuRvEd3WTvEd3WTvEd3WJbyEpMnRPeLmEpMLRPeL3EpMoRPeL8EpMFRPeLVEpMG5:u0EJmEJmEJWyEpMnRPeLmEpMLRPeL3EL
MD5:	FC34F18540CB81828AA7ECDD392DB335
SHA1:	65317F0FB58A8AD622159EFADF10D1AF74584CA1
SHA-256:	39173096804451E59985449F5C4B3B4280D4E7494A269D56785D8C1F209BBED5
SHA-512:	DCD76CEB4EBCEFEA7763A506BD9D057C03DD21BC09A038DB50CF2F3FB2A75C2E51E08586E1F3448BFB71B50D7CFD01BA14A26D6909A21BF5ADBE04164F482120
Malicious:	false
Reputation:	low
Preview:	.................................2... .......R....GIFf8BIM.............................................................................................................................................................................................................................................................................................Adobe Photoshop CS2...........I.I...........H...H.......I.I..........8BIM.......I.IGr.ph.bj.....L.......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\is-B63N5.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.6897983724188628
Encrypted:	false
SSDEEP:	3:PFltl51xX:Pft5x
MD5:	157E107640B55D60F7B0AE8B9854629C
SHA1:	87D20B20FBC46B571E154619C1D83582E7AAF62D
SHA-256:	BCAD9313E0D69DA085CD225D876C598B8FBEC7477E6280279971BE111B167AAA
SHA-512:	DB23CAAC9D28013C1EB4E673B8402F968A16F8474536B516885AC7C0B01895E6CECB5B9FF96E6171D9D73D1A21C7AC2A368D042BCD469E14EED070F59D5CCFAA
Malicious:	false
Reputation:	low
Preview:	.................................&... JPEG8BIM........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\is-BNRB5.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 447x449, components 3
Category:	dropped
Size (bytes):	29003
Entropy (8bit):	7.898807437754511
Encrypted:	false
SSDEEP:	384:LjyHHHH6fNS6z6reWkxZeJPWbb0B/bGTpSJhZeZcJ5Vy8Nj+O/TbyMJ/joejB8vv:9FSfeWkxiWbb0F+ZcJv1aqKQq0O
MD5:	C856FDE76FA298D3821FD2879E322D57
SHA1:	C5EB1FB0FD6533B2820D26CB3A14E918B645469F
SHA-256:	A996A02A492DFA186AF905A922789726969975CF65128C1DF3BC2375589771E1
SHA-512:	C2CE9EE2D2DF5E657838D97116FCB58861D1B036DA9533CE2C282CBFE77F260BB6B1AD9D2042049C9B746272A92E98ACD9D21596C9BDE2E56525EECCB16E2212
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.............................................................................................................................................................................................................................................!.1.A..Qa."2s..6q....S..TU.BRb#..5.V..r3...Cc$....4D.dt.%.&v......................!1..AQ2aq.."..........RrBb.#.............?..R.....P.T...].q7..#....l....>.. .@yM.r~$._.`...............~...x.?.v/.0\|o...N......@.I.\|.....;..>7...'b..... ~$._.`...............~...x.?.v/.0\|o...N......@.I.\|.....;..>7...'b..... ~$._.`...............~...x.?.v/.0\|o...N......@.I.\|.....;..>7...'b..... ~$._.`...............~...x.?.v/.0\|o...N......@.I.\|.....;..>7...'b..... ~$._.`...............~...x.?.v/.0\|o...N......@.I.\|.....;..>7...'b..... ~$._.`...............~...x.?.v/.0\|o...N......@...R.=un.b...h.4.....Z. .v.i,..+.s,q.dq....FH.d.....s.Aw.^S]A.A.xG...........+.gk..e...d...lL4.iB.......8.{,....d..[

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\is-CJETP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 72 x 74
Category:	dropped
Size (bytes):	4110
Entropy (8bit):	7.4584861984724675
Encrypted:	false
SSDEEP:	96:RVc3E2/Vbk1o4w4XR2zefgTnPniAQg3g9gD:Ry3E2/R4x2zefgTPnHhg9gD
MD5:	1F69A289B8526EA5F9BA921F2F6300CA
SHA1:	8660295C6D7E1E4AF0C3241D1C8E9B823CEB8F10
SHA-256:	5B5B5EDF0CB50ECAE101FB55AC758CD279347FE2B93025A22D5072A92FBC8198
SHA-512:	49A927302FD8B97D955729C25658EDA52764C3EB8D7471CA4FCCE0F11BD799EB11108B95BDB992BBABC4A52353FB10CC6EA828460955B1E4648B1BE3B5EB80D4
Malicious:	false
Reputation:	low
Preview:	GIF89aH.J.......................................................................................................................................................................................................................................................................................................................................................................................................~~~}}}\|\|\|{{{zzzyyywwwtttsssrrrqqqpppooonnnmmmkkkjjjhhhfffeeecccbbbaaa```___\\\[[[YYYTTTSSSRRRQQQOOONNNLLLKKKJJJIIIHHHGGGFFFEEECCCBBBAAA???>>>===:::999888777666555444333222000,,,+++**)))&&&$$$###!!! ....................................................................................................................................................................................!.......,....H.J........H......\....#J.H.b._.R..u.U/. ...Tg..... 8.....@.@....@^..\...'.....%.'..qT........8x....S.4P..'. ..>l.......6X.-..V.48.SE$....A...U...j..p..m.LU..(..3..m\..2g......p.$8....3=+.}.a....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\is-CKE9F.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	64757
Entropy (8bit):	5.513544306180357
Encrypted:	false
SSDEEP:	1536:fX7YULL1SyEpMnRPxLmEpMLRPxL3EpMoRPxL8EpMFRPxLVEpMGRPxLNPj9EX4img:fU9yEpMnRPxLmEpMLRPxL3EpMoRPxL8F
MD5:	B341192EDFF6166348EF7BE261403360
SHA1:	8C7EAD2DEE3CEFDC56C4F9028FC5CE295C52D848
SHA-256:	885BB88E591F96D1A449E6E9DE823159AC0D5E854F94F84CD1851797CAE140CE
SHA-512:	AFE6F8E19F0B74A624B432BCD1E7075DC18B5863DF70037C925A9F18067CA3968496CC2FE2EF96B739BE74F3A0153821D9D29720CCF2C2EF20FEDD816B736EA1
Malicious:	false
Reputation:	low
Preview:	.................................2... .......R....GIFf8BIM.............................................................................................................................................................................................................................................................................................Adobe Photoshop CS2.. . ......J.H...........H...H.......J.H..........8BIM.......J.HGr.ph.bj.....L.......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\is-HE1PH.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	65456
Entropy (8bit):	5.5498646869323
Encrypted:	false
SSDEEP:	1536:pcG+bUdTYdndndlzyEpMnRP/LmEpMLRP/L3EpMoRP/L8EpMFRP/LVEpMGRP/LNPL:pcGEUudndnddyEpMnRP/LmEpMLRP/L3q
MD5:	9ABDEF69982EA709D578AAA4AC9E4753
SHA1:	9C28CC76FA0752EBEC9CFDA6456217255FAF25AC
SHA-256:	1533A29E9EB73AE5EA9053A8758FABAC465516D4EC2C88552367FB2565E119AB
SHA-512:	E3890E93E46FB7E2B4F794FF4AEFC9E138F165010C2D518B3F3BDB060AC970960866C9C177FECF69980EDB61A90C471D26A275477769394DA9692BA6315D8723
Malicious:	false
Reputation:	low
Preview:	.................................2... .......R...^GIFf8BIM.............................................................................................................................................................................................................................................................................................Adobe Photoshop CS2..!.!......J.H...........H...H.......J.H..........8BIM.......J.HGr.ph.bj.....L.......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\is-I6QRV.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 384 x 288
Category:	dropped
Size (bytes):	4818
Entropy (8bit):	7.6367849199074005
Encrypted:	false
SSDEEP:	48:kmerHGURL0JYAr/6LlC9Lt/vJpbfccVJWut9N5rFc2tM1JlPhnu0LXF0zHZbgI87:7ERMrChCttHJ5fccVlvFcKc9W8BZxd
MD5:	EEF8AFF62E42E96A4084643C8BDC2EB1
SHA1:	5D3F62DE51637E9E066ADCBCB494A0A600ECFEE7
SHA-256:	39B5479331FE362BCDF9B2E3DA7BC30ACB022AFB0051D8873DABCF572F24D151
SHA-512:	F0301C4A69AE00B0CE44AE368C2E6DE3A86D953B34FAC70909F980BA61A7445DF99703859FF36D8DB022D806C20BF7181A5D5601CEC5CB7732C9CA817447E730
Malicious:	false
Reputation:	low
Preview:	GIF87a.. ..................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...... ........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x..........L.....+^....#K.L....3k.......C....4...G.v.._..c.\|-.t.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\is-INSUE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 73 x 73
Category:	dropped
Size (bytes):	4531
Entropy (8bit):	7.438989839400492
Encrypted:	false
SSDEEP:	96:hxLbRXf1w+qbHqp8skPDv5X5uezT0VS7KkKjaVZ9E3Ui9cLycoWvhamUYOqKpWR9:hbWHbHqpNk9X5uezT0VSrnZ9+KLycocL
MD5:	4FE24E60EB6273C1DD57B5FE2B9A575C
SHA1:	19A68E7A948E3E56FB1FAFCE89D72C6F200D9573
SHA-256:	624758037DF43276503AEFE924292E8C3F6342ACBB22405811CFBEF98E40F8AC
SHA-512:	817F9889313FF626D35E27D1BAB49C0BCF923195E0BA33942349FC13D4689D872C8FA287CEDD2A06E3E8A136ECC269BC3CBC9C5C3A8A414C6E5FFB3DF2A240A1
Malicious:	false
Reputation:	low
Preview:	GIF89aI.I...............................................................................................................................................................................................................................................................................................................................................................{{{...www~~~.....................!.......,....I.I.................}.... ....................&............{...04:D^aLLU.\^6M......).......4QUIjRd=A3..."/6ElKbT:.........&3[fcR:..~......A../8`...".,......F.. ....`#..\|...p.O..T..9..A.W.-9.3...1`b...@....~.8 ....H.h ....~j.S.....b".p...,VP..`....D.!......&,HP......phP@IT2q.p.....?..l.......4...#J...[..1eG..(..`....%. .:AM...V.v.g.."rL.. ....Sp.p..x..{*0.....4i..c.E......1f...Z.Dx!&M.?{$`.1EG.....9."..........Q.~t....,`A<...A.h.aR..(F..<.g.. aC......V....Y=...8....} ...P.....TPB..`0@+.....P.`..{....V.1.....b..?.1.."....4.s@.H@...N....>.@..$]...6..@...A..dlP.a.<...mP...{.!..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\is-J11VJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 384 x 288
Category:	dropped
Size (bytes):	4492
Entropy (8bit):	7.58971495123084
Encrypted:	false
SSDEEP:	48:kmeYAs5qFTR++GW81Z8mmEY63DBR7USE5OV0lh0crC2nN60oMhcFPuXBtKL6/aSE:7YtvW1Z8mVjQSE4K0c2MJhceBKVz
MD5:	971521BE861C321A42C8B61A28A5648D
SHA1:	D9FF84F443460399C4CEC3B1D2F35ED4A287700D
SHA-256:	51BA0178C59F5B4F78C09053953F7169372D9627DEBB9BE703F947F28C9094D3
SHA-512:	BAF61E70CB778E6909C840CDA836C2A973D5ADE314B44C7012C4DC7271CF25D838ECDBBD38C861E853D276A126A6AEF6B165820929A9A697ECB810302C8CF086
Malicious:	false
Reputation:	low
Preview:	GIF87a.. ..................................@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...... ........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x..........L.....+^....#K.L....3k.......C....4...G.v.._..c.\|-.t.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\is-JLIT2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 89a, 99 x 41
Category:	dropped
Size (bytes):	1858
Entropy (8bit):	6.911111727204752
Encrypted:	false
SSDEEP:	24:sKig0f0qmUBwxNNwYWcxW42FAnE+S8r+pgVLkbmzUnE6GhwLYD:sKiJf0qlcNkRF+Nt6pqQmYEDwLYD
MD5:	AF94ABCE48144E917332EBB8D366833A
SHA1:	FC4BF88F1D0352EE0B73AB2CEA9C40F8E96CB468
SHA-256:	67F19CD592A02CAE34B9AB8461F5CA3168A0A4C096CAFF029C64D5EA8213D80A
SHA-512:	568A98BFA3CBC03B1D174E6BC2ECB69A612331D8003036C476C954CF401667DC862D2C15B45653F451E1AD78E6C6A97B228456E248BD2C05A938727427F8C685
Malicious:	false
Reputation:	low
Preview:	GIF89ac.)........................................................................................................................................................................................................................................................................................{{{yyyxxxsssrrrqqqpppooonnnllliiigggfffeeedddcccaaa```]]]\\\[[[ZZZYYYXXXVVVUUUTTTSSSRRRQQQPPPLLLKKKGGGFFFEEEDDDCCCAAA???===<<<888555333.....................................................................................................................................................................................................................................................................................................................................................................!.......,....c.)........H......*\....#J.H....3j....;x..I...$..Y...0c..sg.D3Ln.....@i..J...H...R.".'..H.J...X.j.....'r.~I...h.6 ...p.....C/s..=..a...._ubHa.......Ha.$.#.m ..<3.".....#.d.2%F......0B...z

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\is-L890P.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.6897983724188628
Encrypted:	false
SSDEEP:	3:PFltl51xX:Pft5x
MD5:	157E107640B55D60F7B0AE8B9854629C
SHA1:	87D20B20FBC46B571E154619C1D83582E7AAF62D
SHA-256:	BCAD9313E0D69DA085CD225D876C598B8FBEC7477E6280279971BE111B167AAA
SHA-512:	DB23CAAC9D28013C1EB4E673B8402F968A16F8474536B516885AC7C0B01895E6CECB5B9FF96E6171D9D73D1A21C7AC2A368D042BCD469E14EED070F59D5CCFAA
Malicious:	false
Reputation:	low
Preview:	.................................&... JPEG8BIM........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\is-MJI8G.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 446x449, components 3
Category:	dropped
Size (bytes):	30258
Entropy (8bit):	7.90755313396624
Encrypted:	false
SSDEEP:	384:F2G03d553fsWi8voZm59QGoF4M1FF9Uv0cN3s/7661z653ilAXpBs+6iT9ThdMVD:PEd5TqZOQdTBcNc/MZilAXDDD/dE
MD5:	20F7134FC5F34AAC822D8CA8A5F46127
SHA1:	EEDCD83C415666C1BF9924A6CE078A84A6BE0EEA
SHA-256:	E9A7963FF4692D146B13D90956F43070EC9288980A57F0FA68A05AFDBFA5D5C3
SHA-512:	2F2ED435D1CC874680F4E7ABC13D8A9999B7693D9DF8C05A62AB1FD93398A9BDB67C7764905E00652E6C61BFAD7A281B700D97731E7426266EB08528307988FC
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.............................................................................................................................................................................................................................................!.1.A.Qa"2......q.#34Tt.U..G..BR..5uV.br...CS.$...%cs.D....6.'......................!1..AQ.aq...2.....".R.Bbr..3..#.4............?.........'..xqa...h..8.Pc...[..c.7.......#.*.....5..2...w....{....l...2.J....[.-..F...o.X..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\is-OQ534.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.6897983724188628
Encrypted:	false
SSDEEP:	3:PFltl5Xj//:PftrjX
MD5:	6D6431F71FAAE765A3C35655A81FEFB7
SHA1:	85703A4247EA652D07CB490A67DA856BC185F3EF
SHA-256:	66FD0BF9F5DCF21983E9097F37DAFA108112F55593F98BF283B63A8FEB78C3CA
SHA-512:	5A88EEFFE85745155C39821754ACFD012E31E5566817B7A2B6EC9C79586AD7F3CF8013D7345D7FE38CBFDEC81817217E2818F70584F185EAB116ADB76C181288
Malicious:	false
Reputation:	low
Preview:	.................................&... GIFfMeSa........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\is-Q0O8V.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.6897983724188628
Encrypted:	false
SSDEEP:	3:PFltl51xX:Pft5x
MD5:	157E107640B55D60F7B0AE8B9854629C
SHA1:	87D20B20FBC46B571E154619C1D83582E7AAF62D
SHA-256:	BCAD9313E0D69DA085CD225D876C598B8FBEC7477E6280279971BE111B167AAA
SHA-512:	DB23CAAC9D28013C1EB4E673B8402F968A16F8474536B516885AC7C0B01895E6CECB5B9FF96E6171D9D73D1A21C7AC2A368D042BCD469E14EED070F59D5CCFAA
Malicious:	false
Reputation:	low
Preview:	.................................&... JPEG8BIM........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\is-RB5HO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	GIF image data, version 87a, 279 x 247
Category:	dropped
Size (bytes):	8132
Entropy (8bit):	7.852135436848708
Encrypted:	false
SSDEEP:	192:hdkw7q38j7G4j5JzSJ6lKGbnLhTSOowEeS1S:hDeOlcGnZSOowEG
MD5:	74E2973D1826EB678AC1033A552F3FE9
SHA1:	851728CC3945575B856637DD2822C392E1D87BF0
SHA-256:	66EADED01CF97BF91131AFD54FF7DA4B2578CAF0FC17FE55A8C47737F36C8C4F
SHA-512:	B238A364DEB991643126F7D98031D139E53A3BA728C51D3D5F2D5B305E19C8D3A0F85A40E15CF6B898283F4EC673D184722BD093D8CA93A126CA8A3A5B071A79
Malicious:	false
Reputation:	low
Preview:	GIF87a...............@........................................@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`................. ..@..`................@ .@@.@`.@..@..@..@..@. @ @@ @` @. @. @. @. @.@@ @@@@@`@@.@@.@@.@@.@@.`@ `@@`@``@.`@.`@.`@.`@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@.@..@ .@@.@`.@..@..@..@..@..@ .@@.@`.@..@..@..@..@... ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`............... ..@..`................. ..@..`................. ..@..`............... . .@ .` .. .. .. .. ..@. @.@@.`@..@..@..@..@..`. `.@`.``..`..`..`..`.... ..@..`................. ..@..`................ ..@..`....................................,...............H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.........@P.@.G.e..!...B.8...R.....(.R.&.+Pk.e.%.-.f.V.Z.jZ....]hw..k..Jxp.k.5.4,\....E[Po..-_Vj7h......\.oL.]..^]..]..~uKyl.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\is-SC1V7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	70
Entropy (8bit):	1.6897983724188628
Encrypted:	false
SSDEEP:	3:PFltl51xX:Pft5x
MD5:	157E107640B55D60F7B0AE8B9854629C
SHA1:	87D20B20FBC46B571E154619C1D83582E7AAF62D
SHA-256:	BCAD9313E0D69DA085CD225D876C598B8FBEC7477E6280279971BE111B167AAA
SHA-512:	DB23CAAC9D28013C1EB4E673B8402F968A16F8474536B516885AC7C0B01895E6CECB5B9FF96E6171D9D73D1A21C7AC2A368D042BCD469E14EED070F59D5CCFAA
Malicious:	false
Reputation:	low
Preview:	.................................&... JPEG8BIM........................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\is-SPQ98.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	53685
Entropy (8bit):	4.755130593031549
Encrypted:	false
SSDEEP:	1536:8gHHrF6yEpMnRPkLmEpMLRPkL3EpMoRPkL8EpMFRPkLVEpMGRPkLNPj9EX4imqMW:8gHH56yEpMnRPkLmEpMLRPkL3EpMoRP3
MD5:	D74C87A532632AD9F3869788BC64CD8A
SHA1:	B18B412468A9CA43CF0E35A79BA06DC3C91F69E0
SHA-256:	2CD1A4FF35CE4C6A10C8B547976291F95A47BFBEDFE628F1D91767F767833B7D
SHA-512:	3B2759BC0FB92CA75CBAAB1035E0C17370DB91C36C118184CEE75F35BFFB73DF788B2EC60BDF23901CF9C06F03A5C9D8DCC3249D38FF971E07C41B2465A58D29
Malicious:	false
Reputation:	low
Preview:	.................................2... .......R...cGIFf8BIM...........................................................................................................................................................................................................................................................................................Adobe Photoshop CS2...........).c...........H...H.......).c..........8BIM.......).cGr.ph.bj.....L.......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\protanCIE.jpg (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 446x449, components 3
Category:	dropped
Size (bytes):	30258
Entropy (8bit):	7.90755313396624
Encrypted:	false
SSDEEP:	384:F2G03d553fsWi8voZm59QGoF4M1FF9Uv0cN3s/7661z653ilAXpBs+6iT9ThdMVD:PEd5TqZOQdTBcNc/MZilAXDDD/dE
MD5:	20F7134FC5F34AAC822D8CA8A5F46127
SHA1:	EEDCD83C415666C1BF9924A6CE078A84A6BE0EEA
SHA-256:	E9A7963FF4692D146B13D90956F43070EC9288980A57F0FA68A05AFDBFA5D5C3
SHA-512:	2F2ED435D1CC874680F4E7ABC13D8A9999B7693D9DF8C05A62AB1FD93398A9BDB67C7764905E00652E6C61BFAD7A281B700D97731E7426266EB08528307988FC
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.............................................................................................................................................................................................................................................!.1.A.Qa"2......q.#34Tt.U..G..BR..5uV.br...CS.$...%cs.D....6.'......................!1..AQ.aq...2.....".R.Bbr..3..#.4............?.........'..xqa...h..8.Pc...[..c.7.......#.*.....5..2...w....{....l...2.J....[.-..F...o.X..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e...y...x..e

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\Japanese\images\tritanCIE.jpg (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 449x449, components 3
Category:	dropped
Size (bytes):	29069
Entropy (8bit):	7.8909654461222525
Encrypted:	false
SSDEEP:	384:O4zw/TjyqIa8xNUP/MlujbvUYneccc0WB9JSG/pn48HI63RKNmuGQsnr01Bv+J:OH/CM0UPvhneivBOyHn/LQQG+J
MD5:	503071DCBE6825F45EF4092F00AFF04F
SHA1:	088F6C89D992693D42679B45A325B2DE08251C87
SHA-256:	3A5E982AEF0CB895C027A596CD429DBE725A26987F6B96B9BA5D6AD1E12E507B
SHA-512:	C5C12BAF5D59BF4539178AD3171A4DD2278AD660C54665C56787961867513AB6FEDE1A57068C990F7DA0B14679DE88EB9AAAC07802DF74F301CD33B2022C8808
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d...............................................................................................................................................................................................................................................!1A"..Qa....q2R.3t.u.6V..Bbr.#..4.5U..$....c.%Cs.&.SDTd.........................!1..AQ"aq.......2r...#BR..b3....4............?..R.......T.j........................................................v..1.6....K.{.CZ..'..9..J......1....Z..7.\..gF...7Y...4.........e.......n.`..C.-25..h.x.q..y..`..m...).9..$...1ln.Y....Rc....G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w....V.B......o.Zy..G....Ei. }....k&......{w..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM0.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4821
Entropy (8bit):	7.644343129735288
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJapYZHoUHH580ZriyNsL39YtUASYSwWqzd0hJm2ZS7DWnRv2:TSu7Fhkn2+IUZiyQ39jVwWwd0hrZS+Re
MD5:	F7F3FA6D7658916D13AFA87C3CF723F7
SHA1:	9A539943A51D37DC519E1E0DD0D167EE02288EB6
SHA-256:	C9DDFE22A2525A3058B602EAF72614425BA5A09CDD5B3A9FCD1991C582EE506C
SHA-512:	AA37F6C73BAE9CFE90F402D76DF5CD5AC57C24899D594C40411AED6763721A67AB8777B9ECC8D5CBE8384448BD826A47870027C3D3BD6411C786902150C45776
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T11:56:01-04:00" xmp:MetadataDate="2018-06-25T11:56:01-04:00" xmp:ModifyDate="2018-06-25T11:56:01-04:00" xmpMM:InstanceID="xmp.iid:ac549438-f33b-d64b-96cd-47070429cdae" xmpMM:DocumentID="adobe:docid:photoshop:f355d692-c782-5743-8b15-497e50bc01a4" xmpMM:OriginalDocumentID="xmp.did:990c9565-be83-fa4c-bed8-e344ed9e5971" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM1.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4846
Entropy (8bit):	7.625627000336364
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJI3dHo6HH8p62jOuaIVDxSw6qIOSuyYzjfmbNwB+si708Dd:TSu7FhknoI68p62TX1b6DgyA4Wri7HDd
MD5:	EF919D789493623B9A3D9B04A74C140A
SHA1:	ED935877F1C80F49665A899C0192903968940B3A
SHA-256:	3F62F7AB06BDD593371114083F1CE6B18C8525DB47CB094A22AC3161EF72402C
SHA-512:	1B3C6F08424CA621681D382152F620215C85538BC5171B26DC2922AA3543748DEA173C613E90E69A1239D4101408550FBDC4314BFB4F297528D3A4EDCC2B2922
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:08:45-04:00" xmp:MetadataDate="2018-06-25T12:08:45-04:00" xmp:ModifyDate="2018-06-25T12:08:45-04:00" xmpMM:InstanceID="xmp.iid:2d34da73-a684-5049-8aab-38badd31f28f" xmpMM:DocumentID="adobe:docid:photoshop:19c17d43-d9ed-474d-8d30-43b2193dce58" xmpMM:OriginalDocumentID="xmp.did:a1de7917-ba62-ab4f-9e75-db80e1fc00c5" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM10.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4847
Entropy (8bit):	7.646721477849876
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJCmQHoAHHVmeAUio6Z4RdWnTE8IzWah549paNDpSGf:TSu7FhknuIAVmeD6Z4Rg/Inh54naND0q
MD5:	E6FBBCCEEB6BFF82D3FB6AB21B0DC4C0
SHA1:	B2FF7E8822BF69F9DE19E76968B19B9FAFBE4F34
SHA-256:	82A633467308B5BFEEC707279C9BD041C96F4CDB905FE8ACB85F770884F2BBD6
SHA-512:	8F1483628CCCF4F882E9183782154849E2D8955267DE1FADB86ADCDB6475104CD05E0BB1A0DE3A02ED0C8CC297AE9696F9DD306F7A7F2786BE803DA3874EA290
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:22:38-04:00" xmp:MetadataDate="2018-06-25T12:22:38-04:00" xmp:ModifyDate="2018-06-25T12:22:38-04:00" xmpMM:InstanceID="xmp.iid:bb3b3238-6daa-b449-8243-70acc8915753" xmpMM:DocumentID="adobe:docid:photoshop:ced2b884-2ed6-d640-adbf-950f69d34953" xmpMM:OriginalDocumentID="xmp.did:01a21cd1-f510-8245-935a-536b1e6efa5d" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM11.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4842
Entropy (8bit):	7.636316565757533
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJmXuHosHHxOv+iD9txZhh699M/zasx+FLiU6J/AEnt3V4seN:TSu7FhknVIsRktThw9WnxiiU6J/3t3Va
MD5:	4D464AB7A7DDF0AA80C3ABC4B9110610
SHA1:	A331F6582E527089598AFBBAD4EA78DE14D10A6F
SHA-256:	3D212FEA97604FADBE266890A332BE1CA08EFE04C61E6F9B7AD65BA57FCECA75
SHA-512:	6EE489D8BD8ACC1D1D9FF4862EF09C1F2AE48185C474495EAB3FB0296134B2B491124041E1231CBFDFE1619AA2E0B5E47ACCB97DD86EF5BA25CFBED6EA631423
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:23:13-04:00" xmp:MetadataDate="2018-06-25T12:23:13-04:00" xmp:ModifyDate="2018-06-25T12:23:13-04:00" xmpMM:InstanceID="xmp.iid:1270f9bb-1520-6047-9918-6b2d2b758e1d" xmpMM:DocumentID="adobe:docid:photoshop:bba085cf-ff86-ae43-b12b-8d6e2b68bbbf" xmpMM:OriginalDocumentID="xmp.did:3ec845c1-828d-7440-82dd-117fee962cbe" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM12.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4854
Entropy (8bit):	7.628479190392961
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ5t3sk3JHoZJHHP+vXnTjUxQilBGoAtpdAn7Na3LG5owhteLWdot:TSu7FhknDIZJc3fUxjDGoAtpiQbG5vdq
MD5:	B165E419015AF98DF87CBC38F809583F
SHA1:	177DAD0192A39A61278642978D9352C1887C217A
SHA-256:	9CBDDF09E16125BEAA609C3F6545A0A4A25DDEF6600570D19FCB66CE76EEC605
SHA-512:	FDEF933FAE3AB7E713936C4D0373203E2FD2B5525D3B74820EFC05D33007C2B45D948308C2EE202432FD3C4B240FAEE6069CBB7A0C1152E9579B812039BA5F24
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:24:02-04:00" xmp:MetadataDate="2018-06-25T12:24:02-04:00" xmp:ModifyDate="2018-06-25T12:24:02-04:00" xmpMM:InstanceID="xmp.iid:eec43ad6-44a9-974e-8db7-ee87472cbe84" xmpMM:DocumentID="adobe:docid:photoshop:f8c6d620-3476-9c47-b0f8-f2a76e7d4334" xmpMM:OriginalDocumentID="xmp.did:461d1a5c-5f1a-0949-bb22-2f604c574753" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM13.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4881
Entropy (8bit):	7.650610258448604
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJLOxyHo5HHnw8RkM8oMVi0b4z9zQXndvJt80nf/9:TSu7FhknvI5BkM8oamzQXlfnn9
MD5:	F75F6EF3F73D4CDEB6FA6021AE8D6077
SHA1:	BD7A0EB60BD1773796EE10F778F88497AD1A9BA1
SHA-256:	AB56FE24C736780CF141B02A6B8F2C764CE8AD4DABD309615C0E8EFF3ED571AB
SHA-512:	B8236F879F990031AFF1C3478293F8DAA144F228246A3FBCD9CF7B364A866470D0AC9C6D9FC3001643A6527C2E8E8F9AAA913F4E624284954954719F5F6EB2D3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:25:02-04:00" xmp:MetadataDate="2018-06-25T12:25:02-04:00" xmp:ModifyDate="2018-06-25T12:25:02-04:00" xmpMM:InstanceID="xmp.iid:c473bb24-cfd6-af4a-89c9-b69c58024521" xmpMM:DocumentID="adobe:docid:photoshop:765d9e3f-3dea-2a45-a1d5-793ce38cc44d" xmpMM:OriginalDocumentID="xmp.did:ceca68c5-6403-cd45-b044-a2906aad1713" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM14.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4870
Entropy (8bit):	7.650089163570851
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJlNOMkOATVHomVHHnfu+e1drmxKVzhhqt6x90TjZlZ:TSu7FhknvNOMUVImVnG+e19VlBXOZlZ
MD5:	499E61B5C7D5B67A6435D29834690E76
SHA1:	4D05275FE94B19FC1C03757E9ACC1FD918BDDC03
SHA-256:	85EAE62F4717AD0F14DC7D86436E0DBDCC6561C0D92BE3C02CC2DB44ED75CA8E
SHA-512:	D3D82CDD0D6C2E16913390289596952546F9864B73B50303779ED0D8BC75E901BF2A2D960CC57F1506DF3A5E89207C400E34CE372AD81795640EEC391C43D087
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:25:44-04:00" xmp:MetadataDate="2018-06-25T12:25:44-04:00" xmp:ModifyDate="2018-06-25T12:25:44-04:00" xmpMM:InstanceID="xmp.iid:9cff0692-8a24-3945-9517-5194921012e7" xmpMM:DocumentID="adobe:docid:photoshop:a94f18d1-1077-2d4b-bb25-a338ca370a6e" xmpMM:OriginalDocumentID="xmp.did:af49a8be-9990-ee41-bc92-0e8f6afe10a5" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM15.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4832
Entropy (8bit):	7.627274176647489
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJGLGsTHoDAHHm99puFCXjKaZ/ON6ygX7WW+XsSS:TSu7FhknYJIDAbBdN6ygSWbl
MD5:	C018D77A720C548B16E7332F390A2FCD
SHA1:	AA7FC5768EA9A97F54BDCF682E735984FD2F0048
SHA-256:	878B8A95E331A8C69D2919A82296F7E0220CE88A9186EFC64A2469381CDA9D2C
SHA-512:	43DB71035FF6C885B68A063D3260BBB4BBBA41D9BC4E8DA751A72E29BED0A20C22E4CBE89D9CC00EEED73B8E6E95F14E580171B2F693D1BBAB663035E599917C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:26:15-04:00" xmp:MetadataDate="2018-06-25T12:26:15-04:00" xmp:ModifyDate="2018-06-25T12:26:15-04:00" xmpMM:InstanceID="xmp.iid:ea409d9f-9590-0c44-a855-7ec4a95782d4" xmpMM:DocumentID="adobe:docid:photoshop:68fdb8ea-1eb2-6b40-9de6-7a4dd0f08639" xmpMM:OriginalDocumentID="xmp.did:ea06607d-c14c-3c41-bf31-fde886be7ec9" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM16.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4816
Entropy (8bit):	7.645907366394036
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJdAqHo/HHx5xnTGMtBTaNWH9pMsFP/hPDy37v19AfIQ:TSu7FhknxI/x24BOIdqmPZPDg719Ab
MD5:	A8A10C9A05FD5275ECC2BB5F7ED18239
SHA1:	ED8B51F95EEBC4E7D78F97ECEC9BD4037A17D79B
SHA-256:	D14115330238653EC73B4710AC5880CB427AA971D86B64E97EF1CA33DC34522A
SHA-512:	AD5337A0769985C54C59440357BEE8C06E600D3729AC9E91D3FA384A07E4D3B74235EB252BA9D6CFDA71ADBB487693BEA278EA20951D0E4F6322AD6D7F8AA76C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:27:43-04:00" xmp:MetadataDate="2018-06-25T12:27:43-04:00" xmp:ModifyDate="2018-06-25T12:27:43-04:00" xmpMM:InstanceID="xmp.iid:e0e98479-3dd1-504d-8471-36bd116ec92a" xmpMM:DocumentID="adobe:docid:photoshop:298c5563-eaba-2d44-b71a-26921d2c5dda" xmpMM:OriginalDocumentID="xmp.did:b3d9f7e3-96ee-9143-894d-424f578b7ab6" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM17.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4853
Entropy (8bit):	7.64791494088118
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJkJl5sj5hHo2HH3HLvOtniq9QCXvq6vg5JUOz:TSu7FhknTI23rvkic9XikdOz
MD5:	28F54BC7A54CAF0DDB1842D318145E9E
SHA1:	537634B8479658E2E52B25A39D4C61C690E02EEF
SHA-256:	D8327F3EB3876F131DACFE7248588CA3A4054C1DDFFC08618A83945D35B3B4A0
SHA-512:	B4338ADAE5987046CC0D27AAE82F6059E4314C40A3D517013C5156038A193B711D3F5FC34C615D01BE4389C0D92B4EAA56DC2669C6F04586A2547AF4B441E756
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:28:24-04:00" xmp:MetadataDate="2018-06-25T12:28:24-04:00" xmp:ModifyDate="2018-06-25T12:28:24-04:00" xmpMM:InstanceID="xmp.iid:d74d2516-e634-8f48-91de-fa3985c50c05" xmpMM:DocumentID="adobe:docid:photoshop:4e87fb77-b293-ca48-aa07-b3ca173ad9bb" xmpMM:OriginalDocumentID="xmp.did:9cefbd5a-393d-1143-bbb9-546d3c7453d7" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM18.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4855
Entropy (8bit):	7.655691970435625
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJJtkepcJHolJHHoffPA3o+oyx5TVG7nfhi9cgrBI1k:TSu7FhknWIDCYYy3V+nEcuv
MD5:	F16102A7C40E19AB0A58BA1E6EA9225B
SHA1:	4FA7F876760D9C81C8E93244AA67DCDCB8241C29
SHA-256:	8D774B66D11D4764089E02503303EBCEAAD22402FE8E0482DD8333E30A941566
SHA-512:	3FD8F21154139D5B55EF7526682A7359AF7702749A0DCAD196D280708C0416347DEC43DB71A884474760325B664B098C2A81486788CF67C78DB824CEF780B0AB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:29:53-04:00" xmp:MetadataDate="2018-06-25T12:29:53-04:00" xmp:ModifyDate="2018-06-25T12:29:53-04:00" xmpMM:InstanceID="xmp.iid:a31e0038-a116-944c-9a1e-539691d2cbe5" xmpMM:DocumentID="adobe:docid:photoshop:129d0333-61c5-0b47-bccc-0da45607e251" xmpMM:OriginalDocumentID="xmp.did:12f87403-9ad8-a645-8fa5-2128a43aef9b" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM19.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4862
Entropy (8bit):	7.636594017537974
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJJMwJBwW4HoDHH1gWRsXHqBxOabbImTuDpFK1luG/c8BfIoVqbGU:TSu7Fhkn4ywIDSXKBxOabFTg/olugc+g
MD5:	A45935E38F8E0B7277B998EC8BD43A78
SHA1:	F2282F204129821484790883781F40BDED22CAB0
SHA-256:	717144C1283C03B174B0773B6A0EE9B38989F2890E51B9D5DFA38E4748417A2F
SHA-512:	3A23C5790E635D38E1E8A6B5AD828645C935CB4B89BEE9B99F784446997B6DD48197A5A667035B467AD0F4422431C513CBF86C326B0E5B8BAC9E0B658F95BF35
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:33:51-04:00" xmp:MetadataDate="2018-06-25T13:33:51-04:00" xmp:ModifyDate="2018-06-25T13:33:51-04:00" xmpMM:InstanceID="xmp.iid:69f72936-a44e-774d-8300-e8d8267c27d1" xmpMM:DocumentID="adobe:docid:photoshop:39399dde-9d33-fa40-a81b-7a3b46dfe509" xmpMM:OriginalDocumentID="xmp.did:79db3235-d8df-634b-a42f-e3091073d3e6" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM2.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4854
Entropy (8bit):	7.629916495079643
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJiIQHo0HHt3oqkiEIDofuqQszlTyS9k/zE+ZmkUoA:TSu7FhknEI0doqO5I81xKzE+ZBA
MD5:	6C0046C73BA4BF75DF7AB4EFC43DD433
SHA1:	70736F8AE0AE97C526C2B4BD6FCA5A7736ACB5E2
SHA-256:	C8FC6ABE8BC980F8637E24556BF2548D3627D9B6C89E84FAD3CBA8ADB6D4D8B0
SHA-512:	8BC4873046AB7FD6BA8C2E6927DC399F06B13A68FB93A65869FA49A58596150FDCCF313D564E7307A506C723D8A2A4C75EC4BD5B31FA79D5451BEC333AC73050
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:09:36-04:00" xmp:MetadataDate="2018-06-25T12:09:36-04:00" xmp:ModifyDate="2018-06-25T12:09:36-04:00" xmpMM:InstanceID="xmp.iid:bb259f01-655c-e24a-8fb6-56aab636e3b6" xmpMM:DocumentID="adobe:docid:photoshop:682209dd-dfa9-f149-ba63-71955efe23c4" xmpMM:OriginalDocumentID="xmp.did:a945f070-e412-484a-a0af-c0e862327baf" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM20.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4835
Entropy (8bit):	7.640836566272277
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJj1EiuHoBtHHsAS1rytpzMZklQGPLp/fDXs8DF9cp:TSu7Fhkn5qHIBtsAS1rytqylQ8Lp/bsX
MD5:	7C746C83BFD12A6A9B3153E594E69AA9
SHA1:	EB9B13C93BEAF733B16A8A072E26F4FC2F13BF70
SHA-256:	FA3ED7472FC471B9B260D8F3589DDAA744EB0102C3E1DBA42E2CC85A1B311E55
SHA-512:	A05EEB5337D22731B11897A9931AB9730DA98F880E9B6092153584264E93B2D118882201FA7644C97049843A5161F28202317BBD8A8E17A9B2BD48C8702DF087
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:35:39-04:00" xmp:MetadataDate="2018-06-25T13:35:39-04:00" xmp:ModifyDate="2018-06-25T13:35:39-04:00" xmpMM:InstanceID="xmp.iid:a80b1376-7dc3-704d-87f3-9001a6eada82" xmpMM:DocumentID="adobe:docid:photoshop:18ffd3da-f9f8-0143-9925-4fb76ad0a523" xmpMM:OriginalDocumentID="xmp.did:24ab3ae7-4c8e-e84d-bef5-bc445f1c89b2" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM21.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4832
Entropy (8bit):	7.656479771677384
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJFGQd1HoGzHHe4HPDyk/N9lDJcq0Rbas2PE3MO04WFW:TSu7FhknrIa1HryS9lDJcqFBSMO04WI
MD5:	75C75CBDC3606425FE62C5C40E6B953C
SHA1:	957D624294035D76F394096CDDBCA403D9B5D889
SHA-256:	2834404390C51EDCAE01405355C864B16D562620866321B229FB2AB7DE3FC96E
SHA-512:	8A6040D9D99598AF250C76891D2B76C2689E7C3699A8B8830375E0D5436C4C963BC97BA3F49804D41590D62D03DEEA45157AEFF2C55A8B3704925D90E1F9A976
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:37:18-04:00" xmp:MetadataDate="2018-06-25T13:37:18-04:00" xmp:ModifyDate="2018-06-25T13:37:18-04:00" xmpMM:InstanceID="xmp.iid:ed268c0c-5dba-9e4b-a9a4-a1dfa0416ef5" xmpMM:DocumentID="adobe:docid:photoshop:a29bf0b8-62d7-3c49-a171-6603da8715f2" xmpMM:OriginalDocumentID="xmp.did:48e578e9-d77e-6848-89ce-25951bff9560" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM22.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4800
Entropy (8bit):	7.619912195291947
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ0FkHsHoJVHHyaTuK8Gzxpzqoy4ml47ad/1yce2UVBVeZkR6:TSu7Fhkn+bITygu7G1pzbm676CVBEZj
MD5:	DDB043D3B47D8B3ECCB3BD3B35EC56CE
SHA1:	A6A629DBEE9DCDABF4F2BAC788DFD6DA34C5A764
SHA-256:	9F7D6CA128AD6EF2F5B0A72FEBA9FCBE3E5931131615B26994EBCB4B8AC4BF74
SHA-512:	69E85E389AB764A1F958A3631142323939E802B0898746223A71C2254CFE01538C9A175B0E9AE0F1E093BD6DFDD53469C17E6595A2092E403378ADEAB653F58C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:37:56-04:00" xmp:MetadataDate="2018-06-25T13:37:56-04:00" xmp:ModifyDate="2018-06-25T13:37:56-04:00" xmpMM:InstanceID="xmp.iid:c0c8df0c-598c-2245-a3cc-73485b720c67" xmpMM:DocumentID="adobe:docid:photoshop:60a8312b-4b8d-d14f-98bb-d1691ca66199" xmpMM:OriginalDocumentID="xmp.did:5f86c47f-7dd2-3647-b557-0bb4f4a76d30" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM23.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4759
Entropy (8bit):	7.632883610849948
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ1uxWQoXO+QgHoQGgHH/Aby4ABqxCufBbrmE6RCPhD+3jVq5GV8v:TSu7FhknPDXhDIQN/1YCCdrmEqCt+TVU
MD5:	8380762C88EBECE181DCC0021D1B3B72
SHA1:	E41F268F8E842FA5C657B871A2429B7C2FC9DE3E
SHA-256:	7B2FB81E8C03ECA0D4690B52664F605C06BAD935A52ACF7E56F865478AFBDF20
SHA-512:	B862612ABDE5E525CB4033F25A876A22B8249C8BDEEF6B33D305798FF3BC95BBB69C7A4CB7CEA10B60EE5F145875446597427D35F8EAFAFC502069D96A9AEC81
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:38:46-04:00" xmp:MetadataDate="2018-06-25T13:38:46-04:00" xmp:ModifyDate="2018-06-25T13:38:46-04:00" xmpMM:InstanceID="xmp.iid:085836ce-5e5f-a041-8b89-97a1eddf4afb" xmpMM:DocumentID="adobe:docid:photoshop:9c5c71a8-81f5-d44e-8295-81a15d3a9404" xmpMM:OriginalDocumentID="xmp.did:99263e13-23de-ff42-bdd0-d34c49151efc" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM24.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4778
Entropy (8bit):	7.641133993162191
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJzCXEHohGHHEyR00KSxu7MsAuu0zPGgNkOB5XdnYlDbh+Bk9NA:TSu7Fhknl1IhGtR00KSxNsNu65kiFcbQ
MD5:	76F745800F9954A6917479794742BC99
SHA1:	2434AF44B65A247A664639C95996CFAF9A5C5E4C
SHA-256:	43895BC638E531C30D7E1CB49AB8F63EA66BD385DCEEBED27B0787928956D75F
SHA-512:	6F7FA3CEEB6E94DCB643BE297AA631D4AEEFC93BEAA33D5D59E1AD6A59FC24F078FDA68AB2959055D877F0D1C80FDE787CB439992F1EE0F361FBA1E3639946E6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:39:22-04:00" xmp:MetadataDate="2018-06-25T13:39:22-04:00" xmp:ModifyDate="2018-06-25T13:39:22-04:00" xmpMM:InstanceID="xmp.iid:59cedea8-f508-414c-acb2-81997e158690" xmpMM:DocumentID="adobe:docid:photoshop:f9480610-8c87-a143-9d92-582c9047471e" xmpMM:OriginalDocumentID="xmp.did:65fc5407-23d8-f843-b689-07d31bd582f2" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM25.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4787
Entropy (8bit):	7.631595033854049
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJfOeHoRHHtogt+2b7hctgbdMnqxZKADrD53c03j:TSu7Fhkn5IRgWNJMIDGej
MD5:	82FE0CC6E8BC0EA4D3BFCFD5A334415A
SHA1:	ED0C01F83B6AED392FC3A402BF4CA99B17A4921A
SHA-256:	019FA585B1FBABE523072DA94F6015CFA46D10E5C6F728221E55AE8E2E1F415F
SHA-512:	A454E2B99A8F4AF36863B8841ECF2D6E9865CC5AE10B95C272EA211BB593736C5912AFC4016514780AED021BD6631D90867147EE6D06FCCD40D943CB06CFBE1B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:40:13-04:00" xmp:MetadataDate="2018-06-25T13:40:13-04:00" xmp:ModifyDate="2018-06-25T13:40:13-04:00" xmpMM:InstanceID="xmp.iid:93ef5170-07d0-4944-9477-4bbd04d7cd94" xmpMM:DocumentID="adobe:docid:photoshop:caa71a1c-bb86-494e-97fe-2ba7e51dbbe0" xmpMM:OriginalDocumentID="xmp.did:df71acca-45a2-254c-a0c7-048a69dbe9d0" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM26.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4794
Entropy (8bit):	7.641107648826741
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJnPW7j3HoZfHHjWEw65N9w+yJdgSqzDEG0rV830r1ZR4S:TSu7FhknlCIZfjjrZKJdg9cZlF
MD5:	E536F9D3864556F9FF53A75F48ECBB20
SHA1:	313E1DDB42F125589E67B93649FFAEBB9807BA58
SHA-256:	2573F70A591965B9309C8F0210A8F075DAC9B68D3DBA54C3A298E599A650A127
SHA-512:	D3718A74D81DC233107D55E9E3C8D23EED1E65A1620F1DADA59E44A4D3EBAEF385CDA6BBF55C8CF99F0BB37A4B5036AF40FB27625C11B8AC369E9118B6B54A7D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:40:53-04:00" xmp:MetadataDate="2018-06-25T13:40:53-04:00" xmp:ModifyDate="2018-06-25T13:40:53-04:00" xmpMM:InstanceID="xmp.iid:10259643-6c2f-9445-8cba-87b6d390d488" xmpMM:DocumentID="adobe:docid:photoshop:7f13e81c-e475-114e-b92f-25ef1b7ac8eb" xmpMM:OriginalDocumentID="xmp.did:9d925e69-cfb8-334f-8376-d78f2d1b955c" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM27.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4817
Entropy (8bit):	7.6446193439146555
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJAm4hBvjHoKHHbu+p7RvXYfM6LbcWefUZz1xn6bmzsHls7Z:TSu7FhknAXIK7PfaDH5efoz1x6btS7Z
MD5:	AA4CB7E15853EE1E1C0312B307A27D5E
SHA1:	AAE27517BF2B9C2CAA3B39CC94118302F32F02DF
SHA-256:	AB65704603C5AE9A4A773877AEA9B42D75D6CDDA4220FCF3A824917914CF04B8
SHA-512:	652889E52B63D77EC01EB651C319E454EE66C01D738681FA72F688153930483DF904C6C59DA85404B0DB4E968AACEBA997AF3C244C016EFBED5D90E8C2525993
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:41:41-04:00" xmp:MetadataDate="2018-06-25T13:41:41-04:00" xmp:ModifyDate="2018-06-25T13:41:41-04:00" xmpMM:InstanceID="xmp.iid:76e01235-193e-1846-8b93-2ad76feffca0" xmpMM:DocumentID="adobe:docid:photoshop:f71c883f-52b9-8447-8933-de0742b2cf97" xmpMM:OriginalDocumentID="xmp.did:42c58824-3fc5-7545-a6d9-93dde249cf70" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM28.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4798
Entropy (8bit):	7.635352497501231
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJR1k8+4HoeHHWtmawdFGhFSBf8VEJCqRgNgy7DX1Vqbpi6+HdAU:TSu7Fhknd5NIeHa0s8Bf8eJCqR0gy7Dj
MD5:	F24697E92FB1CFF96209E6C62FF15665
SHA1:	A4CB88BA390EB8766B28F4FD042110CE86B2B245
SHA-256:	C448B5750AC4DE0074A67319192C63C1B3E211BBA68A1807E09744D9C03303B2
SHA-512:	4509B6A8455FF1B822BC30911CA90F5DDFC58F89D695A23138D24DE0F289AD2375693FF4052DA7A96069F155D36008562AE31DE582DB62758EEE0C99C26A656A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:43:01-04:00" xmp:MetadataDate="2018-06-25T13:43:01-04:00" xmp:ModifyDate="2018-06-25T13:43:01-04:00" xmpMM:InstanceID="xmp.iid:02977e7f-bc8b-9340-9f09-497fc3fcd417" xmpMM:DocumentID="adobe:docid:photoshop:fe5245ba-3fb2-4b46-a6c3-6ffaabce6a47" xmpMM:OriginalDocumentID="xmp.did:4939fed1-00a7-6d48-82d2-ca0b13cd2d9f" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM29.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4818
Entropy (8bit):	7.623606303288809
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJH6b3KHoJSHHPoNLe2fD7Iunw8/xM65bb3Z4PFMjBj0beY+9:TSu7FhknRIk4Le2Xc0xMsfGPFKd0RK
MD5:	780077CBAED431FB07CB2DF78D3749FD
SHA1:	985DD0B5063DD50E2E7F47FB057926D596F3DFA9
SHA-256:	298ED18A2EBE84D2AB7942FA12258B5F26B61CB58E62890373B3426C0CD0FBF1
SHA-512:	A51096A2AEE4B2249B6767B9BEBBA462E1172750A0BB4C1850B5C905DDE4F1E7043A8410568A2CB9B2108487005946C33E0C359C95BF6B06C7645876D325566A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:43:34-04:00" xmp:MetadataDate="2018-06-25T13:43:34-04:00" xmp:ModifyDate="2018-06-25T13:43:34-04:00" xmpMM:InstanceID="xmp.iid:51df9bd7-29e0-384f-82bc-3fbd656ffded" xmpMM:DocumentID="adobe:docid:photoshop:8b95f7b4-6ca0-0844-93b1-37a205e9de2c" xmpMM:OriginalDocumentID="xmp.did:4cdd3a3e-b09b-384b-bfb7-ae60ea752cc3" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM3.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4858
Entropy (8bit):	7.656848771970889
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJansHHocHHNSTfBXWkpjwgyDWlu9XnyAqmB+3:TSu7FhknQUIcNSTJvWggbq3
MD5:	314D92A5C36A6BE4EB4A8A279709CCFB
SHA1:	34FFD9DCAA34218C8087A62A5D2415816E26DEE2
SHA-256:	1D6C8A957A29931B143FF7F3E8484C47EDC70750CABFB1235F17EF86FF5AC559
SHA-512:	EE9979CF9906A639E41C34A119C96B057C3ABAB7F3B45A51FCCA07094B02552A0B24845BBBF0EC0ED9FF34FB5170376C090881095AF0A34A2C4F4F481BB60935
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:10:21-04:00" xmp:MetadataDate="2018-06-25T12:10:21-04:00" xmp:ModifyDate="2018-06-25T12:10:21-04:00" xmpMM:InstanceID="xmp.iid:996d68f8-83eb-d54b-96e9-9d43d480273b" xmpMM:DocumentID="adobe:docid:photoshop:60d71927-ae64-964e-a17b-d023a21debdd" xmpMM:OriginalDocumentID="xmp.did:654cf1d3-d8a0-4948-9e3f-c576fe5138ab" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM30.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4782
Entropy (8bit):	7.620178373676546
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJOG9MKHoQHH+jjmrsp5X+W83qtj1fo4xZVB0QflPPSvqbq3A0vHH:TSu7FhknlKKIQ+yspu6XVmQflXSvVtH
MD5:	8F42C5D7AFBD07A8F1F790FB5ED64125
SHA1:	4FC0D35D58153188C44401C7BFA79043D7E2D2B0
SHA-256:	F7021B68742BBC57337A792839EF41F2CEFB893D006EC05D4BFA5AE975940801
SHA-512:	4440389A37DC7AD04B15F625776C771F9B314FC0017DF6D8DD90181031D70C456D3094FC526B4F2004764D7A7445155A1C31AD4CE7F72A4ECA217AC57885CF7B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:44:10-04:00" xmp:MetadataDate="2018-06-25T13:44:10-04:00" xmp:ModifyDate="2018-06-25T13:44:10-04:00" xmpMM:InstanceID="xmp.iid:1b94d567-f8a4-e549-9d24-cfeadfc50b0b" xmpMM:DocumentID="adobe:docid:photoshop:96ca52c6-7797-0c43-882e-fd22a447a6ae" xmpMM:OriginalDocumentID="xmp.did:6b4bc716-9c84-7344-975e-803e2485ab6f" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM31.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4787
Entropy (8bit):	7.6228460052747575
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJkB/oS3oFHoWHHCdfzf1C632BDDEN4XXVBR8FISo:TSu7FhknnIW0zteo4XTRp
MD5:	BB49426E18B14AE196702B9A319AFFB4
SHA1:	A0411F6513F774F42F2E3C54445F8D286B8EE36A
SHA-256:	25CC1E59ECB2E0B75C7C0CD3E85609DB47F426A2F4166E6B91B47FADE407C226
SHA-512:	04773C38C6F767D84316BDEFD2729C92CED75ED44B896B7330E3D391679E7089A0C61F17A93A9775E399C541B0A4365BEA13FB315DF5431652D2B6B2F62F7036
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:45:08-04:00" xmp:MetadataDate="2018-06-25T13:45:08-04:00" xmp:ModifyDate="2018-06-25T13:45:08-04:00" xmpMM:InstanceID="xmp.iid:efee2110-c68d-cd4c-8e6f-602bf4463703" xmpMM:DocumentID="adobe:docid:photoshop:d036b816-ec63-7145-b8d7-bc0de808e4d5" xmpMM:OriginalDocumentID="xmp.did:7744eea3-0cff-9c44-9a0e-c366642d9a3c" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM32.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4808
Entropy (8bit):	7.631270223986086
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJbiAGHotHHbFM4mMFhCu3LiT07fxil5:TSu7FhknEJItayH2TSf0
MD5:	4A1B1696CBA712D05596FCF66E2A7C11
SHA1:	34E4639B243A421B590E137FB2057B86BC993D1F
SHA-256:	2ABCF114989DD800BA959FDEFA7CAB4A726DD1352BB23C4FC216C87EB4965DEE
SHA-512:	F8F9F58FB7A7D293DDD984563EEE05415228C362C3E223680038A1E37E7178A4B09B0FD2234D3D7148DBBBB46561C2521C8FB0765DF1E59EF18B36C4DB85DFB5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:45:40-04:00" xmp:MetadataDate="2018-06-25T13:45:40-04:00" xmp:ModifyDate="2018-06-25T13:45:40-04:00" xmpMM:InstanceID="xmp.iid:13671671-f6cd-ba48-9e13-53519ac5a350" xmpMM:DocumentID="adobe:docid:photoshop:c56cf858-afcd-2742-bf45-63d95c89a7f6" xmpMM:OriginalDocumentID="xmp.did:a40b64e7-c16d-2d47-9e09-58ced94e6fd4" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM33.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4812
Entropy (8bit):	7.637233490715253
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJX1VVmHoNHHJyVecoBpOWBwCh3ghBlZVMXC1iZ4XJsGmO:TSu7FhknryINcvobxSBTVaCMKXKG3
MD5:	4EEF4F56C63F20576130F338D65A3213
SHA1:	6D28A095C737D7CC8318AE61D464A3E9C7F12BFF
SHA-256:	6E1CCE0E37FF1B051E65A28CA8F808CEFD4809A0078BE4C0B7CC1C5B0CC6BEDD
SHA-512:	6B0631012ED4A75533FA63A83DD8732BB3AFE853F30420DB19371E3B672725498ECEF9CADA2E1A25D27BEC32A6B1D8F2349C5AECA4067DA0460590F8C95CD0B6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:46:25-04:00" xmp:MetadataDate="2018-06-25T13:46:25-04:00" xmp:ModifyDate="2018-06-25T13:46:25-04:00" xmpMM:InstanceID="xmp.iid:0944ba39-35ab-a140-bc8f-1ac8c07b9623" xmpMM:DocumentID="adobe:docid:photoshop:227ea5f0-5ef0-df4e-bc07-aabd243c4228" xmpMM:OriginalDocumentID="xmp.did:5e69a27d-0d39-0549-b839-ff65f39b9e46" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM34.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4827
Entropy (8bit):	7.642252989307748
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJYtvjHomHHDknNSWk/uc28Q/eSKAhP28dGc1yDK6m7:TSu7FhknMImQnsOc2868u28dGcEGT7
MD5:	E5620CE9B694ECBD565EEA65FD809360
SHA1:	8690E8CFE29C0558E90941049CE0D9B8FD2CEE71
SHA-256:	610B93CA51DD45FDF88425D18E5A664D49F35636FADA57F1CEA855780E3A2140
SHA-512:	D19FA33F094A3CB21F23ABEB7FD344F327B4C5C2660E24BF183E073204378E1AC53E098787C3438F1C4B9EF716E40235DCF4416BABF8A28D4813481E6CFE0466
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:47:12-04:00" xmp:MetadataDate="2018-06-25T13:47:12-04:00" xmp:ModifyDate="2018-06-25T13:47:12-04:00" xmpMM:InstanceID="xmp.iid:82ca1e63-1a95-a04a-bba5-af1dfd05d4a6" xmpMM:DocumentID="adobe:docid:photoshop:4f828590-f89a-ca4b-96a9-dd14549031b1" xmpMM:OriginalDocumentID="xmp.did:8fcd0ba6-eccd-054c-8859-abb986ccb609" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM35.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4823
Entropy (8bit):	7.649185810961717
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJPor03sugHougHHe0y4PBgAJJrmdxmwjT7hdjQI8EJsG+b5v/NNv:TSu7Fhkn5KIFeEgGyXT9djL8Eyb5j
MD5:	811006474A5D57486FF60CC6AAC1200E
SHA1:	905FDBF75F3EF8389C877CB390F071EDDFD65247
SHA-256:	1608CF9037DF2053061FB9B159A834DDD1B0A526E5339198E1CD320568A717B5
SHA-512:	48F0C4FFBD858E6BA213BC526152E20762F25F1B17D7A73304E8A88C487889BA0FD18FDD1B57BF171B4F939CC774365A9643414F45B945BFA4687061F4705F80
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:47:46-04:00" xmp:MetadataDate="2018-06-25T13:47:46-04:00" xmp:ModifyDate="2018-06-25T13:47:46-04:00" xmpMM:InstanceID="xmp.iid:b53a5f9d-4643-e74f-b2c7-62529e0ec3b5" xmpMM:DocumentID="adobe:docid:photoshop:a59f9696-9547-b44b-891a-afa474d1a7cc" xmpMM:OriginalDocumentID="xmp.did:9e210c03-9d58-384e-9513-2d50a565818e" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM36.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4820
Entropy (8bit):	7.639043881636328
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJSMdM8eHoaWHHj0Ix2Vo66ThgxF3Gbz4o654I8KL3qLou7TaJB:TSu7Fhkn09IaWj2W6whgD3GbzJBI8S6U
MD5:	6CDF7267FD133E17374A87133F0FC247
SHA1:	52B208D2564C7F3986FC10931E90BD771625674C
SHA-256:	FFF4EA5C54CDF85CB66A49BE89EFB9FA9143E536A6045283213856F9928926C7
SHA-512:	301536EDCEE8052124C01B5C7187E8623A9AC969098A633BC838B0229B2E6F241AFEDC4B62AAB288D19F2C96331AF73C6A11CD55260B6257634A176FEE6E6906
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:48:28-04:00" xmp:MetadataDate="2018-06-25T13:48:28-04:00" xmp:ModifyDate="2018-06-25T13:48:28-04:00" xmpMM:InstanceID="xmp.iid:d1ee3274-b3ff-7f48-a2af-864b8b58c8dc" xmpMM:DocumentID="adobe:docid:photoshop:bee3c556-1f7e-9147-b3a2-404a1e71db3f" xmpMM:OriginalDocumentID="xmp.did:f45d4f16-ba6d-d04f-aee4-08de34706caa" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM37.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4829
Entropy (8bit):	7.634371390227389
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJY59HoaHH1TXNGA+2M4jlGYDNLhhQ2LUHaBRX6rMF1++9:TSu7FhknSIaZXP+2McNbmaB3FB
MD5:	87936B4AFBA987A08D1DD3669AB7032E
SHA1:	6179D1C5DC825B4EBD87A3D665491507314F3C05
SHA-256:	DFD6C4EBC93E3FC0BBE1A4E535A18077D981CDABA4DDAFEAE01CD1E1FE734430
SHA-512:	733458AC907CE8D0C95CAC73D3EB282075AF0C4689389F3416FBB0F1F0C788B04FEB8FA07400C6D5D39961568B3947D2DF30C9E957AF6442683372FBACC3103F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:49:01-04:00" xmp:MetadataDate="2018-06-25T13:49:01-04:00" xmp:ModifyDate="2018-06-25T13:49:01-04:00" xmpMM:InstanceID="xmp.iid:f1710942-04a0-9945-992c-9ecaf7b05df8" xmpMM:DocumentID="adobe:docid:photoshop:4926a722-59f2-8f45-b445-481a343e57e0" xmpMM:OriginalDocumentID="xmp.did:77f31f95-3cc9-e24e-9c1f-763b085ead3e" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM38.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4827
Entropy (8bit):	7.661322434827015
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ6OLjHoD5HHf2mj87FibJNKcJcsGS2GxCCbonsyJ3FCxZlsWQCju:TSu7FhknRIVuI876LZGSfQmWswIgWfHO
MD5:	24B40878753EAC1FA7183845354CE6F2
SHA1:	264242D60BF08924053DA6A7C74F2FAF96195BF8
SHA-256:	EAE6A56A570999B0CB3779BA5FDDA29FF73F0DFA8CB32942A410FBB2625DDF91
SHA-512:	0771B1C9C03C81501DB3744748BB02BFD0B0E2FF76C090FC03A881F78DE8C0BC527BC8CA4D29E0425F9EFB06AED723D08B564B07915AAB00D4CB2293FA966DA9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:49:31-04:00" xmp:MetadataDate="2018-06-25T13:49:31-04:00" xmp:ModifyDate="2018-06-25T13:49:31-04:00" xmpMM:InstanceID="xmp.iid:884cfee4-22fb-2047-bb1a-d3504d571820" xmpMM:DocumentID="adobe:docid:photoshop:e1b078e8-a863-3a4b-a3da-23a7e7fa0efb" xmpMM:OriginalDocumentID="xmp.did:6a898b85-8692-5646-a88a-b47a07ad5d45" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM39.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4810
Entropy (8bit):	7.643211744289767
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJfIlRNHo+RHHvohqOTkGBvh4pMtccTQ1pbxvKeeSQy+2Vq6lNW4k:TSu7FhknoIawoOXNha4IpFvISQSVNH+5
MD5:	E572759AB9707630E854E81C99583CC5
SHA1:	05A4ADCFF86EB6CCF0AB24387DD17DC7E93B9255
SHA-256:	F80DA55B6F42FFA6CE8FA8AB7E4C3344E31B2754F88CBAE33A07EB80655D84EA
SHA-512:	E2D2A8BAFCD200B2D1EDB377353CB6F9216A09945A8DD90F38CDDEC2F3C976641265C88AF22B2E4ED47AC49B0B91E3122AFA411F84D29BC3D21ADE014FA784B0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:49:59-04:00" xmp:MetadataDate="2018-06-25T13:49:59-04:00" xmp:ModifyDate="2018-06-25T13:49:59-04:00" xmpMM:InstanceID="xmp.iid:a20eae66-0953-3246-9f3b-4af1072a955c" xmpMM:DocumentID="adobe:docid:photoshop:aa74563f-d13f-ef42-8c94-c04ddd48b041" xmpMM:OriginalDocumentID="xmp.did:4b9b949c-8bdd-2f4a-8eca-5828ad79169a" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM4.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4840
Entropy (8bit):	7.652254408040911
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ2b8HoEHHX4t7Dig+6Vq0Ttia85PdbhvlKzw:TSu7FhknXIEX4tqAVqxaSb4c
MD5:	658E8DD0B70CF02DF2A0D049610634BB
SHA1:	41CCEF0F913DEA6757B0CE089C4F9785BEA2C54B
SHA-256:	D239DA4578F22A961D714D01995DA5EE1CF4D29407DA8D5416C9148707E1B1D3
SHA-512:	39C347700F101B7E2265020DEF181E9C65270533EA13AF47F5EC954B2896CA5CCF42A3E3F811A2642B142D3E761BD4C577861E7461739D51C59157040D2745C7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:11:03-04:00" xmp:MetadataDate="2018-06-25T12:11:03-04:00" xmp:ModifyDate="2018-06-25T12:11:03-04:00" xmpMM:InstanceID="xmp.iid:dfb7655f-c926-5c42-8579-b7dd39a5e91e" xmpMM:DocumentID="adobe:docid:photoshop:68ba3767-6931-7246-8c80-6d6cb9c3b319" xmpMM:OriginalDocumentID="xmp.did:881f17ce-10b7-b647-830c-7b3d515f2657" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM40.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4842
Entropy (8bit):	7.649394844989216
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJP3gWr2zVHoTVHHpTuOX9OydGp0JVxZ+IeS9Ph+Daok0IksWxWHp:TSu7Fhkn6IR9uSOydGLujvB0Iktw
MD5:	10502487003399E7B4A055356327C45C
SHA1:	4D346763D66A2DB47FCBE50A78E10F79B133B755
SHA-256:	004811E7BE6FC4270F2541632E0E810918C84A25984CCC1122D178759878956C
SHA-512:	40397B5DB300A50E170E64110831FCFCFBAF3F1044B0F01AAD151F1C6CA16B7453075FF3CD0D8329DC8C7FA966390D36A78ABA01D2C3122F4CB0F132BEE9F68A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:50:36-04:00" xmp:MetadataDate="2018-06-25T13:50:36-04:00" xmp:ModifyDate="2018-06-25T13:50:36-04:00" xmpMM:InstanceID="xmp.iid:3edebc38-8265-2c45-a2bc-88709ecb3cee" xmpMM:DocumentID="adobe:docid:photoshop:e99c9781-61e5-e141-8792-5c51496e0522" xmpMM:OriginalDocumentID="xmp.did:a03dd080-168d-124d-9f4d-126b62250bd7" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM41.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4795
Entropy (8bit):	7.6305882434065575
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJLcqbtHoRHHtxY3CBcHkQsOnURMmTSZfwL4ObmLIS3g:TSu7FhknS2tIRHA+QsTRMmTcoRM8
MD5:	6E23C0C52615E437227522F0CDC337A0
SHA1:	A1B862449A6846D0A5991BBBC8DAC006A718963C
SHA-256:	6BA038C1807B225491062DADA3340473ED906D4F6CC0064F63D9441175709CE4
SHA-512:	FD34A4A9BDF6C4871DDB7852BD9595B687E065B4256CB4C96C2A4EC6986F58CBD24F3DBE4ACEF4BAEFD520835069AA9CDCB82D6DE9CC3B0B7BD1ACE5E35974EC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:51:09-04:00" xmp:MetadataDate="2018-06-25T13:51:09-04:00" xmp:ModifyDate="2018-06-25T13:51:09-04:00" xmpMM:InstanceID="xmp.iid:6cfa3f4a-8cda-4c4d-82ff-7642c04147b2" xmpMM:DocumentID="adobe:docid:photoshop:a74dfa71-372a-7940-858e-56fb7e62882a" xmpMM:OriginalDocumentID="xmp.did:5f128ed3-0eb1-a046-b667-6a714efd25c7" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM42.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4815
Entropy (8bit):	7.645238881729256
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJrkk2mGHosrHH55M3cGk77/MnBo4y3zr8o0vwnYaXmZOpw:TSu7FhknNmIsrjM6/OBO3zr8o0vKWspw
MD5:	61679B8A5BB3CD3F06F7F1DD04D3DF3D
SHA1:	155B15182DC0EB9A1D0F3AA6CF59CCFEB15EF10C
SHA-256:	140B42EC2AF78893C19BF64F013FCB129D6C215A64A1D08BF24955D5C7576D7B
SHA-512:	80C4478E551C8A8737A8DE76D85B189D10DE981ED701272F372055FBD38B6D898498CFE82F06AD1811CB9CCA94D7014506DAFF9B11F29E0F1A20ACC5E7E5E522
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:51:59-04:00" xmp:MetadataDate="2018-06-25T13:51:59-04:00" xmp:ModifyDate="2018-06-25T13:51:59-04:00" xmpMM:InstanceID="xmp.iid:21c26f56-9ed3-224d-9ff9-d90c8c7787f7" xmpMM:DocumentID="adobe:docid:photoshop:8b3af00a-4007-144f-9e3f-48c4f64956ee" xmpMM:OriginalDocumentID="xmp.did:ed5267aa-d55e-8142-80ca-d0c8a21e314e" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM43.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4847
Entropy (8bit):	7.642348573493422
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ1vqHojHHtP26gx8N1b2VCrypXNtZPwhVqdQUzs:TSu7FhknWIjV29o2Eyp9HohV3Uzs
MD5:	DA5D451C3E0D41F64C22F4B177D5533E
SHA1:	1A0BC5F80579658C80E7A332119DF3F68E40DA03
SHA-256:	E2F6B00BABAAD090FEFF0284165E124D17684E6B4DAF3D8A6A1B59C550E9FB12
SHA-512:	C9A2D934CB80286FDD18E42387E28F792CEAF3DD762EA4D2D665BA5C0FF030B0DBCAE49BB4999C7763CFC8482602DA67DEE5EC5FA940FE9751822B60881DEA20
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:52:31-04:00" xmp:MetadataDate="2018-06-25T13:52:31-04:00" xmp:ModifyDate="2018-06-25T13:52:31-04:00" xmpMM:InstanceID="xmp.iid:c0a43c99-14fb-4749-b05d-ef91cbd3fc65" xmpMM:DocumentID="adobe:docid:photoshop:b7bd06ef-2000-444c-9e01-330306949cef" xmpMM:OriginalDocumentID="xmp.did:1f80da12-f862-4b4e-9e84-b08c1eb35f5d" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM44.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4803
Entropy (8bit):	7.645652628831842
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ9hi2Ho7HH+5e76u38uP3TKUQRn0dKgzzsrdPXPHNU:TSu7Fhkn9vI7+5a729EcdvPG
MD5:	06781BCCA8B8225D95F56355FE280D71
SHA1:	A937CA6872FB45ED4F625CE6A167A6912EEAB099
SHA-256:	83C49DF57F973BAF1242F52B8B1786F2C01D19AD9FEAC514AD34B64E143FCF73
SHA-512:	C942BD99834A759667F6CF31651358AF1237AA0FFFB1ABB8DECE4B79A74CB351368EFD8B3A09E7D0682691F84C7D72F695B926A6EC8CC9811863B536AB26D6FD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:53:13-04:00" xmp:MetadataDate="2018-06-25T13:53:13-04:00" xmp:ModifyDate="2018-06-25T13:53:13-04:00" xmpMM:InstanceID="xmp.iid:7c136573-2ac6-da4c-b690-4e641a8fc9a2" xmpMM:DocumentID="adobe:docid:photoshop:41061131-c3c8-c34e-b135-a47b8068a536" xmpMM:OriginalDocumentID="xmp.did:67080c97-37e6-9444-8a26-dea14a82cd5f" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM45.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4796
Entropy (8bit):	7.612938983738583
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJHPpHHoCEHHYCuNQICvrKPlb8t5obeKKcmQ4itFmbu:TSu7FhknbI5YCuuIYm2spuK
MD5:	F4814E076D850717BA8D79954665EBBB
SHA1:	EB893F33CB2EFF37C96121EB457DE1410AB44F5C
SHA-256:	DC44CA111B4C973053FE9858CE4EE8B9EA151A17B20D1E5B13C3E5B21D01DB1C
SHA-512:	71EEA093A06EB12C315B5B9A81F1763B1D85A72F6B3E4E2100709402BB17FE00AE4E8590D4DE96FDB3843C6FA222B1EDED40EDA2A21A9B10B50F354665E4B1D4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:53:47-04:00" xmp:MetadataDate="2018-06-25T13:53:47-04:00" xmp:ModifyDate="2018-06-25T13:53:47-04:00" xmpMM:InstanceID="xmp.iid:bb3d4a0a-d271-5244-bafc-68b4e6a9e66a" xmpMM:DocumentID="adobe:docid:photoshop:e7a82fa5-b725-c241-afcc-827c2737b91c" xmpMM:OriginalDocumentID="xmp.did:dae11497-2f74-6f43-9227-36efc5611281" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM46.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4848
Entropy (8bit):	7.644902160189613
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJukksS6HoJHHcY7enpNFo50eUBLiDkfD8sXGPE6kBWDfO7RIt:TSu7FhknEcIJcY74NCmHv/6wdIt
MD5:	2984925F70C1283122058DB10D3B614D
SHA1:	6B3C9E055482005F5C1B0115592C76D59D46E7AB
SHA-256:	B0FD9023B704452B53E18092BE06C1234F59D1BA38A44980F19D238FC3487054
SHA-512:	5FAD1D189EFA74CD80B3B9A725D9754CD5B6C4CD606012FC48528A666C8B80EF19922A3FF07918D91E369AF8EE28EA5F94D2559981366D48FDCC4F56E48ECBBB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:54:34-04:00" xmp:MetadataDate="2018-06-25T13:54:34-04:00" xmp:ModifyDate="2018-06-25T13:54:34-04:00" xmpMM:InstanceID="xmp.iid:b5555832-b85e-9644-9615-52fe27c27d97" xmpMM:DocumentID="adobe:docid:photoshop:62666484-68a9-9b4a-aea6-8f0383d9c2c1" xmpMM:OriginalDocumentID="xmp.did:cc325df3-2b73-1c4d-9676-fee364e7eeb1" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM47.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	5558
Entropy (8bit):	7.479797809763051
Encrypted:	false
SSDEEP:	96:TS2o7F8knGLWpJKw09NMHo9HEglHhrDYG0WHXVTkNla7c4gaJunQSw5jlEzLljkY:TSX7F8kndI91DdkN14bfSZzBjD61uJN
MD5:	9ECB1724633DC71EB9DE4D371097233B
SHA1:	A76F1756D52E1891A3CF74DF0AD78C3FBD107FF5
SHA-256:	A82CEAFA1AF636C03819493993ED2E08462C7C29DED29B0AE345ADEFA306254D
SHA-512:	A6A98242071F848766377783244734C8B54EAF9694E1C67EF9F7322F8F144F31E89B4D905E8FE78C0935E785EA54D26E2F29201270491C83E565F3ECBE605545
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:55:03-04:00" xmp:MetadataDate="2018-06-25T13:55:14-04:00" xmp:ModifyDate="2018-06-25T13:55:14-04:00" dc:format="image/png" xmpMM:InstanceID="xmp.iid:90faedc6-4b9d-1547-b9c7-5d7a65415b5e" xmpMM:DocumentID="adobe:docid:photoshop:8235ba3b-c33c-4d43-9ba6-206b9899d0f8" x

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM48.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4770
Entropy (8bit):	7.616013321528226
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJC459kHo84VHH1bjSPf08lwHc9CqilKVt1vwAJCteGhvwmHRJW+K:TSu7Fhkn84sI84V1b2PPlCcNilGTw0cm
MD5:	6A6CF2D0CA349758D2F778A645B82020
SHA1:	8F4671709D1ABEFD3E1A8A7F3CD0931669678FFB
SHA-256:	838B0F9748ACA61764D815110425605C202A3FD3066AB0D4F347A9CEADADD19F
SHA-512:	58C1AFEC6393A5B2C9778B8C70A98E0C330B4A42FD4EBEBB0C303DA3C04324ADFB4619B7657B3BF386028D97B7D61EB7B3A08177AEC96766AB997AFA9FDA7556
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:55:51-04:00" xmp:MetadataDate="2018-06-25T13:55:51-04:00" xmp:ModifyDate="2018-06-25T13:55:51-04:00" xmpMM:InstanceID="xmp.iid:e60ed7f8-d131-4140-93c5-6d7df65a9663" xmpMM:DocumentID="adobe:docid:photoshop:b67adc08-490c-934a-9e85-cda69a08b9f2" xmpMM:OriginalDocumentID="xmp.did:1c8d2779-4e5c-044f-95ab-b905c7aae4bc" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM49.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4836
Entropy (8bit):	7.638921481203359
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJQSXHo2HHgkY2lVVIuCqcHVL5aw/0T9Shtlig3+tEkhJcWtn1:TSu7FhknHI2g+VuqcHvH/0pShZ+1
MD5:	BF2E7F0AE211D8F46AE8F2E3DC3A1F9D
SHA1:	F88962119DF62456EE43B51CBBEFC3CBC934A8C0
SHA-256:	7A078BBC0F12B68A6AA0F6A5ED476CE526943C97455C8212EEFDD9060EF05F61
SHA-512:	1DBC2FC3E2A69B4B92D755F0BF6D17ECA965C1761D892D9D0A53773E1EFC608B2E85848EA5D566E90A88971C04CCC2429DB825820CE367A6B8144B93B5DD3814
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:56:26-04:00" xmp:MetadataDate="2018-06-25T13:56:26-04:00" xmp:ModifyDate="2018-06-25T13:56:26-04:00" xmpMM:InstanceID="xmp.iid:17a101e9-802f-fc4c-a3b1-c0c45575b158" xmpMM:DocumentID="adobe:docid:photoshop:2b05b2d5-14c2-1943-b49e-97a6142ece23" xmpMM:OriginalDocumentID="xmp.did:8f9c44ca-a54f-5044-886f-fa5893ae15a7" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM5.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4861
Entropy (8bit):	7.66200232927157
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJvI9nwMHo9HHfA6nU72h2PuKh6i2SSTVqjsfDGc4RbZkf:TSu7FhknYwMI9fXnUyUPLsiJ6IsfaJRi
MD5:	1FAD7BB413BBCEA6162FF1B354D08483
SHA1:	F0F920F7E3A64DC0EBD781BA0D401E6B9B285A55
SHA-256:	0C02B8565D4A68AE279934C501FF85E3068B4B49D68AE42C72CDB2B5BCC5B39B
SHA-512:	B18F04730948F34CBFC5498E27BF1419BAC35A299FA7A4C2A7B69050F85099AB52AD5F36D92C8A17778AEED3AA2DEA5E10FEB3A6800096CF12DB347B3A4D8935
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:11:44-04:00" xmp:MetadataDate="2018-06-25T12:11:44-04:00" xmp:ModifyDate="2018-06-25T12:11:44-04:00" xmpMM:InstanceID="xmp.iid:f9829e09-b2bb-6c4f-8878-4c54018efa13" xmpMM:DocumentID="adobe:docid:photoshop:46c6023f-d594-d74e-907e-20aef0d6ceca" xmpMM:OriginalDocumentID="xmp.did:54fa310d-97ac-ac40-966f-d219b2c8fc28" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM50.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4802
Entropy (8bit):	7.639568646910959
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJcI7HouHHKrG3zu8AHSToiixFW1VZ/ueErTqX:TSu7FhknBIuLutyT9iXW1DVoqX
MD5:	B8272D744CCE9A3DEDBB3AFD5E8D974D
SHA1:	F81FD06029E0B7AD83DFBFC96D296F91D4B87462
SHA-256:	895FCB0629B4BD752A08054B9FD8B9604B7E2EC254F554550E43D835AC050842
SHA-512:	8CB4D5CC9E9CA2D384F2BB193DF1E6E8BB4BCF0F305AB6E5910AE682FFCB7DF05C23EF767BF3053EB202A651A6E08A01735CEB871EFEAD506123ED28F201366D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:56:52-04:00" xmp:MetadataDate="2018-06-25T13:56:52-04:00" xmp:ModifyDate="2018-06-25T13:56:52-04:00" xmpMM:InstanceID="xmp.iid:8e06ad19-bb68-dd4f-b107-8090717418d8" xmpMM:DocumentID="adobe:docid:photoshop:79ed0bf2-56d2-4f4a-a75b-ecb47a926bb5" xmpMM:OriginalDocumentID="xmp.did:1ac04b2e-a44c-e44b-ba58-8efdd2f66ff6" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM51.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4834
Entropy (8bit):	7.640523475632509
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJYTFyHoyHHH4ZvcpEf37ANzT9I9dh9WZqKuOWK1iJ0zP5:TSu7FhknxIyYhcp5NfK9HKkiT5
MD5:	B90790D1A675DFF7BBB29AFE986084BA
SHA1:	3A304F271F610C341DD3819F2160CDA66483BF7D
SHA-256:	FC6EF7187E57C6030737F8345435521DCA35CB7BF8E2C5E95DEC23A74850686A
SHA-512:	91C90FAFC6527D3F3D97E642F564DB428429E8AB5A2DEC78F92D32698235732E8E7605EBC0578B423E645E95CF371F07FCD41419F477C6B590B31B1C880670E2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:57:26-04:00" xmp:MetadataDate="2018-06-25T13:57:26-04:00" xmp:ModifyDate="2018-06-25T13:57:26-04:00" xmpMM:InstanceID="xmp.iid:15f3bd65-f579-6640-ba33-a6e4ae0f644e" xmpMM:DocumentID="adobe:docid:photoshop:52afcbdd-cd38-b94c-b696-aae5e3adeef5" xmpMM:OriginalDocumentID="xmp.did:68b59f91-2365-a947-94d2-869b4b882cab" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM52.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4857
Entropy (8bit):	7.651841683347114
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ1EFM5oHo/E1HH9SxtsIx1+XiIMLz1egY9FbZ6T2Q0kNaUUPMACG:TSu7FhknAI29VMLIgEXS0rLXCG
MD5:	75FEA940D4326879D606B23F6EE0384F
SHA1:	C5C06ED6CEFDCAD639C555B8A6B3D07CC4600EB6
SHA-256:	33E15B0F04DBA034B7223268CE9058544E24D9DC5E5D7C443299C16BE32E97D2
SHA-512:	D2BC87209F00531773A35D818B7AD6E3F883CE87CAB4472F6DED7C2B2F51FD652C134D8F4646640DE9E5BB78999F0E2906EA0331CFD7E12EC2140907E670F825
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:59:02-04:00" xmp:MetadataDate="2018-06-25T13:59:02-04:00" xmp:ModifyDate="2018-06-25T13:59:02-04:00" xmpMM:InstanceID="xmp.iid:c4457206-0718-874f-9d60-074bafff549f" xmpMM:DocumentID="adobe:docid:photoshop:8fec91c3-d79c-c248-b5bd-a17b5429de19" xmpMM:OriginalDocumentID="xmp.did:840e1e20-e5f8-a244-864a-9be7f447b161" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM53.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4815
Entropy (8bit):	7.637751697634204
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJBd50AHofHH3CtB81E2f98ibexCHIjXU3sXQ6Qu+Huv9bD:TSu7FhknxIfStB8GzwIbeHs93
MD5:	7FB1129E48EE68274C782E79D1285849
SHA1:	E5DA3489E5B37046F2DBE241346F655B1A26DB5F
SHA-256:	9D699170014D9737FD9D75133E937773BD7D0DFD258D00A0B06DF70AA580A5B5
SHA-512:	17B5469CACE46BDE983C0270388BBDF7F54FEE5ED48E74938E69D074B0618E9D115EAB4387F6132D8930B8A172110A4F1D06FDAB929F22BB8BB138E108EF189D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:59:36-04:00" xmp:MetadataDate="2018-06-25T13:59:36-04:00" xmp:ModifyDate="2018-06-25T13:59:36-04:00" xmpMM:InstanceID="xmp.iid:f06f2ec8-75f7-fc47-afa9-13c4eafdcaac" xmpMM:DocumentID="adobe:docid:photoshop:4ffad209-9bc5-e14e-a7a9-e26b946bdb5e" xmpMM:OriginalDocumentID="xmp.did:3738ca8c-a4cb-e24c-bacf-422f788a8841" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM54.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4842
Entropy (8bit):	7.6495144883243755
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJeuMUHoAHHv/wE3rPfpTSAqs9xG12GSSo1/jhO:TSu7FhknFIAJPfQTs9xG12e
MD5:	51725C5811A563E04213DF158A028364
SHA1:	86C0F85793F46409BC9307F19CEA31B09A9F5D60
SHA-256:	0105E279452BD83529D1969B541A006BCEA400D4DB8A09CE10FA1DD5DC691814
SHA-512:	4BE2BD9758BB34AFD882786555D25895252E8BC7EA12323DDC10B49BB56E722753C747637783C1049589AD6E27FE9361C82542769C4DB2D001B1431C2EB3698F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:00:22-04:00" xmp:MetadataDate="2018-06-25T14:00:22-04:00" xmp:ModifyDate="2018-06-25T14:00:22-04:00" xmpMM:InstanceID="xmp.iid:e99e61ef-4d4d-b849-a66b-9e4ea5bd6351" xmpMM:DocumentID="adobe:docid:photoshop:d66da560-0581-4748-8dac-cb0ce4088fbe" xmpMM:OriginalDocumentID="xmp.did:d80b27b3-50e3-954f-8b5b-a67c1df905dd" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM55.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4846
Entropy (8bit):	7.627727936602157
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJg/kHouHHEAmihXfufDN7qGEXGbWDqpoqaR8joZSVF1Cga:TSu7FhknBIuENih4h7iG+qIRxmFMv
MD5:	9D6FBBA50316F88C7B7AFB12EF191EE4
SHA1:	0B3E5B5C0BE7A18F26BC10AD5D6DC66467B50020
SHA-256:	98C34A13374767B9FC427E2641F5C4C78013F661CE32E9C7B817EB4B32CE2FEB
SHA-512:	0D18A1F30B96D4932A5E5C435ED603089E6279214CB340099BE25AF5A278BCB951BC2CB5886434329D11D7B8CE8A3FBC7FBEC9924B8CBCE3B39E0571042940DD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:01:08-04:00" xmp:MetadataDate="2018-06-25T14:01:08-04:00" xmp:ModifyDate="2018-06-25T14:01:08-04:00" xmpMM:InstanceID="xmp.iid:289a646e-cd49-c84f-8bc4-edeb683f6e59" xmpMM:DocumentID="adobe:docid:photoshop:f9044ce2-d90a-dc41-8e2a-d9b720818c72" xmpMM:OriginalDocumentID="xmp.did:ab2ceed2-7529-8843-a5db-62d3ad6eba50" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM56.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4810
Entropy (8bit):	7.651729307621638
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJXhSNIHodHHBTvBydlU7i+FS3kxFD761qOLdtGK7vxN:TSu7Fhkn/IdBTJbY3kL6vLdtn7pN
MD5:	474BC4A5605C4E7EDEBB7AD319BE65DF
SHA1:	2FC936EDABEE28910B736C63D82EC0C4D5348F23
SHA-256:	DEA2DFCC22FDD4ADC886B9C10ABEE154B825F7819D6DE8BCE603080A106E8B39
SHA-512:	736E3388FB9EB4DF1F5516C255B997C7D3CA1EB22A4BB71B157759A08F00285F28E492EDE3CF5914B2833B0D6478F3BC2406D561CAD14F23226AF0051E53BF37
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:01:50-04:00" xmp:MetadataDate="2018-06-25T14:01:50-04:00" xmp:ModifyDate="2018-06-25T14:01:50-04:00" xmpMM:InstanceID="xmp.iid:1d18b3b7-fc15-5846-9a14-119ae1c4ce92" xmpMM:DocumentID="adobe:docid:photoshop:8bec6e26-2bb5-a342-8648-6078179c3639" xmpMM:OriginalDocumentID="xmp.did:9ac6d3dd-2bb7-3c48-9355-2b4fb28427bb" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM57.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4825
Entropy (8bit):	7.65930581660963
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJIzOT4kXHorSHHgLwBTGrhoo3xZzG0l7os9JuCQ/:TSu7FhknDT4YIO+mTGrWoh9G0l7o2JK/
MD5:	300029D8F302F3574F4A1270B5C785F6
SHA1:	C3144B321E1F2710B2B1897B969680C3706ADE5B
SHA-256:	73206E759E0F7BD0E52E12997BAA9B493F9716B49F877894190DE56A27091898
SHA-512:	6799E29B33E519C095858C75486524A6ACA6140289ADCC6A72D3DEAD5AEDA605FE59F9C03237C19D679DB46F4453DE8869E592E0FEF7D89B73A2668B8E934E03
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:02:31-04:00" xmp:MetadataDate="2018-06-25T14:02:31-04:00" xmp:ModifyDate="2018-06-25T14:02:31-04:00" xmpMM:InstanceID="xmp.iid:462f997a-359f-a14e-8aae-63ea99e925be" xmpMM:DocumentID="adobe:docid:photoshop:d91f1b44-4176-fa41-87cd-c8fada93c93d" xmpMM:OriginalDocumentID="xmp.did:a540e028-61e5-6044-b18b-17c56f0d3472" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM58.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4832
Entropy (8bit):	7.643443344473485
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ6+7NHosHHLXaHyAXfoOvuDO0x+Y1l496HHP9G/BXy:TSu7Fhkn5IsLXmuD1lgXy
MD5:	78CB5528A8DF71B1507C8CD4319A168F
SHA1:	BAE45D34379FFE031CB050FB2FA1C7E2F2C25D0E
SHA-256:	6FF7280413C2C2D915D26E30D0595E94B99F0F5250BF715C6A698A8EB73F5EA2
SHA-512:	5DD9CFD530B7A768BAA1B4F2B05C84F518314C7B5800E800FD0232F123996210FC10F09156A754A3250D977CD4A57AB73A90C77FA5AE6A4879482807C450E45A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:02:58-04:00" xmp:MetadataDate="2018-06-25T14:02:58-04:00" xmp:ModifyDate="2018-06-25T14:02:58-04:00" xmpMM:InstanceID="xmp.iid:15559fea-c786-454a-bc15-c1c4b3379c85" xmpMM:DocumentID="adobe:docid:photoshop:0b44fcfb-25f2-5a4e-a011-8541a1d1d2c4" xmpMM:OriginalDocumentID="xmp.did:69cb699c-d5bd-6d45-b461-b84f5e820491" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM59.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4789
Entropy (8bit):	7.630862197879212
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJHHFoENHoNHH9pfQyz8P+fPxG0Z/qmJczNoq:TSu7FhknP/NIN9pfB88G6/JWGq
MD5:	BEF063D03F1CCABA24C0FB63DA208294
SHA1:	07AEF18B6ACA227C3DE44AAE6D1C12F147091C76
SHA-256:	A1E29EF3FA689BC0D80A34122DBFFABFC45F7F9F7C1948D49CD5C600ECDE0D79
SHA-512:	B47C6E4CC78A2D467B29D966CF06541C65E0E9123B8C2CFB41DEBF312E08DAB27FB2A5BC544120356D055E8AD49B4EF5F317EA6EF9B500C928CED44C8454BB46
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:03:29-04:00" xmp:MetadataDate="2018-06-25T14:03:29-04:00" xmp:ModifyDate="2018-06-25T14:03:29-04:00" xmpMM:InstanceID="xmp.iid:e8005279-93e9-154c-9ec7-b937ddde2f6d" xmpMM:DocumentID="adobe:docid:photoshop:cbcd72f6-eadd-5045-95e7-b412b706829b" xmpMM:OriginalDocumentID="xmp.did:7871517d-32e4-8549-9175-b0d9f2604f98" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM6.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4829
Entropy (8bit):	7.62895894983327
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ3+BHotHHxYfaB8gzrIPl1ddzPJMxRM3Myy7a70T0Qd2r:TSu7FhknKItUaBrIPlrdHMyy7a7mnkr
MD5:	1C07ECF7A2224B8F63D0E3D9BD860DA9
SHA1:	74F773701A1B5F0261B8538B8B4BDEDF6EC880B3
SHA-256:	04E5680B687264F1921E6AC7CDCCD12F85DC71069DAD0A571F97E4F8B092AB70
SHA-512:	6628BAC8B376ED333327950D4530A7983E3DAF947252EFAA886AFF3917D54B527779A4EFBF86B599BCA49C7CDBCAB2E2300D6B84898C35AFAC4F68107F39C358
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:20:06-04:00" xmp:MetadataDate="2018-06-25T12:20:06-04:00" xmp:ModifyDate="2018-06-25T12:20:06-04:00" xmpMM:InstanceID="xmp.iid:4e72eb3c-ceb3-ef4a-af38-e7c62dcea498" xmpMM:DocumentID="adobe:docid:photoshop:dda71907-9cde-ae44-891d-f32032477474" xmpMM:OriginalDocumentID="xmp.did:962a3b49-77ae-4944-b2d3-ddefa1cd5ede" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM60.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4843
Entropy (8bit):	7.64809572035119
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ81kV8HoHHHEo2iF+RvTbt++G1u2tOw7ZOpLcl5gXuJ:TSu7FhknG1dIHEFicddQu8OqZOpL7eJ
MD5:	7F2053B63C28CDD32E2C16BE1414BA3F
SHA1:	17C70C059FF7D42E1A2B9B2561A8AA8A1DAE53A3
SHA-256:	D4B7457ECE670DE773B149747282570258CBFFA0E7FB3400AB3C56E8015D5813
SHA-512:	D42BF4D4009F12811B06DE98507B26A6C41BABC2980613F42930C9C8C5F9A7361D9EC8842A22741EE2F862D71C6CEA462CE22403943283E095CEC5FADF7484CF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:03:59-04:00" xmp:MetadataDate="2018-06-25T14:03:59-04:00" xmp:ModifyDate="2018-06-25T14:03:59-04:00" xmpMM:InstanceID="xmp.iid:3dd47bec-aa97-ed47-84b2-9ed707844417" xmpMM:DocumentID="adobe:docid:photoshop:c241c646-c42d-2840-b6ff-a207a5dd5be6" xmpMM:OriginalDocumentID="xmp.did:24c27f58-6596-d545-96f6-8958783009d2" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM61.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4816
Entropy (8bit):	7.628749823741116
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJHN9kyRV/XHoBNuHHB4Kyzv8rlepT37wRwwkx3yL6cnf6PLEzJoV:TSu7FhknX99IjuB4Kyz+0z0RwwkxLcNm
MD5:	696656C59C8D35F9A5B2CEAB16EC98AC
SHA1:	02B9EBD164B48DA592704DC51A4B2CD8927D98C4
SHA-256:	BDC701C7D581595CEAE99E0A17DFA83DFEE2524E26A15FD1C1F9D83149459134
SHA-512:	0E1851A58F75780A20718605B320F7882E08986C061464F4D0FBC4CFA4B45150F42670A8B6C94994487364E17F689A8D1FCF493F006ACFAA8BE4A070D6C5AC9C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:04:29-04:00" xmp:MetadataDate="2018-06-25T14:04:29-04:00" xmp:ModifyDate="2018-06-25T14:04:29-04:00" xmpMM:InstanceID="xmp.iid:e4f4cd2f-baaf-dd4f-9175-d3000d6359d7" xmpMM:DocumentID="adobe:docid:photoshop:38a77b51-1e30-2446-b4ef-c4bb4ffb1431" xmpMM:OriginalDocumentID="xmp.did:fc9e63ed-05bb-694e-8eb2-3bcd08d1f7d9" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM62.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4787
Entropy (8bit):	7.657688803264164
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJtDDCHo3HHfBqy7qUitzJd/VJpSJ8byMAJlk:TSu7Fhkn2I3n7yzT/48bpAHk
MD5:	AC53305F50F20D9BC8B19CB1AF63C31D
SHA1:	58D9DDF5CE5112A4863A6245571063618E6380A6
SHA-256:	1ABDF8E5F1312136D1B3579328FDCEACE484B54E340C0E4A8BC423FC01DB18E3
SHA-512:	D9837D61FA917EA1C714DFC552198EE702981604E2668BEFD1F76598C022397EA152B7D3DF0FDA45AAC1D0BA63B59BA7097516E0D72C02D114F4FA273C3FA4FA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:04:58-04:00" xmp:MetadataDate="2018-06-25T14:04:58-04:00" xmp:ModifyDate="2018-06-25T14:04:58-04:00" xmpMM:InstanceID="xmp.iid:c018b733-c60a-c748-bba0-0e31e06caa4c" xmpMM:DocumentID="adobe:docid:photoshop:c8786131-1f2a-d445-bd50-18d8fa823cdc" xmpMM:OriginalDocumentID="xmp.did:8a07e985-cb33-4a42-89d4-90afda55a4fa" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM63.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4783
Entropy (8bit):	7.626298176705874
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ0hWHoCHHoMttobBWKp7khe51YWarHFW5P7:TSu7FhkntIC9+M6oenzahmP7
MD5:	117776934A744581F95AFF5E67FB276A
SHA1:	11819AE5A67A132D7A0139E4B26D952CA730C51B
SHA-256:	669EFEBA98DA2FE1ECB2E20FD9988D8B532A03108A9733A236328BD495ABEA7D
SHA-512:	5F2CD1BC6079CB6F00DDB72AB481851DD2C94A7DCD024011B197E6400B7E2826FF11D29C31EC19ED04DE00822AC455FF5CCD5EDC349EB7E32D04641CBF38176C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:05:34-04:00" xmp:MetadataDate="2018-06-25T14:05:34-04:00" xmp:ModifyDate="2018-06-25T14:05:34-04:00" xmpMM:InstanceID="xmp.iid:ebb18644-3c34-0441-975b-73d6b3ec487e" xmpMM:DocumentID="adobe:docid:photoshop:1c1554da-57dc-ed4a-90f0-a9e97c576ff1" xmpMM:OriginalDocumentID="xmp.did:1d55c05e-fa11-524f-9d25-a31b6d2015c8" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM64.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4804
Entropy (8bit):	7.629051765293466
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ8B75Hof0HH8VPtmTSYaWatIqRtz6qWmftejI6NiOQiQDaO:TSu7FhknyrIf08DkSbZT6OfkPIOQiKL
MD5:	4676E5F9468E7CB268AD33395404CCFB
SHA1:	4899E603ADE83AE1901754F41F95F05431714803
SHA-256:	45E82C2963311A5119DE3CE7C1FAA3DC1E782C4BF8B2E2066CB0121E8DF65DEF
SHA-512:	E1C8500B3B455264B29581D6B282E151108375D45C04E26A56DF68BE36806C21DFEF881116A3844532BD75AF78E987967909F7E82ADE50B7A8C2AE8F95B961E6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:06:17-04:00" xmp:MetadataDate="2018-06-25T14:06:17-04:00" xmp:ModifyDate="2018-06-25T14:06:17-04:00" xmpMM:InstanceID="xmp.iid:3fd3c7f4-a21d-df42-b0b2-e2d811c6c711" xmpMM:DocumentID="adobe:docid:photoshop:ac6441e3-2c3e-1f41-9065-38b7b4709f0d" xmpMM:OriginalDocumentID="xmp.did:9e8cdac2-ebb1-7842-98f7-b6f93a439de1" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM65.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4793
Entropy (8bit):	7.632446642918616
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJExHHoOHHsZbfZur9kuv653GFTTCn0I0CozWp3nkH48VCp5s:TSu7FhknAIOs5USGFTUUa3viCs
MD5:	11BD5B0400E2FF21611CE0A76C28E1E6
SHA1:	6BE9FCF607D9CBAE089A35FF7EDE0A88C30EC0C1
SHA-256:	58B8B450001923315FED898A222DE4753CDD94E4CBA6401BDEFA492552545A60
SHA-512:	A7F736A4B1BE2BAB922EFDCA59FCCDF4C5C8CC476276B430590AB863D02564FD7C70F1F38624D4DBBD709B6CF9A3E589FAF3F5C39D8EB18F64BC1EA941EF0D8D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:06:47-04:00" xmp:MetadataDate="2018-06-25T14:06:47-04:00" xmp:ModifyDate="2018-06-25T14:06:47-04:00" xmpMM:InstanceID="xmp.iid:28e63791-9df0-734b-98af-565cf4a2fe6b" xmpMM:DocumentID="adobe:docid:photoshop:77358267-6a9a-eb4d-abe9-f940596eb193" xmpMM:OriginalDocumentID="xmp.did:e592e458-a481-de4a-8bc4-9fb63599ca34" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM66.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4792
Entropy (8bit):	7.626464522006364
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJCIqVol4onHoIHHL+AQZGfQLSs16GKwJoPty3dB+Hkvwy2aBUfu/:TSu7FhknYdmIILF/kS66GKyTtB8yzUhS
MD5:	F2BB13F434814FF80ACB7F81D1D7CEDF
SHA1:	1DF574B029C75669D8C34431284B6FB5111F75DE
SHA-256:	B7F56ABE383910EAEA348162495950AB528E85E59811A5AAE4830AA7859FBD77
SHA-512:	85A33AEE8F3F96F43F0586822355E3EFC84BE5A6E2981CC8B1DACD0F14D4C0D5C34653EEEF007D69512EA1487C4644333D7706D9B535CB2756A3744D30718CB1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:07:35-04:00" xmp:MetadataDate="2018-06-25T14:07:35-04:00" xmp:ModifyDate="2018-06-25T14:07:35-04:00" xmpMM:InstanceID="xmp.iid:ed259370-c8fe-5b41-9c0d-4c4d9df0ce22" xmpMM:DocumentID="adobe:docid:photoshop:d20b65fe-1083-e240-9b1b-26a899e60e1a" xmpMM:OriginalDocumentID="xmp.did:cf28a91a-e433-0145-9938-d4f2b29458d1" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM67.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4813
Entropy (8bit):	7.646849630005453
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJUj2aGHS1eHomLHHboJpS7jU7T/Xa8pirwp71LyeEJs97OXWjyIn:TSu7FhknCSaKImLcYf8TfaaiK7p1B975
MD5:	1FFDD97915E5354C3C50217322D6B6C1
SHA1:	A55803F4560EBE3A5C23872A21883645BE75D369
SHA-256:	0F7018BB8301FE23011F50552ED318CDF0181A5BB9E595B0E9F9D2EDCC3F322F
SHA-512:	C342E8135BE66D0A8C896FD9FC3FBEDBC69469E8950CC91B0C4D93FCCDC0F6A77DEFCA71BFD68B8A4D4AAD85EB76837A9EA9031EF9CB7ABB46AD0E21B6418A3F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:08:10-04:00" xmp:MetadataDate="2018-06-25T14:08:10-04:00" xmp:ModifyDate="2018-06-25T14:08:10-04:00" xmpMM:InstanceID="xmp.iid:e94d26b3-e4bb-3b46-8a03-6a26f6b9a214" xmpMM:DocumentID="adobe:docid:photoshop:9510dc4c-18dd-3f47-9aec-c6fab838f7ae" xmpMM:OriginalDocumentID="xmp.did:a48ea605-ecb3-2b48-aa1a-0e884e6aed79" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM68.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4817
Entropy (8bit):	7.64261929399302
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJt2BqtRYgHocvgHHhXAeoCUvidy2Z2tUbFZVM34mgIL/M9:TSu7FhknLIx7oTvid2tvomfq
MD5:	28AC0EF0E83481F3BB695459077D47B8
SHA1:	C7CBCB449103E17F4BDF86E5FBFB810D4ACEE67A
SHA-256:	897A1E01B242808381A42083E73DF8AFF19F7595CA71D0D5990E0B6FC95A3D9C
SHA-512:	BD405257321A272FE612B33DB7A7F7757E5B220D836B61465EFCE58346CC3A402E8E81BED7B0ABDA24B0B99D46AD7A847D163FB90CCE1B5E9A22E0B2B2A79154
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:08:46-04:00" xmp:MetadataDate="2018-06-25T14:08:46-04:00" xmp:ModifyDate="2018-06-25T14:08:46-04:00" xmpMM:InstanceID="xmp.iid:1b473ad5-3d6a-b24d-88f7-bcbbb5cd2372" xmpMM:DocumentID="adobe:docid:photoshop:807f4a3f-7160-b448-b548-ce9943114b14" xmpMM:OriginalDocumentID="xmp.did:a9cc7c4a-3bab-7b4a-9e40-a379c59a7bb1" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM69.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4789
Entropy (8bit):	7.6447674815745605
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJJkrWdHoW3HHB0OYyT3gNd9XShYZqZSNTtSF8DWXMw:TSu7FhknnuoIW3BBYyT3w9XShYBJ4Fv1
MD5:	A4DDFC59B4FF1DBB9501A4D19083A4B5
SHA1:	AB2C3BE0B726B80087EF0F01B16DE73002EBBB88
SHA-256:	C9F32300FF47844F60F9CD77796704D6DAA7601F72E5C4F4A38A3B35B4B495A1
SHA-512:	5D1D489C0A2709849C12092032F9D95CCD281CA7B50E20F0FD833E6AA875A110B7517AC7D0BFAA661BA7739795F29C0F55A098FE2D1CBC035E673C30F59442A0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:09:14-04:00" xmp:MetadataDate="2018-06-25T14:09:14-04:00" xmp:ModifyDate="2018-06-25T14:09:14-04:00" xmpMM:InstanceID="xmp.iid:540a8637-3360-724e-936f-6f61a34222a0" xmpMM:DocumentID="adobe:docid:photoshop:8bf75084-f5ce-1640-96e8-d86bc43fcc41" xmpMM:OriginalDocumentID="xmp.did:ccf91b08-06c3-4b42-ae96-2585e2cd58fa" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM7.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4825
Entropy (8bit):	7.650897928400243
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJmjefHo8HH9HhhSNn0XHQVZ79kIYChfRvOGAJhNeVBs:TSu7FhknWuI8T2nswVDuChfZOGOeVy
MD5:	B85133A88D2DC4080B9E50BB4B4906E5
SHA1:	D2DF164A2DC7970E43A095131F2F78D16FF99C04
SHA-256:	87736FBF88FD5D7F302285BFB94E911C316A92291EBDB0B1638C8C2641C0C933
SHA-512:	825D764E3CC6CE65540C9602866E8F8BBA8056B4D7FF08156DA61C01145EFDDFF5B575498D91FE90BF3A7C0034C13509AAE9C56A5103A7ADD6F7AA9D27296993
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:20:41-04:00" xmp:MetadataDate="2018-06-25T12:20:41-04:00" xmp:ModifyDate="2018-06-25T12:20:41-04:00" xmpMM:InstanceID="xmp.iid:b800a6de-9c4a-7c46-bbc3-bfaf46f05aa6" xmpMM:DocumentID="adobe:docid:photoshop:3d089882-b3f4-8048-98d4-dc4c57276492" xmpMM:OriginalDocumentID="xmp.did:c5f7cce9-be7c-3542-87a9-e6e09b1f4c5c" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM70.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4800
Entropy (8bit):	7.6353419246942655
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJvxJkBgB2HozHH476SMbrs/lvGZxJvoJ8QDTBaun39ZuhAM6:TSu7Fhkn5QE2Iz476SMbrs/AJRXG3+aF
MD5:	DE3522D512559BF838B3D291396F0957
SHA1:	863993961568E9BB7071436DA887DA9E93DC1AFE
SHA-256:	949C757D3EA26B52A229DFC9D2536A9E2615A21A2EA316B05FF86A3ACA3CFDBD
SHA-512:	DE9EAD7048DCE350138FE45D65199A4D5B3FC06F84546DB939BFDA4BA8B254540377BE881225BF135F62BEA7AF3FD7C4CD1934DDC62C31F8D8744B726E4574A2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:09:50-04:00" xmp:MetadataDate="2018-06-25T14:09:50-04:00" xmp:ModifyDate="2018-06-25T14:09:50-04:00" xmpMM:InstanceID="xmp.iid:d501ed4b-c898-e44b-8284-104d9c57d260" xmpMM:DocumentID="adobe:docid:photoshop:6364df38-65a0-d24e-a428-fbc5581c0471" xmpMM:OriginalDocumentID="xmp.did:23791f91-4982-7245-b493-436880627b6f" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM71.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4805
Entropy (8bit):	7.630184805514288
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJyakYRHob4HHufR3Whv1ApH7Sis3bt3V3DjWlN2yfwXi:TSu7Fhkn4aBIb4AR3WhdAN7Si2JFiN2M
MD5:	F0A37C2B855468570A7E8B80F7301EB6
SHA1:	6A0A2BC6CB1BCBB726E677B90A2BDBA0BEBAD705
SHA-256:	C3408B646B1A31273CE4DAF6414F5EDF06F5779825267F001B7352905DBA19EB
SHA-512:	AF9973699936E52A7F56955EE33DDFC0D668D2077784DF39F7F0CB30D1A0EC65A13B0DEA47994185A04BEA067CA28F6741C054B48EADFAF90CE8C3420B97A21E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:10:30-04:00" xmp:MetadataDate="2018-06-25T14:10:30-04:00" xmp:ModifyDate="2018-06-25T14:10:30-04:00" xmpMM:InstanceID="xmp.iid:ece74743-2b51-b64d-a2c9-c9a430ed7b67" xmpMM:DocumentID="adobe:docid:photoshop:9d47038d-79ba-8b42-b6eb-33e684e4bebe" xmpMM:OriginalDocumentID="xmp.did:64ed21fd-84fd-c743-b0a7-42d0e1cc297f" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM72.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4819
Entropy (8bit):	7.650045374676073
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJJsXSkHobHHWpQEAOqd0mrLhOlQFBhrDSQXs3AkInaIJLPXsx8K7:TSu7Fhkn2IbW9urMlQFBpmQc3d3IS8Qf
MD5:	57D3848F2058B830F2FCE3940D715590
SHA1:	F64E6D6775BCB45A77E87AD0C0CF18543426755B
SHA-256:	6B79BE1F9F40128E49469351FC38CB40877E7980EFE5CA3A8CF407C9433C1EFC
SHA-512:	49102ECB4B3AAB2D7F2A9EE4F2D582A91057FF58E91E0E4E47B2F131C4FB2AE7E1B763CE3B7BAE86EAC79BB5810AEB02954D8133C1CE218BE31E15BD0088D453
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:11:11-04:00" xmp:MetadataDate="2018-06-25T14:11:11-04:00" xmp:ModifyDate="2018-06-25T14:11:11-04:00" xmpMM:InstanceID="xmp.iid:cbd7d8ad-4901-a649-98fc-fec060670515" xmpMM:DocumentID="adobe:docid:photoshop:bc550ef5-8c01-2d47-a8f5-1574813c50ce" xmpMM:OriginalDocumentID="xmp.did:908299ea-5c8c-0049-af91-b667a43a3cc2" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM73.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4843
Entropy (8bit):	7.645535231249003
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ69usHolyHHqK1zAmgHDQbWAtX8Jg2dhYxEzONM6cAkS:TSu7FhknUXIly95mALt8SqiGbAkS
MD5:	F911628DBB67291B88856BC45C8CA9F1
SHA1:	CD7D92E9952EE0E16F11A0EF0A4F2271854F030F
SHA-256:	796FE9739DC052F3E8A205B140A400A43F57F108114818CCD65A86111D408845
SHA-512:	C2AA1A5C7424B3659880539D316314BB65DC4A41C54171325681B5A2AAECBE5AD93955339FAF9707DA50F2A2D20B6F783A972E392BE4B821E12D0AA7F4D3F82B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:11:55-04:00" xmp:MetadataDate="2018-06-25T14:11:55-04:00" xmp:ModifyDate="2018-06-25T14:11:55-04:00" xmpMM:InstanceID="xmp.iid:8ef20fac-eab9-2e49-8bfb-fa2b8a452b9b" xmpMM:DocumentID="adobe:docid:photoshop:301610f8-2d43-c44d-a6d2-b2c48d6fbdcd" xmpMM:OriginalDocumentID="xmp.did:4c09d0a9-3bb5-a044-ab46-ae6ae9027d64" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM74.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4818
Entropy (8bit):	7.65439336097386
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJPkBHoJHHiWgBTHlkrMYUsM7O2IRNnfaMcwzjTUDmmHbthvDeXu:TSu7FhknYIJiWkTTOHlfDzzPHm7reXu
MD5:	A70BB2FBCFC660689B557850097338C5
SHA1:	6E83533BA6D68E87444B1C9AB44B5A3460A3BD68
SHA-256:	B35B602C7C8499D93A694DB0E8B09AB4368BD2558D656BC633E6F3F107EBB2E9
SHA-512:	C2046BF4063150B12F898A5D250E3ACC7A18F45DDA7EAD24710090ECBDAB69135682343C42164EDA7CEDF2B75B39DB2BB9AC218386E0C3575033D93DFBCA2CC1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:13:12-04:00" xmp:MetadataDate="2018-06-25T14:13:12-04:00" xmp:ModifyDate="2018-06-25T14:13:12-04:00" xmpMM:InstanceID="xmp.iid:ade057e8-0d53-0945-9362-47d07a01c1ba" xmpMM:DocumentID="adobe:docid:photoshop:77572fc6-4a58-d040-969c-dca2ecb17bd0" xmpMM:OriginalDocumentID="xmp.did:158388e9-d3fc-9846-a5bc-1d23cbd86705" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM75.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4837
Entropy (8bit):	7.648618367957781
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJpMC80IHorHHskeoVKDtSfnGLv/Tmu6mMjL22lU6hOEm0EQ:TSu7FhknMR0IIrlVKpSyv/BWm0d
MD5:	8917CFF4ADC987B6997B7C7C5742B9CD
SHA1:	0036554CB0D14675CB242FA21C199E0BBBD62951
SHA-256:	CD37CDCDF09769A901AEC876DD70CE1C8D1B2F656301AD682EADAB56406D6CFC
SHA-512:	FAA4E94E4C5D459CC2967FCCAA5D353F38489F6E0D73C1A4465F37FCE02C9E0947507C8771934EEBA238AB4022EA27F0D88709EADF699E0031498CBCA7AE3756
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:13:44-04:00" xmp:MetadataDate="2018-06-25T14:13:44-04:00" xmp:ModifyDate="2018-06-25T14:13:44-04:00" xmpMM:InstanceID="xmp.iid:b4f452a2-e3f8-4b48-acd4-7e982f93dd88" xmpMM:DocumentID="adobe:docid:photoshop:0d2f0ed0-cbc6-214c-b7f5-4b299f96fb23" xmpMM:OriginalDocumentID="xmp.did:692924a1-03c8-6c42-bcb3-a5e3bcde440a" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM76.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4805
Entropy (8bit):	7.629291360442802
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJnLIHHoVHHRfCaqDNDNFMkbUt44bfBatAJTZvtW5OgT:TSu7FhkneIVRfRqpDNFMP4mUtMvtW0gT
MD5:	BD74F7A6A90293A2355E337154173DD1
SHA1:	C331398191CD969E22F09464EEF9040FB7198736
SHA-256:	3E04440B6D98CEC0B28A832FE4FA2CC889AB812B4E4718DCDDA39FC73BCFFD8F
SHA-512:	AC23502459BE870F207E9977866893F13E4559F3B18498FACC62BE5CA9581E31A9D6BFDF163ECDFE00836653B53925F69E7E2C759D7DDD6618531F5D813C4BC2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:14:19-04:00" xmp:MetadataDate="2018-06-25T14:14:19-04:00" xmp:ModifyDate="2018-06-25T14:14:19-04:00" xmpMM:InstanceID="xmp.iid:d60265e3-ac5e-4b4c-9e4c-e582108cb526" xmpMM:DocumentID="adobe:docid:photoshop:b45f9f69-f240-344a-a8f1-f1077cd0fda0" xmpMM:OriginalDocumentID="xmp.did:81bc695e-ab2d-6f46-a76b-42c1b77e30c9" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM77.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4827
Entropy (8bit):	7.6357616045808925
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJnoJOHotHHNxLhzeXiSOYnwOS8+vKx/GnO68ayAJl37GMAmH3zfK:TSu7FhknW8ItPhze3tS8s0ec7Wl3iTmm
MD5:	05701B3C22D2F99294A67618C47953D5
SHA1:	8C23216DC47DDB0BC301C9C8180BB08C44D83E1F
SHA-256:	3C0EC5B1AFA417048C85FE28F5DC866FC182D754C8EE768850BAED3814232D0F
SHA-512:	E56DBD941435FABB27DA78DBE76553AA69A8B1DF3D6B5A645CCA7A93B84C9182F711F87037F32A47340CD2B1B058DBD6EF717447E15672BB724117077609C218
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:14:50-04:00" xmp:MetadataDate="2018-06-25T14:14:50-04:00" xmp:ModifyDate="2018-06-25T14:14:50-04:00" xmpMM:InstanceID="xmp.iid:d555fb2e-2b1d-4748-bbe9-d5672377ecbf" xmpMM:DocumentID="adobe:docid:photoshop:9f5f2549-fabb-2740-89d5-03e19cfdf8f7" xmpMM:OriginalDocumentID="xmp.did:4f01b9cc-1eb0-6942-87fc-f19456158f04" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM78.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4808
Entropy (8bit):	7.663321046197556
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJM2gHoVMHHF1OYN5+6m94jRuigyU+5u4vBWXc+992dfhNj:TSu7FhknwIVMF1OkkAjRufyDu4v4t9Qt
MD5:	24B54279FBCD5F3CE324175576F35E0F
SHA1:	44C325C1FA73F33EE2C0FF7B6618AD8323D3AD3D
SHA-256:	828DFC28A52439114E888D265C30DD7F9926A795E452FF9FD072D3A6421436BC
SHA-512:	67BA4EBEF2387D375F7619BFEF0BF013E41CF4774A70709F2C23AC6AE9013E48F3878145164F65AEF80AE45BC6C2BE0AC9582FDB7CEF5845971712B3772F1F1F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:15:30-04:00" xmp:MetadataDate="2018-06-25T14:15:30-04:00" xmp:ModifyDate="2018-06-25T14:15:30-04:00" xmpMM:InstanceID="xmp.iid:90c761c6-1b28-604f-96c4-7845fb38f756" xmpMM:DocumentID="adobe:docid:photoshop:9aefb0e4-dd7f-d54b-a15f-81e84ec475b0" xmpMM:OriginalDocumentID="xmp.did:d78122b3-6589-ba43-85b4-6d2675259c5c" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM79.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4822
Entropy (8bit):	7.65467243747333
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ9qJ1hthHoHHHHrB6ikt8D22mncAqEVNhiJC4Z8S+majk4X2:TSu7Fhkny/IHHN6f2mzRMgDfmeX2
MD5:	77903810E17B4433FF79371203F864B9
SHA1:	24C2CC9D84886EE7C6DFCB89E272AEC71B2C4BF8
SHA-256:	31C732626E61C6B5FC920B8CAFC44E583B24CD785BFC6BAA565276D0187DA52D
SHA-512:	403F333905CD81614D5BBF8901DB8B17293D043FDADEE98C260BCC8FC31399C12AC5C32DF77F16E22A1B206E0785AD83690B8F14B69628E0FA0D9C4D79D4DB54
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:16:04-04:00" xmp:MetadataDate="2018-06-25T14:16:04-04:00" xmp:ModifyDate="2018-06-25T14:16:04-04:00" xmpMM:InstanceID="xmp.iid:9e997986-f6e1-9f4a-b27d-d0d5de5289b3" xmpMM:DocumentID="adobe:docid:photoshop:d858b402-bc59-d847-a43c-e3a53e8b8712" xmpMM:OriginalDocumentID="xmp.did:22725dc2-305c-504a-bab0-0ee69a337b5e" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM8.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4819
Entropy (8bit):	7.638663108153409
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJQeuflHoqLHHe9kxrAZR7jh3w/lzYDnHur4nS3xuwx:TSu7FhkneNIqLe9kCHmtYDnfS3xu2
MD5:	5A469097B6EE25ABE457DED9A61C8A9E
SHA1:	34246FB72E6C55FC4F6E2FE5C8450D12C65D5C04
SHA-256:	DC107C6C3C1FF37D5495CA75B7D4763205FED65A72887340CF565953030A99D8
SHA-512:	60702C98A3D84A6FE0779FB9373838EAAAA1A218A261A851AAFD71F05C572770FFF6A7A78CC0770F188DBCAB3466701DB668EEF25038CB312204D2D73B79985E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:21:35-04:00" xmp:MetadataDate="2018-06-25T12:21:35-04:00" xmp:ModifyDate="2018-06-25T12:21:35-04:00" xmpMM:InstanceID="xmp.iid:e6c7b570-e936-0942-9c5e-46acb8bab346" xmpMM:DocumentID="adobe:docid:photoshop:09240e35-4295-9d41-8836-5dbcb6cc8a52" xmpMM:OriginalDocumentID="xmp.did:151a7505-971e-8648-a2c2-a48f2194115a" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM80.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4813
Entropy (8bit):	7.629396122612007
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJGicv0HowHHzpz7aRXJ++wNTUR+YLyMP5afJf/jH:TSu7FhknxIwzcXJsNTUkyZg7H
MD5:	1442A8924CE7DE3316AA54C2DD9F1A2C
SHA1:	F533A7D18E6305375A635D8E4CDF5CBFD91640F6
SHA-256:	0276865A273755F60706C6F625E614876FA4B4A01B314F74B4CE2DE4BAD8F171
SHA-512:	A2EEF00E95CE0AB16888EEB86C11BFA04516A823E53DEE9FC3137225F8C3322D8B7360E838234DC8EC67A2A581966DF683016AA17B0EA67D987C5A1B0A867871
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:16:31-04:00" xmp:MetadataDate="2018-06-25T14:16:31-04:00" xmp:ModifyDate="2018-06-25T14:16:31-04:00" xmpMM:InstanceID="xmp.iid:c50b893a-c0ff-1944-8f64-4f311be04c4b" xmpMM:DocumentID="adobe:docid:photoshop:4f1b41ed-3e62-194a-871e-4c7b4ab4caf8" xmpMM:OriginalDocumentID="xmp.did:a4a2b875-6e25-db45-aff8-de9e9ac1dc23" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM81.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4794
Entropy (8bit):	7.633122840357468
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJKHTUsHob4HH40R96cqeG9v1drszS9ZWeOiZeBaa:TSu7FhknMPIc+h9vLrsIWZkOaa
MD5:	E27C7B5E84551386167D72A46CCDB284
SHA1:	455E516639A4B4F2554384AC1D4FC6D8006A8B17
SHA-256:	FBAD78BA0162D07AA8F526292A1EB7451BA740366CF51C77224FFA5D1C6C62C6
SHA-512:	2F834747B9BD684A43FA9F5FFA949556F1F36FC8527DC117BD3FF79F8DA9B3A36A5B04FC444388F04F7F0E40611FBB0FD7A098D9209413E8BCC020AE1AFB9B11
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:17:08-04:00" xmp:MetadataDate="2018-06-25T14:17:08-04:00" xmp:ModifyDate="2018-06-25T14:17:08-04:00" xmpMM:InstanceID="xmp.iid:e396702e-ba7d-0d4d-b236-1e2d996c593f" xmpMM:DocumentID="adobe:docid:photoshop:51010921-8c60-9342-bcc7-b7f6a597859b" xmpMM:OriginalDocumentID="xmp.did:ad3b7977-852c-8c46-a4e3-c1dac9872d4f" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM82.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4787
Entropy (8bit):	7.6265761366322
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ1nVjHoLHH2qEv359QfobkzIezILjfNwCnF30zVQSNoBnjKprj:TSu7FhknpIL63CZfEPfNlNhSuBjKpv
MD5:	4D6EE4971E241F1B8F2806E310847F5F
SHA1:	B4672ED636459E7F7E5CE6CEC607CA51A6E6B4F4
SHA-256:	383F70D07DEDBDCAAFC8836D6D2295016F00608001492EEF47EB70D70D312FFC
SHA-512:	60AC4EBDD5E928674E2697409BD2F043221F785F15A4B7AA4B4E4D80975487005A1A6A13F08464BDDC3D56BB8AC6FBE74C570A9097CB14541DDD5D799CD452E1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:17:36-04:00" xmp:MetadataDate="2018-06-25T14:17:36-04:00" xmp:ModifyDate="2018-06-25T14:17:36-04:00" xmpMM:InstanceID="xmp.iid:a4b7649f-006f-e844-9ea9-ae4c195148da" xmpMM:DocumentID="adobe:docid:photoshop:483f02e9-f74f-cd42-a0f2-72ae8c76348a" xmpMM:OriginalDocumentID="xmp.did:e61caabe-9ff0-0341-a874-ebb5d0bb5f6d" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM83.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4787
Entropy (8bit):	7.649601863943958
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJFIGbHo/HH/aFAEEp6+xyahRel7NHn3CVq6gGrhu5:TSu7FhknNI//aGEEU+x9beTH36gqE
MD5:	50E0BBDFBB30AE933A9A74E18730B8EF
SHA1:	1A31B11AEB4611B976A2EAFCB20E4EC20ECF8069
SHA-256:	56FD2E2599A709EFFDDE616A6E4347C5116EE008CB5A4075269890D0452D5FAC
SHA-512:	5569FF10395962773A61C3EAE912E719223681D1DC16EA9BD299984620079B197727F0583F970FD84DFE5EBA2F74623315947B9FF5BDB18F18EA1EFBAF755772
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:18:01-04:00" xmp:MetadataDate="2018-06-25T14:18:01-04:00" xmp:ModifyDate="2018-06-25T14:18:01-04:00" xmpMM:InstanceID="xmp.iid:12e687ee-6a38-d34b-8536-0525fb6045aa" xmpMM:DocumentID="adobe:docid:photoshop:d8320ce5-7404-9a43-aa09-9ff5677570b9" xmpMM:OriginalDocumentID="xmp.did:9b60ea72-2410-684c-8183-d4e2d9649510" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM84.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4820
Entropy (8bit):	7.636351615140254
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJMIykuHo2HH0dAs+qe707Ye15N5MUK1T/b3BmHZd0pYJ:TSu7FhknVuI2Js+W5reT/DBm51
MD5:	049E8030F16CA1D6FD8C55EB0582997A
SHA1:	1DDBE649ABBEB7E1F62CDC0F78DC19E70FA9B8AB
SHA-256:	64BA3BF710EBFBBB137574C2AB4C6BDF9B3388901A96068D411082548CB527ED
SHA-512:	D5BC9CE7A0ED5AB9B7F9BE93F76E7520FFC8AE828BDF7C11B27655CBF847EFB4487745425D8CEAA6E3CDDE4116A1755451E94E38289E629E87E0522DD6F588D1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:19:07-04:00" xmp:MetadataDate="2018-06-25T14:19:07-04:00" xmp:ModifyDate="2018-06-25T14:19:07-04:00" xmpMM:InstanceID="xmp.iid:dba63b2a-a140-aa41-8d4b-7637b17fb22d" xmpMM:DocumentID="adobe:docid:photoshop:268c2a46-4ccb-484b-b928-5b820d6dd1fb" xmpMM:OriginalDocumentID="xmp.did:4774e34c-31be-0f46-b18f-e83f1708e556" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM85.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4811
Entropy (8bit):	7.635750662673019
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJZ4ufHorHH02unNB6Lxnd3UhBBqyjO4xs7MJPYQaKGabn16:TSu7Fhkn0mIrRHdd3U4yjO4eIhbaKvbA
MD5:	3EC3699F239990E75E56ABBDBD652A08
SHA1:	F4DEBF4E6063D3114A6865A9658102F6239B04A8
SHA-256:	1447CE4BDD79DE799EA7672793BFFFFE5FB74C127479BB7F5D2004311C1D9E65
SHA-512:	151F7350983FAF3CAC23CDD68B4DA3597C56552880563EB80776A09435FCF38EB9A75B655E0B57B29F85F6870D49C3AAEAD6201FD620CC88E829EA6F0E815010
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:19:37-04:00" xmp:MetadataDate="2018-06-25T14:19:37-04:00" xmp:ModifyDate="2018-06-25T14:19:37-04:00" xmpMM:InstanceID="xmp.iid:4bcd09ad-9ce2-844f-b2c5-f2c4edc428b8" xmpMM:DocumentID="adobe:docid:photoshop:b20cb4e4-4057-8646-9056-dace8170e468" xmpMM:OriginalDocumentID="xmp.did:34595c3e-663a-6345-b16f-c1d19dbba792" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\FM9.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4821
Entropy (8bit):	7.646063866283271
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ47FhHoGHHuXGDI2DSEiyv9qCyhooYU2VqsXvVQYiyjgHtMKvV:TSu7FhkneIGuybtxqN8VRi6AV
MD5:	0BA419774364FB430F4081714FF6CD8D
SHA1:	C625A982C7BCC063AEEF012CA62E2A14E7C35F31
SHA-256:	554AFAA8D9E8615CB53B1023B01B1714DF07FAE3F278BB1E5A9BBA76EE590FAB
SHA-512:	C01C95DD8CCFAE8AAE4352A943318A98B47040105BB78C42C0BEAAF1CAB636F87EF2FD1DB128AEBCEC2734C611361A824F615D5A0D76CB5B2C49A7B5E3EC3800
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:22:06-04:00" xmp:MetadataDate="2018-06-25T12:22:06-04:00" xmp:ModifyDate="2018-06-25T12:22:06-04:00" xmpMM:InstanceID="xmp.iid:c8c6bfeb-d4fe-8644-9246-f148521b9175" xmpMM:DocumentID="adobe:docid:photoshop:2a571639-9070-4844-bfdc-436703a5640f" xmpMM:OriginalDocumentID="xmp.did:a4ea1e23-01e5-ab42-905a-597746d01bd7" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-0197L.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4822
Entropy (8bit):	7.65467243747333
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ9qJ1hthHoHHHHrB6ikt8D22mncAqEVNhiJC4Z8S+majk4X2:TSu7Fhkny/IHHN6f2mzRMgDfmeX2
MD5:	77903810E17B4433FF79371203F864B9
SHA1:	24C2CC9D84886EE7C6DFCB89E272AEC71B2C4BF8
SHA-256:	31C732626E61C6B5FC920B8CAFC44E583B24CD785BFC6BAA565276D0187DA52D
SHA-512:	403F333905CD81614D5BBF8901DB8B17293D043FDADEE98C260BCC8FC31399C12AC5C32DF77F16E22A1B206E0785AD83690B8F14B69628E0FA0D9C4D79D4DB54
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:16:04-04:00" xmp:MetadataDate="2018-06-25T14:16:04-04:00" xmp:ModifyDate="2018-06-25T14:16:04-04:00" xmpMM:InstanceID="xmp.iid:9e997986-f6e1-9f4a-b27d-d0d5de5289b3" xmpMM:DocumentID="adobe:docid:photoshop:d858b402-bc59-d847-a43c-e3a53e8b8712" xmpMM:OriginalDocumentID="xmp.did:22725dc2-305c-504a-bab0-0ee69a337b5e" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-0AQO8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4862
Entropy (8bit):	7.636594017537974
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJJMwJBwW4HoDHH1gWRsXHqBxOabbImTuDpFK1luG/c8BfIoVqbGU:TSu7Fhkn4ywIDSXKBxOabFTg/olugc+g
MD5:	A45935E38F8E0B7277B998EC8BD43A78
SHA1:	F2282F204129821484790883781F40BDED22CAB0
SHA-256:	717144C1283C03B174B0773B6A0EE9B38989F2890E51B9D5DFA38E4748417A2F
SHA-512:	3A23C5790E635D38E1E8A6B5AD828645C935CB4B89BEE9B99F784446997B6DD48197A5A667035B467AD0F4422431C513CBF86C326B0E5B8BAC9E0B658F95BF35
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:33:51-04:00" xmp:MetadataDate="2018-06-25T13:33:51-04:00" xmp:ModifyDate="2018-06-25T13:33:51-04:00" xmpMM:InstanceID="xmp.iid:69f72936-a44e-774d-8300-e8d8267c27d1" xmpMM:DocumentID="adobe:docid:photoshop:39399dde-9d33-fa40-a81b-7a3b46dfe509" xmpMM:OriginalDocumentID="xmp.did:79db3235-d8df-634b-a42f-e3091073d3e6" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-0OMH5.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4796
Entropy (8bit):	7.612938983738583
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJHPpHHoCEHHYCuNQICvrKPlb8t5obeKKcmQ4itFmbu:TSu7FhknbI5YCuuIYm2spuK
MD5:	F4814E076D850717BA8D79954665EBBB
SHA1:	EB893F33CB2EFF37C96121EB457DE1410AB44F5C
SHA-256:	DC44CA111B4C973053FE9858CE4EE8B9EA151A17B20D1E5B13C3E5B21D01DB1C
SHA-512:	71EEA093A06EB12C315B5B9A81F1763B1D85A72F6B3E4E2100709402BB17FE00AE4E8590D4DE96FDB3843C6FA222B1EDED40EDA2A21A9B10B50F354665E4B1D4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:53:47-04:00" xmp:MetadataDate="2018-06-25T13:53:47-04:00" xmp:ModifyDate="2018-06-25T13:53:47-04:00" xmpMM:InstanceID="xmp.iid:bb3d4a0a-d271-5244-bafc-68b4e6a9e66a" xmpMM:DocumentID="adobe:docid:photoshop:e7a82fa5-b725-c241-afcc-827c2737b91c" xmpMM:OriginalDocumentID="xmp.did:dae11497-2f74-6f43-9227-36efc5611281" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-0SUVJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4825
Entropy (8bit):	7.65930581660963
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJIzOT4kXHorSHHgLwBTGrhoo3xZzG0l7os9JuCQ/:TSu7FhknDT4YIO+mTGrWoh9G0l7o2JK/
MD5:	300029D8F302F3574F4A1270B5C785F6
SHA1:	C3144B321E1F2710B2B1897B969680C3706ADE5B
SHA-256:	73206E759E0F7BD0E52E12997BAA9B493F9716B49F877894190DE56A27091898
SHA-512:	6799E29B33E519C095858C75486524A6ACA6140289ADCC6A72D3DEAD5AEDA605FE59F9C03237C19D679DB46F4453DE8869E592E0FEF7D89B73A2668B8E934E03
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:02:31-04:00" xmp:MetadataDate="2018-06-25T14:02:31-04:00" xmp:ModifyDate="2018-06-25T14:02:31-04:00" xmpMM:InstanceID="xmp.iid:462f997a-359f-a14e-8aae-63ea99e925be" xmpMM:DocumentID="adobe:docid:photoshop:d91f1b44-4176-fa41-87cd-c8fada93c93d" xmpMM:OriginalDocumentID="xmp.did:a540e028-61e5-6044-b18b-17c56f0d3472" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-13CKI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4759
Entropy (8bit):	7.632883610849948
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ1uxWQoXO+QgHoQGgHH/Aby4ABqxCufBbrmE6RCPhD+3jVq5GV8v:TSu7FhknPDXhDIQN/1YCCdrmEqCt+TVU
MD5:	8380762C88EBECE181DCC0021D1B3B72
SHA1:	E41F268F8E842FA5C657B871A2429B7C2FC9DE3E
SHA-256:	7B2FB81E8C03ECA0D4690B52664F605C06BAD935A52ACF7E56F865478AFBDF20
SHA-512:	B862612ABDE5E525CB4033F25A876A22B8249C8BDEEF6B33D305798FF3BC95BBB69C7A4CB7CEA10B60EE5F145875446597427D35F8EAFAFC502069D96A9AEC81
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:38:46-04:00" xmp:MetadataDate="2018-06-25T13:38:46-04:00" xmp:ModifyDate="2018-06-25T13:38:46-04:00" xmpMM:InstanceID="xmp.iid:085836ce-5e5f-a041-8b89-97a1eddf4afb" xmpMM:DocumentID="adobe:docid:photoshop:9c5c71a8-81f5-d44e-8295-81a15d3a9404" xmpMM:OriginalDocumentID="xmp.did:99263e13-23de-ff42-bdd0-d34c49151efc" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-2DH95.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4787
Entropy (8bit):	7.631595033854049
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJfOeHoRHHtogt+2b7hctgbdMnqxZKADrD53c03j:TSu7Fhkn5IRgWNJMIDGej
MD5:	82FE0CC6E8BC0EA4D3BFCFD5A334415A
SHA1:	ED0C01F83B6AED392FC3A402BF4CA99B17A4921A
SHA-256:	019FA585B1FBABE523072DA94F6015CFA46D10E5C6F728221E55AE8E2E1F415F
SHA-512:	A454E2B99A8F4AF36863B8841ECF2D6E9865CC5AE10B95C272EA211BB593736C5912AFC4016514780AED021BD6631D90867147EE6D06FCCD40D943CB06CFBE1B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:40:13-04:00" xmp:MetadataDate="2018-06-25T13:40:13-04:00" xmp:ModifyDate="2018-06-25T13:40:13-04:00" xmpMM:InstanceID="xmp.iid:93ef5170-07d0-4944-9477-4bbd04d7cd94" xmpMM:DocumentID="adobe:docid:photoshop:caa71a1c-bb86-494e-97fe-2ba7e51dbbe0" xmpMM:OriginalDocumentID="xmp.did:df71acca-45a2-254c-a0c7-048a69dbe9d0" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-3BGOL.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4812
Entropy (8bit):	7.637233490715253
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJX1VVmHoNHHJyVecoBpOWBwCh3ghBlZVMXC1iZ4XJsGmO:TSu7FhknryINcvobxSBTVaCMKXKG3
MD5:	4EEF4F56C63F20576130F338D65A3213
SHA1:	6D28A095C737D7CC8318AE61D464A3E9C7F12BFF
SHA-256:	6E1CCE0E37FF1B051E65A28CA8F808CEFD4809A0078BE4C0B7CC1C5B0CC6BEDD
SHA-512:	6B0631012ED4A75533FA63A83DD8732BB3AFE853F30420DB19371E3B672725498ECEF9CADA2E1A25D27BEC32A6B1D8F2349C5AECA4067DA0460590F8C95CD0B6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:46:25-04:00" xmp:MetadataDate="2018-06-25T13:46:25-04:00" xmp:ModifyDate="2018-06-25T13:46:25-04:00" xmpMM:InstanceID="xmp.iid:0944ba39-35ab-a140-bc8f-1ac8c07b9623" xmpMM:DocumentID="adobe:docid:photoshop:227ea5f0-5ef0-df4e-bc07-aabd243c4228" xmpMM:OriginalDocumentID="xmp.did:5e69a27d-0d39-0549-b839-ff65f39b9e46" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-3JPFP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4803
Entropy (8bit):	7.645652628831842
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ9hi2Ho7HH+5e76u38uP3TKUQRn0dKgzzsrdPXPHNU:TSu7Fhkn9vI7+5a729EcdvPG
MD5:	06781BCCA8B8225D95F56355FE280D71
SHA1:	A937CA6872FB45ED4F625CE6A167A6912EEAB099
SHA-256:	83C49DF57F973BAF1242F52B8B1786F2C01D19AD9FEAC514AD34B64E143FCF73
SHA-512:	C942BD99834A759667F6CF31651358AF1237AA0FFFB1ABB8DECE4B79A74CB351368EFD8B3A09E7D0682691F84C7D72F695B926A6EC8CC9811863B536AB26D6FD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:53:13-04:00" xmp:MetadataDate="2018-06-25T13:53:13-04:00" xmp:ModifyDate="2018-06-25T13:53:13-04:00" xmpMM:InstanceID="xmp.iid:7c136573-2ac6-da4c-b690-4e641a8fc9a2" xmpMM:DocumentID="adobe:docid:photoshop:41061131-c3c8-c34e-b135-a47b8068a536" xmpMM:OriginalDocumentID="xmp.did:67080c97-37e6-9444-8a26-dea14a82cd5f" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-3NFG6.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4854
Entropy (8bit):	7.628479190392961
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ5t3sk3JHoZJHHP+vXnTjUxQilBGoAtpdAn7Na3LG5owhteLWdot:TSu7FhknDIZJc3fUxjDGoAtpiQbG5vdq
MD5:	B165E419015AF98DF87CBC38F809583F
SHA1:	177DAD0192A39A61278642978D9352C1887C217A
SHA-256:	9CBDDF09E16125BEAA609C3F6545A0A4A25DDEF6600570D19FCB66CE76EEC605
SHA-512:	FDEF933FAE3AB7E713936C4D0373203E2FD2B5525D3B74820EFC05D33007C2B45D948308C2EE202432FD3C4B240FAEE6069CBB7A0C1152E9579B812039BA5F24
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:24:02-04:00" xmp:MetadataDate="2018-06-25T12:24:02-04:00" xmp:ModifyDate="2018-06-25T12:24:02-04:00" xmpMM:InstanceID="xmp.iid:eec43ad6-44a9-974e-8db7-ee87472cbe84" xmpMM:DocumentID="adobe:docid:photoshop:f8c6d620-3476-9c47-b0f8-f2a76e7d4334" xmpMM:OriginalDocumentID="xmp.did:461d1a5c-5f1a-0949-bb22-2f604c574753" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-4BS50.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4842
Entropy (8bit):	7.636316565757533
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJmXuHosHHxOv+iD9txZhh699M/zasx+FLiU6J/AEnt3V4seN:TSu7FhknVIsRktThw9WnxiiU6J/3t3Va
MD5:	4D464AB7A7DDF0AA80C3ABC4B9110610
SHA1:	A331F6582E527089598AFBBAD4EA78DE14D10A6F
SHA-256:	3D212FEA97604FADBE266890A332BE1CA08EFE04C61E6F9B7AD65BA57FCECA75
SHA-512:	6EE489D8BD8ACC1D1D9FF4862EF09C1F2AE48185C474495EAB3FB0296134B2B491124041E1231CBFDFE1619AA2E0B5E47ACCB97DD86EF5BA25CFBED6EA631423
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:23:13-04:00" xmp:MetadataDate="2018-06-25T12:23:13-04:00" xmp:ModifyDate="2018-06-25T12:23:13-04:00" xmpMM:InstanceID="xmp.iid:1270f9bb-1520-6047-9918-6b2d2b758e1d" xmpMM:DocumentID="adobe:docid:photoshop:bba085cf-ff86-ae43-b12b-8d6e2b68bbbf" xmpMM:OriginalDocumentID="xmp.did:3ec845c1-828d-7440-82dd-117fee962cbe" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-4Q452.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4815
Entropy (8bit):	7.637751697634204
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJBd50AHofHH3CtB81E2f98ibexCHIjXU3sXQ6Qu+Huv9bD:TSu7FhknxIfStB8GzwIbeHs93
MD5:	7FB1129E48EE68274C782E79D1285849
SHA1:	E5DA3489E5B37046F2DBE241346F655B1A26DB5F
SHA-256:	9D699170014D9737FD9D75133E937773BD7D0DFD258D00A0B06DF70AA580A5B5
SHA-512:	17B5469CACE46BDE983C0270388BBDF7F54FEE5ED48E74938E69D074B0618E9D115EAB4387F6132D8930B8A172110A4F1D06FDAB929F22BB8BB138E108EF189D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:59:36-04:00" xmp:MetadataDate="2018-06-25T13:59:36-04:00" xmp:ModifyDate="2018-06-25T13:59:36-04:00" xmpMM:InstanceID="xmp.iid:f06f2ec8-75f7-fc47-afa9-13c4eafdcaac" xmpMM:DocumentID="adobe:docid:photoshop:4ffad209-9bc5-e14e-a7a9-e26b946bdb5e" xmpMM:OriginalDocumentID="xmp.did:3738ca8c-a4cb-e24c-bacf-422f788a8841" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-5E4AN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4827
Entropy (8bit):	7.661322434827015
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ6OLjHoD5HHf2mj87FibJNKcJcsGS2GxCCbonsyJ3FCxZlsWQCju:TSu7FhknRIVuI876LZGSfQmWswIgWfHO
MD5:	24B40878753EAC1FA7183845354CE6F2
SHA1:	264242D60BF08924053DA6A7C74F2FAF96195BF8
SHA-256:	EAE6A56A570999B0CB3779BA5FDDA29FF73F0DFA8CB32942A410FBB2625DDF91
SHA-512:	0771B1C9C03C81501DB3744748BB02BFD0B0E2FF76C090FC03A881F78DE8C0BC527BC8CA4D29E0425F9EFB06AED723D08B564B07915AAB00D4CB2293FA966DA9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:49:31-04:00" xmp:MetadataDate="2018-06-25T13:49:31-04:00" xmp:ModifyDate="2018-06-25T13:49:31-04:00" xmpMM:InstanceID="xmp.iid:884cfee4-22fb-2047-bb1a-d3504d571820" xmpMM:DocumentID="adobe:docid:photoshop:e1b078e8-a863-3a4b-a3da-23a7e7fa0efb" xmpMM:OriginalDocumentID="xmp.did:6a898b85-8692-5646-a88a-b47a07ad5d45" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-5O8JL.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4825
Entropy (8bit):	7.650897928400243
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJmjefHo8HH9HhhSNn0XHQVZ79kIYChfRvOGAJhNeVBs:TSu7FhknWuI8T2nswVDuChfZOGOeVy
MD5:	B85133A88D2DC4080B9E50BB4B4906E5
SHA1:	D2DF164A2DC7970E43A095131F2F78D16FF99C04
SHA-256:	87736FBF88FD5D7F302285BFB94E911C316A92291EBDB0B1638C8C2641C0C933
SHA-512:	825D764E3CC6CE65540C9602866E8F8BBA8056B4D7FF08156DA61C01145EFDDFF5B575498D91FE90BF3A7C0034C13509AAE9C56A5103A7ADD6F7AA9D27296993
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:20:41-04:00" xmp:MetadataDate="2018-06-25T12:20:41-04:00" xmp:ModifyDate="2018-06-25T12:20:41-04:00" xmpMM:InstanceID="xmp.iid:b800a6de-9c4a-7c46-bbc3-bfaf46f05aa6" xmpMM:DocumentID="adobe:docid:photoshop:3d089882-b3f4-8048-98d4-dc4c57276492" xmpMM:OriginalDocumentID="xmp.did:c5f7cce9-be7c-3542-87a9-e6e09b1f4c5c" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-61K3V.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4821
Entropy (8bit):	7.646063866283271
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ47FhHoGHHuXGDI2DSEiyv9qCyhooYU2VqsXvVQYiyjgHtMKvV:TSu7FhkneIGuybtxqN8VRi6AV
MD5:	0BA419774364FB430F4081714FF6CD8D
SHA1:	C625A982C7BCC063AEEF012CA62E2A14E7C35F31
SHA-256:	554AFAA8D9E8615CB53B1023B01B1714DF07FAE3F278BB1E5A9BBA76EE590FAB
SHA-512:	C01C95DD8CCFAE8AAE4352A943318A98B47040105BB78C42C0BEAAF1CAB636F87EF2FD1DB128AEBCEC2734C611361A824F615D5A0D76CB5B2C49A7B5E3EC3800
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:22:06-04:00" xmp:MetadataDate="2018-06-25T12:22:06-04:00" xmp:ModifyDate="2018-06-25T12:22:06-04:00" xmpMM:InstanceID="xmp.iid:c8c6bfeb-d4fe-8644-9246-f148521b9175" xmpMM:DocumentID="adobe:docid:photoshop:2a571639-9070-4844-bfdc-436703a5640f" xmpMM:OriginalDocumentID="xmp.did:a4ea1e23-01e5-ab42-905a-597746d01bd7" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-6E6IM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4794
Entropy (8bit):	7.633122840357468
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJKHTUsHob4HH40R96cqeG9v1drszS9ZWeOiZeBaa:TSu7FhknMPIc+h9vLrsIWZkOaa
MD5:	E27C7B5E84551386167D72A46CCDB284
SHA1:	455E516639A4B4F2554384AC1D4FC6D8006A8B17
SHA-256:	FBAD78BA0162D07AA8F526292A1EB7451BA740366CF51C77224FFA5D1C6C62C6
SHA-512:	2F834747B9BD684A43FA9F5FFA949556F1F36FC8527DC117BD3FF79F8DA9B3A36A5B04FC444388F04F7F0E40611FBB0FD7A098D9209413E8BCC020AE1AFB9B11
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:17:08-04:00" xmp:MetadataDate="2018-06-25T14:17:08-04:00" xmp:ModifyDate="2018-06-25T14:17:08-04:00" xmpMM:InstanceID="xmp.iid:e396702e-ba7d-0d4d-b236-1e2d996c593f" xmpMM:DocumentID="adobe:docid:photoshop:51010921-8c60-9342-bcc7-b7f6a597859b" xmpMM:OriginalDocumentID="xmp.did:ad3b7977-852c-8c46-a4e3-c1dac9872d4f" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-6L17K.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4853
Entropy (8bit):	7.64791494088118
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJkJl5sj5hHo2HH3HLvOtniq9QCXvq6vg5JUOz:TSu7FhknTI23rvkic9XikdOz
MD5:	28F54BC7A54CAF0DDB1842D318145E9E
SHA1:	537634B8479658E2E52B25A39D4C61C690E02EEF
SHA-256:	D8327F3EB3876F131DACFE7248588CA3A4054C1DDFFC08618A83945D35B3B4A0
SHA-512:	B4338ADAE5987046CC0D27AAE82F6059E4314C40A3D517013C5156038A193B711D3F5FC34C615D01BE4389C0D92B4EAA56DC2669C6F04586A2547AF4B441E756
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:28:24-04:00" xmp:MetadataDate="2018-06-25T12:28:24-04:00" xmp:ModifyDate="2018-06-25T12:28:24-04:00" xmpMM:InstanceID="xmp.iid:d74d2516-e634-8f48-91de-fa3985c50c05" xmpMM:DocumentID="adobe:docid:photoshop:4e87fb77-b293-ca48-aa07-b3ca173ad9bb" xmpMM:OriginalDocumentID="xmp.did:9cefbd5a-393d-1143-bbb9-546d3c7453d7" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-717DB.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4881
Entropy (8bit):	7.650610258448604
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJLOxyHo5HHnw8RkM8oMVi0b4z9zQXndvJt80nf/9:TSu7FhknvI5BkM8oamzQXlfnn9
MD5:	F75F6EF3F73D4CDEB6FA6021AE8D6077
SHA1:	BD7A0EB60BD1773796EE10F778F88497AD1A9BA1
SHA-256:	AB56FE24C736780CF141B02A6B8F2C764CE8AD4DABD309615C0E8EFF3ED571AB
SHA-512:	B8236F879F990031AFF1C3478293F8DAA144F228246A3FBCD9CF7B364A866470D0AC9C6D9FC3001643A6527C2E8E8F9AAA913F4E624284954954719F5F6EB2D3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:25:02-04:00" xmp:MetadataDate="2018-06-25T12:25:02-04:00" xmp:ModifyDate="2018-06-25T12:25:02-04:00" xmpMM:InstanceID="xmp.iid:c473bb24-cfd6-af4a-89c9-b69c58024521" xmpMM:DocumentID="adobe:docid:photoshop:765d9e3f-3dea-2a45-a1d5-793ce38cc44d" xmpMM:OriginalDocumentID="xmp.did:ceca68c5-6403-cd45-b044-a2906aad1713" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-73ROJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4832
Entropy (8bit):	7.643443344473485
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ6+7NHosHHLXaHyAXfoOvuDO0x+Y1l496HHP9G/BXy:TSu7Fhkn5IsLXmuD1lgXy
MD5:	78CB5528A8DF71B1507C8CD4319A168F
SHA1:	BAE45D34379FFE031CB050FB2FA1C7E2F2C25D0E
SHA-256:	6FF7280413C2C2D915D26E30D0595E94B99F0F5250BF715C6A698A8EB73F5EA2
SHA-512:	5DD9CFD530B7A768BAA1B4F2B05C84F518314C7B5800E800FD0232F123996210FC10F09156A754A3250D977CD4A57AB73A90C77FA5AE6A4879482807C450E45A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:02:58-04:00" xmp:MetadataDate="2018-06-25T14:02:58-04:00" xmp:ModifyDate="2018-06-25T14:02:58-04:00" xmpMM:InstanceID="xmp.iid:15559fea-c786-454a-bc15-c1c4b3379c85" xmpMM:DocumentID="adobe:docid:photoshop:0b44fcfb-25f2-5a4e-a011-8541a1d1d2c4" xmpMM:OriginalDocumentID="xmp.did:69cb699c-d5bd-6d45-b461-b84f5e820491" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-7S98C.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4795
Entropy (8bit):	7.6305882434065575
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJLcqbtHoRHHtxY3CBcHkQsOnURMmTSZfwL4ObmLIS3g:TSu7FhknS2tIRHA+QsTRMmTcoRM8
MD5:	6E23C0C52615E437227522F0CDC337A0
SHA1:	A1B862449A6846D0A5991BBBC8DAC006A718963C
SHA-256:	6BA038C1807B225491062DADA3340473ED906D4F6CC0064F63D9441175709CE4
SHA-512:	FD34A4A9BDF6C4871DDB7852BD9595B687E065B4256CB4C96C2A4EC6986F58CBD24F3DBE4ACEF4BAEFD520835069AA9CDCB82D6DE9CC3B0B7BD1ACE5E35974EC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:51:09-04:00" xmp:MetadataDate="2018-06-25T13:51:09-04:00" xmp:ModifyDate="2018-06-25T13:51:09-04:00" xmpMM:InstanceID="xmp.iid:6cfa3f4a-8cda-4c4d-82ff-7642c04147b2" xmpMM:DocumentID="adobe:docid:photoshop:a74dfa71-372a-7940-858e-56fb7e62882a" xmpMM:OriginalDocumentID="xmp.did:5f128ed3-0eb1-a046-b667-6a714efd25c7" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-8DQPF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4870
Entropy (8bit):	7.650089163570851
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJlNOMkOATVHomVHHnfu+e1drmxKVzhhqt6x90TjZlZ:TSu7FhknvNOMUVImVnG+e19VlBXOZlZ
MD5:	499E61B5C7D5B67A6435D29834690E76
SHA1:	4D05275FE94B19FC1C03757E9ACC1FD918BDDC03
SHA-256:	85EAE62F4717AD0F14DC7D86436E0DBDCC6561C0D92BE3C02CC2DB44ED75CA8E
SHA-512:	D3D82CDD0D6C2E16913390289596952546F9864B73B50303779ED0D8BC75E901BF2A2D960CC57F1506DF3A5E89207C400E34CE372AD81795640EEC391C43D087
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:25:44-04:00" xmp:MetadataDate="2018-06-25T12:25:44-04:00" xmp:ModifyDate="2018-06-25T12:25:44-04:00" xmpMM:InstanceID="xmp.iid:9cff0692-8a24-3945-9517-5194921012e7" xmpMM:DocumentID="adobe:docid:photoshop:a94f18d1-1077-2d4b-bb25-a338ca370a6e" xmpMM:OriginalDocumentID="xmp.did:af49a8be-9990-ee41-bc92-0e8f6afe10a5" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-960AF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4800
Entropy (8bit):	7.619912195291947
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ0FkHsHoJVHHyaTuK8Gzxpzqoy4ml47ad/1yce2UVBVeZkR6:TSu7Fhkn+bITygu7G1pzbm676CVBEZj
MD5:	DDB043D3B47D8B3ECCB3BD3B35EC56CE
SHA1:	A6A629DBEE9DCDABF4F2BAC788DFD6DA34C5A764
SHA-256:	9F7D6CA128AD6EF2F5B0A72FEBA9FCBE3E5931131615B26994EBCB4B8AC4BF74
SHA-512:	69E85E389AB764A1F958A3631142323939E802B0898746223A71C2254CFE01538C9A175B0E9AE0F1E093BD6DFDD53469C17E6595A2092E403378ADEAB653F58C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:37:56-04:00" xmp:MetadataDate="2018-06-25T13:37:56-04:00" xmp:ModifyDate="2018-06-25T13:37:56-04:00" xmpMM:InstanceID="xmp.iid:c0c8df0c-598c-2245-a3cc-73485b720c67" xmpMM:DocumentID="adobe:docid:photoshop:60a8312b-4b8d-d14f-98bb-d1691ca66199" xmpMM:OriginalDocumentID="xmp.did:5f86c47f-7dd2-3647-b557-0bb4f4a76d30" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-9FDKF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4827
Entropy (8bit):	7.642252989307748
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJYtvjHomHHDknNSWk/uc28Q/eSKAhP28dGc1yDK6m7:TSu7FhknMImQnsOc2868u28dGcEGT7
MD5:	E5620CE9B694ECBD565EEA65FD809360
SHA1:	8690E8CFE29C0558E90941049CE0D9B8FD2CEE71
SHA-256:	610B93CA51DD45FDF88425D18E5A664D49F35636FADA57F1CEA855780E3A2140
SHA-512:	D19FA33F094A3CB21F23ABEB7FD344F327B4C5C2660E24BF183E073204378E1AC53E098787C3438F1C4B9EF716E40235DCF4416BABF8A28D4813481E6CFE0466
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:47:12-04:00" xmp:MetadataDate="2018-06-25T13:47:12-04:00" xmp:ModifyDate="2018-06-25T13:47:12-04:00" xmpMM:InstanceID="xmp.iid:82ca1e63-1a95-a04a-bba5-af1dfd05d4a6" xmpMM:DocumentID="adobe:docid:photoshop:4f828590-f89a-ca4b-96a9-dd14549031b1" xmpMM:OriginalDocumentID="xmp.did:8fcd0ba6-eccd-054c-8859-abb986ccb609" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-A1UGG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4832
Entropy (8bit):	7.656479771677384
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJFGQd1HoGzHHe4HPDyk/N9lDJcq0Rbas2PE3MO04WFW:TSu7FhknrIa1HryS9lDJcqFBSMO04WI
MD5:	75C75CBDC3606425FE62C5C40E6B953C
SHA1:	957D624294035D76F394096CDDBCA403D9B5D889
SHA-256:	2834404390C51EDCAE01405355C864B16D562620866321B229FB2AB7DE3FC96E
SHA-512:	8A6040D9D99598AF250C76891D2B76C2689E7C3699A8B8830375E0D5436C4C963BC97BA3F49804D41590D62D03DEEA45157AEFF2C55A8B3704925D90E1F9A976
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:37:18-04:00" xmp:MetadataDate="2018-06-25T13:37:18-04:00" xmp:ModifyDate="2018-06-25T13:37:18-04:00" xmpMM:InstanceID="xmp.iid:ed268c0c-5dba-9e4b-a9a4-a1dfa0416ef5" xmpMM:DocumentID="adobe:docid:photoshop:a29bf0b8-62d7-3c49-a171-6603da8715f2" xmpMM:OriginalDocumentID="xmp.did:48e578e9-d77e-6848-89ce-25951bff9560" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-A3NMR.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4787
Entropy (8bit):	7.6265761366322
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ1nVjHoLHH2qEv359QfobkzIezILjfNwCnF30zVQSNoBnjKprj:TSu7FhknpIL63CZfEPfNlNhSuBjKpv
MD5:	4D6EE4971E241F1B8F2806E310847F5F
SHA1:	B4672ED636459E7F7E5CE6CEC607CA51A6E6B4F4
SHA-256:	383F70D07DEDBDCAAFC8836D6D2295016F00608001492EEF47EB70D70D312FFC
SHA-512:	60AC4EBDD5E928674E2697409BD2F043221F785F15A4B7AA4B4E4D80975487005A1A6A13F08464BDDC3D56BB8AC6FBE74C570A9097CB14541DDD5D799CD452E1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:17:36-04:00" xmp:MetadataDate="2018-06-25T14:17:36-04:00" xmp:ModifyDate="2018-06-25T14:17:36-04:00" xmpMM:InstanceID="xmp.iid:a4b7649f-006f-e844-9ea9-ae4c195148da" xmpMM:DocumentID="adobe:docid:photoshop:483f02e9-f74f-cd42-a0f2-72ae8c76348a" xmpMM:OriginalDocumentID="xmp.did:e61caabe-9ff0-0341-a874-ebb5d0bb5f6d" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-B1FNS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4855
Entropy (8bit):	7.655691970435625
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJJtkepcJHolJHHoffPA3o+oyx5TVG7nfhi9cgrBI1k:TSu7FhknWIDCYYy3V+nEcuv
MD5:	F16102A7C40E19AB0A58BA1E6EA9225B
SHA1:	4FA7F876760D9C81C8E93244AA67DCDCB8241C29
SHA-256:	8D774B66D11D4764089E02503303EBCEAAD22402FE8E0482DD8333E30A941566
SHA-512:	3FD8F21154139D5B55EF7526682A7359AF7702749A0DCAD196D280708C0416347DEC43DB71A884474760325B664B098C2A81486788CF67C78DB824CEF780B0AB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:29:53-04:00" xmp:MetadataDate="2018-06-25T12:29:53-04:00" xmp:ModifyDate="2018-06-25T12:29:53-04:00" xmpMM:InstanceID="xmp.iid:a31e0038-a116-944c-9a1e-539691d2cbe5" xmpMM:DocumentID="adobe:docid:photoshop:129d0333-61c5-0b47-bccc-0da45607e251" xmpMM:OriginalDocumentID="xmp.did:12f87403-9ad8-a645-8fa5-2128a43aef9b" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-B9OJB.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4789
Entropy (8bit):	7.6447674815745605
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJJkrWdHoW3HHB0OYyT3gNd9XShYZqZSNTtSF8DWXMw:TSu7FhknnuoIW3BBYyT3w9XShYBJ4Fv1
MD5:	A4DDFC59B4FF1DBB9501A4D19083A4B5
SHA1:	AB2C3BE0B726B80087EF0F01B16DE73002EBBB88
SHA-256:	C9F32300FF47844F60F9CD77796704D6DAA7601F72E5C4F4A38A3B35B4B495A1
SHA-512:	5D1D489C0A2709849C12092032F9D95CCD281CA7B50E20F0FD833E6AA875A110B7517AC7D0BFAA661BA7739795F29C0F55A098FE2D1CBC035E673C30F59442A0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:09:14-04:00" xmp:MetadataDate="2018-06-25T14:09:14-04:00" xmp:ModifyDate="2018-06-25T14:09:14-04:00" xmpMM:InstanceID="xmp.iid:540a8637-3360-724e-936f-6f61a34222a0" xmpMM:DocumentID="adobe:docid:photoshop:8bf75084-f5ce-1640-96e8-d86bc43fcc41" xmpMM:OriginalDocumentID="xmp.did:ccf91b08-06c3-4b42-ae96-2585e2cd58fa" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-BG9KP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4787
Entropy (8bit):	7.6228460052747575
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJkB/oS3oFHoWHHCdfzf1C632BDDEN4XXVBR8FISo:TSu7FhknnIW0zteo4XTRp
MD5:	BB49426E18B14AE196702B9A319AFFB4
SHA1:	A0411F6513F774F42F2E3C54445F8D286B8EE36A
SHA-256:	25CC1E59ECB2E0B75C7C0CD3E85609DB47F426A2F4166E6B91B47FADE407C226
SHA-512:	04773C38C6F767D84316BDEFD2729C92CED75ED44B896B7330E3D391679E7089A0C61F17A93A9775E399C541B0A4365BEA13FB315DF5431652D2B6B2F62F7036
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:45:08-04:00" xmp:MetadataDate="2018-06-25T13:45:08-04:00" xmp:ModifyDate="2018-06-25T13:45:08-04:00" xmpMM:InstanceID="xmp.iid:efee2110-c68d-cd4c-8e6f-602bf4463703" xmpMM:DocumentID="adobe:docid:photoshop:d036b816-ec63-7145-b8d7-bc0de808e4d5" xmpMM:OriginalDocumentID="xmp.did:7744eea3-0cff-9c44-9a0e-c366642d9a3c" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-BIG95.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4848
Entropy (8bit):	7.644902160189613
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJukksS6HoJHHcY7enpNFo50eUBLiDkfD8sXGPE6kBWDfO7RIt:TSu7FhknEcIJcY74NCmHv/6wdIt
MD5:	2984925F70C1283122058DB10D3B614D
SHA1:	6B3C9E055482005F5C1B0115592C76D59D46E7AB
SHA-256:	B0FD9023B704452B53E18092BE06C1234F59D1BA38A44980F19D238FC3487054
SHA-512:	5FAD1D189EFA74CD80B3B9A725D9754CD5B6C4CD606012FC48528A666C8B80EF19922A3FF07918D91E369AF8EE28EA5F94D2559981366D48FDCC4F56E48ECBBB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:54:34-04:00" xmp:MetadataDate="2018-06-25T13:54:34-04:00" xmp:ModifyDate="2018-06-25T13:54:34-04:00" xmpMM:InstanceID="xmp.iid:b5555832-b85e-9644-9615-52fe27c27d97" xmpMM:DocumentID="adobe:docid:photoshop:62666484-68a9-9b4a-aea6-8f0383d9c2c1" xmpMM:OriginalDocumentID="xmp.did:cc325df3-2b73-1c4d-9676-fee364e7eeb1" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-BIPR2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4810
Entropy (8bit):	7.643211744289767
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJfIlRNHo+RHHvohqOTkGBvh4pMtccTQ1pbxvKeeSQy+2Vq6lNW4k:TSu7FhknoIawoOXNha4IpFvISQSVNH+5
MD5:	E572759AB9707630E854E81C99583CC5
SHA1:	05A4ADCFF86EB6CCF0AB24387DD17DC7E93B9255
SHA-256:	F80DA55B6F42FFA6CE8FA8AB7E4C3344E31B2754F88CBAE33A07EB80655D84EA
SHA-512:	E2D2A8BAFCD200B2D1EDB377353CB6F9216A09945A8DD90F38CDDEC2F3C976641265C88AF22B2E4ED47AC49B0B91E3122AFA411F84D29BC3D21ADE014FA784B0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:49:59-04:00" xmp:MetadataDate="2018-06-25T13:49:59-04:00" xmp:ModifyDate="2018-06-25T13:49:59-04:00" xmpMM:InstanceID="xmp.iid:a20eae66-0953-3246-9f3b-4af1072a955c" xmpMM:DocumentID="adobe:docid:photoshop:aa74563f-d13f-ef42-8c94-c04ddd48b041" xmpMM:OriginalDocumentID="xmp.did:4b9b949c-8bdd-2f4a-8eca-5828ad79169a" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-BS12G.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4861
Entropy (8bit):	7.66200232927157
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJvI9nwMHo9HHfA6nU72h2PuKh6i2SSTVqjsfDGc4RbZkf:TSu7FhknYwMI9fXnUyUPLsiJ6IsfaJRi
MD5:	1FAD7BB413BBCEA6162FF1B354D08483
SHA1:	F0F920F7E3A64DC0EBD781BA0D401E6B9B285A55
SHA-256:	0C02B8565D4A68AE279934C501FF85E3068B4B49D68AE42C72CDB2B5BCC5B39B
SHA-512:	B18F04730948F34CBFC5498E27BF1419BAC35A299FA7A4C2A7B69050F85099AB52AD5F36D92C8A17778AEED3AA2DEA5E10FEB3A6800096CF12DB347B3A4D8935
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:11:44-04:00" xmp:MetadataDate="2018-06-25T12:11:44-04:00" xmp:ModifyDate="2018-06-25T12:11:44-04:00" xmpMM:InstanceID="xmp.iid:f9829e09-b2bb-6c4f-8878-4c54018efa13" xmpMM:DocumentID="adobe:docid:photoshop:46c6023f-d594-d74e-907e-20aef0d6ceca" xmpMM:OriginalDocumentID="xmp.did:54fa310d-97ac-ac40-966f-d219b2c8fc28" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-C8D8O.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4820
Entropy (8bit):	7.639043881636328
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJSMdM8eHoaWHHj0Ix2Vo66ThgxF3Gbz4o654I8KL3qLou7TaJB:TSu7Fhkn09IaWj2W6whgD3GbzJBI8S6U
MD5:	6CDF7267FD133E17374A87133F0FC247
SHA1:	52B208D2564C7F3986FC10931E90BD771625674C
SHA-256:	FFF4EA5C54CDF85CB66A49BE89EFB9FA9143E536A6045283213856F9928926C7
SHA-512:	301536EDCEE8052124C01B5C7187E8623A9AC969098A633BC838B0229B2E6F241AFEDC4B62AAB288D19F2C96331AF73C6A11CD55260B6257634A176FEE6E6906
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:48:28-04:00" xmp:MetadataDate="2018-06-25T13:48:28-04:00" xmp:ModifyDate="2018-06-25T13:48:28-04:00" xmpMM:InstanceID="xmp.iid:d1ee3274-b3ff-7f48-a2af-864b8b58c8dc" xmpMM:DocumentID="adobe:docid:photoshop:bee3c556-1f7e-9147-b3a2-404a1e71db3f" xmpMM:OriginalDocumentID="xmp.did:f45d4f16-ba6d-d04f-aee4-08de34706caa" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-CET98.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4787
Entropy (8bit):	7.657688803264164
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJtDDCHo3HHfBqy7qUitzJd/VJpSJ8byMAJlk:TSu7Fhkn2I3n7yzT/48bpAHk
MD5:	AC53305F50F20D9BC8B19CB1AF63C31D
SHA1:	58D9DDF5CE5112A4863A6245571063618E6380A6
SHA-256:	1ABDF8E5F1312136D1B3579328FDCEACE484B54E340C0E4A8BC423FC01DB18E3
SHA-512:	D9837D61FA917EA1C714DFC552198EE702981604E2668BEFD1F76598C022397EA152B7D3DF0FDA45AAC1D0BA63B59BA7097516E0D72C02D114F4FA273C3FA4FA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:04:58-04:00" xmp:MetadataDate="2018-06-25T14:04:58-04:00" xmp:ModifyDate="2018-06-25T14:04:58-04:00" xmpMM:InstanceID="xmp.iid:c018b733-c60a-c748-bba0-0e31e06caa4c" xmpMM:DocumentID="adobe:docid:photoshop:c8786131-1f2a-d445-bd50-18d8fa823cdc" xmpMM:OriginalDocumentID="xmp.did:8a07e985-cb33-4a42-89d4-90afda55a4fa" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-CJ3NF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	5558
Entropy (8bit):	7.479797809763051
Encrypted:	false
SSDEEP:	96:TS2o7F8knGLWpJKw09NMHo9HEglHhrDYG0WHXVTkNla7c4gaJunQSw5jlEzLljkY:TSX7F8kndI91DdkN14bfSZzBjD61uJN
MD5:	9ECB1724633DC71EB9DE4D371097233B
SHA1:	A76F1756D52E1891A3CF74DF0AD78C3FBD107FF5
SHA-256:	A82CEAFA1AF636C03819493993ED2E08462C7C29DED29B0AE345ADEFA306254D
SHA-512:	A6A98242071F848766377783244734C8B54EAF9694E1C67EF9F7322F8F144F31E89B4D905E8FE78C0935E785EA54D26E2F29201270491C83E565F3ECBE605545
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:55:03-04:00" xmp:MetadataDate="2018-06-25T13:55:14-04:00" xmp:ModifyDate="2018-06-25T13:55:14-04:00" dc:format="image/png" xmpMM:InstanceID="xmp.iid:90faedc6-4b9d-1547-b9c7-5d7a65415b5e" xmpMM:DocumentID="adobe:docid:photoshop:8235ba3b-c33c-4d43-9ba6-206b9899d0f8" x

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-D866C.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4854
Entropy (8bit):	7.629916495079643
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJiIQHo0HHt3oqkiEIDofuqQszlTyS9k/zE+ZmkUoA:TSu7FhknEI0doqO5I81xKzE+ZBA
MD5:	6C0046C73BA4BF75DF7AB4EFC43DD433
SHA1:	70736F8AE0AE97C526C2B4BD6FCA5A7736ACB5E2
SHA-256:	C8FC6ABE8BC980F8637E24556BF2548D3627D9B6C89E84FAD3CBA8ADB6D4D8B0
SHA-512:	8BC4873046AB7FD6BA8C2E6927DC399F06B13A68FB93A65869FA49A58596150FDCCF313D564E7307A506C723D8A2A4C75EC4BD5B31FA79D5451BEC333AC73050
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:09:36-04:00" xmp:MetadataDate="2018-06-25T12:09:36-04:00" xmp:ModifyDate="2018-06-25T12:09:36-04:00" xmpMM:InstanceID="xmp.iid:bb259f01-655c-e24a-8fb6-56aab636e3b6" xmpMM:DocumentID="adobe:docid:photoshop:682209dd-dfa9-f149-ba63-71955efe23c4" xmpMM:OriginalDocumentID="xmp.did:a945f070-e412-484a-a0af-c0e862327baf" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-DAIIE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4818
Entropy (8bit):	7.65439336097386
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJPkBHoJHHiWgBTHlkrMYUsM7O2IRNnfaMcwzjTUDmmHbthvDeXu:TSu7FhknYIJiWkTTOHlfDzzPHm7reXu
MD5:	A70BB2FBCFC660689B557850097338C5
SHA1:	6E83533BA6D68E87444B1C9AB44B5A3460A3BD68
SHA-256:	B35B602C7C8499D93A694DB0E8B09AB4368BD2558D656BC633E6F3F107EBB2E9
SHA-512:	C2046BF4063150B12F898A5D250E3ACC7A18F45DDA7EAD24710090ECBDAB69135682343C42164EDA7CEDF2B75B39DB2BB9AC218386E0C3575033D93DFBCA2CC1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:13:12-04:00" xmp:MetadataDate="2018-06-25T14:13:12-04:00" xmp:ModifyDate="2018-06-25T14:13:12-04:00" xmpMM:InstanceID="xmp.iid:ade057e8-0d53-0945-9362-47d07a01c1ba" xmpMM:DocumentID="adobe:docid:photoshop:77572fc6-4a58-d040-969c-dca2ecb17bd0" xmpMM:OriginalDocumentID="xmp.did:158388e9-d3fc-9846-a5bc-1d23cbd86705" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-DBSPT.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4787
Entropy (8bit):	7.649601863943958
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJFIGbHo/HH/aFAEEp6+xyahRel7NHn3CVq6gGrhu5:TSu7FhknNI//aGEEU+x9beTH36gqE
MD5:	50E0BBDFBB30AE933A9A74E18730B8EF
SHA1:	1A31B11AEB4611B976A2EAFCB20E4EC20ECF8069
SHA-256:	56FD2E2599A709EFFDDE616A6E4347C5116EE008CB5A4075269890D0452D5FAC
SHA-512:	5569FF10395962773A61C3EAE912E719223681D1DC16EA9BD299984620079B197727F0583F970FD84DFE5EBA2F74623315947B9FF5BDB18F18EA1EFBAF755772
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:18:01-04:00" xmp:MetadataDate="2018-06-25T14:18:01-04:00" xmp:ModifyDate="2018-06-25T14:18:01-04:00" xmpMM:InstanceID="xmp.iid:12e687ee-6a38-d34b-8536-0525fb6045aa" xmpMM:DocumentID="adobe:docid:photoshop:d8320ce5-7404-9a43-aa09-9ff5677570b9" xmpMM:OriginalDocumentID="xmp.did:9b60ea72-2410-684c-8183-d4e2d9649510" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-DMGA0.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4793
Entropy (8bit):	7.632446642918616
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJExHHoOHHsZbfZur9kuv653GFTTCn0I0CozWp3nkH48VCp5s:TSu7FhknAIOs5USGFTUUa3viCs
MD5:	11BD5B0400E2FF21611CE0A76C28E1E6
SHA1:	6BE9FCF607D9CBAE089A35FF7EDE0A88C30EC0C1
SHA-256:	58B8B450001923315FED898A222DE4753CDD94E4CBA6401BDEFA492552545A60
SHA-512:	A7F736A4B1BE2BAB922EFDCA59FCCDF4C5C8CC476276B430590AB863D02564FD7C70F1F38624D4DBBD709B6CF9A3E589FAF3F5C39D8EB18F64BC1EA941EF0D8D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:06:47-04:00" xmp:MetadataDate="2018-06-25T14:06:47-04:00" xmp:ModifyDate="2018-06-25T14:06:47-04:00" xmpMM:InstanceID="xmp.iid:28e63791-9df0-734b-98af-565cf4a2fe6b" xmpMM:DocumentID="adobe:docid:photoshop:77358267-6a9a-eb4d-abe9-f940596eb193" xmpMM:OriginalDocumentID="xmp.did:e592e458-a481-de4a-8bc4-9fb63599ca34" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-EAU74.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4857
Entropy (8bit):	7.651841683347114
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ1EFM5oHo/E1HH9SxtsIx1+XiIMLz1egY9FbZ6T2Q0kNaUUPMACG:TSu7FhknAI29VMLIgEXS0rLXCG
MD5:	75FEA940D4326879D606B23F6EE0384F
SHA1:	C5C06ED6CEFDCAD639C555B8A6B3D07CC4600EB6
SHA-256:	33E15B0F04DBA034B7223268CE9058544E24D9DC5E5D7C443299C16BE32E97D2
SHA-512:	D2BC87209F00531773A35D818B7AD6E3F883CE87CAB4472F6DED7C2B2F51FD652C134D8F4646640DE9E5BB78999F0E2906EA0331CFD7E12EC2140907E670F825
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:59:02-04:00" xmp:MetadataDate="2018-06-25T13:59:02-04:00" xmp:ModifyDate="2018-06-25T13:59:02-04:00" xmpMM:InstanceID="xmp.iid:c4457206-0718-874f-9d60-074bafff549f" xmpMM:DocumentID="adobe:docid:photoshop:8fec91c3-d79c-c248-b5bd-a17b5429de19" xmpMM:OriginalDocumentID="xmp.did:840e1e20-e5f8-a244-864a-9be7f447b161" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-EFSTT.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4792
Entropy (8bit):	7.626464522006364
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJCIqVol4onHoIHHL+AQZGfQLSs16GKwJoPty3dB+Hkvwy2aBUfu/:TSu7FhknYdmIILF/kS66GKyTtB8yzUhS
MD5:	F2BB13F434814FF80ACB7F81D1D7CEDF
SHA1:	1DF574B029C75669D8C34431284B6FB5111F75DE
SHA-256:	B7F56ABE383910EAEA348162495950AB528E85E59811A5AAE4830AA7859FBD77
SHA-512:	85A33AEE8F3F96F43F0586822355E3EFC84BE5A6E2981CC8B1DACD0F14D4C0D5C34653EEEF007D69512EA1487C4644333D7706D9B535CB2756A3744D30718CB1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:07:35-04:00" xmp:MetadataDate="2018-06-25T14:07:35-04:00" xmp:ModifyDate="2018-06-25T14:07:35-04:00" xmpMM:InstanceID="xmp.iid:ed259370-c8fe-5b41-9c0d-4c4d9df0ce22" xmpMM:DocumentID="adobe:docid:photoshop:d20b65fe-1083-e240-9b1b-26a899e60e1a" xmpMM:OriginalDocumentID="xmp.did:cf28a91a-e433-0145-9938-d4f2b29458d1" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-EGAAV.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4840
Entropy (8bit):	7.652254408040911
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ2b8HoEHHX4t7Dig+6Vq0Ttia85PdbhvlKzw:TSu7FhknXIEX4tqAVqxaSb4c
MD5:	658E8DD0B70CF02DF2A0D049610634BB
SHA1:	41CCEF0F913DEA6757B0CE089C4F9785BEA2C54B
SHA-256:	D239DA4578F22A961D714D01995DA5EE1CF4D29407DA8D5416C9148707E1B1D3
SHA-512:	39C347700F101B7E2265020DEF181E9C65270533EA13AF47F5EC954B2896CA5CCF42A3E3F811A2642B142D3E761BD4C577861E7461739D51C59157040D2745C7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:11:03-04:00" xmp:MetadataDate="2018-06-25T12:11:03-04:00" xmp:ModifyDate="2018-06-25T12:11:03-04:00" xmpMM:InstanceID="xmp.iid:dfb7655f-c926-5c42-8579-b7dd39a5e91e" xmpMM:DocumentID="adobe:docid:photoshop:68ba3767-6931-7246-8c80-6d6cb9c3b319" xmpMM:OriginalDocumentID="xmp.did:881f17ce-10b7-b647-830c-7b3d515f2657" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-F4DVN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4829
Entropy (8bit):	7.634371390227389
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJY59HoaHH1TXNGA+2M4jlGYDNLhhQ2LUHaBRX6rMF1++9:TSu7FhknSIaZXP+2McNbmaB3FB
MD5:	87936B4AFBA987A08D1DD3669AB7032E
SHA1:	6179D1C5DC825B4EBD87A3D665491507314F3C05
SHA-256:	DFD6C4EBC93E3FC0BBE1A4E535A18077D981CDABA4DDAFEAE01CD1E1FE734430
SHA-512:	733458AC907CE8D0C95CAC73D3EB282075AF0C4689389F3416FBB0F1F0C788B04FEB8FA07400C6D5D39961568B3947D2DF30C9E957AF6442683372FBACC3103F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:49:01-04:00" xmp:MetadataDate="2018-06-25T13:49:01-04:00" xmp:ModifyDate="2018-06-25T13:49:01-04:00" xmpMM:InstanceID="xmp.iid:f1710942-04a0-9945-992c-9ecaf7b05df8" xmpMM:DocumentID="adobe:docid:photoshop:4926a722-59f2-8f45-b445-481a343e57e0" xmpMM:OriginalDocumentID="xmp.did:77f31f95-3cc9-e24e-9c1f-763b085ead3e" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-G5UPD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4827
Entropy (8bit):	7.6357616045808925
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJnoJOHotHHNxLhzeXiSOYnwOS8+vKx/GnO68ayAJl37GMAmH3zfK:TSu7FhknW8ItPhze3tS8s0ec7Wl3iTmm
MD5:	05701B3C22D2F99294A67618C47953D5
SHA1:	8C23216DC47DDB0BC301C9C8180BB08C44D83E1F
SHA-256:	3C0EC5B1AFA417048C85FE28F5DC866FC182D754C8EE768850BAED3814232D0F
SHA-512:	E56DBD941435FABB27DA78DBE76553AA69A8B1DF3D6B5A645CCA7A93B84C9182F711F87037F32A47340CD2B1B058DBD6EF717447E15672BB724117077609C218
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:14:50-04:00" xmp:MetadataDate="2018-06-25T14:14:50-04:00" xmp:ModifyDate="2018-06-25T14:14:50-04:00" xmpMM:InstanceID="xmp.iid:d555fb2e-2b1d-4748-bbe9-d5672377ecbf" xmpMM:DocumentID="adobe:docid:photoshop:9f5f2549-fabb-2740-89d5-03e19cfdf8f7" xmpMM:OriginalDocumentID="xmp.did:4f01b9cc-1eb0-6942-87fc-f19456158f04" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-GHJ9H.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4800
Entropy (8bit):	7.6353419246942655
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJvxJkBgB2HozHH476SMbrs/lvGZxJvoJ8QDTBaun39ZuhAM6:TSu7Fhkn5QE2Iz476SMbrs/AJRXG3+aF
MD5:	DE3522D512559BF838B3D291396F0957
SHA1:	863993961568E9BB7071436DA887DA9E93DC1AFE
SHA-256:	949C757D3EA26B52A229DFC9D2536A9E2615A21A2EA316B05FF86A3ACA3CFDBD
SHA-512:	DE9EAD7048DCE350138FE45D65199A4D5B3FC06F84546DB939BFDA4BA8B254540377BE881225BF135F62BEA7AF3FD7C4CD1934DDC62C31F8D8744B726E4574A2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:09:50-04:00" xmp:MetadataDate="2018-06-25T14:09:50-04:00" xmp:ModifyDate="2018-06-25T14:09:50-04:00" xmpMM:InstanceID="xmp.iid:d501ed4b-c898-e44b-8284-104d9c57d260" xmpMM:DocumentID="adobe:docid:photoshop:6364df38-65a0-d24e-a428-fbc5581c0471" xmpMM:OriginalDocumentID="xmp.did:23791f91-4982-7245-b493-436880627b6f" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-GJ5U8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4815
Entropy (8bit):	7.645238881729256
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJrkk2mGHosrHH55M3cGk77/MnBo4y3zr8o0vwnYaXmZOpw:TSu7FhknNmIsrjM6/OBO3zr8o0vKWspw
MD5:	61679B8A5BB3CD3F06F7F1DD04D3DF3D
SHA1:	155B15182DC0EB9A1D0F3AA6CF59CCFEB15EF10C
SHA-256:	140B42EC2AF78893C19BF64F013FCB129D6C215A64A1D08BF24955D5C7576D7B
SHA-512:	80C4478E551C8A8737A8DE76D85B189D10DE981ED701272F372055FBD38B6D898498CFE82F06AD1811CB9CCA94D7014506DAFF9B11F29E0F1A20ACC5E7E5E522
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:51:59-04:00" xmp:MetadataDate="2018-06-25T13:51:59-04:00" xmp:ModifyDate="2018-06-25T13:51:59-04:00" xmpMM:InstanceID="xmp.iid:21c26f56-9ed3-224d-9ff9-d90c8c7787f7" xmpMM:DocumentID="adobe:docid:photoshop:8b3af00a-4007-144f-9e3f-48c4f64956ee" xmpMM:OriginalDocumentID="xmp.did:ed5267aa-d55e-8142-80ca-d0c8a21e314e" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-GOM5S.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4782
Entropy (8bit):	7.620178373676546
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJOG9MKHoQHH+jjmrsp5X+W83qtj1fo4xZVB0QflPPSvqbq3A0vHH:TSu7FhknlKKIQ+yspu6XVmQflXSvVtH
MD5:	8F42C5D7AFBD07A8F1F790FB5ED64125
SHA1:	4FC0D35D58153188C44401C7BFA79043D7E2D2B0
SHA-256:	F7021B68742BBC57337A792839EF41F2CEFB893D006EC05D4BFA5AE975940801
SHA-512:	4440389A37DC7AD04B15F625776C771F9B314FC0017DF6D8DD90181031D70C456D3094FC526B4F2004764D7A7445155A1C31AD4CE7F72A4ECA217AC57885CF7B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:44:10-04:00" xmp:MetadataDate="2018-06-25T13:44:10-04:00" xmp:ModifyDate="2018-06-25T13:44:10-04:00" xmpMM:InstanceID="xmp.iid:1b94d567-f8a4-e549-9d24-cfeadfc50b0b" xmpMM:DocumentID="adobe:docid:photoshop:96ca52c6-7797-0c43-882e-fd22a447a6ae" xmpMM:OriginalDocumentID="xmp.did:6b4bc716-9c84-7344-975e-803e2485ab6f" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-GTKFU.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4858
Entropy (8bit):	7.656848771970889
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJansHHocHHNSTfBXWkpjwgyDWlu9XnyAqmB+3:TSu7FhknQUIcNSTJvWggbq3
MD5:	314D92A5C36A6BE4EB4A8A279709CCFB
SHA1:	34FFD9DCAA34218C8087A62A5D2415816E26DEE2
SHA-256:	1D6C8A957A29931B143FF7F3E8484C47EDC70750CABFB1235F17EF86FF5AC559
SHA-512:	EE9979CF9906A639E41C34A119C96B057C3ABAB7F3B45A51FCCA07094B02552A0B24845BBBF0EC0ED9FF34FB5170376C090881095AF0A34A2C4F4F481BB60935
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:10:21-04:00" xmp:MetadataDate="2018-06-25T12:10:21-04:00" xmp:ModifyDate="2018-06-25T12:10:21-04:00" xmpMM:InstanceID="xmp.iid:996d68f8-83eb-d54b-96e9-9d43d480273b" xmpMM:DocumentID="adobe:docid:photoshop:60d71927-ae64-964e-a17b-d023a21debdd" xmpMM:OriginalDocumentID="xmp.did:654cf1d3-d8a0-4948-9e3f-c576fe5138ab" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-H5A91.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4842
Entropy (8bit):	7.6495144883243755
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJeuMUHoAHHv/wE3rPfpTSAqs9xG12GSSo1/jhO:TSu7FhknFIAJPfQTs9xG12e
MD5:	51725C5811A563E04213DF158A028364
SHA1:	86C0F85793F46409BC9307F19CEA31B09A9F5D60
SHA-256:	0105E279452BD83529D1969B541A006BCEA400D4DB8A09CE10FA1DD5DC691814
SHA-512:	4BE2BD9758BB34AFD882786555D25895252E8BC7EA12323DDC10B49BB56E722753C747637783C1049589AD6E27FE9361C82542769C4DB2D001B1431C2EB3698F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:00:22-04:00" xmp:MetadataDate="2018-06-25T14:00:22-04:00" xmp:ModifyDate="2018-06-25T14:00:22-04:00" xmpMM:InstanceID="xmp.iid:e99e61ef-4d4d-b849-a66b-9e4ea5bd6351" xmpMM:DocumentID="adobe:docid:photoshop:d66da560-0581-4748-8dac-cb0ce4088fbe" xmpMM:OriginalDocumentID="xmp.did:d80b27b3-50e3-954f-8b5b-a67c1df905dd" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-HBCJF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4819
Entropy (8bit):	7.650045374676073
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJJsXSkHobHHWpQEAOqd0mrLhOlQFBhrDSQXs3AkInaIJLPXsx8K7:TSu7Fhkn2IbW9urMlQFBpmQc3d3IS8Qf
MD5:	57D3848F2058B830F2FCE3940D715590
SHA1:	F64E6D6775BCB45A77E87AD0C0CF18543426755B
SHA-256:	6B79BE1F9F40128E49469351FC38CB40877E7980EFE5CA3A8CF407C9433C1EFC
SHA-512:	49102ECB4B3AAB2D7F2A9EE4F2D582A91057FF58E91E0E4E47B2F131C4FB2AE7E1B763CE3B7BAE86EAC79BB5810AEB02954D8133C1CE218BE31E15BD0088D453
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:11:11-04:00" xmp:MetadataDate="2018-06-25T14:11:11-04:00" xmp:ModifyDate="2018-06-25T14:11:11-04:00" xmpMM:InstanceID="xmp.iid:cbd7d8ad-4901-a649-98fc-fec060670515" xmpMM:DocumentID="adobe:docid:photoshop:bc550ef5-8c01-2d47-a8f5-1574813c50ce" xmpMM:OriginalDocumentID="xmp.did:908299ea-5c8c-0049-af91-b667a43a3cc2" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-IODPP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4813
Entropy (8bit):	7.646849630005453
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJUj2aGHS1eHomLHHboJpS7jU7T/Xa8pirwp71LyeEJs97OXWjyIn:TSu7FhknCSaKImLcYf8TfaaiK7p1B975
MD5:	1FFDD97915E5354C3C50217322D6B6C1
SHA1:	A55803F4560EBE3A5C23872A21883645BE75D369
SHA-256:	0F7018BB8301FE23011F50552ED318CDF0181A5BB9E595B0E9F9D2EDCC3F322F
SHA-512:	C342E8135BE66D0A8C896FD9FC3FBEDBC69469E8950CC91B0C4D93FCCDC0F6A77DEFCA71BFD68B8A4D4AAD85EB76837A9EA9031EF9CB7ABB46AD0E21B6418A3F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:08:10-04:00" xmp:MetadataDate="2018-06-25T14:08:10-04:00" xmp:ModifyDate="2018-06-25T14:08:10-04:00" xmpMM:InstanceID="xmp.iid:e94d26b3-e4bb-3b46-8a03-6a26f6b9a214" xmpMM:DocumentID="adobe:docid:photoshop:9510dc4c-18dd-3f47-9aec-c6fab838f7ae" xmpMM:OriginalDocumentID="xmp.did:a48ea605-ecb3-2b48-aa1a-0e884e6aed79" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-IRHCQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4823
Entropy (8bit):	7.649185810961717
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJPor03sugHougHHe0y4PBgAJJrmdxmwjT7hdjQI8EJsG+b5v/NNv:TSu7Fhkn5KIFeEgGyXT9djL8Eyb5j
MD5:	811006474A5D57486FF60CC6AAC1200E
SHA1:	905FDBF75F3EF8389C877CB390F071EDDFD65247
SHA-256:	1608CF9037DF2053061FB9B159A834DDD1B0A526E5339198E1CD320568A717B5
SHA-512:	48F0C4FFBD858E6BA213BC526152E20762F25F1B17D7A73304E8A88C487889BA0FD18FDD1B57BF171B4F939CC774365A9643414F45B945BFA4687061F4705F80
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:47:46-04:00" xmp:MetadataDate="2018-06-25T13:47:46-04:00" xmp:ModifyDate="2018-06-25T13:47:46-04:00" xmpMM:InstanceID="xmp.iid:b53a5f9d-4643-e74f-b2c7-62529e0ec3b5" xmpMM:DocumentID="adobe:docid:photoshop:a59f9696-9547-b44b-891a-afa474d1a7cc" xmpMM:OriginalDocumentID="xmp.did:9e210c03-9d58-384e-9513-2d50a565818e" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-J375G.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4811
Entropy (8bit):	7.635750662673019
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJZ4ufHorHH02unNB6Lxnd3UhBBqyjO4xs7MJPYQaKGabn16:TSu7Fhkn0mIrRHdd3U4yjO4eIhbaKvbA
MD5:	3EC3699F239990E75E56ABBDBD652A08
SHA1:	F4DEBF4E6063D3114A6865A9658102F6239B04A8
SHA-256:	1447CE4BDD79DE799EA7672793BFFFFE5FB74C127479BB7F5D2004311C1D9E65
SHA-512:	151F7350983FAF3CAC23CDD68B4DA3597C56552880563EB80776A09435FCF38EB9A75B655E0B57B29F85F6870D49C3AAEAD6201FD620CC88E829EA6F0E815010
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:19:37-04:00" xmp:MetadataDate="2018-06-25T14:19:37-04:00" xmp:ModifyDate="2018-06-25T14:19:37-04:00" xmpMM:InstanceID="xmp.iid:4bcd09ad-9ce2-844f-b2c5-f2c4edc428b8" xmpMM:DocumentID="adobe:docid:photoshop:b20cb4e4-4057-8646-9056-dace8170e468" xmpMM:OriginalDocumentID="xmp.did:34595c3e-663a-6345-b16f-c1d19dbba792" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-JPBGF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4820
Entropy (8bit):	7.636351615140254
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJMIykuHo2HH0dAs+qe707Ye15N5MUK1T/b3BmHZd0pYJ:TSu7FhknVuI2Js+W5reT/DBm51
MD5:	049E8030F16CA1D6FD8C55EB0582997A
SHA1:	1DDBE649ABBEB7E1F62CDC0F78DC19E70FA9B8AB
SHA-256:	64BA3BF710EBFBBB137574C2AB4C6BDF9B3388901A96068D411082548CB527ED
SHA-512:	D5BC9CE7A0ED5AB9B7F9BE93F76E7520FFC8AE828BDF7C11B27655CBF847EFB4487745425D8CEAA6E3CDDE4116A1755451E94E38289E629E87E0522DD6F588D1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:19:07-04:00" xmp:MetadataDate="2018-06-25T14:19:07-04:00" xmp:ModifyDate="2018-06-25T14:19:07-04:00" xmpMM:InstanceID="xmp.iid:dba63b2a-a140-aa41-8d4b-7637b17fb22d" xmpMM:DocumentID="adobe:docid:photoshop:268c2a46-4ccb-484b-b928-5b820d6dd1fb" xmpMM:OriginalDocumentID="xmp.did:4774e34c-31be-0f46-b18f-e83f1708e556" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-KD186.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4798
Entropy (8bit):	7.635352497501231
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJR1k8+4HoeHHWtmawdFGhFSBf8VEJCqRgNgy7DX1Vqbpi6+HdAU:TSu7Fhknd5NIeHa0s8Bf8eJCqR0gy7Dj
MD5:	F24697E92FB1CFF96209E6C62FF15665
SHA1:	A4CB88BA390EB8766B28F4FD042110CE86B2B245
SHA-256:	C448B5750AC4DE0074A67319192C63C1B3E211BBA68A1807E09744D9C03303B2
SHA-512:	4509B6A8455FF1B822BC30911CA90F5DDFC58F89D695A23138D24DE0F289AD2375693FF4052DA7A96069F155D36008562AE31DE582DB62758EEE0C99C26A656A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:43:01-04:00" xmp:MetadataDate="2018-06-25T13:43:01-04:00" xmp:ModifyDate="2018-06-25T13:43:01-04:00" xmpMM:InstanceID="xmp.iid:02977e7f-bc8b-9340-9f09-497fc3fcd417" xmpMM:DocumentID="adobe:docid:photoshop:fe5245ba-3fb2-4b46-a6c3-6ffaabce6a47" xmpMM:OriginalDocumentID="xmp.did:4939fed1-00a7-6d48-82d2-ca0b13cd2d9f" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-KEFS8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4808
Entropy (8bit):	7.663321046197556
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJM2gHoVMHHF1OYN5+6m94jRuigyU+5u4vBWXc+992dfhNj:TSu7FhknwIVMF1OkkAjRufyDu4v4t9Qt
MD5:	24B54279FBCD5F3CE324175576F35E0F
SHA1:	44C325C1FA73F33EE2C0FF7B6618AD8323D3AD3D
SHA-256:	828DFC28A52439114E888D265C30DD7F9926A795E452FF9FD072D3A6421436BC
SHA-512:	67BA4EBEF2387D375F7619BFEF0BF013E41CF4774A70709F2C23AC6AE9013E48F3878145164F65AEF80AE45BC6C2BE0AC9582FDB7CEF5845971712B3772F1F1F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:15:30-04:00" xmp:MetadataDate="2018-06-25T14:15:30-04:00" xmp:ModifyDate="2018-06-25T14:15:30-04:00" xmpMM:InstanceID="xmp.iid:90c761c6-1b28-604f-96c4-7845fb38f756" xmpMM:DocumentID="adobe:docid:photoshop:9aefb0e4-dd7f-d54b-a15f-81e84ec475b0" xmpMM:OriginalDocumentID="xmp.did:d78122b3-6589-ba43-85b4-6d2675259c5c" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-KHDM6.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4834
Entropy (8bit):	7.640523475632509
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJYTFyHoyHHH4ZvcpEf37ANzT9I9dh9WZqKuOWK1iJ0zP5:TSu7FhknxIyYhcp5NfK9HKkiT5
MD5:	B90790D1A675DFF7BBB29AFE986084BA
SHA1:	3A304F271F610C341DD3819F2160CDA66483BF7D
SHA-256:	FC6EF7187E57C6030737F8345435521DCA35CB7BF8E2C5E95DEC23A74850686A
SHA-512:	91C90FAFC6527D3F3D97E642F564DB428429E8AB5A2DEC78F92D32698235732E8E7605EBC0578B423E645E95CF371F07FCD41419F477C6B590B31B1C880670E2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:57:26-04:00" xmp:MetadataDate="2018-06-25T13:57:26-04:00" xmp:ModifyDate="2018-06-25T13:57:26-04:00" xmpMM:InstanceID="xmp.iid:15f3bd65-f579-6640-ba33-a6e4ae0f644e" xmpMM:DocumentID="adobe:docid:photoshop:52afcbdd-cd38-b94c-b696-aae5e3adeef5" xmpMM:OriginalDocumentID="xmp.did:68b59f91-2365-a947-94d2-869b4b882cab" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-L1ACP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4794
Entropy (8bit):	7.641107648826741
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJnPW7j3HoZfHHjWEw65N9w+yJdgSqzDEG0rV830r1ZR4S:TSu7FhknlCIZfjjrZKJdg9cZlF
MD5:	E536F9D3864556F9FF53A75F48ECBB20
SHA1:	313E1DDB42F125589E67B93649FFAEBB9807BA58
SHA-256:	2573F70A591965B9309C8F0210A8F075DAC9B68D3DBA54C3A298E599A650A127
SHA-512:	D3718A74D81DC233107D55E9E3C8D23EED1E65A1620F1DADA59E44A4D3EBAEF385CDA6BBF55C8CF99F0BB37A4B5036AF40FB27625C11B8AC369E9118B6B54A7D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:40:53-04:00" xmp:MetadataDate="2018-06-25T13:40:53-04:00" xmp:ModifyDate="2018-06-25T13:40:53-04:00" xmpMM:InstanceID="xmp.iid:10259643-6c2f-9445-8cba-87b6d390d488" xmpMM:DocumentID="adobe:docid:photoshop:7f13e81c-e475-114e-b92f-25ef1b7ac8eb" xmpMM:OriginalDocumentID="xmp.did:9d925e69-cfb8-334f-8376-d78f2d1b955c" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-LFR44.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4846
Entropy (8bit):	7.627727936602157
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJg/kHouHHEAmihXfufDN7qGEXGbWDqpoqaR8joZSVF1Cga:TSu7FhknBIuENih4h7iG+qIRxmFMv
MD5:	9D6FBBA50316F88C7B7AFB12EF191EE4
SHA1:	0B3E5B5C0BE7A18F26BC10AD5D6DC66467B50020
SHA-256:	98C34A13374767B9FC427E2641F5C4C78013F661CE32E9C7B817EB4B32CE2FEB
SHA-512:	0D18A1F30B96D4932A5E5C435ED603089E6279214CB340099BE25AF5A278BCB951BC2CB5886434329D11D7B8CE8A3FBC7FBEC9924B8CBCE3B39E0571042940DD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:01:08-04:00" xmp:MetadataDate="2018-06-25T14:01:08-04:00" xmp:ModifyDate="2018-06-25T14:01:08-04:00" xmpMM:InstanceID="xmp.iid:289a646e-cd49-c84f-8bc4-edeb683f6e59" xmpMM:DocumentID="adobe:docid:photoshop:f9044ce2-d90a-dc41-8e2a-d9b720818c72" xmpMM:OriginalDocumentID="xmp.did:ab2ceed2-7529-8843-a5db-62d3ad6eba50" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-LIAEA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4770
Entropy (8bit):	7.616013321528226
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJC459kHo84VHH1bjSPf08lwHc9CqilKVt1vwAJCteGhvwmHRJW+K:TSu7Fhkn84sI84V1b2PPlCcNilGTw0cm
MD5:	6A6CF2D0CA349758D2F778A645B82020
SHA1:	8F4671709D1ABEFD3E1A8A7F3CD0931669678FFB
SHA-256:	838B0F9748ACA61764D815110425605C202A3FD3066AB0D4F347A9CEADADD19F
SHA-512:	58C1AFEC6393A5B2C9778B8C70A98E0C330B4A42FD4EBEBB0C303DA3C04324ADFB4619B7657B3BF386028D97B7D61EB7B3A08177AEC96766AB997AFA9FDA7556
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:55:51-04:00" xmp:MetadataDate="2018-06-25T13:55:51-04:00" xmp:ModifyDate="2018-06-25T13:55:51-04:00" xmpMM:InstanceID="xmp.iid:e60ed7f8-d131-4140-93c5-6d7df65a9663" xmpMM:DocumentID="adobe:docid:photoshop:b67adc08-490c-934a-9e85-cda69a08b9f2" xmpMM:OriginalDocumentID="xmp.did:1c8d2779-4e5c-044f-95ab-b905c7aae4bc" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-LK2G9.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4778
Entropy (8bit):	7.641133993162191
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJzCXEHohGHHEyR00KSxu7MsAuu0zPGgNkOB5XdnYlDbh+Bk9NA:TSu7Fhknl1IhGtR00KSxNsNu65kiFcbQ
MD5:	76F745800F9954A6917479794742BC99
SHA1:	2434AF44B65A247A664639C95996CFAF9A5C5E4C
SHA-256:	43895BC638E531C30D7E1CB49AB8F63EA66BD385DCEEBED27B0787928956D75F
SHA-512:	6F7FA3CEEB6E94DCB643BE297AA631D4AEEFC93BEAA33D5D59E1AD6A59FC24F078FDA68AB2959055D877F0D1C80FDE787CB439992F1EE0F361FBA1E3639946E6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:39:22-04:00" xmp:MetadataDate="2018-06-25T13:39:22-04:00" xmp:ModifyDate="2018-06-25T13:39:22-04:00" xmpMM:InstanceID="xmp.iid:59cedea8-f508-414c-acb2-81997e158690" xmpMM:DocumentID="adobe:docid:photoshop:f9480610-8c87-a143-9d92-582c9047471e" xmpMM:OriginalDocumentID="xmp.did:65fc5407-23d8-f843-b689-07d31bd582f2" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-LVNB8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4843
Entropy (8bit):	7.645535231249003
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ69usHolyHHqK1zAmgHDQbWAtX8Jg2dhYxEzONM6cAkS:TSu7FhknUXIly95mALt8SqiGbAkS
MD5:	F911628DBB67291B88856BC45C8CA9F1
SHA1:	CD7D92E9952EE0E16F11A0EF0A4F2271854F030F
SHA-256:	796FE9739DC052F3E8A205B140A400A43F57F108114818CCD65A86111D408845
SHA-512:	C2AA1A5C7424B3659880539D316314BB65DC4A41C54171325681B5A2AAECBE5AD93955339FAF9707DA50F2A2D20B6F783A972E392BE4B821E12D0AA7F4D3F82B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:11:55-04:00" xmp:MetadataDate="2018-06-25T14:11:55-04:00" xmp:ModifyDate="2018-06-25T14:11:55-04:00" xmpMM:InstanceID="xmp.iid:8ef20fac-eab9-2e49-8bfb-fa2b8a452b9b" xmpMM:DocumentID="adobe:docid:photoshop:301610f8-2d43-c44d-a6d2-b2c48d6fbdcd" xmpMM:OriginalDocumentID="xmp.did:4c09d0a9-3bb5-a044-ab46-ae6ae9027d64" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-M185V.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4847
Entropy (8bit):	7.642348573493422
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ1vqHojHHtP26gx8N1b2VCrypXNtZPwhVqdQUzs:TSu7FhknWIjV29o2Eyp9HohV3Uzs
MD5:	DA5D451C3E0D41F64C22F4B177D5533E
SHA1:	1A0BC5F80579658C80E7A332119DF3F68E40DA03
SHA-256:	E2F6B00BABAAD090FEFF0284165E124D17684E6B4DAF3D8A6A1B59C550E9FB12
SHA-512:	C9A2D934CB80286FDD18E42387E28F792CEAF3DD762EA4D2D665BA5C0FF030B0DBCAE49BB4999C7763CFC8482602DA67DEE5EC5FA940FE9751822B60881DEA20
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:52:31-04:00" xmp:MetadataDate="2018-06-25T13:52:31-04:00" xmp:ModifyDate="2018-06-25T13:52:31-04:00" xmpMM:InstanceID="xmp.iid:c0a43c99-14fb-4749-b05d-ef91cbd3fc65" xmpMM:DocumentID="adobe:docid:photoshop:b7bd06ef-2000-444c-9e01-330306949cef" xmpMM:OriginalDocumentID="xmp.did:1f80da12-f862-4b4e-9e84-b08c1eb35f5d" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-MGI83.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4805
Entropy (8bit):	7.629291360442802
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJnLIHHoVHHRfCaqDNDNFMkbUt44bfBatAJTZvtW5OgT:TSu7FhkneIVRfRqpDNFMP4mUtMvtW0gT
MD5:	BD74F7A6A90293A2355E337154173DD1
SHA1:	C331398191CD969E22F09464EEF9040FB7198736
SHA-256:	3E04440B6D98CEC0B28A832FE4FA2CC889AB812B4E4718DCDDA39FC73BCFFD8F
SHA-512:	AC23502459BE870F207E9977866893F13E4559F3B18498FACC62BE5CA9581E31A9D6BFDF163ECDFE00836653B53925F69E7E2C759D7DDD6618531F5D813C4BC2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:14:19-04:00" xmp:MetadataDate="2018-06-25T14:14:19-04:00" xmp:ModifyDate="2018-06-25T14:14:19-04:00" xmpMM:InstanceID="xmp.iid:d60265e3-ac5e-4b4c-9e4c-e582108cb526" xmpMM:DocumentID="adobe:docid:photoshop:b45f9f69-f240-344a-a8f1-f1077cd0fda0" xmpMM:OriginalDocumentID="xmp.did:81bc695e-ab2d-6f46-a76b-42c1b77e30c9" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-MHSKP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4846
Entropy (8bit):	7.625627000336364
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJI3dHo6HH8p62jOuaIVDxSw6qIOSuyYzjfmbNwB+si708Dd:TSu7FhknoI68p62TX1b6DgyA4Wri7HDd
MD5:	EF919D789493623B9A3D9B04A74C140A
SHA1:	ED935877F1C80F49665A899C0192903968940B3A
SHA-256:	3F62F7AB06BDD593371114083F1CE6B18C8525DB47CB094A22AC3161EF72402C
SHA-512:	1B3C6F08424CA621681D382152F620215C85538BC5171B26DC2922AA3543748DEA173C613E90E69A1239D4101408550FBDC4314BFB4F297528D3A4EDCC2B2922
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:08:45-04:00" xmp:MetadataDate="2018-06-25T12:08:45-04:00" xmp:ModifyDate="2018-06-25T12:08:45-04:00" xmpMM:InstanceID="xmp.iid:2d34da73-a684-5049-8aab-38badd31f28f" xmpMM:DocumentID="adobe:docid:photoshop:19c17d43-d9ed-474d-8d30-43b2193dce58" xmpMM:OriginalDocumentID="xmp.did:a1de7917-ba62-ab4f-9e75-db80e1fc00c5" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-NJ2UB.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4817
Entropy (8bit):	7.64261929399302
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJt2BqtRYgHocvgHHhXAeoCUvidy2Z2tUbFZVM34mgIL/M9:TSu7FhknLIx7oTvid2tvomfq
MD5:	28AC0EF0E83481F3BB695459077D47B8
SHA1:	C7CBCB449103E17F4BDF86E5FBFB810D4ACEE67A
SHA-256:	897A1E01B242808381A42083E73DF8AFF19F7595CA71D0D5990E0B6FC95A3D9C
SHA-512:	BD405257321A272FE612B33DB7A7F7757E5B220D836B61465EFCE58346CC3A402E8E81BED7B0ABDA24B0B99D46AD7A847D163FB90CCE1B5E9A22E0B2B2A79154
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:08:46-04:00" xmp:MetadataDate="2018-06-25T14:08:46-04:00" xmp:ModifyDate="2018-06-25T14:08:46-04:00" xmpMM:InstanceID="xmp.iid:1b473ad5-3d6a-b24d-88f7-bcbbb5cd2372" xmpMM:DocumentID="adobe:docid:photoshop:807f4a3f-7160-b448-b548-ce9943114b14" xmpMM:OriginalDocumentID="xmp.did:a9cc7c4a-3bab-7b4a-9e40-a379c59a7bb1" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-P2UQL.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4829
Entropy (8bit):	7.62895894983327
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ3+BHotHHxYfaB8gzrIPl1ddzPJMxRM3Myy7a70T0Qd2r:TSu7FhknKItUaBrIPlrdHMyy7a7mnkr
MD5:	1C07ECF7A2224B8F63D0E3D9BD860DA9
SHA1:	74F773701A1B5F0261B8538B8B4BDEDF6EC880B3
SHA-256:	04E5680B687264F1921E6AC7CDCCD12F85DC71069DAD0A571F97E4F8B092AB70
SHA-512:	6628BAC8B376ED333327950D4530A7983E3DAF947252EFAA886AFF3917D54B527779A4EFBF86B599BCA49C7CDBCAB2E2300D6B84898C35AFAC4F68107F39C358
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:20:06-04:00" xmp:MetadataDate="2018-06-25T12:20:06-04:00" xmp:ModifyDate="2018-06-25T12:20:06-04:00" xmpMM:InstanceID="xmp.iid:4e72eb3c-ceb3-ef4a-af38-e7c62dcea498" xmpMM:DocumentID="adobe:docid:photoshop:dda71907-9cde-ae44-891d-f32032477474" xmpMM:OriginalDocumentID="xmp.did:962a3b49-77ae-4944-b2d3-ddefa1cd5ede" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-P53KL.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4821
Entropy (8bit):	7.644343129735288
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJapYZHoUHH580ZriyNsL39YtUASYSwWqzd0hJm2ZS7DWnRv2:TSu7Fhkn2+IUZiyQ39jVwWwd0hrZS+Re
MD5:	F7F3FA6D7658916D13AFA87C3CF723F7
SHA1:	9A539943A51D37DC519E1E0DD0D167EE02288EB6
SHA-256:	C9DDFE22A2525A3058B602EAF72614425BA5A09CDD5B3A9FCD1991C582EE506C
SHA-512:	AA37F6C73BAE9CFE90F402D76DF5CD5AC57C24899D594C40411AED6763721A67AB8777B9ECC8D5CBE8384448BD826A47870027C3D3BD6411C786902150C45776
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T11:56:01-04:00" xmp:MetadataDate="2018-06-25T11:56:01-04:00" xmp:ModifyDate="2018-06-25T11:56:01-04:00" xmpMM:InstanceID="xmp.iid:ac549438-f33b-d64b-96cd-47070429cdae" xmpMM:DocumentID="adobe:docid:photoshop:f355d692-c782-5743-8b15-497e50bc01a4" xmpMM:OriginalDocumentID="xmp.did:990c9565-be83-fa4c-bed8-e344ed9e5971" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-P5B8T.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4789
Entropy (8bit):	7.630862197879212
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJHHFoENHoNHH9pfQyz8P+fPxG0Z/qmJczNoq:TSu7FhknP/NIN9pfB88G6/JWGq
MD5:	BEF063D03F1CCABA24C0FB63DA208294
SHA1:	07AEF18B6ACA227C3DE44AAE6D1C12F147091C76
SHA-256:	A1E29EF3FA689BC0D80A34122DBFFABFC45F7F9F7C1948D49CD5C600ECDE0D79
SHA-512:	B47C6E4CC78A2D467B29D966CF06541C65E0E9123B8C2CFB41DEBF312E08DAB27FB2A5BC544120356D055E8AD49B4EF5F317EA6EF9B500C928CED44C8454BB46
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:03:29-04:00" xmp:MetadataDate="2018-06-25T14:03:29-04:00" xmp:ModifyDate="2018-06-25T14:03:29-04:00" xmpMM:InstanceID="xmp.iid:e8005279-93e9-154c-9ec7-b937ddde2f6d" xmpMM:DocumentID="adobe:docid:photoshop:cbcd72f6-eadd-5045-95e7-b412b706829b" xmpMM:OriginalDocumentID="xmp.did:7871517d-32e4-8549-9175-b0d9f2604f98" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-P8THR.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4842
Entropy (8bit):	7.649394844989216
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJP3gWr2zVHoTVHHpTuOX9OydGp0JVxZ+IeS9Ph+Daok0IksWxWHp:TSu7Fhkn6IR9uSOydGLujvB0Iktw
MD5:	10502487003399E7B4A055356327C45C
SHA1:	4D346763D66A2DB47FCBE50A78E10F79B133B755
SHA-256:	004811E7BE6FC4270F2541632E0E810918C84A25984CCC1122D178759878956C
SHA-512:	40397B5DB300A50E170E64110831FCFCFBAF3F1044B0F01AAD151F1C6CA16B7453075FF3CD0D8329DC8C7FA966390D36A78ABA01D2C3122F4CB0F132BEE9F68A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:50:36-04:00" xmp:MetadataDate="2018-06-25T13:50:36-04:00" xmp:ModifyDate="2018-06-25T13:50:36-04:00" xmpMM:InstanceID="xmp.iid:3edebc38-8265-2c45-a2bc-88709ecb3cee" xmpMM:DocumentID="adobe:docid:photoshop:e99c9781-61e5-e141-8792-5c51496e0522" xmpMM:OriginalDocumentID="xmp.did:a03dd080-168d-124d-9f4d-126b62250bd7" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-PGIFR.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4810
Entropy (8bit):	7.651729307621638
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJXhSNIHodHHBTvBydlU7i+FS3kxFD761qOLdtGK7vxN:TSu7Fhkn/IdBTJbY3kL6vLdtn7pN
MD5:	474BC4A5605C4E7EDEBB7AD319BE65DF
SHA1:	2FC936EDABEE28910B736C63D82EC0C4D5348F23
SHA-256:	DEA2DFCC22FDD4ADC886B9C10ABEE154B825F7819D6DE8BCE603080A106E8B39
SHA-512:	736E3388FB9EB4DF1F5516C255B997C7D3CA1EB22A4BB71B157759A08F00285F28E492EDE3CF5914B2833B0D6478F3BC2406D561CAD14F23226AF0051E53BF37
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:01:50-04:00" xmp:MetadataDate="2018-06-25T14:01:50-04:00" xmp:ModifyDate="2018-06-25T14:01:50-04:00" xmpMM:InstanceID="xmp.iid:1d18b3b7-fc15-5846-9a14-119ae1c4ce92" xmpMM:DocumentID="adobe:docid:photoshop:8bec6e26-2bb5-a342-8648-6078179c3639" xmpMM:OriginalDocumentID="xmp.did:9ac6d3dd-2bb7-3c48-9355-2b4fb28427bb" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-PPS35.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4817
Entropy (8bit):	7.6446193439146555
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJAm4hBvjHoKHHbu+p7RvXYfM6LbcWefUZz1xn6bmzsHls7Z:TSu7FhknAXIK7PfaDH5efoz1x6btS7Z
MD5:	AA4CB7E15853EE1E1C0312B307A27D5E
SHA1:	AAE27517BF2B9C2CAA3B39CC94118302F32F02DF
SHA-256:	AB65704603C5AE9A4A773877AEA9B42D75D6CDDA4220FCF3A824917914CF04B8
SHA-512:	652889E52B63D77EC01EB651C319E454EE66C01D738681FA72F688153930483DF904C6C59DA85404B0DB4E968AACEBA997AF3C244C016EFBED5D90E8C2525993
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:41:41-04:00" xmp:MetadataDate="2018-06-25T13:41:41-04:00" xmp:ModifyDate="2018-06-25T13:41:41-04:00" xmpMM:InstanceID="xmp.iid:76e01235-193e-1846-8b93-2ad76feffca0" xmpMM:DocumentID="adobe:docid:photoshop:f71c883f-52b9-8447-8933-de0742b2cf97" xmpMM:OriginalDocumentID="xmp.did:42c58824-3fc5-7545-a6d9-93dde249cf70" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-PSU18.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4802
Entropy (8bit):	7.639568646910959
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJcI7HouHHKrG3zu8AHSToiixFW1VZ/ueErTqX:TSu7FhknBIuLutyT9iXW1DVoqX
MD5:	B8272D744CCE9A3DEDBB3AFD5E8D974D
SHA1:	F81FD06029E0B7AD83DFBFC96D296F91D4B87462
SHA-256:	895FCB0629B4BD752A08054B9FD8B9604B7E2EC254F554550E43D835AC050842
SHA-512:	8CB4D5CC9E9CA2D384F2BB193DF1E6E8BB4BCF0F305AB6E5910AE682FFCB7DF05C23EF767BF3053EB202A651A6E08A01735CEB871EFEAD506123ED28F201366D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:56:52-04:00" xmp:MetadataDate="2018-06-25T13:56:52-04:00" xmp:ModifyDate="2018-06-25T13:56:52-04:00" xmpMM:InstanceID="xmp.iid:8e06ad19-bb68-dd4f-b107-8090717418d8" xmpMM:DocumentID="adobe:docid:photoshop:79ed0bf2-56d2-4f4a-a75b-ecb47a926bb5" xmpMM:OriginalDocumentID="xmp.did:1ac04b2e-a44c-e44b-ba58-8efdd2f66ff6" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-Q0LS5.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4805
Entropy (8bit):	7.630184805514288
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJyakYRHob4HHufR3Whv1ApH7Sis3bt3V3DjWlN2yfwXi:TSu7Fhkn4aBIb4AR3WhdAN7Si2JFiN2M
MD5:	F0A37C2B855468570A7E8B80F7301EB6
SHA1:	6A0A2BC6CB1BCBB726E677B90A2BDBA0BEBAD705
SHA-256:	C3408B646B1A31273CE4DAF6414F5EDF06F5779825267F001B7352905DBA19EB
SHA-512:	AF9973699936E52A7F56955EE33DDFC0D668D2077784DF39F7F0CB30D1A0EC65A13B0DEA47994185A04BEA067CA28F6741C054B48EADFAF90CE8C3420B97A21E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:10:30-04:00" xmp:MetadataDate="2018-06-25T14:10:30-04:00" xmp:ModifyDate="2018-06-25T14:10:30-04:00" xmpMM:InstanceID="xmp.iid:ece74743-2b51-b64d-a2c9-c9a430ed7b67" xmpMM:DocumentID="adobe:docid:photoshop:9d47038d-79ba-8b42-b6eb-33e684e4bebe" xmpMM:OriginalDocumentID="xmp.did:64ed21fd-84fd-c743-b0a7-42d0e1cc297f" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-Q1LRF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4804
Entropy (8bit):	7.629051765293466
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ8B75Hof0HH8VPtmTSYaWatIqRtz6qWmftejI6NiOQiQDaO:TSu7FhknyrIf08DkSbZT6OfkPIOQiKL
MD5:	4676E5F9468E7CB268AD33395404CCFB
SHA1:	4899E603ADE83AE1901754F41F95F05431714803
SHA-256:	45E82C2963311A5119DE3CE7C1FAA3DC1E782C4BF8B2E2066CB0121E8DF65DEF
SHA-512:	E1C8500B3B455264B29581D6B282E151108375D45C04E26A56DF68BE36806C21DFEF881116A3844532BD75AF78E987967909F7E82ADE50B7A8C2AE8F95B961E6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:06:17-04:00" xmp:MetadataDate="2018-06-25T14:06:17-04:00" xmp:ModifyDate="2018-06-25T14:06:17-04:00" xmpMM:InstanceID="xmp.iid:3fd3c7f4-a21d-df42-b0b2-e2d811c6c711" xmpMM:DocumentID="adobe:docid:photoshop:ac6441e3-2c3e-1f41-9065-38b7b4709f0d" xmpMM:OriginalDocumentID="xmp.did:9e8cdac2-ebb1-7842-98f7-b6f93a439de1" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-R1A5H.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4808
Entropy (8bit):	7.631270223986086
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJbiAGHotHHbFM4mMFhCu3LiT07fxil5:TSu7FhknEJItayH2TSf0
MD5:	4A1B1696CBA712D05596FCF66E2A7C11
SHA1:	34E4639B243A421B590E137FB2057B86BC993D1F
SHA-256:	2ABCF114989DD800BA959FDEFA7CAB4A726DD1352BB23C4FC216C87EB4965DEE
SHA-512:	F8F9F58FB7A7D293DDD984563EEE05415228C362C3E223680038A1E37E7178A4B09B0FD2234D3D7148DBBBB46561C2521C8FB0765DF1E59EF18B36C4DB85DFB5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:45:40-04:00" xmp:MetadataDate="2018-06-25T13:45:40-04:00" xmp:ModifyDate="2018-06-25T13:45:40-04:00" xmpMM:InstanceID="xmp.iid:13671671-f6cd-ba48-9e13-53519ac5a350" xmpMM:DocumentID="adobe:docid:photoshop:c56cf858-afcd-2742-bf45-63d95c89a7f6" xmpMM:OriginalDocumentID="xmp.did:a40b64e7-c16d-2d47-9e09-58ced94e6fd4" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-R8Q8R.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4816
Entropy (8bit):	7.645907366394036
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJdAqHo/HHx5xnTGMtBTaNWH9pMsFP/hPDy37v19AfIQ:TSu7FhknxI/x24BOIdqmPZPDg719Ab
MD5:	A8A10C9A05FD5275ECC2BB5F7ED18239
SHA1:	ED8B51F95EEBC4E7D78F97ECEC9BD4037A17D79B
SHA-256:	D14115330238653EC73B4710AC5880CB427AA971D86B64E97EF1CA33DC34522A
SHA-512:	AD5337A0769985C54C59440357BEE8C06E600D3729AC9E91D3FA384A07E4D3B74235EB252BA9D6CFDA71ADBB487693BEA278EA20951D0E4F6322AD6D7F8AA76C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:27:43-04:00" xmp:MetadataDate="2018-06-25T12:27:43-04:00" xmp:ModifyDate="2018-06-25T12:27:43-04:00" xmpMM:InstanceID="xmp.iid:e0e98479-3dd1-504d-8471-36bd116ec92a" xmpMM:DocumentID="adobe:docid:photoshop:298c5563-eaba-2d44-b71a-26921d2c5dda" xmpMM:OriginalDocumentID="xmp.did:b3d9f7e3-96ee-9143-894d-424f578b7ab6" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-S3JTL.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4816
Entropy (8bit):	7.628749823741116
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJHN9kyRV/XHoBNuHHB4Kyzv8rlepT37wRwwkx3yL6cnf6PLEzJoV:TSu7FhknX99IjuB4Kyz+0z0RwwkxLcNm
MD5:	696656C59C8D35F9A5B2CEAB16EC98AC
SHA1:	02B9EBD164B48DA592704DC51A4B2CD8927D98C4
SHA-256:	BDC701C7D581595CEAE99E0A17DFA83DFEE2524E26A15FD1C1F9D83149459134
SHA-512:	0E1851A58F75780A20718605B320F7882E08986C061464F4D0FBC4CFA4B45150F42670A8B6C94994487364E17F689A8D1FCF493F006ACFAA8BE4A070D6C5AC9C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:04:29-04:00" xmp:MetadataDate="2018-06-25T14:04:29-04:00" xmp:ModifyDate="2018-06-25T14:04:29-04:00" xmpMM:InstanceID="xmp.iid:e4f4cd2f-baaf-dd4f-9175-d3000d6359d7" xmpMM:DocumentID="adobe:docid:photoshop:38a77b51-1e30-2446-b4ef-c4bb4ffb1431" xmpMM:OriginalDocumentID="xmp.did:fc9e63ed-05bb-694e-8eb2-3bcd08d1f7d9" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-SIU7M.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4837
Entropy (8bit):	7.648618367957781
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJpMC80IHorHHskeoVKDtSfnGLv/Tmu6mMjL22lU6hOEm0EQ:TSu7FhknMR0IIrlVKpSyv/BWm0d
MD5:	8917CFF4ADC987B6997B7C7C5742B9CD
SHA1:	0036554CB0D14675CB242FA21C199E0BBBD62951
SHA-256:	CD37CDCDF09769A901AEC876DD70CE1C8D1B2F656301AD682EADAB56406D6CFC
SHA-512:	FAA4E94E4C5D459CC2967FCCAA5D353F38489F6E0D73C1A4465F37FCE02C9E0947507C8771934EEBA238AB4022EA27F0D88709EADF699E0031498CBCA7AE3756
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:13:44-04:00" xmp:MetadataDate="2018-06-25T14:13:44-04:00" xmp:ModifyDate="2018-06-25T14:13:44-04:00" xmpMM:InstanceID="xmp.iid:b4f452a2-e3f8-4b48-acd4-7e982f93dd88" xmpMM:DocumentID="adobe:docid:photoshop:0d2f0ed0-cbc6-214c-b7f5-4b299f96fb23" xmpMM:OriginalDocumentID="xmp.did:692924a1-03c8-6c42-bcb3-a5e3bcde440a" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-T42BJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4818
Entropy (8bit):	7.623606303288809
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJH6b3KHoJSHHPoNLe2fD7Iunw8/xM65bb3Z4PFMjBj0beY+9:TSu7FhknRIk4Le2Xc0xMsfGPFKd0RK
MD5:	780077CBAED431FB07CB2DF78D3749FD
SHA1:	985DD0B5063DD50E2E7F47FB057926D596F3DFA9
SHA-256:	298ED18A2EBE84D2AB7942FA12258B5F26B61CB58E62890373B3426C0CD0FBF1
SHA-512:	A51096A2AEE4B2249B6767B9BEBBA462E1172750A0BB4C1850B5C905DDE4F1E7043A8410568A2CB9B2108487005946C33E0C359C95BF6B06C7645876D325566A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:43:34-04:00" xmp:MetadataDate="2018-06-25T13:43:34-04:00" xmp:ModifyDate="2018-06-25T13:43:34-04:00" xmpMM:InstanceID="xmp.iid:51df9bd7-29e0-384f-82bc-3fbd656ffded" xmpMM:DocumentID="adobe:docid:photoshop:8b95f7b4-6ca0-0844-93b1-37a205e9de2c" xmpMM:OriginalDocumentID="xmp.did:4cdd3a3e-b09b-384b-bfb7-ae60ea752cc3" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-TFMVD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4783
Entropy (8bit):	7.626298176705874
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ0hWHoCHHoMttobBWKp7khe51YWarHFW5P7:TSu7FhkntIC9+M6oenzahmP7
MD5:	117776934A744581F95AFF5E67FB276A
SHA1:	11819AE5A67A132D7A0139E4B26D952CA730C51B
SHA-256:	669EFEBA98DA2FE1ECB2E20FD9988D8B532A03108A9733A236328BD495ABEA7D
SHA-512:	5F2CD1BC6079CB6F00DDB72AB481851DD2C94A7DCD024011B197E6400B7E2826FF11D29C31EC19ED04DE00822AC455FF5CCD5EDC349EB7E32D04641CBF38176C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:05:34-04:00" xmp:MetadataDate="2018-06-25T14:05:34-04:00" xmp:ModifyDate="2018-06-25T14:05:34-04:00" xmpMM:InstanceID="xmp.iid:ebb18644-3c34-0441-975b-73d6b3ec487e" xmpMM:DocumentID="adobe:docid:photoshop:1c1554da-57dc-ed4a-90f0-a9e97c576ff1" xmpMM:OriginalDocumentID="xmp.did:1d55c05e-fa11-524f-9d25-a31b6d2015c8" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-TGNJK.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4847
Entropy (8bit):	7.646721477849876
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJCmQHoAHHVmeAUio6Z4RdWnTE8IzWah549paNDpSGf:TSu7FhknuIAVmeD6Z4Rg/Inh54naND0q
MD5:	E6FBBCCEEB6BFF82D3FB6AB21B0DC4C0
SHA1:	B2FF7E8822BF69F9DE19E76968B19B9FAFBE4F34
SHA-256:	82A633467308B5BFEEC707279C9BD041C96F4CDB905FE8ACB85F770884F2BBD6
SHA-512:	8F1483628CCCF4F882E9183782154849E2D8955267DE1FADB86ADCDB6475104CD05E0BB1A0DE3A02ED0C8CC297AE9696F9DD306F7A7F2786BE803DA3874EA290
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:22:38-04:00" xmp:MetadataDate="2018-06-25T12:22:38-04:00" xmp:ModifyDate="2018-06-25T12:22:38-04:00" xmpMM:InstanceID="xmp.iid:bb3b3238-6daa-b449-8243-70acc8915753" xmpMM:DocumentID="adobe:docid:photoshop:ced2b884-2ed6-d640-adbf-950f69d34953" xmpMM:OriginalDocumentID="xmp.did:01a21cd1-f510-8245-935a-536b1e6efa5d" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-TQEPB.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4832
Entropy (8bit):	7.627274176647489
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJGLGsTHoDAHHm99puFCXjKaZ/ON6ygX7WW+XsSS:TSu7FhknYJIDAbBdN6ygSWbl
MD5:	C018D77A720C548B16E7332F390A2FCD
SHA1:	AA7FC5768EA9A97F54BDCF682E735984FD2F0048
SHA-256:	878B8A95E331A8C69D2919A82296F7E0220CE88A9186EFC64A2469381CDA9D2C
SHA-512:	43DB71035FF6C885B68A063D3260BBB4BBBA41D9BC4E8DA751A72E29BED0A20C22E4CBE89D9CC00EEED73B8E6E95F14E580171B2F693D1BBAB663035E599917C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:26:15-04:00" xmp:MetadataDate="2018-06-25T12:26:15-04:00" xmp:ModifyDate="2018-06-25T12:26:15-04:00" xmpMM:InstanceID="xmp.iid:ea409d9f-9590-0c44-a855-7ec4a95782d4" xmpMM:DocumentID="adobe:docid:photoshop:68fdb8ea-1eb2-6b40-9de6-7a4dd0f08639" xmpMM:OriginalDocumentID="xmp.did:ea06607d-c14c-3c41-bf31-fde886be7ec9" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-U7P6T.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4813
Entropy (8bit):	7.629396122612007
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJGicv0HowHHzpz7aRXJ++wNTUR+YLyMP5afJf/jH:TSu7FhknxIwzcXJsNTUkyZg7H
MD5:	1442A8924CE7DE3316AA54C2DD9F1A2C
SHA1:	F533A7D18E6305375A635D8E4CDF5CBFD91640F6
SHA-256:	0276865A273755F60706C6F625E614876FA4B4A01B314F74B4CE2DE4BAD8F171
SHA-512:	A2EEF00E95CE0AB16888EEB86C11BFA04516A823E53DEE9FC3137225F8C3322D8B7360E838234DC8EC67A2A581966DF683016AA17B0EA67D987C5A1B0A867871
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:16:31-04:00" xmp:MetadataDate="2018-06-25T14:16:31-04:00" xmp:ModifyDate="2018-06-25T14:16:31-04:00" xmpMM:InstanceID="xmp.iid:c50b893a-c0ff-1944-8f64-4f311be04c4b" xmpMM:DocumentID="adobe:docid:photoshop:4f1b41ed-3e62-194a-871e-4c7b4ab4caf8" xmpMM:OriginalDocumentID="xmp.did:a4a2b875-6e25-db45-aff8-de9e9ac1dc23" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-UD3J0.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4819
Entropy (8bit):	7.638663108153409
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJQeuflHoqLHHe9kxrAZR7jh3w/lzYDnHur4nS3xuwx:TSu7FhkneNIqLe9kCHmtYDnfS3xu2
MD5:	5A469097B6EE25ABE457DED9A61C8A9E
SHA1:	34246FB72E6C55FC4F6E2FE5C8450D12C65D5C04
SHA-256:	DC107C6C3C1FF37D5495CA75B7D4763205FED65A72887340CF565953030A99D8
SHA-512:	60702C98A3D84A6FE0779FB9373838EAAAA1A218A261A851AAFD71F05C572770FFF6A7A78CC0770F188DBCAB3466701DB668EEF25038CB312204D2D73B79985E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T12:21:35-04:00" xmp:MetadataDate="2018-06-25T12:21:35-04:00" xmp:ModifyDate="2018-06-25T12:21:35-04:00" xmpMM:InstanceID="xmp.iid:e6c7b570-e936-0942-9c5e-46acb8bab346" xmpMM:DocumentID="adobe:docid:photoshop:09240e35-4295-9d41-8836-5dbcb6cc8a52" xmpMM:OriginalDocumentID="xmp.did:151a7505-971e-8648-a2c2-a48f2194115a" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-UIFCQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4836
Entropy (8bit):	7.638921481203359
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJQSXHo2HHgkY2lVVIuCqcHVL5aw/0T9Shtlig3+tEkhJcWtn1:TSu7FhknHI2g+VuqcHvH/0pShZ+1
MD5:	BF2E7F0AE211D8F46AE8F2E3DC3A1F9D
SHA1:	F88962119DF62456EE43B51CBBEFC3CBC934A8C0
SHA-256:	7A078BBC0F12B68A6AA0F6A5ED476CE526943C97455C8212EEFDD9060EF05F61
SHA-512:	1DBC2FC3E2A69B4B92D755F0BF6D17ECA965C1761D892D9D0A53773E1EFC608B2E85848EA5D566E90A88971C04CCC2429DB825820CE367A6B8144B93B5DD3814
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:56:26-04:00" xmp:MetadataDate="2018-06-25T13:56:26-04:00" xmp:ModifyDate="2018-06-25T13:56:26-04:00" xmpMM:InstanceID="xmp.iid:17a101e9-802f-fc4c-a3b1-c0c45575b158" xmpMM:DocumentID="adobe:docid:photoshop:2b05b2d5-14c2-1943-b49e-97a6142ece23" xmpMM:OriginalDocumentID="xmp.did:8f9c44ca-a54f-5044-886f-fa5893ae15a7" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-UODAC.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4835
Entropy (8bit):	7.640836566272277
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJj1EiuHoBtHHsAS1rytpzMZklQGPLp/fDXs8DF9cp:TSu7Fhkn5qHIBtsAS1rytqylQ8Lp/bsX
MD5:	7C746C83BFD12A6A9B3153E594E69AA9
SHA1:	EB9B13C93BEAF733B16A8A072E26F4FC2F13BF70
SHA-256:	FA3ED7472FC471B9B260D8F3589DDAA744EB0102C3E1DBA42E2CC85A1B311E55
SHA-512:	A05EEB5337D22731B11897A9931AB9730DA98F880E9B6092153584264E93B2D118882201FA7644C97049843A5161F28202317BBD8A8E17A9B2BD48C8702DF087
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T13:35:39-04:00" xmp:MetadataDate="2018-06-25T13:35:39-04:00" xmp:ModifyDate="2018-06-25T13:35:39-04:00" xmpMM:InstanceID="xmp.iid:a80b1376-7dc3-704d-87f3-9001a6eada82" xmpMM:DocumentID="adobe:docid:photoshop:18ffd3da-f9f8-0143-9925-4fb76ad0a523" xmpMM:OriginalDocumentID="xmp.did:24ab3ae7-4c8e-e84d-bef5-bc445f1c89b2" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\HueSwatches\is-VE6KP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 52 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4843
Entropy (8bit):	7.64809572035119
Encrypted:	false
SSDEEP:	96:TSZo7FhknmWpJ81kV8HoHHHEo2iF+RvTbt++G1u2tOw7ZOpLcl5gXuJ:TSu7FhknG1dIHEFicddQu8OqZOpL7eJ
MD5:	7F2053B63C28CDD32E2C16BE1414BA3F
SHA1:	17C70C059FF7D42E1A2B9B2561A8AA8A1DAE53A3
SHA-256:	D4B7457ECE670DE773B149747282570258CBFFA0E7FB3400AB3C56E8015D5813
SHA-512:	D42BF4D4009F12811B06DE98507B26A6C41BABC2980613F42930C9C8C5F9A7361D9EC8842A22741EE2F862D71C6CEA462CE22403943283E095CEC5FADF7484CF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...5......F_.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-06-25T14:03:59-04:00" xmp:MetadataDate="2018-06-25T14:03:59-04:00" xmp:ModifyDate="2018-06-25T14:03:59-04:00" xmpMM:InstanceID="xmp.iid:3dd47bec-aa97-ed47-84b2-9ed707844417" xmpMM:DocumentID="adobe:docid:photoshop:c241c646-c42d-2840-b6ff-a207a5dd5be6" xmpMM:OriginalDocumentID="xmp.did:24c27f58-6596-d545-96f6-8958783009d2" dc:format="i

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\AppIcon.icns (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Mac OS X icon, 285385 bytes, "it32" type
Category:	dropped
Size (bytes):	285385
Entropy (8bit):	7.362538457276376
Encrypted:	false
SSDEEP:	3072:Xkdb549KEJ1EF3nIw7Id3K/LjwfmLvYaYZcIXUYDiVyC8zyUWcKy6bo8G0H:Udl4unD6Ynw4vXkPDiVf82UG
MD5:	B28EEE0E6637F8B92152BD1A8B87816F
SHA1:	03757670734D86A6DFABDD7D629F8313D6679404
SHA-256:	BE9F94F96C99E08A890DF3258217BF3F48F63F2275086D97099C4DA3BA38F07F
SHA-512:	99099468E03432318AFA4FC073687E78796686407DC46D00BE08349D7807A0A04E3C68B5A1F016E8510D08C31CE95C7287F823039C85951588AC606750C3680F
Malicious:	false
Reputation:	low
Preview:	icns..Z.it32............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\AppIcon.ico (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	MS Windows icon resource - 6 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	528973
Entropy (8bit):	7.92437382987604
Encrypted:	false
SSDEEP:	12288:6SyO0lvlmLJSHih5db3U2s8LNuCHjwQkyOqE7J+7P:6dlldmdfFk2s8JuGUVyOfFg
MD5:	69F7D960322EEDD0FE26B7F7A898D50B
SHA1:	3F44BD3797F1CBAE48C6EBC540563ACA16DD52F9
SHA-256:	90AA8722B67A723FB757E0249475E202C4B964AAA176BA033A830320D3456F5A
SHA-512:	339ED215348917728978040DA0FF00239B019ADBBE26AEC5A39F09495D62793E064FA29BEFF104C3A7820E48B7F1F9837E68906AEB88CDA028A809DF89AFBEE5
Malicious:	false
Reputation:	low
Preview:	............ .h...f... .... .........00.... ..%..v......... ......;........ .OB..(......... .....w4..(....... ..... .....@.......................................................................................................DDD.CCC9LLLCKKKD>>>>&&&"................................VVVG]]].ZZZ.QQQ.```.\\\.KKK.777.,,,....r$$$#............MMM.IIJ.ddd.jjj.aaa.YYY.kkk.ggg.SSS.CCC.@@@.###.................hhh.\\].ooo.sss.eee.aaa.vvv.rrr.ZZZ.JJJ.QQQ.444.................iii.__`.\|\|\|.....lll.iii.....}}}.bbb.OOO.\\\.AAA.!!!........1666&iij.``a.........................yyy.iii.aaa.III.(((........;PPP6fff.sss.............................utx.ddd.MMM.222........HZZZGaaa.yyy..........j...V}..N...\Z...D.syW.b^].QQQ.555........QHHHGZZZ.VVV.DBC..>6../...@...l..Ee.....v.....y.CBH.MMM.---....UOOOZRRR.LMM.@57...............t.x.b.j........OUZ.RQQ.SSS.///hPPPYmmm.ttt.wxz.zxV.f.*...w..........s..3`..io..}{y.qqq.kkk.GGGa@@@.ooo.................................................jjj.777.........bbbAyyy........

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\aboutImage.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 242 x 179, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	66456
Entropy (8bit):	7.99098040395392
Encrypted:	true
SSDEEP:	1536:oH/mEx/NW2HDBkxcnRcDZbp8GNiItSuyLC/Lp:ofDNixcRcDZl8GNlSjULp
MD5:	6A81EBF4D38378508EE1FAE2721CA119
SHA1:	9397D6CE380CDD266640F9784B74A14CC19A16EA
SHA-256:	DE47C284ADE5DE41B9B13E2F6224F638FF355D0884B893C34CAF5A6F9BE6AF6F
SHA-512:	A1263212C27A9192BBCC280022F69CFD22D4AC845C5719DBE173A54193C988A8B7C5551A5563D0C091C3DF28F1BC48F04DB7FDBC7027F73E440152C4A1581690
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............lAm....sRGB.........gAMA......a.....pHYs..........(J.....IDATx^...e.U.}^...<#iF.H.,.%9...q......d..6a.o...6.....q..'.hE+.49..9...^...;u..G.M.d/.eN.}7.:u...uSc.#E;....R..I.....K..%>.:'..Cr.".....q...E....w!}<X......o9x..[.....m.o......Q.qn".[...y8..G`QL......;/...<\|7....-.m....s.yA>.....d69@.....\|...w. .Ab.5.8.yA>......]..oM....y8...p6q]...0/;...,7<u.......T.....v...J.p..V....+Vr.B^r./....z.C'/...-.9.......!..sWb!.%.)....y......sm..18..yX......@Z..;...c;...y.Z...k.Ra9.v>..[a.6Z.k.vX.....k}.....{)...ng.............^2.P....rp.g.n.. .G........p...... ..o.^h.....dw.v.g......_c,..vu(m.O.....X...D..cQ..z....Z..e.6..w.-W.w...rl.\_W.XH...%/...v.-...m...$.'..v..5.........s..{.I._X...<.........-.s[..F..3\|....,...<.Txa..v;./. ...>n.ix.L%.n.d......t;...p.v[......_l....,.U.Q._....<.....8..\.}.bd....<\|....\.y8+./....v......9.-.....b..v6.Z...o....K.....w.R....K....z.../.i.V.......(,...u87\|g+0?.....uK...k..J.plV(..A...B

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\add-disabled.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	162
Entropy (8bit):	5.979708876087664
Encrypted:	false
SSDEEP:	3:yionv//thPl5ljsLtsjsuPlpRHXk80ijExBj6VvAdl7Evp4d27iikGA/llB1p:6v/lhPZsREPLhLsj6V81Ev9mikFtljp
MD5:	114CC4934118FD740BEE63F5B4BF74B6
SHA1:	C2977E8F03BA3D03CE8AA66C648E73FC954FF335
SHA-256:	DD686FA4D04599653FD82412220DA7BC0D8651041C65A2F7B2A4D5D03FA11F74
SHA-512:	C096A2EF5C963DD6B96F70EC44CE421B5718D89688E7EEC1A18D47B05D2E05FED548B9D881CECB54418756B513AA036D97EE9F783932C229FE228A333A5F4005
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB........\IDATH.c`...B...<.t"2......e.*JE.Q......".d.........$<..>@...A..F..x8..Ds..Z./..rC?..zqT.....".#y.....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\add-hover.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	162
Entropy (8bit):	5.996714354496081
Encrypted:	false
SSDEEP:	3:yionv//thPl5ljsLtsjsuPlpRY4h1R0ijExBj6VvAdl7Evp4d27fYkXop:6v/lhPZsREPLp9sj6V81Ev9Ek4p
MD5:	7B258703E356D607EE2AF01130464931
SHA1:	D5B22D541EFEDC2B345AEBB3D9DA3AE54A15E479
SHA-256:	78DB08E60FBAC0CBB6F92C37BB072CD08FBCB6A97B337F1D6AAA830C8D597C00
SHA-512:	EE1AFF5DD56650025539219DBB45BBCC73B1760A0EA03A7EA45F70E4CE003AE54F0657CFF6149D0701E71D1780CDF95D5996189FD43003BF0B31FA43254FF81F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB........\IDATH.c`...B...<..=d.......e.*JE.Q......".d.........$<..>@...A..F..x8..Ds..Z./..rC?..zqT..:..".r......IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\add-selected.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	166
Entropy (8bit):	6.056422610480419
Encrypted:	false
SSDEEP:	3:yionv//thPl5ljsLtsfshtOPlf+It/V/J4oA3K0gVD13EgMFtILb42Bjp:6v/lhPZsRztOPcQ/VlQbgMFtILJp
MD5:	9E24DEA8BD2508A8408BFEDA0E8A0534
SHA1:	1A0289AD9C0DCCAFB9D6BF2AFE161BC75224CE93
SHA-256:	F50E420D9BC92799BF71B9DDA601DFE93342AFBC711D0EA1C177D3999DEE02E6
SHA-512:	27619F3E6C8B170BE95322199921C2A84A62A9B4B5BE40626E326D8C9E30653D16D60035FC69C6B2A16891B098EBA7792C01C6CC68AF6F46AF85B3159C481221
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB........`IDATH.c`...B...<\....8..8Y#N.^&dM.`.Z@0T.~..$5..H..8. '..D4..J...R.0z. .3>}4.......,7...G......"..>....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\add.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	162
Entropy (8bit):	5.896268687061078
Encrypted:	false
SSDEEP:	3:yionv//thPl5ljsLtsjsuPlpRyOCKPX3NronHGu1fMHcW0y8tjp:6v/lhPZsREPL5CKxonH51fMYy0p
MD5:	AFF29927E704C879AE7F63DFF44B865B
SHA1:	1647AA194175604DA2F9B4D1D9F568C90589F640
SHA-256:	FFA58960DB2BDB2A9DB2EBACCDA69DA7CD4E604FDCF1EECD1FFBF73EAA5E0BA3
SHA-512:	398292A5CE835116BCA376D407FCD1216E274D8314A925FC1E198ABF65295473AD85F04E496C77F188FAA947C6258F145D573823E2F3290968B1841E92AF1B77
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB........\IDATH.c`...B...<.t.2...C.c.2a.......s...z2EO......x...ADs..... .....<..i...F-...`...D..8......"........IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\analysis-disabled.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	532
Entropy (8bit):	7.391005699018434
Encrypted:	false
SSDEEP:	12:6v/76J+azZhSQSeQGUslFxMXHSGOCMZ7MVjk57XSQwZ4ldXKe7:fZhSZeQGUs1+yG1kM6XSdZ4/Xz
MD5:	7557BA71958383655978A82B405EC366
SHA1:	8DBDF24B143FE762E0C7C73490DD9F2AFB7C359B
SHA-256:	BC6D17A6B0884EB5897631F58320468B67CF43CE52EEAD2218D0656C4B3ADC87
SHA-512:	30457D72DC8871B23FF17F5733968213564AAD4AC29338878A9FE3356620CD8D2D6DA36C4879260D3E35C4DDA3351E59E13EB61FF4782D5792806EFFDC86B484
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH..KK.A.F.........H.....1....f........Y...[..9.T{...ng..g...V.[S..wu.l......a..u..P.Cx.B....a.p.k...M.Q.z.Zj5.jx.....M...>...,r.......#..86.....N...8K....t...%......`.>..a....%....hc`.'...........uc..U..K......_....js.........U..9..E.l...$J.V(.L......x.Y..q...l...Qw..u.Aj.+..J..$..Q).4..~.%..L....pD}..96P6T.j.jf+:.g./.o.".s..<..U....9g..........^&..u0.-...\|..L$..w.9rjA..X..1.}S:...v....\|r..[.h...".....U4#.Pm.17,-+O..oHjO_o..t.......3..I........IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\analysis-hover.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	545
Entropy (8bit):	7.503442350257439
Encrypted:	false
SSDEEP:	12:6v/766KT4vmHJUd3gFL7Cza4WjHuQEgPM+jtSPx9PI58SxclepC:Gfmi3gxCzatjHuWBSrg83lN
MD5:	901913998A53F18078A82A8F15484936
SHA1:	3D82A20B0D19FB33A7ACE01BE536F50A057BA0CF
SHA-256:	4B8AB315D62DB3D0270766DB4484380D1D0821D3F2C052B70AD3B179A69E615E
SHA-512:	B58B7CE538AFEDBCC25A6CD7A67FECF0EFF0E1E50297F72681E1E3B93C35AA8D0E59958173E89A826AE09CE70ED96C1FC49FEB66E64F94827B38AAA944934601
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH..=,CQ...D-F.:..,.Y\|,..+.Ic. ai".H.n`...,&..Y..b..."H....w{..'...{.=..~......u....4.......%..[..D.+.,.;.N.....p]5U....N.m.A...V4g......IR.._q3.W2LMA....-...<.c.@....T{.\|0...A.-Q....&.m.w..[.\.;.J...(F..6..b#..%.)..a..bu...w:/0d.W..o..YH... ~D.."..`72....o@........h..k.9........5.K.[.+.x..Q..6.r....z..O..J.1j.hG=[.~.gK.X6....=.CHE.IZ.I#.b.b...."..?.."oj.-.w.VX.@..GR.!Y\|]e.k.j..b.........@c...f.(x...E...hB.T...7A{..]._......fE...Smi.i.......Ji..E.....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\analysis-selected.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	670
Entropy (8bit):	7.619113773767039
Encrypted:	false
SSDEEP:	12:6v/76iBx4BSZVRmer5jq8xyjXfjCJ6Ck3PZXxjxiJxIt5o+LdDL3VRy67:GHZbVjq8ICJ4hBmIt5RpGg
MD5:	7E4BA9AFAC4C7592D686D1120C71E7C8
SHA1:	ECB447570B331B6ABA1F4DAAD8F07025FD0D83FA
SHA-256:	2FC8E0C01B7A44E26FF38664E4378968778DB1EE8084ED3E35F009EA3A009E23
SHA-512:	03B276BD727B538E2DE16582DD8F66B9A501F68690EAEA1D9CEB82EF24277C169BC900F4DB898FA43AE5288379B0923EFD061FD0D7D2BB304344BED9ED46C19B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB........XIDATH..U;l.A....)R.F.4.]...1..B.2...T...&(&.".;......IE.A.\|.H1..-....".$...a.].rq"..I..y.fovw..?....X..8..K].O.........g...Ri.......MP..,d...h^0p&...Lo6..w..YpN$......>.$.Xp.E.b.za.....Hb..........v..M..e.j\|..;$...W.r.W...{.T....V.G.i.^ ...:.ArZ.l.....]+pPa......r.8..Z..q.p..C...>s...4.=.K...V.(_..@.Ob..........N.......]y....;c....D./7..y.......?......_..{..s.#_.%HS.......li...7...j...i..Y~j....].\......;.lt.3..o...U.=....]....&Vh...q..zF..\|..v..Z...\|..aD.....I.k..b.>'o.&h}..."..u$V.D...9...C.)_......m..V...C8.W..+M...}..+.%^.[..C..$...Z.m......'7...../.`...!*./..lK....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\analysis.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	556
Entropy (8bit):	7.507061173875795
Encrypted:	false
SSDEEP:	12:6v/762RkKX6l/5iKk4puRIFaYGfOAtYV7GFn0wbCcfzEt7y/bbeY80k9Jnw1:5Ge55fYYGfOWYV7GOwEtg+106Jy
MD5:	3BF2FA93328D1FE4ACC8C5E04664C454
SHA1:	92FDD6D52693273E159D19BA0EFC294E965432E0
SHA-256:	6F99530FE7033391489E52069C11CD30EA894A322D542FC6DD64FBEF30216C75
SHA-512:	96130E9F4CD01B6B144D9FBB79A004ACBA75B93A93074281F2A09CA89E63675B15C795D5C70C19F348A8304EA7A69B8915390429B53E338AD8F4294099B3A417
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH...KTa..GM.E....0...(-..".$.l."..O.O. ..v!n.Bl...1DD7&.=...v.s.;.n~..=..9...~L.........)..#P.p....~C..%0..<....y...L. ..n:Va....%m..B.\|...U.......:S{.[t)&.,.y...x.?R..@...R.......@?....CV...I..Ms}~....kH.>.u....."w.&X......Q.jH.>.../a8t~.~......Ly.....%......p..`...../8C...S"..~.6\.A.....eh.l...kwQ.X.m....t.........X..g4.b....0U).......^.W...'.U.......y...!.I....v...[..CL`.9.B..<.......h....w.%.C;........\.......V....X..c..kB.A....Y...(.}./.....:......._&......Oq$:.....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\database-disabled.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	488
Entropy (8bit):	7.3582976759709515
Encrypted:	false
SSDEEP:	12:6v/76vh7f3950LfPVAUUFD8k6A7/HykrnFxt/FTRWdd+:VbNoPKUODjncdw
MD5:	132ACE305562172366E202615E321D66
SHA1:	0C35F9D5E1BC42DA88C54278F36AE4BC28EC8D7C
SHA-256:	773BDA697900C3E2B1468EB940E9E74B77F2EBC6C81FAE88812B26DEB1E10D77
SHA-512:	192DD726035E8741C0CE00EDD89675432CC0A5F8EB332B89611578AC9C95716A4B7584A147D19D13C4E68BEC25E93317EFDF37C5A3E829786032196AE8824FAA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH...+FA...w.B.GVR...B..?\V($$...(Jd.H>~..:.:s.o..WO3s.sf.....z.60....#e..kq!.J[c....5..83.s...[S...o.9o..'d..-.I......o5....T0.F...C.A$_.3.tA...G.ZB.R.)..I[<3..@....J.D.ul..1..f+Z_..b:Q'Jn~\|..\.../`W..]%...?....T.]..W......p.....C...P.:.#4?>bL...V.......\.Q.l....y#..;.....:.f..........t....m}...WA.nt...h...~...<..._D.+.W.....VQ..N&.oi.w1(...t/.o....$Ga..~..%XvI.....v..X.;...l. >0+.uq\....1.G........IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\database-hover.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	484
Entropy (8bit):	7.413594043153687
Encrypted:	false
SSDEEP:	12:6v/76Z0sgV7X+Fsj3+IU1qBsNJTUKmzwSjEc:9e7Ysj3PwlNJwZwiEc
MD5:	9FD5E9627B6699624C23BDBCED66C57F
SHA1:	EEDB876F76E97E16E076C563BF16C893D2926D11
SHA-256:	B064B0498321C6BACF25503924B6A5E48E495B6BD6DC53B9252F8F66C0E45D6B
SHA-512:	2F9CDB26DD0787C8C21332E7FA0277ACB6E90ED853BD65FE2AE950A887D4C51BB5AD709B49B2DA7548FA388D85956409C66432665BB69E6C12A65C6F0A0C19B4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH...KCa....D.6..I...`.X...6.F......`..&....5.....s..q..}/w...xv..y..j......4...U8..:.kx.[.Wb..T......./<....&Ql..p%Y...`n...\|~.r....6\....A..m%4.z...]dq..2.b....F...B...C....O1.jT.....b8A.5..b.1.Z.e......c.+n.._....r.>.J....;=...]t.~..B.[(>f~..)..`J.....h:.j<../..p!.....^......r...P.f...{..Q.....c.#3..;...^.).K,..W./~..Y[B*.6.=Q....\.K..'.8\|.OP...j..BrH7<.....e...A/XQ.$wR..+...t...C.;..O...?..I.q..f....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\database-selected.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	619
Entropy (8bit):	7.568388235473503
Encrypted:	false
SSDEEP:	12:6v/76X6fkskM7uHgUw3w7BPgcHU4xW/a8LNPDZ6A:z6f5kM7ub0OVg7aaNbZ6A
MD5:	02C1E2B92A24C5186D1B4549FC0788BA
SHA1:	6F95B69ADBDC0A74BE031ADE6575D97C7062327E
SHA-256:	1D5D676B6CDC39B1E39385159A53FE9285FE594C44DC07267504E88D9D3E9C70
SHA-512:	18A8509ED66F34CA9EB1C1128722245860D42C48F41C57039AA06E40C6BDAED422DA5286332BDA0CD4D72C698193766D1D9CF6C7674BEF7DB3A00B961098144C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB........%IDATH..T1K\A..y..?.THqU..R..$....;..6A+!.r./.@ .HH._.?@..F.(V.A...b.&Qo2...}{...4....o.ovv....?.:......<.<e..p.rF..iR.....QQn....].....$.\).....&./.....9...{...#?9.T.T/...U....M$W..<$g.aJf.8..?lm.N 5...\y..........o........~..d.y.$.:nn.i.a.......k...A.A..H.....L/.i1.N...r.aE....r..kx..E..L.10..07.y.8Pf...W....G.E].=J0...86..z...m....L....1`2..gv..$x.D..y.Q.'..b..G.\|.V.ky.l...\...O....xh:-v.h....;.....'>'2r...pt...[}..q..o.v........_..E.-....D.G....@."{..E<.JxM...uJ~.z..Z..j%}...r#+....eVT.r..... .M..EVI......Ln),NRt......z..G..m....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\database.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	514
Entropy (8bit):	7.439421386071628
Encrypted:	false
SSDEEP:	12:6v/76zqzjRyPNWdaBT+Pn8Yg/Pyv4DptLSXftNuVquxqB245:y/wERPn8YQrwftN4K
MD5:	8DFCFE831D06BC67ADEF4F535198965D
SHA1:	24E3B684E333EDCB2C0FAE4106E56AC0B410DE3C
SHA-256:	C76857120E2E96973B3514B3A77AEF0C4F49EA3446339F33970DBA528BBE01AF
SHA-512:	E0C8E42C3899DC0A0A48F43D59629ED1E7EBC163406EC6363C14181E053666FAEDFA07AF4EF0E7FA25A60A851EC3827E3A77E41D658891697B0331F657B88B0E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH..M+EQ....\|..(.240....d ...8e&F."..(1.r.$11.R.............s..Z{..y...j....6'..P.{Ry)..}.k[...4bY....-q$..(Twd!xC.....6.&...I..V.Ep..b[.........~qA#%..=_.6.=.7.x.<.<.]...8..4b.h.@-83..........&..p[L.......>&?....'....6.nx.?6......6...O.#2qp?..p.I...P..f.Vb..tc...Ax...PW.$.=..>l. ..0.%>..p.../..`J...Aoh............. p'.3o...0.\.-<..1...2....U.I.....8.6..o....>.#.;q&...BP..d...~.).....kn.R+p...lK.JR.T...f......>..pI(........IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\drop-down-arrow.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	356
Entropy (8bit):	7.137705538830455
Encrypted:	false
SSDEEP:	6:6v/lhPZsRBfPC74lTi+Ivw3kMSsBlKL1TDw4pFCl03grFOXvbS2eIl8up:6v/76xlNVUQBqTDXrCGgxOXz/J8c
MD5:	95C61C42971C8D3F431059F6367B5A7E
SHA1:	F13BB0FA2D8649647C02A04F16DA0061E518AC3A
SHA-256:	0D8BA248DB1AF75F0655E0ECE2418E2118EC53CB03BE81E2EBD6917BD703C18D
SHA-512:	D783030BFED74FA5ACC3D65C32B34F7FE801DB2A9140465A4538727C5C99FFEE26ADB13B9D2D7E6A1517A5E1B8E62730ABB999FD054A06ACF5C6FB848EBA8ADF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH..=O.P..+F........&....'...0..... N...D.LXLd@#.....9..i..7yz.9.\|.....+?..'p`.T......K.z.TqA.O.k..j.......[....{..vo.?pabi.{..6.v.b/p.!?....m.....B.N.$..[..5a.....pl.c...n@...(...!.S..H.V..A@Q....3.q... !n.j^Awq.'D]b.....o..GP.S9F...X.X..e.......a.Z...G...P...@?.'.Aw.+?....I.k........IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\edit-disabled.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	260
Entropy (8bit):	6.525923479203733
Encrypted:	false
SSDEEP:	6:6v/lhPZsRptOTCzAtRn+cx4mULZBwW2r8yfWZCXAgeCt16ppoDRXWjp:6v/76xAtBJx4xjwW2rNfaCQoQHkhWN
MD5:	8A58704717C533B9E11D5FD068407648
SHA1:	32A432EE7A2DC3F0B11188FBC4EE9EB77DA72A56
SHA-256:	2F2E9E0870FC9FC75757CDDD17EFC0C08F480B833843DA76602CE875AFBBB033
SHA-512:	21C3DC496A4C3986DCFC8899FF8F62FAEE272CC7A775E6FA13A79701C31B2F21DC78661F076650149F616955ACC108AE35BDC2E1A3955DAE6C66AA77B7D1F3DB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH.c`......Tp.!..O V..@.........4.....t... ...y..`....l8E.. .A.......N3.Y.3......X-!5.....i.....8]...X..2.X..6...(2.............[2...#g".:...Z J0Il.H`*#.p.9.X@..a..V..........0......O...F.I.....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\edit-hover.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	230
Entropy (8bit):	6.456320861139344
Encrypted:	false
SSDEEP:	6:6v/lhPZsRIXgdhEXRbgvD6VjRV9ojtJNpXEIROfilJp:6v/76IBsb6VjhyN5HUfMH
MD5:	4D5B13F3EADFCE3B7537A736992A084D
SHA1:	C36B2A9BC360F17CB60E4DCB83F6378A0A09965E
SHA-256:	4EB42439E1352B342AB4013CB5D854EDA6718DBBF3778CFCBE8C9DA65A260E97
SHA-512:	DB765A751E0148100A25FB52B3E6ADC0CDC0E4BAA85008657BC631A25BBAD079F9818B38E5D31111A33F70329D94A392539DF7F5F8CD5FB4417D11916D895EA1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH.c`...!.......G....Q....2.$P{...,..$.A......!.HK@.p.\.@......%0>E4.pP.#c..V@j........bs9..8]O.E..c....,2@. .q....-.X`..I@..X....c...l.V...h.....'@z......dn5I.?.O....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\edit.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	265
Entropy (8bit):	6.552647901249131
Encrypted:	false
SSDEEP:	6:6v/lhPZsRPNp1/pmHvIH9zlLCLLiCMrdVklV30w5kXoEWllMldp:6v/76PntpmHvIH34WCMrrGx0w8oEWll+
MD5:	65D4840A098A00C9A44159A189B24B46
SHA1:	DE389C62172AAC5D26479006D6695E0817D4D068
SHA-256:	4CAD6B99BBDD4E43E4427933718714B86F774FABA934BBF7438493B158636BBD
SHA-512:	35046ACA5435B3E5CC1F782FBEE36521799E3AC733E2C12287A382D5DC9F80B29E54A36425063B9576312B145D8C9994B2BEF253DB89548829F19B54C037543B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH.c`......Tp...t 6...@.........4"....t... .........A...r-...2..`...p..."..n8H.. .j..q..p.N#......z...Z@...Z@...X@..,..p\|.P.p.....P.9.......Q.Ib.@.S.y....f.2..d..f...H.(y.....= ~..`.......\|R?....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\help-disabled.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	519
Entropy (8bit):	7.471452545435563
Encrypted:	false
SSDEEP:	12:6v/76TauZctwZReFvrGXkOrCNYoRqXG2Y5Dn0o8TX79:fBZctwqFiU2CpRqXGND0VB
MD5:	5513C6596E450B5B52FE64C29435E607
SHA1:	81ACC93810BAD8227F48A791DFCC9A339666C67E
SHA-256:	E3F7325E0D70B5792A0734104633D65934C743B1BC182DC384952645773F6D89
SHA-512:	C9238FAD94A54C7D1E7433D9AED93049EDB553960C2AF89F70AA67E926EAB2D7C12E9FBB9888D451770858F7D7314B6B09DB05A81EF0AB37D67A7C9354C143BD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH...J.@...^P..A,DtW[+A,,ll\|..}>._.BA.T..eS.....v..$.O..D.F..6.93..\2.E.]....).(.....M.X.D_x.*......>..XP...J$.(......!.t..)'}.0_)5dJ..8..bV`...v....L.on...`.?2.t...\..Hd...[.<-.9..b[0:.0z.ma.f8....:.......l......O./.x%b..>...Y.n{.uE.[..5.E...A.p..C.e.....O..5.q..g{.{...A....`.[.B_..l..jS.C.-.V.-.^v.b.3............WH.JBHx...~..E^E'MU~1..t....'..K.....K..J_<r... G.k..h....m.[+.ODA..S..;.........3SH!..>.......`J......H..?Z....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\help-hover.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	502
Entropy (8bit):	7.459651262358281
Encrypted:	false
SSDEEP:	12:6v/76/nPdBmDQ/JxJFDLT5LbgrFCriQm66JGIA:TTBxn5AOiQm13A
MD5:	CB67C2D9650927FC2F235D842FDF7905
SHA1:	D1CE7BE6254E4254F3A5DFED76C05074FDAD6C06
SHA-256:	6119FEF237BCA462CE60F70AEAB3FAB130114DD48D3C06BE012527E3CBE9A531
SHA-512:	37397CA6DBC714B5481FABE25791A2969D1EA8D8E6430353B0DDB54965CCA4FE674B78562DB627C5C4617FF452428A811AAEF8928C9E912F2D140266294950F2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH..;/DA... ....l..HT.K!..?@.@DT.....P....J.X.K....9{f..3...7yv...7..Z..'q..._..1-..z.w.J\...U..KZ.-&.+.dK.,RE.W.>.U.%......!....+......h....L..1,.f...........j4RL...../n....{..H.w. 0.br....Lv......k.4N..#7.>j..W&.A.%...n..>.D~..M..yJO..w......n.>..5Yz.L.).4.6.^...T...s.{f.......:Qa.9.o..n@o.+y/...+%.&H.{.......C...+..E_.<..WL.o..f]L...e.n.^.9.....F...e..%...tG+.........(....S..'@[.q.[:........L..!\.....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\help.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	540
Entropy (8bit):	7.428316485524157
Encrypted:	false
SSDEEP:	12:6v/76v20+MhP3Lc7lIeLIM7WIYmFMMiXHuGBJwR9bH:D2ZMhPL8SCOOMJ0NH
MD5:	CE22D4C34DD54E8368CD9459D6806D34
SHA1:	79F6F49E2D9EB7E94B98C0EBD3E0B8C640E9E6E2
SHA-256:	FE48686830E5D51D2748F73FD8918F47D2A60DC3F224259CBC7BCE2750AF38A9
SHA-512:	E963A4024873E3677D0674ECFC1A5479C5CE910937317802C8991E8C806CEB8EFB66F23E129181C686756C3FFC4E919898B31242A361BD893A8B190700D95A31
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH...J.1..w.. .b#.XX...h....../.....a!"..6V".Vb.7.o..........f..6.s.s2g.l.....@...bL....EM..3....K@.....6>.[.$.%V.V...bAt...g.L.6q!>.W(..g....fG..q%.E.p.R.U.;.m:.ea.V.....-.F...$..H6..e...+'..X...^..U....=...T........-.............:j)OH.!cb.......M.>/.[.Rn'..3&.X6.;D.s".qv.?g.m....>.gV...s.Y........qY.......5g....%...,..^.wn./.7.Vd...XN..1...d>...].~..)X]...!m.x.....1y.9.h....\|.....[q......r...iZ...~.2..O.8......J....q....yC.......y../\|.K.........IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-0TKBN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	670
Entropy (8bit):	7.619113773767039
Encrypted:	false
SSDEEP:	12:6v/76iBx4BSZVRmer5jq8xyjXfjCJ6Ck3PZXxjxiJxIt5o+LdDL3VRy67:GHZbVjq8ICJ4hBmIt5RpGg
MD5:	7E4BA9AFAC4C7592D686D1120C71E7C8
SHA1:	ECB447570B331B6ABA1F4DAAD8F07025FD0D83FA
SHA-256:	2FC8E0C01B7A44E26FF38664E4378968778DB1EE8084ED3E35F009EA3A009E23
SHA-512:	03B276BD727B538E2DE16582DD8F66B9A501F68690EAEA1D9CEB82EF24277C169BC900F4DB898FA43AE5288379B0923EFD061FD0D7D2BB304344BED9ED46C19B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB........XIDATH..U;l.A....)R.F.4.]...1..B.2...T...&(&.".;......IE.A.\|.H1..-....".$...a.].rq"..I..y.fovw..?....X..8..K].O.........g...Ri.......MP..,d...h^0p&...Lo6..w..YpN$......>.$.Xp.E.b.za.....Hb..........v..M..e.j\|..;$...W.r.W...{.T....V.G.i.^ ...:.ArZ.l.....]+pPa......r.8..Z..q.p..C...>s...4.=.K...V.(_..@.Ob..........N.......]y....;c....D./7..y.......?......_..{..s.#_.%HS.......li...7...j...i..Y~j....].\......;.lt.3..o...U.=....]....&Vh...q..zF..\|..v..Z...\|..aD.....I.k..b.>'o.&h}..."..u$V.D...9...C.)_......m..V...C8.W..+M...}..+.%^.[..C..$...Z.m......'7...../.`...!*./..lK....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-1239B.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	491
Entropy (8bit):	7.36084355340137
Encrypted:	false
SSDEEP:	12:6v/76OUdH/VnJEe4wowEJ0QWJs7CXZEM4B:15EVCXBm
MD5:	88104473007E184FF285363F9A894677
SHA1:	FDD8CB26DF87A72286F3ABB47D8AB732A5848917
SHA-256:	6D615FAACF152FF0BD8CE862C57617EF867EBE08BA5CA4D21B813F66AB55CF4B
SHA-512:	E8A07519870E1D3C0152D2451D9FE0E25E8C84DA8B644CE58ACD19D6B686D8C0B78D0C497A0299BF9A372AFD3DAA3FE8F0FD74301DB212758800FCE0B892BF0A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH...+.A......@.x@.........1.Ky...[R..%.rY.....N.Z.}.S.9.9sf....$.H.w.......m.j.........U...gF.F.%:;Ir....^b>...q.....-.m...0.........d....$.m.s>...o....p...]Ze...N.....Y..OR..Q.Z.].O...T...2o..]B.(9'.\|..).).....e...L.(.Y.5....0..4..zgr...I...#.C..\|B...Q......"QT-..OU.:..)..s....U.......`-..U2...C......,.-.@>,.E...O.TO.2..)}s9N.....*F..jy.U...<<\|].Ux.#....4.q......I.0...H..W...o..R..g....Pi.....L.._.^....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-3986T.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4225
Entropy (8bit):	7.911855908836636
Encrypted:	false
SSDEEP:	96:aRvt6wc+hMGEqMHsNWz2Rz9+wW/yj4eBYV52daaRgU+Y:aJtM+hMG3tNmkI8j4eBY/2CY
MD5:	C47F32A98CC39F52E01F8B438387155D
SHA1:	6BA1A472DC39313303E0566177346B9EB49F667B
SHA-256:	1832116F7B2E8B608A7A1E5EF24D6988E44AF0F0D0FEA46C4A538284CE11D230
SHA-512:	9AA0864A4692B40D67318E2C8898A17857A5B66ED69E61FB3AEA39C6B00CFE7B708699142E66481AFB2A7137099E17BA8E8E56AFEFC5D6540BF7D64C5C27A004
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............>a.....sRGB.........gAMA......a.....pHYs...........~.....tEXtSoftware.paint.net 4.0.173n.c....IDATx^...\E...E...D.1;3I.<QJ@P.... ...J.A+V.=....7....I..I.D(..-.Hy....A"G.....1.....lB ...W..................o._......I..W.oj1.....G\...^..y.TL:..R..<.;..../.J{.........qH..r..I..~....;...)...?.p.......TY....!.U'..fr...R,.[....>..n.8yK)Zw...n!.......X..\|.".Q...[.dprU...O...f....7c.B.!.x....@....]&.V.....r...#.7.......W..WK.@x..:G)5.._.X.u..e.._29.....j%.\|"..~......Z.......Xg....E...z ....A.?hpD.K=.r.q....=,..\.P..P?Dw......+6...J?6njQj...6il....q....,.-.I...M..~.. ....u).~...c.=.......w..RG.n....tK}.G...n29.......m....'.....09......yjI.\|........jOj..;..h.o.,..A..i5!]6[....2..._......W...>.=.[X..h.......Y.....x!..d.....mrhuI..\}......->.r.... ..y.X......Ou..iv0]1..y.X..B.=.>.ar......l.W..`.{..I`Y......NJ....~..^..8z......G.8..>.....O@....<..hnu...{y..k#..H..{...?.*........I...Q......xz......5L._.....h..k..Q.A......z.+..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-3L09Q.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	262
Entropy (8bit):	6.647833606461703
Encrypted:	false
SSDEEP:	6:6v/lhPZsRTtOtnhzvdmFEBbmO6yLtBqBt4DvhLDXyYG/klt+4lljp:6v/76U1vlBbmO6Qqk7hBGMlvllN
MD5:	C92A2B5FBCFAC9DC10E5FAE8C6C2F21D
SHA1:	42244749408B60A5D244A4CB4111FAA0FB36CFA7
SHA-256:	277C17B19DA080B4EEAEE9C1E0AC5649DF5455F7AF59D20327E92A48514E14FB
SHA-512:	4D701777FBFB5BF1110AA7EF92D7BE57B041AEDF49EA7CBCFBA0FA069B8189D5C14B2BD209CD0C6D82DA168B99148BE65C87ACE3C3D1F8B8D3E0C02C3C88B8B3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH.c`.......IM.2&.8.h&l.$......SO.. ..ZBi.!;^...cS..0....\|..U.n.?..h(..y@{..d...9I ..- &......N.HN...n;5-@...=..>..FfP3.....e&p..U..@.j......H.Fq..8.&.....!.".........4.".[...e..E..gv.......IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-4SESK.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	356
Entropy (8bit):	7.137705538830455
Encrypted:	false
SSDEEP:	6:6v/lhPZsRBfPC74lTi+Ivw3kMSsBlKL1TDw4pFCl03grFOXvbS2eIl8up:6v/76xlNVUQBqTDXrCGgxOXz/J8c
MD5:	95C61C42971C8D3F431059F6367B5A7E
SHA1:	F13BB0FA2D8649647C02A04F16DA0061E518AC3A
SHA-256:	0D8BA248DB1AF75F0655E0ECE2418E2118EC53CB03BE81E2EBD6917BD703C18D
SHA-512:	D783030BFED74FA5ACC3D65C32B34F7FE801DB2A9140465A4538727C5C99FFEE26ADB13B9D2D7E6A1517A5E1B8E62730ABB999FD054A06ACF5C6FB848EBA8ADF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH..=O.P..+F........&....'...0..... N...D.LXLd@#.....9..i..7yz.9.\|.....+?..'p`.T......K.z.TqA.O.k..j.......[....{..vo.?pabi.{..6.v.b/p.!?....m.....B.N.$..[..5a.....pl.c...n@...(...!.S..H.V..A@Q....3.q... !n.j^Awq.'D]b.....o..GP.S9F...X.X..e.......a.Z...G...P...@?.'.Aw.+?....I.k........IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-6BN9N.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	MS Windows icon resource - 6 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	528973
Entropy (8bit):	7.92437382987604
Encrypted:	false
SSDEEP:	12288:6SyO0lvlmLJSHih5db3U2s8LNuCHjwQkyOqE7J+7P:6dlldmdfFk2s8JuGUVyOfFg
MD5:	69F7D960322EEDD0FE26B7F7A898D50B
SHA1:	3F44BD3797F1CBAE48C6EBC540563ACA16DD52F9
SHA-256:	90AA8722B67A723FB757E0249475E202C4B964AAA176BA033A830320D3456F5A
SHA-512:	339ED215348917728978040DA0FF00239B019ADBBE26AEC5A39F09495D62793E064FA29BEFF104C3A7820E48B7F1F9837E68906AEB88CDA028A809DF89AFBEE5
Malicious:	false
Reputation:	low
Preview:	............ .h...f... .... .........00.... ..%..v......... ......;........ .OB..(......... .....w4..(....... ..... .....@.......................................................................................................DDD.CCC9LLLCKKKD>>>>&&&"................................VVVG]]].ZZZ.QQQ.```.\\\.KKK.777.,,,....r$$$#............MMM.IIJ.ddd.jjj.aaa.YYY.kkk.ggg.SSS.CCC.@@@.###.................hhh.\\].ooo.sss.eee.aaa.vvv.rrr.ZZZ.JJJ.QQQ.444.................iii.__`.\|\|\|.....lll.iii.....}}}.bbb.OOO.\\\.AAA.!!!........1666&iij.``a.........................yyy.iii.aaa.III.(((........;PPP6fff.sss.............................utx.ddd.MMM.222........HZZZGaaa.yyy..........j...V}..N...\Z...D.syW.b^].QQQ.555........QHHHGZZZ.VVV.DBC..>6../...@...l..Ee.....v.....y.CBH.MMM.---....UOOOZRRR.LMM.@57...............t.x.b.j........OUZ.RQQ.SSS.///hPPPYmmm.ttt.wxz.zxV.f.*...w..........s..3`..io..}{y.qqq.kkk.GGGa@@@.ooo.................................................jjj.777.........bbbAyyy........

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-6HNN3.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	525
Entropy (8bit):	7.468710246302977
Encrypted:	false
SSDEEP:	12:6v/76JncM/uwW+/6Gt2lIzQ+br5HlNFROdVKBPhX97:hcwuw7/UmUyr5lXRyVKBPhN7
MD5:	85289BF7AC2FD47E08860D351BAA73A7
SHA1:	336A71751FFBDCF6D86581DBD5F5D9BC7C5D68E6
SHA-256:	B03BF84D8458A789803E70847B1F6ED5E5E59E56A3DEA7E2C7F417BD6C9951A0
SHA-512:	EF2DA2339B67FB6E2F877BB0AD4F03F83273376BC09D13C0768406206F92B49AF580ED1113950F965A961891FBE0EBD02BD00A529FFDFF81CFCB0A6E5F4A90DD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH...+EQ...w..3An.0.1`@...7...I)sb`h...@Dd.5.$....8[.n.^&bpW}g....g...:;.......A....A9...g..p........6.... ....U...$..s...6yl...a.}..P.C..8../.1.$U.$"`.6.4\|~.....cP..,.(....z..Q.....d.(.Q..b.2......A.....B=.=@o..xV.l..jpe..).@7..j...B3..j`S...\|r..[<.[C..q].....(.,.'..i..},.Wc3>..Q.`Fu.t.@#.v...^.5T...5.+.......d...&...S9i.~:....Q.E...ZFee..}v%...AW.4-..I.....oa...x...l.f]GE.1~..J........\|...n....7q.a..\|.T...&M..,$......jtZ.q...2&OE_dw.....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-7SS1R.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 242 x 179, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	66456
Entropy (8bit):	7.99098040395392
Encrypted:	true
SSDEEP:	1536:oH/mEx/NW2HDBkxcnRcDZbp8GNiItSuyLC/Lp:ofDNixcRcDZl8GNlSjULp
MD5:	6A81EBF4D38378508EE1FAE2721CA119
SHA1:	9397D6CE380CDD266640F9784B74A14CC19A16EA
SHA-256:	DE47C284ADE5DE41B9B13E2F6224F638FF355D0884B893C34CAF5A6F9BE6AF6F
SHA-512:	A1263212C27A9192BBCC280022F69CFD22D4AC845C5719DBE173A54193C988A8B7C5551A5563D0C091C3DF28F1BC48F04DB7FDBC7027F73E440152C4A1581690
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............lAm....sRGB.........gAMA......a.....pHYs..........(J.....IDATx^...e.U.}^...<#iF.H.,.%9...q......d..6a.o...6.....q..'.hE+.49..9...^...;u..G.M.d/.eN.}7.:u...uSc.#E;....R..I.....K..%>.:'..Cr.".....q...E....w!}<X......o9x..[.....m.o......Q.qn".[...y8..G`QL......;/...<\|7....-.m....s.yA>.....d69@.....\|...w. .Ab.5.8.yA>......]..oM....y8...p6q]...0/;...,7<u.......T.....v...J.p..V....+Vr.B^r./....z.C'/...-.9.......!..sWb!.%.)....y......sm..18..yX......@Z..;...c;...y.Z...k.Ra9.v>..[a.6Z.k.vX.....k}.....{)...ng.............^2.P....rp.g.n.. .G........p...... ..o.^h.....dw.v.g......_c,..vu(m.O.....X...D..cQ..z....Z..e.6..w.-W.w...rl.\_W.XH...%/...v.-...m...$.'..v..5.........s..{.I._X...<.........-.s[..F..3\|....,...<.Txa..v;./. ...>n.ix.L%.n.d......t;...p.v[......_l....,.U.Q._....<.....8..\.}.bd....<\|....\.y8+./....v......9.-.....b..v6.Z...o....K.....w.R....K....z.../.i.V.......(,...u87\|g+0?.....uK...k..J.plV(..A...B

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-8RACO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	556
Entropy (8bit):	7.507061173875795
Encrypted:	false
SSDEEP:	12:6v/762RkKX6l/5iKk4puRIFaYGfOAtYV7GFn0wbCcfzEt7y/bbeY80k9Jnw1:5Ge55fYYGfOWYV7GOwEtg+106Jy
MD5:	3BF2FA93328D1FE4ACC8C5E04664C454
SHA1:	92FDD6D52693273E159D19BA0EFC294E965432E0
SHA-256:	6F99530FE7033391489E52069C11CD30EA894A322D542FC6DD64FBEF30216C75
SHA-512:	96130E9F4CD01B6B144D9FBB79A004ACBA75B93A93074281F2A09CA89E63675B15C795D5C70C19F348A8304EA7A69B8915390429B53E338AD8F4294099B3A417
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH...KTa..GM.E....0...(-..".$.l."..O.O. ..v!n.Bl...1DD7&.=...v.s.;.n~..=..9...~L.........)..#P.p....~C..%0..<....y...L. ..n:Va....%m..B.\|...U.......:S{.[t)&.,.y...x.?R..@...R.......@?....CV...I..Ms}~....kH.>.u....."w.&X......Q.jH.>.../a8t~.~......Ly.....%......p..`...../8C...S"..~.6\.A.....eh.l...kwQ.X.m....t.........X..g4.b....0U).......^.W...'.U.......y...!.I....v...[..CL`.9.B..<.......h....w.%.C;........\.......V....X..c..kB.A....Y...(.}./.....:......._&......Oq$:.....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-9R3KM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	484
Entropy (8bit):	7.413594043153687
Encrypted:	false
SSDEEP:	12:6v/76Z0sgV7X+Fsj3+IU1qBsNJTUKmzwSjEc:9e7Ysj3PwlNJwZwiEc
MD5:	9FD5E9627B6699624C23BDBCED66C57F
SHA1:	EEDB876F76E97E16E076C563BF16C893D2926D11
SHA-256:	B064B0498321C6BACF25503924B6A5E48E495B6BD6DC53B9252F8F66C0E45D6B
SHA-512:	2F9CDB26DD0787C8C21332E7FA0277ACB6E90ED853BD65FE2AE950A887D4C51BB5AD709B49B2DA7548FA388D85956409C66432665BB69E6C12A65C6F0A0C19B4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH...KCa....D.6..I...`.X...6.F......`..&....5.....s..q..}/w...xv..y..j......4...U8..:.kx.[.Wb..T......./<....&Ql..p%Y...`n...\|~.r....6\....A..m%4.z...]dq..2.b....F...B...C....O1.jT.....b8A.5..b.1.Z.e......c.+n.._....r.>.J....;=...]t.~..B.[(>f~..)..`J.....h:.j<../..p!.....^......r...P.f...{..Q.....c.#3..;...^.).K,..W./~..Y[B*.6.=Q....\.K..'.8\|.OP...j..BrH7<.....e...A/XQ.$wR..+...t...C.;..O...?..I.q..f....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-A99LI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	257
Entropy (8bit):	6.655357278145311
Encrypted:	false
SSDEEP:	6:6v/lhPZsR3AgrIcvMqzUTnqGwbI3ZeDkqaRf4kWwrBllup:6v/763Ag0pM2qGwM3ZenkwrwV8
MD5:	5B8DE9424C54B6702D8D4AA6CBBA1BC9
SHA1:	F2E7E4E55E26980FB6DC634844993A6E0FE86C95
SHA-256:	7B55D5560570CD910624E0F8650048C834393000313BA8EB6B6F814FC0EE16EE
SHA-512:	C55D8E7C92A05982F997B6F7BBBF7AA0822DE0C8332B85B51553CCD7542193C12DEC300D89000F4FE41D345B0D60143580997FC7224FBC5E10157E3D74F39C41
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH.c`..............a.l4.6A....j......x-...0K.z.Z.`5.$./.I...N[h)...W.E2T..... ....Z.....l.H.......Q.5-@1..a.1.@.`3..>....h>6.. .R.......O.@6.K.....Af..r..s.L...."..L.....<.p[=Td....P...*....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-AC41V.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	545
Entropy (8bit):	7.503442350257439
Encrypted:	false
SSDEEP:	12:6v/766KT4vmHJUd3gFL7Cza4WjHuQEgPM+jtSPx9PI58SxclepC:Gfmi3gxCzatjHuWBSrg83lN
MD5:	901913998A53F18078A82A8F15484936
SHA1:	3D82A20B0D19FB33A7ACE01BE536F50A057BA0CF
SHA-256:	4B8AB315D62DB3D0270766DB4484380D1D0821D3F2C052B70AD3B179A69E615E
SHA-512:	B58B7CE538AFEDBCC25A6CD7A67FECF0EFF0E1E50297F72681E1E3B93C35AA8D0E59958173E89A826AE09CE70ED96C1FC49FEB66E64F94827B38AAA944934601
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH..=,CQ...D-F.:..,.Y\|,..+.Ic. ai".H.n`...,&..Y..b..."H....w{..'...{.=..~......u....4.......%..[..D.+.,.;.N.....p]5U....N.m.A...V4g......IR.._q3.W2LMA....-...<.c.@....T{.\|0...A.-Q....&.m.w..[.\.;.J...(F..6..b#..%.)..a..bu...w:/0d.W..o..YH... ~D.."..`72....o@........h..k.9........5.K.[.+.x..Q..6.r....z..O..J.1j.hG=[.~.gK.X6....=.CHE.IZ.I#.b.b...."..?.."oj.-.w.VX.@..GR.!Y\|]e.k.j..b.........@c...f.(x...E...hB.T...7A{..]._......fE...Smi.i.......Ji..E.....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-AG372.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	532
Entropy (8bit):	7.391005699018434
Encrypted:	false
SSDEEP:	12:6v/76J+azZhSQSeQGUslFxMXHSGOCMZ7MVjk57XSQwZ4ldXKe7:fZhSZeQGUs1+yG1kM6XSdZ4/Xz
MD5:	7557BA71958383655978A82B405EC366
SHA1:	8DBDF24B143FE762E0C7C73490DD9F2AFB7C359B
SHA-256:	BC6D17A6B0884EB5897631F58320468B67CF43CE52EEAD2218D0656C4B3ADC87
SHA-512:	30457D72DC8871B23FF17F5733968213564AAD4AC29338878A9FE3356620CD8D2D6DA36C4879260D3E35C4DDA3351E59E13EB61FF4782D5792806EFFDC86B484
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH..KK.A.F.........H.....1....f........Y...[..9.T{...ng..g...V.[S..wu.l......a..u..P.Cx.B....a.p.k...M.Q.z.Zj5.jx.....M...>...,r.......#..86.....N...8K....t...%......`.>..a....%....hc`.'...........uc..U..K......_....js.........U..9..E.l...$J.V(.L......x.Y..q...l...Qw..u.Aj.+..J..$..Q).4..~.%..L....pD}..96P6T.j.jf+:.g./.o.".s..<..U....9g..........^&..u0.-...\|..L$..w.9rjA..X..1.}S:...v....\|r..[.h...".....U4#.Pm.17,-+O..oHjO_o..t.......3..I........IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-AJ8RS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	720
Entropy (8bit):	7.6087744095761645
Encrypted:	false
SSDEEP:	12:6v/760+AjmTFFHNGfAIfhQP5nwolCjNf62IZqMU7HFvJKP/O1gOQ:w+Aj2rHWtJq5NCjNS2IZqMSFgXCQ
MD5:	A0C8E30F98F4AEE44B9D346AE3BD7065
SHA1:	1706FE0477DF4DCAA9168EFC5BB809B2491C6077
SHA-256:	E83CE044DD78101CE16875311ADEDF2F083E19943FAB18FB7500F9AE527856EE
SHA-512:	C8B661E4D54FC6A0D3B3B221E1F5F6D1AF1DE13C00D12A666FA463BBBBFF3EC02ECDAAB8DBF453B761276C7A63375F419F250E18F881F08FA8BD0977AAFDBBBD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH..TMHTQ.>..g.I{A...je..~(QiQ...v....h.....D...h!.R.m......p.V..ASf.d...9........x.q...w..}.+k.+... J....h.......P8.~....{D..l.up8>.a.[.q..me..CT....\|.Y.......=.v$..P....C.9@.~.1..e.D.N..m 8...!.u../.".EP....T..q.F...;.\|..}_C.y;...:kE..v$bvE...........Q.....>.q....Y..z..c".u.%......%.......Ph..=.....xQ&...>.!.D.....5Zd\.#.J.../W9.. ."...L.g.[.._8..bSl..d.&cM^....^.NH'ew/....p..Il.........,."Q.mC...!.\c2Q^YV.....lS#'0.f...../.k..i..r..q ..`,.g,.Z......_.6..cz0>Sm.V.;..M/7.b\|.,%./.S.)......b'.@.....~f..D..{~...nh......0Z.]...u...(...}......v.Y....yd../..&H6..3..9..j.`Gx.H...Aw.nNY..$M...V.c....Z.Y...... .6-$.;....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-CJBMB.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	MS Windows icon resource - 9 icons, 48x48, 16 colors, 4 bits/pixel, 32x32, 16 colors, 4 bits/pixel
Category:	dropped
Size (bytes):	25214
Entropy (8bit):	3.4130479970002168
Encrypted:	false
SSDEEP:	192:cxDi4hXn7zDii5kS3WpsKURkGUuG5mFg1A+rXdIpsacD17lD:cvF7D5ZmpBURlUuG5mFg1prNIpPcJlD
MD5:	CF70341B00136B5DD4E7D4A35BFC86B0
SHA1:	300FF0B02414220FB55791561641570F7774914F
SHA-256:	6D3C19CA5F65D75A108BEC2E3E70222AB486BA1DBA68B8A7E98B88E114837172
SHA-512:	D437CF78EC501DEF57A6A5B1E6F7D8F72B3ABDE32C08EDB287AC705751D480D514922D02FEA11FD92F39CC4F09ABA12208F8701BCD72DC968FC828666EE1969F
Malicious:	false
Reputation:	low
Preview:	......00......h....... ......................(.......00.............. ......................h...^"..00.... ..%...'.. .... .....nM........ .h....^..(...0...`...............................................................................................................................wwwwww.................wwwwwwwwp..............wwwwwwwwwwp............wwwwwvwvwwwwp...........wwwwvwWuwvww.............wwgwWwwwuwp.............wwuwwwwcww...............wwwwrwwwp...............wwgswwww.................wwwwwW`..........0......wqvuvw...................wwwwp......wp...........wwww.......wp............wgp......www.....p......ww.......www.............p......wwww....................wwwwp..{.{{............wwwwwp..................wwwvwp...{{............wwwwwWp.......p.........wwwvwww................wwwwwWww.....{..........wwwvwwvw...{y..{p.......wwwwWwww................wwvwwv7w.................wwWwwww..{..{...........wwwv7Wp..................wvwwwp..................wwwwwp...{...............wWwvp...

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-CN4RP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	265
Entropy (8bit):	6.552647901249131
Encrypted:	false
SSDEEP:	6:6v/lhPZsRPNp1/pmHvIH9zlLCLLiCMrdVklV30w5kXoEWllMldp:6v/76PntpmHvIH34WCMrrGx0w8oEWll+
MD5:	65D4840A098A00C9A44159A189B24B46
SHA1:	DE389C62172AAC5D26479006D6695E0817D4D068
SHA-256:	4CAD6B99BBDD4E43E4427933718714B86F774FABA934BBF7438493B158636BBD
SHA-512:	35046ACA5435B3E5CC1F782FBEE36521799E3AC733E2C12287A382D5DC9F80B29E54A36425063B9576312B145D8C9994B2BEF253DB89548829F19B54C037543B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH.c`......Tp...t 6...@.........4"....t... .........A...r-...2..`...p..."..n8H.. .j..q..p.N#......z...Z@...Z@...X@..,..p\|.P.p.....P.9.......Q.Ib.@.S.y....f.2..d..f...H.(y.....= ~..`.......\|R?....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-CV9AG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	166
Entropy (8bit):	6.056422610480419
Encrypted:	false
SSDEEP:	3:yionv//thPl5ljsLtsfshtOPlf+It/V/J4oA3K0gVD13EgMFtILb42Bjp:6v/lhPZsRztOPcQ/VlQbgMFtILJp
MD5:	9E24DEA8BD2508A8408BFEDA0E8A0534
SHA1:	1A0289AD9C0DCCAFB9D6BF2AFE161BC75224CE93
SHA-256:	F50E420D9BC92799BF71B9DDA601DFE93342AFBC711D0EA1C177D3999DEE02E6
SHA-512:	27619F3E6C8B170BE95322199921C2A84A62A9B4B5BE40626E326D8C9E30653D16D60035FC69C6B2A16891B098EBA7792C01C6CC68AF6F46AF85B3159C481221
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB........`IDATH.c`...B...<\....8..8Y#N.^&dM.`.Z@0T.~..$5..H..8. '..D4..J...R.0z. .3>}4.......,7...G......"..>....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-DEPVO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	274
Entropy (8bit):	6.560710259421661
Encrypted:	false
SSDEEP:	6:6v/lhPZsRvtOEFmlgwYLFoTM8Z5U30JRezpSZ+q3Ulgrp:6v/76Ya/iZKEJR/Znkl2
MD5:	1EA3088F30A0D402F20792779AF2DE56
SHA1:	0D1B6E68E606FEBE00C6FC982F8111A6EE5CCC32
SHA-256:	5BA3008BC30DE6588D130BECBFC1F5AF72C0887DC685C01C927D6111ACE32DF6
SHA-512:	57A7282F6DCE2B8CCD75D8CEC17814664321BE78556FB298CE99C77D2F4DC75E9AE9D0AE4DD5C2C1E8E50A5DB9BE212BE4EDE17ED8C9CF0B5D859BCB66C297CD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH.c`.I`......&.0bQ%....b. V.b5 .....'.s..oB.. }....1.`...PV...4...r+.P....@F...F....A....Px..'..h.V=.,.B....X...3B..,.zF-@... B...l...k..j,B....d.. .....Ts.A.M..R....1D ........1.D.'..(S...q................IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-E9CLC.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	540
Entropy (8bit):	7.428316485524157
Encrypted:	false
SSDEEP:	12:6v/76v20+MhP3Lc7lIeLIM7WIYmFMMiXHuGBJwR9bH:D2ZMhPL8SCOOMJ0NH
MD5:	CE22D4C34DD54E8368CD9459D6806D34
SHA1:	79F6F49E2D9EB7E94B98C0EBD3E0B8C640E9E6E2
SHA-256:	FE48686830E5D51D2748F73FD8918F47D2A60DC3F224259CBC7BCE2750AF38A9
SHA-512:	E963A4024873E3677D0674ECFC1A5479C5CE910937317802C8991E8C806CEB8EFB66F23E129181C686756C3FFC4E919898B31242A361BD893A8B190700D95A31
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH...J.1..w.. .b#.XX...h....../.....a!"..6V".Vb.7.o..........f..6.s.s2g.l.....@...bL....EM..3....K@.....6>.[.$.%V.V...bAt...g.L.6q!>.W(..g....fG..q%.E.p.R.U.;.m:.ea.V.....-.F...$..H6..e...+'..X...^..U....=...T........-.............:j)OH.!cb.......M.>/.[.Rn'..3&.X6.;D.s".qv.?g.m....>.gV...s.Y........qY.......5g....%...,..^.wn./.7.Vd...XN..1...d>...].~..)X]...!m.x.....1y.9.h....\|.....[q......r...iZ...~.2..O.8......J....q....yC.......y../\|.K.........IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-EE1N8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	260
Entropy (8bit):	6.525923479203733
Encrypted:	false
SSDEEP:	6:6v/lhPZsRptOTCzAtRn+cx4mULZBwW2r8yfWZCXAgeCt16ppoDRXWjp:6v/76xAtBJx4xjwW2rNfaCQoQHkhWN
MD5:	8A58704717C533B9E11D5FD068407648
SHA1:	32A432EE7A2DC3F0B11188FBC4EE9EB77DA72A56
SHA-256:	2F2E9E0870FC9FC75757CDDD17EFC0C08F480B833843DA76602CE875AFBBB033
SHA-512:	21C3DC496A4C3986DCFC8899FF8F62FAEE272CC7A775E6FA13A79701C31B2F21DC78661F076650149F616955ACC108AE35BDC2E1A3955DAE6C66AA77B7D1F3DB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH.c`......Tp.!..O V..@.........4.....t... ...y..`....l8E.. .A.......N3.Y.3......X-!5.....i.....8]...X..2.X..6...(2.............[2...#g".:...Z J0Il.H`*#.p.9.X@..a..V..........0......O...F.I.....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-HMB5O.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	514
Entropy (8bit):	7.439421386071628
Encrypted:	false
SSDEEP:	12:6v/76zqzjRyPNWdaBT+Pn8Yg/Pyv4DptLSXftNuVquxqB245:y/wERPn8YQrwftN4K
MD5:	8DFCFE831D06BC67ADEF4F535198965D
SHA1:	24E3B684E333EDCB2C0FAE4106E56AC0B410DE3C
SHA-256:	C76857120E2E96973B3514B3A77AEF0C4F49EA3446339F33970DBA528BBE01AF
SHA-512:	E0C8E42C3899DC0A0A48F43D59629ED1E7EBC163406EC6363C14181E053666FAEDFA07AF4EF0E7FA25A60A851EC3827E3A77E41D658891697B0331F657B88B0E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH..M+EQ....\|..(.240....d ...8e&F."..(1.r.$11.R.............s..Z{..y...j....6'..P.{Ry)..}.k[...4bY....-q$..(Twd!xC.....6.&...I..V.Ep..b[.........~qA#%..=_.6.=.7.x.<.<.]...8..4b.h.@-83..........&..p[L.......>&?....'....6.nx.?6......6...O.#2qp?..p.I...P..f.Vb..tc...Ax...PW.$.=..>l. ..0.%>..p.../..`J...Aoh............. p'.3o...0.\.-<..1...2....U.I.....8.6..o....>.#.;q&...BP..d...~.).....kn.R+p...lK.JR.T...f......>..pI(........IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-I5RBR.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	519
Entropy (8bit):	7.437255915421603
Encrypted:	false
SSDEEP:	12:6v/76TkE5YDuuBACkS9qj3BYZGNualT6MDw+9Plz:fT5YTAc9s3RJ6Sbn
MD5:	EF56A910697A7437D73AF22EA72C9599
SHA1:	EC3C61B935AA2B8771FEA1E8574A724E9E07CFB5
SHA-256:	ACBFB1000C17FE60B706FA935AA289FD166C3C4FDE122D41225195C5CED345FF
SHA-512:	4289241F506BBFA7CC6DEF96A081314243D5AFE7A3E9B4543D4AF9D93FB730F0EAEFA90EED6450EB1C2DC961B4A90FF5D596D7792AB8D215E49B22681653F843
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH..;K.Q..7.... ..&..`c..J./.>... .."6..h#..[v6...Y...8.3s....&......,)./......Gq,..b... ..7.3..W.#.B3X..d.E.>..xt...W..L.@.0&.`....q.s9c.....d_.<..s..F._.....2.....9...(u..u.8.,=w..%.dek"0qb4A_.X[.K...8.sK40..X.C>Vn.g.7D..6._.XN.{...)a.8...(.J..D.=X...(.n.W.T.. ....x.S..j;...4J-_.oKD...q..)..%S.........F.J.U+.L[q........O..9y...;..Uw...hOb_.}.W..rN.1.....A......=....2F>....\|[..u......R....".b....c..x.A.\|..E.../.-.....dt........IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-I7LF9.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	260
Entropy (8bit):	6.684387011610554
Encrypted:	false
SSDEEP:	6:6v/lhPZsRptOHFBjqcPLekcL1WnkGC6u7XykfTNVp:6v/76CXbqkccjvu+0Td
MD5:	2016EDF1E8F853FDFEC8607F954B9B5D
SHA1:	BB294D7CAA8C9A02920201F527913EBC52CAA611
SHA-256:	3F1AEC37ECF82FBB3452CDC1423EEC09D0959D78FAE715311CBDECA277559FD1
SHA-512:	2BA11E7CCA50A2AC2FACA0A2E3C7A0E493BF1306BD246913CD85487C453520E0FA96CB7C35BFAE0D9D9F4E907E8BC84955F22D52F65CED16B4572614FD676B0B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH.c`..............`.l4.6A..\.j......x-...0K.z.Z.`5.$./..q......0.E.}...K.J....3.d.r.P.p..p..-.IP...5.0....(..8,0...Dlf...4..[..a.*.b(.0]}......d..... ..d.. ..8..$(..-B.....[+.....CE..MV._.;......IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-L4LG8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	298
Entropy (8bit):	6.786526574145386
Encrypted:	false
SSDEEP:	6:6v/lhPZsRntOG1lFSxwOSoWDEWnw4baO2pkGsnhfCidSBIlPVojjbp:6v/76Z1lFSaXoWDEgJaOZGsnha+SBY9o
MD5:	F199E278CA6049468B6C41FB69EBD73D
SHA1:	A92424E87BBBDFA67FF06B1DD1E0B8AA27F1D8E6
SHA-256:	471137D65D4588FA74EB7B0235015F6CC401A534A22232FE772C5F60FD7F86A5
SHA-512:	4E8271469F721E97FABB4FB4EB94A83C9BAA75E993E3E2ED61641D6A8891F77A68EF2041FD54D46AAE9FEAB7556B35BDE542916AE4A6245F1662404001966976
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH.c`........@.?........F! .D...lf F.....@....!.?.l8.fA8P....4.7..i.P56.....b. !d.(...+bB.......'.U...~.3...V=.,.........e.V..L.Ac.3`.`........0.`.O.Sq.X......'........,x@4I.....?.n.l.Z.....H.....X..Y0t...j..@..Ux...../*u.......IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-LAUCN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	162
Entropy (8bit):	5.996714354496081
Encrypted:	false
SSDEEP:	3:yionv//thPl5ljsLtsjsuPlpRY4h1R0ijExBj6VvAdl7Evp4d27fYkXop:6v/lhPZsREPLp9sj6V81Ev9Ek4p
MD5:	7B258703E356D607EE2AF01130464931
SHA1:	D5B22D541EFEDC2B345AEBB3D9DA3AE54A15E479
SHA-256:	78DB08E60FBAC0CBB6F92C37BB072CD08FBCB6A97B337F1D6AAA830C8D597C00
SHA-512:	EE1AFF5DD56650025539219DBB45BBCC73B1760A0EA03A7EA45F70E4CE003AE54F0657CFF6149D0701E71D1780CDF95D5996189FD43003BF0B31FA43254FF81F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB........\IDATH.c`...B...<..=d.......e.*JE.Q......".d.........$<..>@...A..F..x8..Ds..Z./..rC?..zqT..:..".r......IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-MAD0T.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	503
Entropy (8bit):	7.436913383916602
Encrypted:	false
SSDEEP:	12:6v/76wOvIfgD861F3k0O5Ybdtc3F7IV/J2R/N:8iz8xj5Yb67IxYR/N
MD5:	95E15A7E40E5E1302FB2511CB52A3D22
SHA1:	16B29C783D40086304A2BB39F491B8EA405693EB
SHA-256:	2BCBB81AED90D7D9B6BC945D74BE35196C6E7B929C29A88178CD216A2ABBC47A
SHA-512:	F7E58088535DC4849610CC427AD3E1B866197D9D11AD7EF7EAD4A09C9B3CAC042723BE55E554757813C748143480BB7653C14DA2F532C4761F2EB13B0B9D18F1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH..1J.A....BA,......Fk...b.;..6..@.K.`DH.r.A.B!..........c..."?\|..o.....3i4.]35.hr?...a..W...\..$.....8.V.g...v.JU.\..h...G.............R...+~.lR:...EOk......@.8....GRM.}x(..VAO..UN.$.\|.X^...22.2...d...`g.X9.S.j..!.Bv.<$.v.... .\5...^.3..b.V..7T:<y.\..aG..A.D.[....o...X.?.....).W..$.'z..t.xys.....~....sU)s.._.....{......Y..0/..K.[8.=..".....F..."..........g.wm.;.....T..8.d~.....p..P..0.F.....s.\|E..i.3..W...hz.O..j...%.....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-O4B2S.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	523
Entropy (8bit):	7.398369026921254
Encrypted:	false
SSDEEP:	12:6v/76HvaFG18oE34qsZWuOe8+GJ3qTUWZcgSLo0ePJXk+:C/oE3SQuJpAYSLo0eK+
MD5:	1DC4264BB4EA1D51AE06AD13348B7486
SHA1:	4AC1532F861273A56ED5202FDCBAF323A3D2FEEA
SHA-256:	AC141F029C82B4313E248586B60471D371C3AA9BFE46AAFBD650AAA8AC9F49D8
SHA-512:	5CDC4F09C520DEA230F32DF33006B896C2BC8C9ABF9777ECBA04ECEFAA9D7AA8CC1EF3E27421466AA182BCFB4617EE77A782DAD1391912340F170AC7AF38584B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH...+EQ...e.WH1....e.$....PB.L.... I...)Iy..14a@....9....l..sd....w.Y.^.....FD..;.......<......EF..Z ./5@3d...).$..uPN..m$w@B...{.Q..sv.U=..&q.x..@-)..Q.~-..B.n2.X.#C7...J^...U<....T..........b...@.................m....0....!..1.6..j.....X......T.y..j...+ .....z.&.d....VA...zn.b;...}:.'X.H.....C;.......a....}..x.JZ.{..../..7i.N7<....w&....[...t....Z.k.........-.x;........Z..$...l.]....0...'}..K.M...8.3.....x...G;..Y.Y`..X"....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-OB7HQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	519
Entropy (8bit):	7.471452545435563
Encrypted:	false
SSDEEP:	12:6v/76TauZctwZReFvrGXkOrCNYoRqXG2Y5Dn0o8TX79:fBZctwqFiU2CpRqXGND0VB
MD5:	5513C6596E450B5B52FE64C29435E607
SHA1:	81ACC93810BAD8227F48A791DFCC9A339666C67E
SHA-256:	E3F7325E0D70B5792A0734104633D65934C743B1BC182DC384952645773F6D89
SHA-512:	C9238FAD94A54C7D1E7433D9AED93049EDB553960C2AF89F70AA67E926EAB2D7C12E9FBB9888D451770858F7D7314B6B09DB05A81EF0AB37D67A7C9354C143BD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH...J.@...^P..A,DtW[+A,,ll\|..}>._.BA.T..eS.....v..$.O..D.F..6.93..\2.E.]....).(.....M.X.D_x.*......>..XP...J$.(......!.t..)'}.0_)5dJ..8..bV`...v....L.on...`.?2.t...\..Hd...[.<-.9..b[0:.0z.ma.f8....:.......l......O./.x%b..>...Y.n{.uE.[..5.E...A.p..C.e.....O..5.q..g{.{...A....`.[.B_..l..jS.C.-.V.-.^v.b.3............WH.JBHx...~..E^E'MU~1..t....'..K.....K..J_<r... G.k..h....m.[+.ODA..S..;.........3SH!..>.......`J......H..?Z....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-OF3UJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	162
Entropy (8bit):	5.979708876087664
Encrypted:	false
SSDEEP:	3:yionv//thPl5ljsLtsjsuPlpRHXk80ijExBj6VvAdl7Evp4d27iikGA/llB1p:6v/lhPZsREPLhLsj6V81Ev9mikFtljp
MD5:	114CC4934118FD740BEE63F5B4BF74B6
SHA1:	C2977E8F03BA3D03CE8AA66C648E73FC954FF335
SHA-256:	DD686FA4D04599653FD82412220DA7BC0D8651041C65A2F7B2A4D5D03FA11F74
SHA-512:	C096A2EF5C963DD6B96F70EC44CE421B5718D89688E7EEC1A18D47B05D2E05FED548B9D881CECB54418756B513AA036D97EE9F783932C229FE228A333A5F4005
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB........\IDATH.c`...B...<.t"2......e.*JE.Q......".d.........$<..>@...A..F..x8..Ds..Z./..rC?..zqT.....".#y.....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-PI9JN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	162
Entropy (8bit):	5.896268687061078
Encrypted:	false
SSDEEP:	3:yionv//thPl5ljsLtsjsuPlpRyOCKPX3NronHGu1fMHcW0y8tjp:6v/lhPZsREPL5CKxonH51fMYy0p
MD5:	AFF29927E704C879AE7F63DFF44B865B
SHA1:	1647AA194175604DA2F9B4D1D9F568C90589F640
SHA-256:	FFA58960DB2BDB2A9DB2EBACCDA69DA7CD4E604FDCF1EECD1FFBF73EAA5E0BA3
SHA-512:	398292A5CE835116BCA376D407FCD1216E274D8314A925FC1E198ABF65295473AD85F04E496C77F188FAA947C6258F145D573823E2F3290968B1841E92AF1B77
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB........\IDATH.c`...B...<.t.2...C.c.2a.......s...z2EO......x...ADs..... .....<..i...F-...`...D..8......"........IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-QL95K.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	230
Entropy (8bit):	6.456320861139344
Encrypted:	false
SSDEEP:	6:6v/lhPZsRIXgdhEXRbgvD6VjRV9ojtJNpXEIROfilJp:6v/76IBsb6VjhyN5HUfMH
MD5:	4D5B13F3EADFCE3B7537A736992A084D
SHA1:	C36B2A9BC360F17CB60E4DCB83F6378A0A09965E
SHA-256:	4EB42439E1352B342AB4013CB5D854EDA6718DBBF3778CFCBE8C9DA65A260E97
SHA-512:	DB765A751E0148100A25FB52B3E6ADC0CDC0E4BAA85008657BC631A25BBAD079F9818B38E5D31111A33F70329D94A392539DF7F5F8CD5FB4417D11916D895EA1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH.c`...!.......G....Q....2.$P{...,..$.A......!.HK@.p.\.@......%0>E4.pP.#c..V@j........bs9..8]O.E..c....,2@. .q....-.X`..I@..X....c...l.V...h.....'@z......dn5I.?.O....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-RTUFF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	251
Entropy (8bit):	6.58285818318129
Encrypted:	false
SSDEEP:	6:6v/lhPZsR5sHOGqMhoIF0rTLiYJhi289qAn2mIjTNGp:6v/76yHnqMhoIiBi2eq22mki
MD5:	270C45C71BCA98F1E4AA2498520DA41D
SHA1:	0415B8072157295F0640537EDBC4D4DE5C40E643
SHA-256:	793CEFEFC6A5FEEF02BC8DD68F48C9C6652E7BD815995D9303034E13139B52B8
SHA-512:	A927BD8DEBAD8D29B38AB6B6EA27EF2485695509B4A8EEDDDF65050EB1493476F4FA6075575400017CE939376EA29342D36FE998308813FBC182F13B7099CB09
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH.c`....$..j@........n.F) ..b.$..d#.?@..$...~.._....YP... ......4-.......m@..$....Y.."&t.(...q\|.X..Z..d.A...X.A.5X..G..94..I...@#.a5.. H-H..`.......w@...l@..\|.Jn..G...]9......FT.....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-SKM46.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	502
Entropy (8bit):	7.459651262358281
Encrypted:	false
SSDEEP:	12:6v/76/nPdBmDQ/JxJFDLT5LbgrFCriQm66JGIA:TTBxn5AOiQm13A
MD5:	CB67C2D9650927FC2F235D842FDF7905
SHA1:	D1CE7BE6254E4254F3A5DFED76C05074FDAD6C06
SHA-256:	6119FEF237BCA462CE60F70AEAB3FAB130114DD48D3C06BE012527E3CBE9A531
SHA-512:	37397CA6DBC714B5481FABE25791A2969D1EA8D8E6430353B0DDB54965CCA4FE674B78562DB627C5C4617FF452428A811AAEF8928C9E912F2D140266294950F2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH..;/DA... ....l..HT.K!..?@.@DT.....P....J.X.K....9{f..3...7yv...7..Z..'q..._..1-..z.w.J\...U..KZ.-&.+.dK.,RE.W.>.U.%......!....+......h....L..1,.f...........j4RL...../n....{..H.w. 0.br....Lv......k.4N..#7.>j..W&.A.%...n..>.D~..M..yJO..w......n.>..5Yz.L.).4.6.^...T...s.{f.......:Qa.9.o..n@o.+y/...+%.&H.{.......C...+..E_.<..WL.o..f]L...e.n.^.9.....F...e..%...tG+.........(....S..'@[.q.[:........L..!\.....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-T6N37.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Mac OS X icon, 285385 bytes, "it32" type
Category:	dropped
Size (bytes):	285385
Entropy (8bit):	7.362538457276376
Encrypted:	false
SSDEEP:	3072:Xkdb549KEJ1EF3nIw7Id3K/LjwfmLvYaYZcIXUYDiVyC8zyUWcKy6bo8G0H:Udl4unD6Ynw4vXkPDiVf82UG
MD5:	B28EEE0E6637F8B92152BD1A8B87816F
SHA1:	03757670734D86A6DFABDD7D629F8313D6679404
SHA-256:	BE9F94F96C99E08A890DF3258217BF3F48F63F2275086D97099C4DA3BA38F07F
SHA-512:	99099468E03432318AFA4FC073687E78796686407DC46D00BE08349D7807A0A04E3C68B5A1F016E8510D08C31CE95C7287F823039C85951588AC606750C3680F
Malicious:	false
Reputation:	low
Preview:	icns..Z.it32............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-U2HPQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	619
Entropy (8bit):	7.568388235473503
Encrypted:	false
SSDEEP:	12:6v/76X6fkskM7uHgUw3w7BPgcHU4xW/a8LNPDZ6A:z6f5kM7ub0OVg7aaNbZ6A
MD5:	02C1E2B92A24C5186D1B4549FC0788BA
SHA1:	6F95B69ADBDC0A74BE031ADE6575D97C7062327E
SHA-256:	1D5D676B6CDC39B1E39385159A53FE9285FE594C44DC07267504E88D9D3E9C70
SHA-512:	18A8509ED66F34CA9EB1C1128722245860D42C48F41C57039AA06E40C6BDAED422DA5286332BDA0CD4D72C698193766D1D9CF6C7674BEF7DB3A00B961098144C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB........%IDATH..T1K\A..y..?.THqU..R..$....;..6A+!.r./.@ .HH._.?@..F.(V.A...b.&Qo2...}{...4....o.ovv....?.:......<.<e..p.rF..iR.....QQn....].....$.\).....&./.....9...{...#?9.T.T/...U....M$W..<$g.aJf.8..?lm.N 5...\y..........o........~..d.y.$.:nn.i.a.......k...A.A..H.....L/.i1.N...r.aE....r..kx..E..L.10..07.y.8Pf...W....G.E].=J0...86..z...m....L....1`2..gv..$x.D..y.Q.'..b..G.\|.V.ky.l...\...O....xh:-v.h....;.....'>'2r...pt...[}..q..o.v........_..E.-....D.G....@."{..E<.JxM...uJ~.z..Z..j%}...r#+....eVT.r..... .M..EVI......Ln),NRt......z..G..m....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-VJI9D.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	526
Entropy (8bit):	7.377492844002006
Encrypted:	false
SSDEEP:	12:6v/76XB5C6tutQW5W8uG1ZXNKBrOlmmjlaMFtf1qlMuwGxalm1:l06MQW5W8VN/0mPf19uDxom1
MD5:	F537AD75C266D7485D4C9B828B545F21
SHA1:	72489731CC4D71311AA9B4DFEAF9B6F15C868EF1
SHA-256:	5105897865A008009F7E0A918F7370DB44CCE82C1AA8993D4CA0D2F40F4BD4E4
SHA-512:	1BF4341A1543C87AFC3FDB7F9D1756BFDB7A229EA9FCA6F6ED240E549750E48768109218EE66D64E6E17399BA6F5F5EE6E62253AA8127310AECA5E9E5A47931F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH..+OCA...3.........~...#Ab..$..........Ep..!....\|.f..soK..IN....}Lk.Q.X..&4."...bC.].^..o.71DU.Dw..p..Y.3.`...s..-..\|0...N.w...@\|#y..h.uJ..SX...b./j..\|..0.....l.s...\|$FA.1....4..........}.1.b.1._.}...H.m.._..wF...5D./.W..&~.........`K.Y..Q.K.W.3}R....!..c...p?q..........[....e......\|.jK.\....U.$i.C......8...<..........]Gs...(.\|&..1...>.....p.e.A<...a...C..N..V..\..n.....#.s?.g`vj.U.i.....Dv"!...%.Q\..b..s....#.h...X...[2._.......[f,........IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-VNPUU.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 1280 x 664, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	74503
Entropy (8bit):	7.942077955552446
Encrypted:	false
SSDEEP:	1536:wQuuEmGCGVJUcyVf9+/6j4iFYGENUBLclU:E4+UL8SstNUBglU
MD5:	49A2A72F4B412F45F70F3E8CBE9060A6
SHA1:	C69B3586F91577043314D21532124847F3A989B6
SHA-256:	41B905C0943E846322BB819BF38C8CF5AECF529E94D19B68E0741435874879EB
SHA-512:	A3275C2DECAFA64057CD140B12739AAB5AE406925DC20642A9F49C32B841FBDC9590C8F0DA941EA97282D643722FDD1B70992A8F0DF1D2BF2A2B6E10DA056A8C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............,vUW....sRGB.........gAMA......a.....pHYs...%...%.IR$.....tEXtSoftware.Adobe ImageReadyq.e<...viTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:F97F1174072068118A6DACE5C2DBBF9B" xmpMM:DocumentID="xmp.did:AB829AE623B911E89569AF0D4F49394D" xmpMM:InstanceID="xmp.iid:AB829AE523B911E89569AF0D4F49394D" xmp:CreatorTool="Adobe Illustrator CC 2017 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:c33e1863-b4ea-4895-bad8-ab6940b19976" stRef:documentID="xmp.did:c33e1863-b4ea-4895-bad8-ab6940b19976"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpa

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\is-VV3PG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	488
Entropy (8bit):	7.3582976759709515
Encrypted:	false
SSDEEP:	12:6v/76vh7f3950LfPVAUUFD8k6A7/HykrnFxt/FTRWdd+:VbNoPKUODjncdw
MD5:	132ACE305562172366E202615E321D66
SHA1:	0C35F9D5E1BC42DA88C54278F36AE4BC28EC8D7C
SHA-256:	773BDA697900C3E2B1468EB940E9E74B77F2EBC6C81FAE88812B26DEB1E10D77
SHA-512:	192DD726035E8741C0CE00EDD89675432CC0A5F8EB332B89611578AC9C95716A4B7584A147D19D13C4E68BEC25E93317EFDF37C5A3E829786032196AE8824FAA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH...+FA...w.B.GVR...B..?\V($$...(Jd.H>~..:.:s.o..WO3s.sf.....z.60....#e..kq!.J[c....5..83.s...[S...o.9o..'d..-.I......o5....T0.F...C.A$_.3.tA...G.ZB.R.)..I[<3..@....J.D.ul..1..f+Z_..b:Q'Jn~\|..\.../`W..]%...?....T.]..W......p.....C...P.:.#4?>bL...V.......\.Q.l....y#..;.....:.f..........t....m}...WA.nt...h...~...<..._D.+.W.....VQ..N&.oi.w1(...t/.o....$Ga..~..%XvI.....v..X.;...l. >0+.uq\....1.G........IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\print-disabled.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	257
Entropy (8bit):	6.655357278145311
Encrypted:	false
SSDEEP:	6:6v/lhPZsR3AgrIcvMqzUTnqGwbI3ZeDkqaRf4kWwrBllup:6v/763Ag0pM2qGwM3ZenkwrwV8
MD5:	5B8DE9424C54B6702D8D4AA6CBBA1BC9
SHA1:	F2E7E4E55E26980FB6DC634844993A6E0FE86C95
SHA-256:	7B55D5560570CD910624E0F8650048C834393000313BA8EB6B6F814FC0EE16EE
SHA-512:	C55D8E7C92A05982F997B6F7BBBF7AA0822DE0C8332B85B51553CCD7542193C12DEC300D89000F4FE41D345B0D60143580997FC7224FBC5E10157E3D74F39C41
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH.c`..............a.l4.6A....j......x-...0K.z.Z.`5.$./.I...N[h)...W.E2T..... ....Z.....l.H.......Q.5-@1..a.1.@.`3..>....h>6.. .R.......O.@6.K.....Af..r..s.L...."..L.....<.p[=Td....P...*....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\print-hover.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	262
Entropy (8bit):	6.647833606461703
Encrypted:	false
SSDEEP:	6:6v/lhPZsRTtOtnhzvdmFEBbmO6yLtBqBt4DvhLDXyYG/klt+4lljp:6v/76U1vlBbmO6Qqk7hBGMlvllN
MD5:	C92A2B5FBCFAC9DC10E5FAE8C6C2F21D
SHA1:	42244749408B60A5D244A4CB4111FAA0FB36CFA7
SHA-256:	277C17B19DA080B4EEAEE9C1E0AC5649DF5455F7AF59D20327E92A48514E14FB
SHA-512:	4D701777FBFB5BF1110AA7EF92D7BE57B041AEDF49EA7CBCFBA0FA069B8189D5C14B2BD209CD0C6D82DA168B99148BE65C87ACE3C3D1F8B8D3E0C02C3C88B8B3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH.c`.......IM.2&.8.h&l.$......SO.. ..ZBi.!;^...cS..0....\|..U.n.?..h(..y@{..d...9I ..- &......N.HN...n;5-@...=..>..FfP3.....e&p..U..@.j......H.Fq..8.&.....!.".........4.".[...e..E..gv.......IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\print.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	260
Entropy (8bit):	6.684387011610554
Encrypted:	false
SSDEEP:	6:6v/lhPZsRptOHFBjqcPLekcL1WnkGC6u7XykfTNVp:6v/76CXbqkccjvu+0Td
MD5:	2016EDF1E8F853FDFEC8607F954B9B5D
SHA1:	BB294D7CAA8C9A02920201F527913EBC52CAA611
SHA-256:	3F1AEC37ECF82FBB3452CDC1423EEC09D0959D78FAE715311CBDECA277559FD1
SHA-512:	2BA11E7CCA50A2AC2FACA0A2E3C7A0E493BF1306BD246913CD85487C453520E0FA96CB7C35BFAE0D9D9F4E907E8BC84955F22D52F65CED16B4572614FD676B0B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH.c`..............`.l4.6A..\.j......x-...0K.z.Z.`5.$./..q......0.E.}...K.J....3.d.r.P.p..p..-.IP...5.0....(..8,0...Dlf...4..[..a.*.b(.0]}......d..... ..d.. ..8..$(..-B.....[+.....CE..MV._.;......IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\remove-disabled.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	519
Entropy (8bit):	7.437255915421603
Encrypted:	false
SSDEEP:	12:6v/76TkE5YDuuBACkS9qj3BYZGNualT6MDw+9Plz:fT5YTAc9s3RJ6Sbn
MD5:	EF56A910697A7437D73AF22EA72C9599
SHA1:	EC3C61B935AA2B8771FEA1E8574A724E9E07CFB5
SHA-256:	ACBFB1000C17FE60B706FA935AA289FD166C3C4FDE122D41225195C5CED345FF
SHA-512:	4289241F506BBFA7CC6DEF96A081314243D5AFE7A3E9B4543D4AF9D93FB730F0EAEFA90EED6450EB1C2DC961B4A90FF5D596D7792AB8D215E49B22681653F843
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH..;K.Q..7.... ..&..`c..J./.>... .."6..h#..[v6...Y...8.3s....&......,)./......Gq,..b... ..7.3..W.#.B3X..d.E.>..xt...W..L.@.0&.`....q.s9c.....d_.<..s..F._.....2.....9...(u..u.8.,=w..%.dek"0qb4A_.X[.K...8.sK40..X.C>Vn.g.7D..6._.XN.{...)a.8...(.J..D.=X...(.n.W.T.. ....x.S..j;...4J-_.oKD...q..)..%S.........F.J.U+.L[q........O..9y...;..Uw...hOb_.}.W..rN.1.....A......=....2F>....\|[..u......R....".b....c..x.A.\|..E.../.-.....dt........IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\remove-hover.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	503
Entropy (8bit):	7.436913383916602
Encrypted:	false
SSDEEP:	12:6v/76wOvIfgD861F3k0O5Ybdtc3F7IV/J2R/N:8iz8xj5Yb67IxYR/N
MD5:	95E15A7E40E5E1302FB2511CB52A3D22
SHA1:	16B29C783D40086304A2BB39F491B8EA405693EB
SHA-256:	2BCBB81AED90D7D9B6BC945D74BE35196C6E7B929C29A88178CD216A2ABBC47A
SHA-512:	F7E58088535DC4849610CC427AD3E1B866197D9D11AD7EF7EAD4A09C9B3CAC042723BE55E554757813C748143480BB7653C14DA2F532C4761F2EB13B0B9D18F1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH..1J.A....BA,......Fk...b.;..6..@.K.`DH.r.A.B!..........c..."?\|..o.....3i4.]35.hr?...a..W...\..$.....8.V.g...v.JU.\..h...G.............R...+~.lR:...EOk......@.8....GRM.}x(..VAO..UN.$.\|.X^...22.2...d...`g.X9.S.j..!.Bv.<$.v.... .\5...^.3..b.V..7T:<y.\..aG..A.D.[....o...X.?.....).W..$.'z..t.xys.....~....sU)s.._.....{......Y..0/..K.[8.=..".....F..."..........g.wm.;.....T..8.d~.....p..P..0.F.....s.\|E..i.3..W...hz.O..j...%.....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\remove.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	526
Entropy (8bit):	7.377492844002006
Encrypted:	false
SSDEEP:	12:6v/76XB5C6tutQW5W8uG1ZXNKBrOlmmjlaMFtf1qlMuwGxalm1:l06MQW5W8VN/0mPf19uDxom1
MD5:	F537AD75C266D7485D4C9B828B545F21
SHA1:	72489731CC4D71311AA9B4DFEAF9B6F15C868EF1
SHA-256:	5105897865A008009F7E0A918F7370DB44CCE82C1AA8993D4CA0D2F40F4BD4E4
SHA-512:	1BF4341A1543C87AFC3FDB7F9D1756BFDB7A229EA9FCA6F6ED240E549750E48768109218EE66D64E6E17399BA6F5F5EE6E62253AA8127310AECA5E9E5A47931F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH..+OCA...3.........~...#Ab..$..........Ep..!....\|.f..soK..IN....}Lk.Q.X..&4."...bC.].^..o.71DU.Dw..p..Y.3.`...s..-..\|0...N.w...@\|#y..h.uJ..SX...b./j..\|..0.....l.s...\|$FA.1....4..........}.1.b.1._.}...H.m.._..wF...5D./.W..&~.........`K.Y..Q.K.W.3}R....!..c...p?q..........[....e......\|.jK.\....U.$i.C......8...<..........]Gs...(.\|&..1...>.....p.e.A<...a...C..N..V..\..n.....#.s?.g`vj.U.i.....Dv"!...%.Q\..b..s....#.h...X...[2._.......[f,........IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\trash-disabled.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	298
Entropy (8bit):	6.786526574145386
Encrypted:	false
SSDEEP:	6:6v/lhPZsRntOG1lFSxwOSoWDEWnw4baO2pkGsnhfCidSBIlPVojjbp:6v/76Z1lFSaXoWDEgJaOZGsnha+SBY9o
MD5:	F199E278CA6049468B6C41FB69EBD73D
SHA1:	A92424E87BBBDFA67FF06B1DD1E0B8AA27F1D8E6
SHA-256:	471137D65D4588FA74EB7B0235015F6CC401A534A22232FE772C5F60FD7F86A5
SHA-512:	4E8271469F721E97FABB4FB4EB94A83C9BAA75E993E3E2ED61641D6A8891F77A68EF2041FD54D46AAE9FEAB7556B35BDE542916AE4A6245F1662404001966976
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH.c`........@.?........F! .D...lf F.....@....!.?.l8.fA8P....4.7..i.P56.....b. !d.(...+bB.......'.U...~.3...V=.,.........e.V..L.Ac.3`.`........0.`.O.Sq.X......'........,x@4I.....?.n.l.Z.....H.....X..Y0t...j..@..Ux...../*u.......IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\trash-hover.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	274
Entropy (8bit):	6.560710259421661
Encrypted:	false
SSDEEP:	6:6v/lhPZsRvtOEFmlgwYLFoTM8Z5U30JRezpSZ+q3Ulgrp:6v/76Ya/iZKEJR/Znkl2
MD5:	1EA3088F30A0D402F20792779AF2DE56
SHA1:	0D1B6E68E606FEBE00C6FC982F8111A6EE5CCC32
SHA-256:	5BA3008BC30DE6588D130BECBFC1F5AF72C0887DC685C01C927D6111ACE32DF6
SHA-512:	57A7282F6DCE2B8CCD75D8CEC17814664321BE78556FB298CE99C77D2F4DC75E9AE9D0AE4DD5C2C1E8E50A5DB9BE212BE4EDE17ED8C9CF0B5D859BCB66C297CD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH.c`.I`......&.0bQ%....b. V.b5 .....'.s..oB.. }....1.`...PV...4...r+.P....@F...F....A....Px..'..h.V=.,.B....X...3B..,.zF-@... B...l...k..j,B....d.. .....Ts.A.M..R....1D ........1.D.'..(S...q................IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\trash.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	251
Entropy (8bit):	6.58285818318129
Encrypted:	false
SSDEEP:	6:6v/lhPZsR5sHOGqMhoIF0rTLiYJhi289qAn2mIjTNGp:6v/76yHnqMhoIiBi2eq22mki
MD5:	270C45C71BCA98F1E4AA2498520DA41D
SHA1:	0415B8072157295F0640537EDBC4D4DE5C40E643
SHA-256:	793CEFEFC6A5FEEF02BC8DD68F48C9C6652E7BD815995D9303034E13139B52B8
SHA-512:	A927BD8DEBAD8D29B38AB6B6EA27EF2485695509B4A8EEDDDF65050EB1493476F4FA6075575400017CE939376EA29342D36FE998308813FBC182F13B7099CB09
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH.c`....$..j@........n.F) ..b.$..d#.?@..$...~.._....YP... ......4-.......m@..$....Y.."&t.(...q\|.X..Z..d.A...X.A.5X..G..94..I...@#.a5.. H-H..`.......w@...l@..\|.Jn..G...]9......FT.....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\view-disabled.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	491
Entropy (8bit):	7.36084355340137
Encrypted:	false
SSDEEP:	12:6v/76OUdH/VnJEe4wowEJ0QWJs7CXZEM4B:15EVCXBm
MD5:	88104473007E184FF285363F9A894677
SHA1:	FDD8CB26DF87A72286F3ABB47D8AB732A5848917
SHA-256:	6D615FAACF152FF0BD8CE862C57617EF867EBE08BA5CA4D21B813F66AB55CF4B
SHA-512:	E8A07519870E1D3C0152D2451D9FE0E25E8C84DA8B644CE58ACD19D6B686D8C0B78D0C497A0299BF9A372AFD3DAA3FE8F0FD74301DB212758800FCE0B892BF0A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH...+.A......@.x@.........1.Ky...[R..%.rY.....N.Z.}.S.9.9sf....$.H.w.......m.j.........U...gF.F.%:;Ir....^b>...q.....-.m...0.........d....$.m.s>...o....p...]Ze...N.....Y..OR..Q.Z.].O...T...2o..]B.(9'.\|..).).....e...L.(.Y.5....0..4..zgr...I...#.C..\|B...Q......"QT-..OU.:..)..s....U.......`-..U2...C......,.-.@>,.E...O.TO.2..)}s9N.....*F..jy.U...<<\|].Ux.#....4.q......I.0...H..W...o..R..g....Pi.....L.._.^....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\view-hover.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	523
Entropy (8bit):	7.398369026921254
Encrypted:	false
SSDEEP:	12:6v/76HvaFG18oE34qsZWuOe8+GJ3qTUWZcgSLo0ePJXk+:C/oE3SQuJpAYSLo0eK+
MD5:	1DC4264BB4EA1D51AE06AD13348B7486
SHA1:	4AC1532F861273A56ED5202FDCBAF323A3D2FEEA
SHA-256:	AC141F029C82B4313E248586B60471D371C3AA9BFE46AAFBD650AAA8AC9F49D8
SHA-512:	5CDC4F09C520DEA230F32DF33006B896C2BC8C9ABF9777ECBA04ECEFAA9D7AA8CC1EF3E27421466AA182BCFB4617EE77A782DAD1391912340F170AC7AF38584B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH...+EQ...e.WH1....e.$....PB.L.... I...)Iy..14a@....9....l..sd....w.Y.^.....FD..;.......<......EF..Z ./5@3d...).$..uPN..m$w@B...{.Q..sv.U=..&q.x..@-)..Q.~-..B.n2.X.#C7...J^...U<....T..........b...@.................m....0....!..1.6..j.....X......T.y..j...+ .....z.&.d....VA...zn.b;...}:.'X.H.....C;.......a....}..x.JZ.{..../..7i.N7<....w&....[...t....Z.k.........-.x;........Z..$...l.]....0...'}..K.M...8.3.....x...G;..Y.Y`..X"....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\view-selected.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	720
Entropy (8bit):	7.6087744095761645
Encrypted:	false
SSDEEP:	12:6v/760+AjmTFFHNGfAIfhQP5nwolCjNf62IZqMU7HFvJKP/O1gOQ:w+Aj2rHWtJq5NCjNS2IZqMSFgXCQ
MD5:	A0C8E30F98F4AEE44B9D346AE3BD7065
SHA1:	1706FE0477DF4DCAA9168EFC5BB809B2491C6077
SHA-256:	E83CE044DD78101CE16875311ADEDF2F083E19943FAB18FB7500F9AE527856EE
SHA-512:	C8B661E4D54FC6A0D3B3B221E1F5F6D1AF1DE13C00D12A666FA463BBBBFF3EC02ECDAAB8DBF453B761276C7A63375F419F250E18F881F08FA8BD0977AAFDBBBD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH..TMHTQ.>..g.I{A...je..~(QiQ...v....h.....D...h!.R.m......p.V..ASf.d...9........x.q...w..}.+k.+... J....h.......P8.~....{D..l.up8>.a.[.q..me..CT....\|.Y.......=.v$..P....C.9@.~.1..e.D.N..m 8...!.u../.".EP....T..q.F...;.\|..}_C.y;...:kE..v$bvE...........Q.....>.q....Y..z..c".u.%......%.......Ph..=.....xQ&...>.!.D.....5Zd\.#.J.../W9.. ."...L.g.[.._8..bSl..d.&cM^....^.NH'ew/....p..Il.........,."Q.mC...!.\c2Q^YV.....lS#'0.f...../.k..i..r..q ..`,.g,.Z......_.6..cz0>Sm.V.;..M/7.b\|.,%./.S.)......b'.@.....~f..D..{~...nh......0Z.]...u...(...}......v.Y....yd../..&H6..3..9..j.`Gx.H...Aw.nNY..$M...V.c....Z.Y...... .6-$.;....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\view.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	525
Entropy (8bit):	7.468710246302977
Encrypted:	false
SSDEEP:	12:6v/76JncM/uwW+/6Gt2lIzQ+br5HlNFROdVKBPhX97:hcwuw7/UmUyr5lXRyVKBPhN7
MD5:	85289BF7AC2FD47E08860D351BAA73A7
SHA1:	336A71751FFBDCF6D86581DBD5F5D9BC7C5D68E6
SHA-256:	B03BF84D8458A789803E70847B1F6ED5E5E59E56A3DEA7E2C7F417BD6C9951A0
SHA-512:	EF2DA2339B67FB6E2F877BB0AD4F03F83273376BC09D13C0768406206F92B49AF580ED1113950F965A961891FBE0EBD02BD00A529FFDFF81CFCB0A6E5F4A90DD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATH...+EQ...w..3An.0.1`@...7...I)sb`h...@Dd.5.$....8[.n.^&bpW}g....g...:;.......A....A9...g..p........6.... ....U...$..s...6yl...a.}..P.C..8../.1.$U.$"`.6.4\|~.....cP..,.(....z..Q.....d.(.Q..b.2......A.....B=.=@o..xV.l..jpe..).@7..j...B3..j`S...\|r..[<.[C..q].....(.,.'..i..},.Wc3>..Q.`Fu.t.@#.v...^.5T...5.+.......d...&...S9i.~:....Q.E...ZFee..}v%...AW.4-..I.....oa...x...l.f]GE.1~..J........\|...n....7q.a..\|.T...&M..,$......jtZ.q...2&OE_dw.....IEND.B`.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\xrite.ico (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	MS Windows icon resource - 9 icons, 48x48, 16 colors, 4 bits/pixel, 32x32, 16 colors, 4 bits/pixel
Category:	dropped
Size (bytes):	25214
Entropy (8bit):	3.4130479970002168
Encrypted:	false
SSDEEP:	192:cxDi4hXn7zDii5kS3WpsKURkGUuG5mFg1A+rXdIpsacD17lD:cvF7D5ZmpBURlUuG5mFg1prNIpPcJlD
MD5:	CF70341B00136B5DD4E7D4A35BFC86B0
SHA1:	300FF0B02414220FB55791561641570F7774914F
SHA-256:	6D3C19CA5F65D75A108BEC2E3E70222AB486BA1DBA68B8A7E98B88E114837172
SHA-512:	D437CF78EC501DEF57A6A5B1E6F7D8F72B3ABDE32C08EDB287AC705751D480D514922D02FEA11FD92F39CC4F09ABA12208F8701BCD72DC968FC828666EE1969F
Malicious:	false
Reputation:	low
Preview:	......00......h....... ......................(.......00.............. ......................h...^"..00.... ..%...'.. .... .....nM........ .h....^..(...0...`...............................................................................................................................wwwwww.................wwwwwwwwp..............wwwwwwwwwwp............wwwwwvwvwwwwp...........wwwwvwWuwvww.............wwgwWwwwuwp.............wwuwwwwcww...............wwwwrwwwp...............wwgswwww.................wwwwwW`..........0......wqvuvw...................wwwwp......wp...........wwww.......wp............wgp......www.....p......ww.......www.............p......wwww....................wwwwp..{.{{............wwwwwp..................wwwvwp...{{............wwwwwWp.......p.........wwwvwww................wwwwwWww.....{..........wwwvwwvw...{y..{p.......wwwwWwww................wwvwwv7w.................wwWwwww..{..{...........wwwv7Wp..................wvwwwp..................wwwwwp...{...............wWwvp...

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\xrite.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4225
Entropy (8bit):	7.911855908836636
Encrypted:	false
SSDEEP:	96:aRvt6wc+hMGEqMHsNWz2Rz9+wW/yj4eBYV52daaRgU+Y:aJtM+hMG3tNmkI8j4eBY/2CY
MD5:	C47F32A98CC39F52E01F8B438387155D
SHA1:	6BA1A472DC39313303E0566177346B9EB49F667B
SHA-256:	1832116F7B2E8B608A7A1E5EF24D6988E44AF0F0D0FEA46C4A538284CE11D230
SHA-512:	9AA0864A4692B40D67318E2C8898A17857A5B66ED69E61FB3AEA39C6B00CFE7B708699142E66481AFB2A7137099E17BA8E8E56AFEFC5D6540BF7D64C5C27A004
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............>a.....sRGB.........gAMA......a.....pHYs...........~.....tEXtSoftware.paint.net 4.0.173n.c....IDATx^...\E...E...D.1;3I.<QJ@P.... ...J.A+V.=....7....I..I.D(..-.Hy....A"G.....1.....lB ...W..................o._......I..W.oj1.....G\...^..y.TL:..R..<.;..../.J{.........qH..r..I..~....;...)...?.p.......TY....!.U'..fr...R,.[....>..n.8yK)Zw...n!.......X..\|.".Q...[.dprU...O...f....7c.B.!.x....@....]&.V.....r...#.7.......W..WK.@x..:G)5.._.X.u..e.._29.....j%.\|"..~......Z.......Xg....E...z ....A.?hpD.K=.r.q....=,..\.P..P?Dw......+6...J?6njQj...6il....q....,.-.I...M..~.. ....u).~...c.=.......w..RG.n....tK}.G...n29.......m....'.....09......yjI.\|........jOj..;..h.o.,..A..i5!]6[....2..._......W...>.=.[X..h.......Y.....x!..d.....mrhuI..\}......->.r.... ..y.X......Ou..iv0]1..y.X..B.=.>.ar......l.W..`.{..I`Y......NJ....~..^..8z......G.8..>.....O@....<..hnu...{y..k#..H..{...?.*........I...Q......xz......5L._.....h..k..Q.A......z.+..

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Images\xriteWatermark.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PNG image data, 1280 x 664, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	74503
Entropy (8bit):	7.942077955552446
Encrypted:	false
SSDEEP:	1536:wQuuEmGCGVJUcyVf9+/6j4iFYGENUBLclU:E4+UL8SstNUBglU
MD5:	49A2A72F4B412F45F70F3E8CBE9060A6
SHA1:	C69B3586F91577043314D21532124847F3A989B6
SHA-256:	41B905C0943E846322BB819BF38C8CF5AECF529E94D19B68E0741435874879EB
SHA-512:	A3275C2DECAFA64057CD140B12739AAB5AE406925DC20642A9F49C32B841FBDC9590C8F0DA941EA97282D643722FDD1B70992A8F0DF1D2BF2A2B6E10DA056A8C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............,vUW....sRGB.........gAMA......a.....pHYs...%...%.IR$.....tEXtSoftware.Adobe ImageReadyq.e<...viTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:F97F1174072068118A6DACE5C2DBBF9B" xmpMM:DocumentID="xmp.did:AB829AE623B911E89569AF0D4F49394D" xmpMM:InstanceID="xmp.iid:AB829AE523B911E89569AF0D4F49394D" xmp:CreatorTool="Adobe Illustrator CC 2017 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:c33e1863-b4ea-4895-bad8-ab6940b19976" stRef:documentID="xmp.did:c33e1863-b4ea-4895-bad8-ab6940b19976"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpa

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Qt5Core.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	5087232
Entropy (8bit):	6.83016302256273
Encrypted:	false
SSDEEP:	98304:KOeBQ7bBBt+7VJsv6tWKFdu9CHvK740zA:K3EMJsv6tWKFdu9CHC7V
MD5:	C60AD4DE483B15BB025092BFE7CFC35C
SHA1:	05C73F6E19939A604B6EAC155DF6E03A33FC302F
SHA-256:	C80F97F226D1D376FC82F864EE30619BD6DDF202B948EC69A7964B6702CCBE9B
SHA-512:	B5474A448CFBFB4C33B2E5BF2D530E2D1E3861156ED2A97EA483508EADB3BBA7CE8B4836F4FF94B4B84C803C5315F75DCF303CC96C40096C6DD5A6B886E59044
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Reputation:	low
Preview:	MZ......................@...................................(...........!..L.!This program cannot be run in DOS mode....$........%,.FDB.FDB.FDB.O<..RDB.&C.BDB....BDB.&A.HDB.&G.]DB.&F.MDB.5&D.EDB.5&C.QDB.FDC..EB.'F.jDB.'G.DB.'B.GDB.'..GDB.FD..GDB.'@.GDB.RichFDB.........................PE..L....v.\...........!.....`&...'.....Tf$......p&....g.........................0N...........@.........................@.C.....DjJ.......L.......................L..s..`;A.T...................P<A......;A.@............p&.\............................text...._&......`&................. ..`.rdata....$..p&...$..d&.............@..@.data...4.....J.......J.............@....rsrc.........L......&L.............@..@.reloc...s....L..t...,L.............@..B................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Qt5Gui.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	5353984
Entropy (8bit):	6.803733007830956
Encrypted:	false
SSDEEP:	49152:3/2ciiJRwNGz3QOK/kow3PfALGk1/7seyNrBfY6Ab/w3ybt9NjwT1zNMRhvFxRp:3tdzAePg7v7PRPxRp
MD5:	5581175E339938F80CAFB164BE0DC4B0
SHA1:	F7BADC086B65DF6329A13C17FCBEC349F2AB98A8
SHA-256:	78BCA9C65600391EC4BB1FB0374169DB13E7517EBD154A11D244248B25A7D939
SHA-512:	CF2AE95E01D139794B51913F73CD045727FFFFF439D499CF4B00648FF1D819C6325244544B54D5F544F181CEE8E4F8359CD9F6C8EF83271880776D0823111C53
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Reputation:	low
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$..........>X..mX..mX..mQ.kmN..m...lT..m...lS..m...l\..m...lO..m+..lP..m...l[..mX..m...m...lW..m...l...m...lY..m...mY..mX.omY..m...lY..mRichX..m........................PE..L....w.\...........!....../..n"......./......./..............................PR...........@.........................pN4.P[....L.@.....O.......................P..A....3.T...................p.3.......3.@............./.p............................text..../......./................. ..`.rdata......../......./.............@..@.data....0....M.......M.............@....rsrc.........O......jO.............@..@.reloc...A....P..B...pO.............@..B........................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Qt5PrintSupport.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	267776
Entropy (8bit):	6.827099671612549
Encrypted:	false
SSDEEP:	6144:isvcOI9TPlPCKc0IlmR/hfxuzWgFfhck3I9uH2+7LaJFqgWYsW0huR0SdkRm2uet:isvcdvcgRQ
MD5:	B2BAA1D188BE3816E54C5FBC2A31F48F
SHA1:	80CB56B3EF29570E5A4ABF3118E45210013B5DF9
SHA-256:	696782041BB188C94655128DBFA125944B27D081E185924BA5B48E9A18CFE086
SHA-512:	6EC6DD653D81F3F8C856D2B4E49D4295E50784620A46CCC7D3F562938230D252031F1B7B5E1DD072F20535334DE8025AB37C33C65BFFBD96B7DC9B539CF0448C
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......!...e...e...e...l...m.......g.......a.......q.......n.......o.......b...e...!.....p.......d.....x.d...e...d.......d...Riche...........................PE..L...jx.\...........!.........n......q........................................P............@.............................xn..8....................................4..p...T...................`..........@............... ............................text............................... ..`.rdata..............................@..@.data...4...........................@....rsrc...............................@..@.reloc...4.......6..................@..B................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Qt5Sql.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	156672
Entropy (8bit):	6.603857273926382
Encrypted:	false
SSDEEP:	3072:8dINEYNVejBn5w+PDUDTRrEU8x810/QBnGXQ7:8aEYOjB5BIX1ETxw0/QBnGXQ
MD5:	BCC165A815B5312CC3618B2D588D238C
SHA1:	31A01E0345E2D3726C28F7CB28731C85DC399401
SHA-256:	749D1E0F05A09688ABEFBA8DAB8F6304EBD18E42E7B19CD7AAA5B1758A7FE457
SHA-512:	0EB4643D200B7FC8DFCB058D24C6A85FF0499BD873B1E66C6E2C28F776534E6CFEED72C50859B5BDF533B0078485DED83A3F0344063C0FDC7C4D8F98EC233D1D
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........v.k%.k%.k%...%.k%1.j$.k%..j$.k%1.h$.k%1.n$..k%1.o$.k%#.j$.k%.j%..k%#.n$..k%#.k$.k%#.%.k%..%.k%#.i$.k%Rich.k%........................PE..L....w.\...........!.....r..........Ix.............b......................................@.............................pj......x....p..................................T...........................h...@............................................text...kq.......r.................. ..`.rdata...............v..............@..@.data........`.......8..............@....rsrc........p.......@..............@..@.reloc...............F..............@..B................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Qt5Svg.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	265728
Entropy (8bit):	6.686936536486093
Encrypted:	false
SSDEEP:	6144:bXqBXZLVf0vc3vRnc+QwPFVmUZaTENQ/Q9y8DvVvrsTDaiO8PWJ0bsuX9/8lbM:6ZLVf0U3vRnc+QKFTZaQ9lbM
MD5:	476A16296F449EB053F6A09338572A9D
SHA1:	B0E92480686FDF3BFEF0A4F04770B0324369E7C0
SHA-256:	46B62AC1C5C991A97764C1CDD987BFA69EE713A43F820638BA4901247231AC77
SHA-512:	E99D3415B190633EA1AFB6DB4EC637E923F9DECFBE1F26395786532FB05E71EC95A318D10AF7A38007FA92809D2862B7BC658AA64823F427D67FC5D53659A701
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......].....B..B..B...B..B...C..Bj..C..B...C..B...C..B...C..B..C..B..B_.B..C..B..C..B.hB..B...B..B..C..BRich..B........PE..L...s..\...........!.....`...........h.......p.....f.........................@............@.........................p....\|...<...................................:......T..............................@............p.. ............................text...[_.......`.................. ..`.rdata..LZ...p...\...d..............@..@.data...t...........................@....rsrc...............................@..@.reloc...:.......:..................@..B................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Qt5Widgets.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	4532224
Entropy (8bit):	6.821597412195145
Encrypted:	false
SSDEEP:	49152:XJ2CpuflNFOnnSvUrXmo9WYsHXZJI2rbamJ3pkQTVj2pq:XJVciUIaVj2pq
MD5:	4E44578216ABF3654056015EF4C8A9C3
SHA1:	731F56B8CCC14BC7CED833C059A2FE9BE67D23F7
SHA-256:	91BB41088F847FB73641FA556EDA6D67BACB67560B8ABF6EA1F0C885390004F8
SHA-512:	C77F92786CCF1D1D604808580B0952DF255BF16782436606D3BE54CB46BBB49F298BAF57FE30ACD22F2BCE8F487E8EEEFDBE98117F57171B74337DC367FD1BB6
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........T..\5.\5.\5.UMQ.T5..W..T5..W.W5..W.X5..W.K5./W.V5..V.Y5.\5.N8..V..5..V.]5..V=.]5.\5U.]5..V..]5.Rich\5.................PE..L...Cx.\...........!.....B+..........C+......`+....e..........................E...........@..........................$5......>=.......A.......................B..s.. :4.T....................;4.....x:4.@............`+..4...........................text...JA+......B+................. ..`.rdata..DZ...`+..\...F+.............@..@.data...,#....?.......?.............@....rsrc.........A.......A.............@..@.reloc...s....B..t....A.............@..B........................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\d3dcompiler_47.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3466856
Entropy (8bit):	6.444422172074855
Encrypted:	false
SSDEEP:	49152:PyZ9lnpmVm/w+EwVOmufvkQS8MH2J9CqS5Sqr88pPWW5KhQYPsXqUiQ6:E9fWAwVBC8MH2JNSF8+YPsXqUT6
MD5:	C5B362BCE86BB0AD3149C4540201331D
SHA1:	91BC4989345A4E26F06C0C781A21A27D4EE9BACD
SHA-256:	EFBDBBCD0D954F8FDC53467DE5D89AD525E4E4A9CFFF8A15D07C6FDB350C407F
SHA-512:	82FA22F6509334A6A481B0731DE1898AA70D2CF3A35F81C4A91FFFE0F4C4DD727C8D6A238C778ADC7678DFCF1BC81011A9EFF2DEE912E6B14F93CA3600D62DDD
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........Q...0.X.0.X.0.X=.DX.0.X=.EX.0.X..DX.0.X..FX.0.X.0.X.0.X..@X.0.X..EX.0.X..AX.0.X..XX@0.X..BX.0.X..GX.0.XRich.0.X................PE..L...n..R...........!......1.........7.0.......1..............................`5.......5...@...........................1.u... .2.d.....2.@.............4.h<....2....p...............................h...@.............2. ............................text...%.1.......1................. ..`.data...<.....1..^....1.............@....idata........2.......1.............@..@.rsrc...@.....2.......1.............@..@.reloc........2.......2.............@..B........................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\iconengines\is-0OA6J.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	6.113027399820743
Encrypted:	false
SSDEEP:	384:33lTaaOoFMSIh5jyopQGI7J9jCnflfWLtBywAjsPnwGn5KsMdxdTnxVQBAL2tqOs:33lTaa6/6GI7HjHywActk7rVjjR4W7
MD5:	56823BD1C8731F18B548B7F8BA8C8D6D
SHA1:	4E1B75A19C316B7D551C7E0240B344F9043E7C35
SHA-256:	2ACD7B774B643E1F9B3D8018AAB7256AA121EF19FE07AD2BC6415CBBFBDCF7F8
SHA-512:	42019C630357AB8473B0A5C18C76C0ECCE31948D163FF4D6BE5700A58AD12F7CD1F13BA7B5234C0BB3A1631DC4299F6FCC0B535CE7BD52088E8FA0C84E17B3A5
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........................v........................................................K...................................Rich............PE..L...~..\...........!.....8...8.......>.......P............................................@..........................]..x....]..........H............................T..T....................U......8U..@............P..\|............................text...w6.......8.................. ..`.rdata...%...P...&...<..............@..@.data................b..............@....qtmetadj............d..............@..P.rsrc...H............f..............@..@.reloc...............j..............@..B................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\iconengines\qsvgicon.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	6.113027399820743
Encrypted:	false
SSDEEP:	384:33lTaaOoFMSIh5jyopQGI7J9jCnflfWLtBywAjsPnwGn5KsMdxdTnxVQBAL2tqOs:33lTaa6/6GI7HjHywActk7rVjjR4W7
MD5:	56823BD1C8731F18B548B7F8BA8C8D6D
SHA1:	4E1B75A19C316B7D551C7E0240B344F9043E7C35
SHA-256:	2ACD7B774B643E1F9B3D8018AAB7256AA121EF19FE07AD2BC6415CBBFBDCF7F8
SHA-512:	42019C630357AB8473B0A5C18C76C0ECCE31948D163FF4D6BE5700A58AD12F7CD1F13BA7B5234C0BB3A1631DC4299F6FCC0B535CE7BD52088E8FA0C84E17B3A5
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........................v........................................................K...................................Rich............PE..L...~..\...........!.....8...8.......>.......P............................................@..........................]..x....]..........H............................T..T....................U......8U..@............P..\|............................text...w6.......8.................. ..`.rdata...%...P...&...<..............@..@.data................b..............@....qtmetadj............d..............@..P.rsrc...H............f..............@..@.reloc...............j..............@..B................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-4RL8F.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	34816
Entropy (8bit):	6.1693326351662225
Encrypted:	false
SSDEEP:	384:0mtWiyvOw70BKTb/BZVbTZ6QoAcJO62HGrEj/PPskd2nBpYL1tmriFTJBvmiokP:4VOw74+Vbl6QcA68GrEbPvbTJBvm+
MD5:	6209F7B11C8D40F07666737226618088
SHA1:	E38337948273F6E363ECBC28B90A69563650D9F1
SHA-256:	390EB949A9027024D2A891A8D77CD1A9773C3145493FE9EAB552C52579AB4B49
SHA-512:	A89C5B9D3A5F53A5FE0748E29A55E9AFC74B3A2C2C3FDD38D511EB7A26DA8FDC48B964DECB6CA74C7A63734E882FF835484C3C47B9C2A1FB8EA0B3E9C9AA5CD5
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......$ci.`...`...`...iz..f....`..b....`..b....`..b....`..r....`..k....a..e...`........a..b....a..a....a..a....a..a...Rich`...........PE..L...e..\...........!.....F...D.......L.......`............................................@..........................q..t...Tr..........@....................... ....i..T....................j.......j..@............`..8............................text....D.......F.................. ..`.rdata...(...`...*...J..............@..@.data...X............t..............@....qtmetadx............z..............@..P.rsrc...@............\|..............@..@.reloc.. ...........................@..B................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-76014.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	414720
Entropy (8bit):	6.71667581569419
Encrypted:	false
SSDEEP:	12288:MkjITr8S++Dnhdw+NbJeJhATTMhM3ds4:5jITr8S++DJNyh4TMhC
MD5:	0034BD5547A4727E40BBC839F7F3AF3F
SHA1:	08F73528904AB181E0A40365954E380C84354F9F
SHA-256:	303A251FE41E0C33FA909D1EE47B989B96CE8DDDBDBB0D2CCF09E238EE9307A1
SHA-512:	E310BB7EDD9AB9F04D201BEB838E76E920E73C2FBE8909AFD6CEB5E5F7E1EC98C37CFA3DB7BDF1FA185C05500A66A98452A4AD7C3888F8FA69AC2F99F027A15D
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.....................................................................M........................o...........Rich...........................PE..L...p..\...........!.........V...............0............................................@.........................P#..t....#..........@........................"......T...............................@............0...............................text...7........................... ..`.rdata..r....0......................@..@.data...l ...@.......&..............@....qtmetadv....p.......(..............@..P_RDATA.. ............*..............@..@.rsrc...@............,..............@..@.reloc...".......$...0..............@..B................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-HH4ER.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	21504
Entropy (8bit):	5.682206067431102
Encrypted:	false
SSDEEP:	384:lf3PFJXVOU5YI2mugHc+jLHJMnZIJwMpvMWgcjN7qYeYsFit+E/oTK:pFJmI2J+jLH6Zg7Mj5ZYoiMYoT
MD5:	8F94D2AE757A6115F59A34EA992B67C9
SHA1:	6583B8EA6B61A0F423ECA15FDD780D2EFB65AB29
SHA-256:	2F3C33068FAD9682B4AA49D9A667CF2A241D157651502C63396480E232C9954C
SHA-512:	D7E930018C7E3EA00C8BD88EF4B64386232567154E70ACA3FFF0F8861C03579EEEB138C227AEB8077856E48A65E73F01699D87F4005AD6F909EEE62F072F9686
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m...............tu......n......n.......n.......n.......n.......o..............o.......o.......o.......o......Rich............PE..L...{..\...........!..... ...4......9&.......0............................................@..........................<..t...4=..........@............................4..T....................5.......4..@............0...............................text............ .................. ..`.rdata... ...0..."...$..............@..@.data........`.......F..............@....qtmetad.....p.......H..............@..P.rsrc...@............J..............@..@.reloc...............N..............@..B................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-LLB6R.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	25600
Entropy (8bit):	5.938746784345418
Encrypted:	false
SSDEEP:	768:ZwMdlTr/3YdE0Vo2aW5Q3XyU9JXypt2n+dnh1N:ZwYd/3YdE0VrP5QnVXit2n+dnh7
MD5:	4EB7D56E102211CD0658A95FA90533FF
SHA1:	E2BA98A41F7BD451E6B8F5300256CDFEF4936343
SHA-256:	172CD07F2D55173C607A879A7C0F481459E92934D77026362C3C0B748A11F429
SHA-512:	36CBBBCA41B8B47B71988D7F451805EAF961F5C2AD79505B27CCB915B35DCB04AAC3AA0F944CFD16823CEDDB27E673DCA9753F814DBD873DE460715136792B0F
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........b...1...1...1...1...1{..0...1...0...1{..0...1{..0...1{..0...1i..0...1...1..1i..0...1i..0...1i..1...1i..0...1Rich...1........PE..L....x.\...........!.....4...0.......;.......P............................................@.........................`\..t....\..........@.......................\...0T..T................... U.......T..@............P...............................text....3.......4.................. ..`.rdata..H....P.......8..............@..@.data........p.......V..............@....qtmetads............X..............@..P.rsrc...@............Z..............@..@.reloc..\............^..............@..B................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-N8M6P.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	364032
Entropy (8bit):	5.572907719636244
Encrypted:	false
SSDEEP:	6144:osiTsv2E2/7hKxoRb01aGKJJu+sfJvibN9HQ5NKTQOOsCTELNFG61:osjC/9woRdJubxKbN9wHKTJ1
MD5:	8E4EB3EDC29DF525F1399618342C340A
SHA1:	EF43A91FC3981A0F166FF0A735C1E7F8C1F2E578
SHA-256:	9EE5024E08CE601F60879E7205EBAF686590C5B75B0231FCA4EEE723410D1B36
SHA-512:	52DCE23FA0E6CC07819B9B011C7B78D1A44F0F8DD128B37AAF76B2FB9912211394A11ACFFAD55CA1C724DD6D6B8FED7D4A9747ED64A82817A28E6AD592B74D90
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........f...f...f.......f.......f.......f.......f.......f.......f.......f...f..tf.......f.......f.......f....`..f.......f..Rich.f..........PE..L....x.\...........!......................................................................@..........................d..t...Te..........@............................\..T....................].......]..@............................................text............................... ..`.rdata..^...........................@..@.data................v..............@....qtmetad.............x..............@..P.rsrc...@............z..............@..@.reloc...............~..............@..B........................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-OSKN4.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	331776
Entropy (8bit):	5.705797155183402
Encrypted:	false
SSDEEP:	6144:G36yFZA3kasG3piv2M2jL8HZqWCx12vzfu:+PWUTG3pi+MGL
MD5:	242393B66B414A253C06AA0CB1976D7C
SHA1:	29019826541F687123CA8DDBF015DD2E1D80FE95
SHA-256:	B90E4BF6DF7FE6D9774161C4D290C03C612F041C2B22DCE79B8C642647BE975B
SHA-512:	D17C27461968E6EB4669253B0706C699AFAB1AC9EEA8B431878763B34087CAF3ACE4D82B72ED7FD2F5B16ADD1095EA8E25BA66B8C29DE39010FA183BD8FB723C
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......l7:.(VT.(VT.(VT.!...8VT..4U.VT.[4U.VT..4W..VT..4Q.<VT..4P.#VT..5U.-VT.(VU.VT..5Q.VT..5P..VT..5T.)VT..5..)VT..5V.)VT.Rich(VT.........................PE..L...e..\...........!.........Z......2........................................P............@.............................t...$........ ..@....................0..T.......T...................p...........@...............p............................text...7........................... ..`.rdata..j.......,..................@..@.data...............................@....qtmetad............................@..P.rsrc...@.... ......................@..@.reloc..T....0... ..................@..B........................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-RD8HQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	25600
Entropy (8bit):	6.00826640203556
Encrypted:	false
SSDEEP:	384:/hfCq+XN5dhIKyCWjs9hEtYCcJhdBDT2xHIVXWc0hl1r3sRXI7sekv:/h4NdIdjOhEtYHtBmuIc0d3yI7sekv
MD5:	3C149E5676CC1C34FC4A08E0B716F926
SHA1:	4585BE359F23176CF45F3EF6F655A01113216D62
SHA-256:	E06F1A9FCF1F954E6310F08DCFEC4C0C93B87D13EABA75B6A90C05B944DAABEB
SHA-512:	5AE5897CE66BBA2939BFFD6C718C3C6C94644E46171052FAC46C156138E7E4359EE7B5AF50DB8F8DBF4A8402BD00AC5E0A334A34A5506D078EE0106BD071CDC0
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......Y}.O.............d7......~......n~.......~.......~.......~........................................[.............Rich............................PE..L....x.\...........!.....0...4......26.......@............................................@.........................PM..t....M..........@............................D..T....................E.......D..@............@...............................text............0.................. ..`.rdata...!...@..."...4..............@..@.data...4....p.......V..............@....qtmetad.............X..............@..P.rsrc...@............Z..............@..@.reloc...............^..............@..B................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-SPNC8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	19456
Entropy (8bit):	5.767906818393494
Encrypted:	false
SSDEEP:	384:Yrr/Uoi6JV7yJco7njydE2U0YtvGs/UsAJrqW:wg6D7yTnjkE22GjsAJ
MD5:	2A2437F04622E33140D307F04A24174B
SHA1:	89BCB7DDDC78D0D430275656DD2B41322CDE16EA
SHA-256:	72F1F5ADBC841D8DBFCC06D4669A46A1928E948B7690630D6B78465B4AD15D94
SHA-512:	53072EB4F792AFD6DA35A3A174B47DE6FEB635F1FE5D9CA5485877BB0DEE8564E6F7F414B4E905958FBB96FAEC33F9074A413F47A00D13F5AD6AC3690E912812
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......Mk...............r/......h......zh.......h.......h.......h.......i..........c....i.......i.......iC......i......Rich............................PE..L...Q..\...........!................I%.......0............................................@.........................@<..t....<.......p..@............................4..T....................5......h4..@............0...............................text...'........................... ..`.rdata..L....0......."..............@..@.data........P.......@..............@....qtmetad~....`.......B..............@..P.rsrc...@....p.......D..............@..@.reloc...............H..............@..B................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\is-SV5JB.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	19968
Entropy (8bit):	5.760661317509102
Encrypted:	false
SSDEEP:	384:7yZXLMRmQhInhEJQc3hEd7GrvnsRyYnrx:OXLMRBhInhEG+hEdCDDYnr
MD5:	72905964B71924D9A1BC072B4B0C3681
SHA1:	D7FC3414F1C44CD7973AE2819591868969A94C4A
SHA-256:	FD648A8783BF9CCEEB73CC2CCE92F583F1B9206315BBCFF834DFE9157A5DA7DD
SHA-512:	0186BA45B1CDFBE72065F7E8135091E21EBBD84BEBEB1A919BA174B5D7151A87871B78F92AE58D237D912DFD562AE62D5E11111FC7E9F747FFA817E132482519
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........{....\|...\|...\|..b....\|.<x}...\|.x}...\|.<x....\|.<xy...\|.<xx...\|..y}...\|...}..\|..yy...\|..y\|...\|..y....\|..y~...\|.Rich..\|.........................PE..L...X..\...........!.........0......v%.......0............................................@..........................?..t....?.......p..@............................5..T....................6.......6..@............0...............................text...G........................... ..`.rdata.......0......."..............@..@.data...l....P.......@..............@....qtmetadu....`.......B..............@..P.rsrc...@....p.......D..............@..@.reloc...............H..............@..B................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qgif.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	25600
Entropy (8bit):	5.938746784345418
Encrypted:	false
SSDEEP:	768:ZwMdlTr/3YdE0Vo2aW5Q3XyU9JXypt2n+dnh1N:ZwYd/3YdE0VrP5QnVXit2n+dnh7
MD5:	4EB7D56E102211CD0658A95FA90533FF
SHA1:	E2BA98A41F7BD451E6B8F5300256CDFEF4936343
SHA-256:	172CD07F2D55173C607A879A7C0F481459E92934D77026362C3C0B748A11F429
SHA-512:	36CBBBCA41B8B47B71988D7F451805EAF961F5C2AD79505B27CCB915B35DCB04AAC3AA0F944CFD16823CEDDB27E673DCA9753F814DBD873DE460715136792B0F
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........b...1...1...1...1...1{..0...1...0...1{..0...1{..0...1{..0...1i..0...1...1..1i..0...1i..0...1i..1...1i..0...1Rich...1........PE..L....x.\...........!.....4...0.......;.......P............................................@.........................`\..t....\..........@.......................\...0T..T................... U.......T..@............P...............................text....3.......4.................. ..`.rdata..H....P.......8..............@..@.data........p.......V..............@....qtmetads............X..............@..P.rsrc...@............Z..............@..@.reloc..\............^..............@..B................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qicns.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	34816
Entropy (8bit):	6.1693326351662225
Encrypted:	false
SSDEEP:	384:0mtWiyvOw70BKTb/BZVbTZ6QoAcJO62HGrEj/PPskd2nBpYL1tmriFTJBvmiokP:4VOw74+Vbl6QcA68GrEbPvbTJBvm+
MD5:	6209F7B11C8D40F07666737226618088
SHA1:	E38337948273F6E363ECBC28B90A69563650D9F1
SHA-256:	390EB949A9027024D2A891A8D77CD1A9773C3145493FE9EAB552C52579AB4B49
SHA-512:	A89C5B9D3A5F53A5FE0748E29A55E9AFC74B3A2C2C3FDD38D511EB7A26DA8FDC48B964DECB6CA74C7A63734E882FF835484C3C47B9C2A1FB8EA0B3E9C9AA5CD5
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......$ci.`...`...`...iz..f....`..b....`..b....`..b....`..r....`..k....a..e...`........a..b....a..a....a..a....a..a...Rich`...........PE..L...e..\...........!.....F...D.......L.......`............................................@..........................q..t...Tr..........@....................... ....i..T....................j.......j..@............`..8............................text....D.......F.................. ..`.rdata...(...`...*...J..............@..@.data...X............t..............@....qtmetadx............z..............@..P.rsrc...@............\|..............@..@.reloc.. ...........................@..B................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qico.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	25600
Entropy (8bit):	6.00826640203556
Encrypted:	false
SSDEEP:	384:/hfCq+XN5dhIKyCWjs9hEtYCcJhdBDT2xHIVXWc0hl1r3sRXI7sekv:/h4NdIdjOhEtYHtBmuIc0d3yI7sekv
MD5:	3C149E5676CC1C34FC4A08E0B716F926
SHA1:	4585BE359F23176CF45F3EF6F655A01113216D62
SHA-256:	E06F1A9FCF1F954E6310F08DCFEC4C0C93B87D13EABA75B6A90C05B944DAABEB
SHA-512:	5AE5897CE66BBA2939BFFD6C718C3C6C94644E46171052FAC46C156138E7E4359EE7B5AF50DB8F8DBF4A8402BD00AC5E0A334A34A5506D078EE0106BD071CDC0
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......Y}.O.............d7......~......n~.......~.......~.......~........................................[.............Rich............................PE..L....x.\...........!.....0...4......26.......@............................................@.........................PM..t....M..........@............................D..T....................E.......D..@............@...............................text............0.................. ..`.rdata...!...@..."...4..............@..@.data...4....p.......V..............@....qtmetad.............X..............@..P.rsrc...@............Z..............@..@.reloc...............^..............@..B................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qjpeg.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	364032
Entropy (8bit):	5.572907719636244
Encrypted:	false
SSDEEP:	6144:osiTsv2E2/7hKxoRb01aGKJJu+sfJvibN9HQ5NKTQOOsCTELNFG61:osjC/9woRdJubxKbN9wHKTJ1
MD5:	8E4EB3EDC29DF525F1399618342C340A
SHA1:	EF43A91FC3981A0F166FF0A735C1E7F8C1F2E578
SHA-256:	9EE5024E08CE601F60879E7205EBAF686590C5B75B0231FCA4EEE723410D1B36
SHA-512:	52DCE23FA0E6CC07819B9B011C7B78D1A44F0F8DD128B37AAF76B2FB9912211394A11ACFFAD55CA1C724DD6D6B8FED7D4A9747ED64A82817A28E6AD592B74D90
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........f...f...f.......f.......f.......f.......f.......f.......f.......f...f..tf.......f.......f.......f....`..f.......f..Rich.f..........PE..L....x.\...........!......................................................................@..........................d..t...Te..........@............................\..T....................].......]..@............................................text............................... ..`.rdata..^...........................@..@.data................v..............@....qtmetad.............x..............@..P.rsrc...@............z..............@..@.reloc...............~..............@..B........................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qsvg.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	21504
Entropy (8bit):	5.682206067431102
Encrypted:	false
SSDEEP:	384:lf3PFJXVOU5YI2mugHc+jLHJMnZIJwMpvMWgcjN7qYeYsFit+E/oTK:pFJmI2J+jLH6Zg7Mj5ZYoiMYoT
MD5:	8F94D2AE757A6115F59A34EA992B67C9
SHA1:	6583B8EA6B61A0F423ECA15FDD780D2EFB65AB29
SHA-256:	2F3C33068FAD9682B4AA49D9A667CF2A241D157651502C63396480E232C9954C
SHA-512:	D7E930018C7E3EA00C8BD88EF4B64386232567154E70ACA3FFF0F8861C03579EEEB138C227AEB8077856E48A65E73F01699D87F4005AD6F909EEE62F072F9686
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m...............tu......n......n.......n.......n.......n.......o..............o.......o.......o.......o......Rich............PE..L...{..\...........!..... ...4......9&.......0............................................@..........................<..t...4=..........@............................4..T....................5.......4..@............0...............................text............ .................. ..`.rdata... ...0..."...$..............@..@.data........`.......F..............@....qtmetad.....p.......H..............@..P.rsrc...@............J..............@..@.reloc...............N..............@..B................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qtga.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	19968
Entropy (8bit):	5.760661317509102
Encrypted:	false
SSDEEP:	384:7yZXLMRmQhInhEJQc3hEd7GrvnsRyYnrx:OXLMRBhInhEG+hEdCDDYnr
MD5:	72905964B71924D9A1BC072B4B0C3681
SHA1:	D7FC3414F1C44CD7973AE2819591868969A94C4A
SHA-256:	FD648A8783BF9CCEEB73CC2CCE92F583F1B9206315BBCFF834DFE9157A5DA7DD
SHA-512:	0186BA45B1CDFBE72065F7E8135091E21EBBD84BEBEB1A919BA174B5D7151A87871B78F92AE58D237D912DFD562AE62D5E11111FC7E9F747FFA817E132482519
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........{....\|...\|...\|..b....\|.<x}...\|.x}...\|.<x....\|.<xy...\|.<xx...\|..y}...\|...}..\|..yy...\|..y\|...\|..y....\|..y~...\|.Rich..\|.........................PE..L...X..\...........!.........0......v%.......0............................................@..........................?..t....?.......p..@............................5..T....................6.......6..@............0...............................text...G........................... ..`.rdata.......0......."..............@..@.data...l....P.......@..............@....qtmetadu....`.......B..............@..P.rsrc...@....p.......D..............@..@.reloc...............H..............@..B................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qtiff.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	331776
Entropy (8bit):	5.705797155183402
Encrypted:	false
SSDEEP:	6144:G36yFZA3kasG3piv2M2jL8HZqWCx12vzfu:+PWUTG3pi+MGL
MD5:	242393B66B414A253C06AA0CB1976D7C
SHA1:	29019826541F687123CA8DDBF015DD2E1D80FE95
SHA-256:	B90E4BF6DF7FE6D9774161C4D290C03C612F041C2B22DCE79B8C642647BE975B
SHA-512:	D17C27461968E6EB4669253B0706C699AFAB1AC9EEA8B431878763B34087CAF3ACE4D82B72ED7FD2F5B16ADD1095EA8E25BA66B8C29DE39010FA183BD8FB723C
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......l7:.(VT.(VT.(VT.!...8VT..4U.VT.[4U.VT..4W..VT..4Q.<VT..4P.#VT..5U.-VT.(VU.VT..5Q.VT..5P..VT..5T.)VT..5..)VT..5V.)VT.Rich(VT.........................PE..L...e..\...........!.........Z......2........................................P............@.............................t...$........ ..@....................0..T.......T...................p...........@...............p............................text...7........................... ..`.rdata..j.......,..................@..@.data...............................@....qtmetad............................@..P.rsrc...@.... ......................@..@.reloc..T....0... ..................@..B........................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qwbmp.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	19456
Entropy (8bit):	5.767906818393494
Encrypted:	false
SSDEEP:	384:Yrr/Uoi6JV7yJco7njydE2U0YtvGs/UsAJrqW:wg6D7yTnjkE22GjsAJ
MD5:	2A2437F04622E33140D307F04A24174B
SHA1:	89BCB7DDDC78D0D430275656DD2B41322CDE16EA
SHA-256:	72F1F5ADBC841D8DBFCC06D4669A46A1928E948B7690630D6B78465B4AD15D94
SHA-512:	53072EB4F792AFD6DA35A3A174B47DE6FEB635F1FE5D9CA5485877BB0DEE8564E6F7F414B4E905958FBB96FAEC33F9074A413F47A00D13F5AD6AC3690E912812
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......Mk...............r/......h......zh.......h.......h.......h.......i..........c....i.......i.......iC......i......Rich............................PE..L...Q..\...........!................I%.......0............................................@.........................@<..t....<.......p..@............................4..T....................5......h4..@............0...............................text...'........................... ..`.rdata..L....0......."..............@..@.data........P.......@..............@....qtmetad~....`.......B..............@..P.rsrc...@....p.......D..............@..@.reloc...............H..............@..B................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\imageformats\qwebp.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	414720
Entropy (8bit):	6.71667581569419
Encrypted:	false
SSDEEP:	12288:MkjITr8S++Dnhdw+NbJeJhATTMhM3ds4:5jITr8S++DJNyh4TMhC
MD5:	0034BD5547A4727E40BBC839F7F3AF3F
SHA1:	08F73528904AB181E0A40365954E380C84354F9F
SHA-256:	303A251FE41E0C33FA909D1EE47B989B96CE8DDDBDBB0D2CCF09E238EE9307A1
SHA-512:	E310BB7EDD9AB9F04D201BEB838E76E920E73C2FBE8909AFD6CEB5E5F7E1EC98C37CFA3DB7BDF1FA185C05500A66A98452A4AD7C3888F8FA69AC2F99F027A15D
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.....................................................................M........................o...........Rich...........................PE..L...p..\...........!.........V...............0............................................@.........................P#..t....#..........@........................"......T...............................@............0...............................text...7........................... ..`.rdata..r....0......................@..@.data...l ...@.......&..............@....qtmetadv....p.......(..............@..P_RDATA.. ............*..............@..@.rsrc...@............,..............@..@.reloc...".......$...0..............@..B................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-3PPH8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	267776
Entropy (8bit):	6.827099671612549
Encrypted:	false
SSDEEP:	6144:isvcOI9TPlPCKc0IlmR/hfxuzWgFfhck3I9uH2+7LaJFqgWYsW0huR0SdkRm2uet:isvcdvcgRQ
MD5:	B2BAA1D188BE3816E54C5FBC2A31F48F
SHA1:	80CB56B3EF29570E5A4ABF3118E45210013B5DF9
SHA-256:	696782041BB188C94655128DBFA125944B27D081E185924BA5B48E9A18CFE086
SHA-512:	6EC6DD653D81F3F8C856D2B4E49D4295E50784620A46CCC7D3F562938230D252031F1B7B5E1DD072F20535334DE8025AB37C33C65BFFBD96B7DC9B539CF0448C
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......!...e...e...e...l...m.......g.......a.......q.......n.......o.......b...e...!.....p.......d.....x.d...e...d.......d...Riche...........................PE..L...jx.\...........!.........n......q........................................P............@.............................xn..8....................................4..p...T...................`..........@............... ............................text............................... ..`.rdata..............................@..@.data...4...........................@....rsrc...............................@..@.reloc...4.......6..................@..B................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-5HL0H.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	4532224
Entropy (8bit):	6.821597412195145
Encrypted:	false
SSDEEP:	49152:XJ2CpuflNFOnnSvUrXmo9WYsHXZJI2rbamJ3pkQTVj2pq:XJVciUIaVj2pq
MD5:	4E44578216ABF3654056015EF4C8A9C3
SHA1:	731F56B8CCC14BC7CED833C059A2FE9BE67D23F7
SHA-256:	91BB41088F847FB73641FA556EDA6D67BACB67560B8ABF6EA1F0C885390004F8
SHA-512:	C77F92786CCF1D1D604808580B0952DF255BF16782436606D3BE54CB46BBB49F298BAF57FE30ACD22F2BCE8F487E8EEEFDBE98117F57171B74337DC367FD1BB6
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........T..\5.\5.\5.UMQ.T5..W..T5..W.W5..W.X5..W.K5./W.V5..V.Y5.\5.N8..V..5..V.]5..V=.]5.\5U.]5..V..]5.Rich\5.................PE..L...Cx.\...........!.....B+..........C+......`+....e..........................E...........@..........................$5......>=.......A.......................B..s.. :4.T....................;4.....x:4.@............`+..4...........................text...JA+......B+................. ..`.rdata..DZ...`+..\...F+.............@..@.data...,#....?.......?.............@....rsrc.........A.......A.............@..@.reloc...s....B..t....A.............@..B........................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-80S1U.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	15995904
Entropy (8bit):	6.353584600934879
Encrypted:	false
SSDEEP:	393216:rNkEXgt/UOdyRLjqkmbBDrta60HYUnuedxO0g//NuPyEMO32ovq:rN1QtXdyRLjqNbBDrta60HYUpO0Q/NuZ
MD5:	8B197F55264A44B7B25046F7BA5BD7D2
SHA1:	CEF69E168160968E00FFFFA136E1AF7819E7C0CE
SHA-256:	25AE7577E066FA80519A8F1C314B15CDD22E4A8D3ECD2A36ECCC79E40714A91D
SHA-512:	6AF2B1B17A7E3460099359A6750221AACB8F9CE0E80B346DBAFD2CBD8E579543B980F98E0AEB199E0781A045C9D6A7F2F11C8628F960C13550328487B7FA9154
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........l%..K...K...K.......K.......K.......K.;.....K..PH...K..PN...K..PO...K.......K...J...K..PO...K..PN.I.K..PC...K..PK...K..PI...K.Rich..K.........PE..L.....`W...........!..........H......D....................................................@..........................v.....t...........................................T...........................X...@............................................text............................... ..`.rdata....<.......<.................@..@.data...pp... ......................@....gfids..............................@..@.tls................................@..._RDATA..............................@..@.reloc..............................@..B........................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-CSRRK.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	5087232
Entropy (8bit):	6.83016302256273
Encrypted:	false
SSDEEP:	98304:KOeBQ7bBBt+7VJsv6tWKFdu9CHvK740zA:K3EMJsv6tWKFdu9CHC7V
MD5:	C60AD4DE483B15BB025092BFE7CFC35C
SHA1:	05C73F6E19939A604B6EAC155DF6E03A33FC302F
SHA-256:	C80F97F226D1D376FC82F864EE30619BD6DDF202B948EC69A7964B6702CCBE9B
SHA-512:	B5474A448CFBFB4C33B2E5BF2D530E2D1E3861156ED2A97EA483508EADB3BBA7CE8B4836F4FF94B4B84C803C5315F75DCF303CC96C40096C6DD5A6B886E59044
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...................................(...........!..L.!This program cannot be run in DOS mode....$........%,.FDB.FDB.FDB.O<..RDB.&C.BDB....BDB.&A.HDB.&G.]DB.&F.MDB.5&D.EDB.5&C.QDB.FDC..EB.'F.jDB.'G.DB.'B.GDB.'..GDB.FD..GDB.'@.GDB.RichFDB.........................PE..L....v.\...........!.....`&...'.....Tf$......p&....g.........................0N...........@.........................@.C.....DjJ.......L.......................L..s..`;A.T...................P<A......;A.@............p&.\............................text...._&......`&................. ..`.rdata....$..p&...$..d&.............@..@.data...4.....J.......J.............@....rsrc.........L......&L.............@..@.reloc...s....L..t...,L.............@..B................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-DU63R.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2786816
Entropy (8bit):	6.522560624125554
Encrypted:	false
SSDEEP:	49152:OK2/iHlqi0gMa37I/Dz7hWRM8atrShFPWp480n53:OCB0ZarIHtwWp48
MD5:	D4A37250588E61E50AD7F9D129F0D37E
SHA1:	A4A84807401EA4CAE05B9CB3C6CECECDB63BAED8
SHA-256:	785768F643F00CC013FBAB8D620F3C1D3ABEC8BBECA5942BA31834DEA269774B
SHA-512:	6256890A8EBAF8801879281CEA334247437C7163989D1A6D05643052944D891A79AC68F8EB7044F4EDFD1F2B97F021A92FCC859C0646AC836E5924D80FEE5EE5
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........VK..7%.7%.7%.O..7%.OU&.7%.OU!.7%.OU$.7%.OU .7%..U$.7%.7$.6%.]T .6%.]T%.7%.]T..7%.7..7%.]T'.7%.Rich.7%.................PE..L....v.\...........!...... ................... ...............................*...........@.........................p.'..\..$R(......0).P....................@)......%.T.....................%.....X.%.@............. ..............................text...4. ....... ................. ..`.rdata........ ....... .............@..@.data.........(......d(.............@....rsrc...P....0).......(.............@..@.reloc......@).......(.............@..B................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-HFNJP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1216713
Entropy (8bit):	6.341351766016818
Encrypted:	false
SSDEEP:	24576:G1VqyG3T/+ofiDIZE2kChYYmpY9a2nWEdEC6GnJJ3GIvx94Y:GQdhZgEN6GnJdr
MD5:	418BB6549B507B290C7F86D6443219ED
SHA1:	D5B5758F4D01B8945223FFFE3DB55B751DBD6C17
SHA-256:	F5B8D9B858212B145D4A0C6A37FEF25880D3DFFB836339B66D9848D6563D8254
SHA-512:	93BFD30A7CCBE0EF43B1F27875A863C224C2C2B6D6D04CB62B57AF3FA7F811CBD1B06E8F91950BD13A7177CE50FB33202C9DAC69BE96DB385263D9D6C45F39ED
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 3%
Reputation:	low
Preview:	MZP.....................@.......................InUn....................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L......S.....................P....................@..............................................@...............................7..................................................................................t................................text............................... ..`.itext.. ........................... ..`.data...80.......2..................@....bss.....a...@...........................idata...7.......8..................@....tls....<............R...................rdata...............R..............@..@.rsrc................T..............@..@....................................@..@........................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-IHB33.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	15872
Entropy (8bit):	5.518209578841108
Encrypted:	false
SSDEEP:	192:WDkMcNphgbOazwo5J/kRdOM8EZ0XxY2SP82231HZG9fEz:dAbCCJ/2d9Ljd2T0E
MD5:	0469918FC1E19FC3F198CD14BE4E1E22
SHA1:	4F062E90CD4700259022394A020E3B02B3363EE6
SHA-256:	5DD84A436F1BEE9FC1FDF6285DB21E4ACB52BB63CD86C53C23B440F021E03401
SHA-512:	10A01905A56AD50DC017205D649F2FF3F885EE9111C9A75FB408C010FC9481E91FDC9C3685F1ED0C939222652ECF8F349A027EBA79B18A6BF64083FEA85958E0
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........6..W...W...W.../:..W..:5...W..5...W..:5...W..:5...W..:5...W..(4...W...W..W..(4...W..(4...W..(4V..W...W>..W..(4...W..Rich.W..........PE..L....v.\...........!.........*...............0............................................@..........................5.......>..d....`..H....................p.......1..T............................2..@............0...............................text............................... ..`.rdata.......0......................@..@.data........P.......4..............@....rsrc...H....`.......6..............@..@.reloc.......p.......<..............@..B................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-INFOL.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	265728
Entropy (8bit):	6.686936536486093
Encrypted:	false
SSDEEP:	6144:bXqBXZLVf0vc3vRnc+QwPFVmUZaTENQ/Q9y8DvVvrsTDaiO8PWJ0bsuX9/8lbM:6ZLVf0U3vRnc+QKFTZaQ9lbM
MD5:	476A16296F449EB053F6A09338572A9D
SHA1:	B0E92480686FDF3BFEF0A4F04770B0324369E7C0
SHA-256:	46B62AC1C5C991A97764C1CDD987BFA69EE713A43F820638BA4901247231AC77
SHA-512:	E99D3415B190633EA1AFB6DB4EC637E923F9DECFBE1F26395786532FB05E71EC95A318D10AF7A38007FA92809D2862B7BC658AA64823F427D67FC5D53659A701
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......].....B..B..B...B..B...C..Bj..C..B...C..B...C..B...C..B..C..B..B_.B..C..B..C..B.hB..B...B..B..C..BRich..B........PE..L...s..\...........!.....`...........h.......p.....f.........................@............@.........................p....\|...<...................................:......T..............................@............p.. ............................text...[_.......`.................. ..`.rdata..LZ...p...\...d..............@..@.data...t...........................@....rsrc...............................@..@.reloc...:.......:..................@..B................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-J5JNS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3560960
Entropy (8bit):	7.748509866135479
Encrypted:	false
SSDEEP:	49152:IiSzhrWhrJhrSdDdmduQoGUVyOf/+LUxHtC5hGhhudDdmjuQoGUVyOfojioV:IttmdJRUVhf/+LUNtUhOSmjJRUVhfy
MD5:	37D045BEFB2167D772D5C234869304EE
SHA1:	D1FE03A6B0BF746C6456C209884734A17A4A1C9C
SHA-256:	B0B45A18FBF25B142D447C734DDD5FD84AD2CA6E22E1027737247FD26D43F1BC
SHA-512:	12430A1023C9A963619D85020CF8244F21E037E59CB7C2880A266D5201D2F198CBB5A3849A832A4395D0D1D1B2706AF4E20DFC2D5591170A94F61ADE9EA71F45
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......4f^Np.0.p.0.p.0.y...\|.0.KY3.r.0.KY5.j.0.KY4.}.0.KY1.t.0..Y1.}.0..u1.t.0.p.1...0..Y5.T.0..Y..q.0.p...q.0..Y2.q.0.Richp.0.........PE..L...xi.d.................f....0.....f.............@..........................p6.....>.6...@.................................4v,.T.....-..............66.. ....5.....0.+.............................P.+.@............................................text....e.......f.................. ..`.rdata....'.......'..j..............@..@.data...@....p-......P-.............@....gfids..H.....-......Z-.............@..@.rsrc.........-......\-.............@..@.reloc........5......v5.............@..B................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-OIKVU.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	156672
Entropy (8bit):	6.603857273926382
Encrypted:	false
SSDEEP:	3072:8dINEYNVejBn5w+PDUDTRrEU8x810/QBnGXQ7:8aEYOjB5BIX1ETxw0/QBnGXQ
MD5:	BCC165A815B5312CC3618B2D588D238C
SHA1:	31A01E0345E2D3726C28F7CB28731C85DC399401
SHA-256:	749D1E0F05A09688ABEFBA8DAB8F6304EBD18E42E7B19CD7AAA5B1758A7FE457
SHA-512:	0EB4643D200B7FC8DFCB058D24C6A85FF0499BD873B1E66C6E2C28F776534E6CFEED72C50859B5BDF533B0078485DED83A3F0344063C0FDC7C4D8F98EC233D1D
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........v.k%.k%.k%...%.k%1.j$.k%..j$.k%1.h$.k%1.n$..k%1.o$.k%#.j$.k%.j%..k%#.n$..k%#.k$.k%#.%.k%..%.k%#.i$.k%Rich.k%........................PE..L....w.\...........!.....r..........Ix.............b......................................@.............................pj......x....p..................................T...........................h...@............................................text...kq.......r.................. ..`.rdata...............v..............@..@.data........`.......8..............@....rsrc........p.......@..............@..@.reloc...............F..............@..B................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-QSTCC.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	5353984
Entropy (8bit):	6.803733007830956
Encrypted:	false
SSDEEP:	49152:3/2ciiJRwNGz3QOK/kow3PfALGk1/7seyNrBfY6Ab/w3ybt9NjwT1zNMRhvFxRp:3tdzAePg7v7PRPxRp
MD5:	5581175E339938F80CAFB164BE0DC4B0
SHA1:	F7BADC086B65DF6329A13C17FCBEC349F2AB98A8
SHA-256:	78BCA9C65600391EC4BB1FB0374169DB13E7517EBD154A11D244248B25A7D939
SHA-512:	CF2AE95E01D139794B51913F73CD045727FFFFF439D499CF4B00648FF1D819C6325244544B54D5F544F181CEE8E4F8359CD9F6C8EF83271880776D0823111C53
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$..........>X..mX..mX..mQ.kmN..m...lT..m...lS..m...l\..m...lO..m+..lP..m...l[..mX..m...m...lW..m...l...m...lY..m...mY..mX.omY..m...lY..mRichX..m........................PE..L....w.\...........!....../..n"......./......./..............................PR...........@.........................pN4.P[....L.@.....O.......................P..A....3.T...................p.3.......3.@............./.p............................text..../......./................. ..`.rdata......../......./.............@..@.data....0....M.......M.............@....rsrc.........O......jO.............@..@.reloc...A....P..B...pO.............@..B........................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\is-SPRN6.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3466856
Entropy (8bit):	6.444422172074855
Encrypted:	false
SSDEEP:	49152:PyZ9lnpmVm/w+EwVOmufvkQS8MH2J9CqS5Sqr88pPWW5KhQYPsXqUiQ6:E9fWAwVBC8MH2JNSF8+YPsXqUT6
MD5:	C5B362BCE86BB0AD3149C4540201331D
SHA1:	91BC4989345A4E26F06C0C781A21A27D4EE9BACD
SHA-256:	EFBDBBCD0D954F8FDC53467DE5D89AD525E4E4A9CFFF8A15D07C6FDB350C407F
SHA-512:	82FA22F6509334A6A481B0731DE1898AA70D2CF3A35F81C4A91FFFE0F4C4DD727C8D6A238C778ADC7678DFCF1BC81011A9EFF2DEE912E6B14F93CA3600D62DDD
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........Q...0.X.0.X.0.X=.DX.0.X=.EX.0.X..DX.0.X..FX.0.X.0.X.0.X..@X.0.X..EX.0.X..AX.0.X..XX@0.X..BX.0.X..GX.0.XRich.0.X................PE..L...n..R...........!......1.........7.0.......1..............................`5.......5...@...........................1.u... .2.d.....2.@.............4.h<....2....p...............................h...@.............2. ............................text...%.1.......1................. ..`.data...<.....1..^....1.............@....idata........2.......1.............@..@.rsrc...@.....2.......1.............@..@.reloc........2.......2.............@..B........................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\libEGL.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	15872
Entropy (8bit):	5.518209578841108
Encrypted:	false
SSDEEP:	192:WDkMcNphgbOazwo5J/kRdOM8EZ0XxY2SP82231HZG9fEz:dAbCCJ/2d9Ljd2T0E
MD5:	0469918FC1E19FC3F198CD14BE4E1E22
SHA1:	4F062E90CD4700259022394A020E3B02B3363EE6
SHA-256:	5DD84A436F1BEE9FC1FDF6285DB21E4ACB52BB63CD86C53C23B440F021E03401
SHA-512:	10A01905A56AD50DC017205D649F2FF3F885EE9111C9A75FB408C010FC9481E91FDC9C3685F1ED0C939222652ECF8F349A027EBA79B18A6BF64083FEA85958E0
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........6..W...W...W.../:..W..:5...W..5...W..:5...W..:5...W..:5...W..(4...W...W..W..(4...W..(4...W..(4V..W...W>..W..(4...W..Rich.W..........PE..L....v.\...........!.........*...............0............................................@..........................5.......>..d....`..H....................p.......1..T............................2..@............0...............................text............................... ..`.rdata.......0......................@..@.data........P.......4..............@....rsrc...H....`.......6..............@..@.reloc.......p.......<..............@..B................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\libGLESV2.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2786816
Entropy (8bit):	6.522560624125554
Encrypted:	false
SSDEEP:	49152:OK2/iHlqi0gMa37I/Dz7hWRM8atrShFPWp480n53:OCB0ZarIHtwWp48
MD5:	D4A37250588E61E50AD7F9D129F0D37E
SHA1:	A4A84807401EA4CAE05B9CB3C6CECECDB63BAED8
SHA-256:	785768F643F00CC013FBAB8D620F3C1D3ABEC8BBECA5942BA31834DEA269774B
SHA-512:	6256890A8EBAF8801879281CEA334247437C7163989D1A6D05643052944D891A79AC68F8EB7044F4EDFD1F2B97F021A92FCC859C0646AC836E5924D80FEE5EE5
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........VK..7%.7%.7%.O..7%.OU&.7%.OU!.7%.OU$.7%.OU .7%..U$.7%.7$.6%.]T .6%.]T%.7%.]T..7%.7..7%.]T'.7%.Rich.7%.................PE..L....v.\...........!...... ................... ...............................*...........@.........................p.'..\..$R(......0).P....................@)......%.T.....................%.....X.%.@............. ..............................text...4. ....... ................. ..`.rdata........ ....... .............@..@.data.........(......d(.............@....rsrc...P....0).......(.............@..@.reloc......@).......(.............@..B................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\opengl32sw.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	15995904
Entropy (8bit):	6.353584600934879
Encrypted:	false
SSDEEP:	393216:rNkEXgt/UOdyRLjqkmbBDrta60HYUnuedxO0g//NuPyEMO32ovq:rN1QtXdyRLjqNbBDrta60HYUpO0Q/NuZ
MD5:	8B197F55264A44B7B25046F7BA5BD7D2
SHA1:	CEF69E168160968E00FFFFA136E1AF7819E7C0CE
SHA-256:	25AE7577E066FA80519A8F1C314B15CDD22E4A8D3ECD2A36ECCC79E40714A91D
SHA-512:	6AF2B1B17A7E3460099359A6750221AACB8F9CE0E80B346DBAFD2CBD8E579543B980F98E0AEB199E0781A045C9D6A7F2F11C8628F960C13550328487B7FA9154
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........l%..K...K...K.......K.......K.......K.;.....K..PH...K..PN...K..PO...K.......K...J...K..PO...K..PN.I.K..PC...K..PK...K..PI...K.Rich..K.........PE..L.....`W...........!..........H......D....................................................@..........................v.....t...........................................T...........................X...@............................................text............................... ..`.rdata....<.......<.................@..@.data...pp... ......................@....gfids..............................@..@.tls................................@..._RDATA..............................@..@.reloc..............................@..B........................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\platforms\is-1JAHE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1192960
Entropy (8bit):	6.826066957355405
Encrypted:	false
SSDEEP:	24576:QMsj6ZRHLayTgGFZ9vlYAuqstmBLdVZTCngVb:rJLaysGvi9dmBLdmngVb
MD5:	8D82F89BCA48D7DE90C17AC37F754F16
SHA1:	05E936237FEAA1EEA6A86A7D4E777749B269E3BA
SHA-256:	AC3A36B775AC8B9CD1E3C3A7AC9DD31E0CC0A12B84D5942E97D77DA20992D005
SHA-512:	6266C8E7E85E81A9CFBC113EB761F6F0EB846B2BF545DB42B2B1B7D461DBD7190CAE8D10749DF4BAD54B08C9DE39A880857B898FDF8CA3EDD5BAF5F85FDC07CF
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........V..V..V.._.9.B......^......B......]......R......R......p..%...R..%...C..V................W....U.W......W..RichV..........PE..L....y.\...........!.........b............... ............................................@.........................p...@....#..........H...............................T...............................@............ ...............................text............................... ..`.rdata..v4... ...6..................@..@.data....`...`...$...F..............@....qtmetad.............j..............@..P.rsrc...H............l..............@..@.reloc...............p..............@..B................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\platforms\qwindows.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1192960
Entropy (8bit):	6.826066957355405
Encrypted:	false
SSDEEP:	24576:QMsj6ZRHLayTgGFZ9vlYAuqstmBLdVZTCngVb:rJLaysGvi9dmBLdmngVb
MD5:	8D82F89BCA48D7DE90C17AC37F754F16
SHA1:	05E936237FEAA1EEA6A86A7D4E777749B269E3BA
SHA-256:	AC3A36B775AC8B9CD1E3C3A7AC9DD31E0CC0A12B84D5942E97D77DA20992D005
SHA-512:	6266C8E7E85E81A9CFBC113EB761F6F0EB846B2BF545DB42B2B1B7D461DBD7190CAE8D10749DF4BAD54B08C9DE39A880857B898FDF8CA3EDD5BAF5F85FDC07CF
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........V..V..V.._.9.B......^......B......]......R......R......p..%...R..%...C..V................W....U.W......W..RichV..........PE..L....y.\...........!.........b............... ............................................@.........................p...@....#..........H...............................T...............................@............ ...............................text............................... ..`.rdata..v4... ...6..................@..@.data....`...`...$...F..............@....qtmetad.............j..............@..P.rsrc...H............l..............@..@.reloc...............p..............@..B................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\printsupport\is-2SSH6.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	38912
Entropy (8bit):	6.2897463207771205
Encrypted:	false
SSDEEP:	768:YaFHmawc661E2DPnYu6k1sK5oW+yZWGBUuqPQ:fm6BEw6kfh+yZWGBUuc
MD5:	95191003D6457AFD76C36036B10C3EF6
SHA1:	340D04E5A126EE547AF56C342922B6C7FADED7D8
SHA-256:	215D900B48805560AD943E477EE7A1578922FC22B04CA9DFCD2FD78FB1E61049
SHA-512:	3B9F9A04CB699AAF63E8D77384F7D9C61FB48346A11E2CCE100E2757AE4929720CFC21C1B77088E0B4C36AD6186C2A50490300FF7B986E5BCAB5012B2F9E94D0
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......u$..1E..1E..1E..8=..5E...'..3E...'..3E...'..%E...'..:E...&..7E..B'..6E..1E...E...&..2E...&..0E...&e.0E...&..0E..Rich1E..................PE..L....x.\...........!.....P...H.......W.......`............................................@..........................r.......s..........`....................... ....h..T....................i.......h..@............`...............................text....O.......P.................. ..`.rdata...1...`...2...T..............@..@.data... ...........................@....qtmetad............................@..P.rsrc...`...........................@..@.reloc.. ...........................@..B........................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\printsupport\windowsprintersupport.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	38912
Entropy (8bit):	6.2897463207771205
Encrypted:	false
SSDEEP:	768:YaFHmawc661E2DPnYu6k1sK5oW+yZWGBUuqPQ:fm6BEw6kfh+yZWGBUuc
MD5:	95191003D6457AFD76C36036B10C3EF6
SHA1:	340D04E5A126EE547AF56C342922B6C7FADED7D8
SHA-256:	215D900B48805560AD943E477EE7A1578922FC22B04CA9DFCD2FD78FB1E61049
SHA-512:	3B9F9A04CB699AAF63E8D77384F7D9C61FB48346A11E2CCE100E2757AE4929720CFC21C1B77088E0B4C36AD6186C2A50490300FF7B986E5BCAB5012B2F9E94D0
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......u$..1E..1E..1E..8=..5E...'..3E...'..3E...'..%E...'..:E...&..7E..B'..6E..1E...E...&..2E...&..0E...&e.0E...&..0E..Rich1E..................PE..L....x.\...........!.....P...H.......W.......`............................................@..........................r.......s..........`....................... ....h..T....................i.......h..@............`...............................text....O.......P.................. ..`.rdata...1...`...2...T..............@..@.data... ...........................@....qtmetad............................@..P.rsrc...`...........................@..@.reloc.. ...........................@..B........................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\is-26ESB.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	67584
Entropy (8bit):	6.359453568389536
Encrypted:	false
SSDEEP:	768:yRLIHCPaHgK3g6zcEcbbRKnFi/5d0yU/qaf1MUs2SlwvrH+n1aF4Ud:eL4CmgWcbdwSiyU/Nir6rH+n1aF4W
MD5:	F08BC503386089FB1602BF239FA331C2
SHA1:	1B798FCBED5F51ABB7DDAD914F2C7261EB137E94
SHA-256:	F27779C32E5776B5EDE0F0A2EC1909C8ADCCECD797744CA9BC002BBC3CD16179
SHA-512:	67477B59CC3F18FD37F573A6423EA78DC6B2AF68FFCADC823AEC2A90AE01693552D30E834C40B7502AD78C750B35754ADF0B82F89E039859096F470F08DFAAFD
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........QC..0-..0-..0-..H...0-.)R,..0-.)R...0-.)R(..0-.)R)..0-..R,..0-.;S,..0-..0,..1-.;S(..0-.;S-..0-.;S..0-.;S/..0-.Rich.0-.................PE..L....x.\...........!.........j...............................................@............@.............................x...x........ ..H....................0..P.......T...............................@...............t............................text............................... ..`.rdata...K.......L..................@..@.data...............................@....qtmetadi...........................@..P.rsrc...H.... ......................@..@.reloc..P....0......................@..B........................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\is-NNQ02.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	892416
Entropy (8bit):	6.675740657847152
Encrypted:	false
SSDEEP:	24576:K0+z4YVWloEnYrBBxKUOFl7mKdQLgPZ5GW+ooE:9a4hkBB3CZcM
MD5:	6D73948212F53F422C11D7C43C69D288
SHA1:	63A94FF50570E7155256C7C666F00F3AB027852F
SHA-256:	BCB9AC22B0ADEE6D7457156743D33E9E7644D6AAF47490AAA0262F4DE176C62F
SHA-512:	E9666EE362D84CDC590322C91E6C2DE7D1C577C19A1BA858258DDF12EEF05F2FC935A0337DD1DB3DC53B1B7EB9E86531B5F56D27756E8D2AB77F2934EB3D45C3
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........,.p..p..p......p...q~.p...q~.p...s~.p...u~.p...t~..p...q~.p..q...p...t~.p...u~.p...p~.p......p...r~.p.Rich.p.........................PE..L....x.\...........!......................................................................@.............................t...T........p..@........................Y.. ...T...........................x...@............................................text...G........................... ..`.rdata...-..........................@..@.data...\=... ...6..................@....qtmetadf....`.......>..............@..P.rsrc...@....p.......@..............@..@.reloc...Y.......Z...D..............@..B........................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\is-V75EJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	59904
Entropy (8bit):	6.357081102410068
Encrypted:	false
SSDEEP:	768:LMkEeA6DA/vHH0i9k/qOPoeec3+Q0KHAgdUC/W/Cxup0F/0VEkE2/htra:ZEekXjU3ArQ0KPU8bQEkE2/h4
MD5:	186250C75FF90D7F14FF62C1B9B3C0B0
SHA1:	3A6A4C0709761DA0ECA9A3A1272A12C9E37BC196
SHA-256:	6175694926164F9A5DC55BD925F778089F337E08E624BBEF84BEEF1970030F7A
SHA-512:	6F92108B96F4515B8C57CD58854DE0893D41A8488C21DF743C9AA85FAC2BA1BEABA3D0A4E7D533B183BBE4F2BAFF259EFA21D0498E787D2FE48DDA631E236799
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........_BP.>,..>,..>,.k\-..>,..\-..>,.k\/..>,.k\)..>,.k\(..>,..F...>,.y]-..>,..>-..?,.y])..>,.y],..>,.y]...>,.y]...>,.Rich.>,.................PE..L....x.\...........!.....z...r...............................................0............@............................x...H...........H.................... ......0...T................... ...........@............................................text....x.......z.................. ..`.rdata...P.......R...~..............@..@.data...X...........................@....qtmetadi...........................@..P.rsrc...H...........................@..@.reloc....... ......................@..B........................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\is-VE6RN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	6.30077700743668
Encrypted:	false
SSDEEP:	768:159Bw2O1kdR5p9Jjtnn+iLnl1Y6WbOeQD7rvbmAO1AmCHSoi1TtJp:15vzO1kdt9JjrqCegiCHSH1TtJ
MD5:	D12ACF8E8500B9745FC46B159F37BC84
SHA1:	864D046E107D1B4238B1211EF6F40EB55ACFECD7
SHA-256:	AC72AE7E2FE132962BFCA5F4E4FB1E3C9211C4675F9E9A6868B45C04103740CE
SHA-512:	7FC7216F75FCB798975EFE3C92DEE96A9E81AE65D787464E62ACCDB58A872F1CF4129E9FF417D823B29766E862BBFBEAB6D66C2B92B83B2689B46FB1104131CA
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........vL...................P...............P.......P.......P...............B...............B.......B.......B.......B.......Rich............PE..L....x.\...........!.....h...`.......n....................................................@.........................`...x..............H...............................T...........................h...@............................................text....f.......h.................. ..`.rdata...D.......F...l..............@..@.data...............................@....qtmetadl...........................@..P.rsrc...H...........................@..@.reloc..............................@..B........................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\qsqlite.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	892416
Entropy (8bit):	6.675740657847152
Encrypted:	false
SSDEEP:	24576:K0+z4YVWloEnYrBBxKUOFl7mKdQLgPZ5GW+ooE:9a4hkBB3CZcM
MD5:	6D73948212F53F422C11D7C43C69D288
SHA1:	63A94FF50570E7155256C7C666F00F3AB027852F
SHA-256:	BCB9AC22B0ADEE6D7457156743D33E9E7644D6AAF47490AAA0262F4DE176C62F
SHA-512:	E9666EE362D84CDC590322C91E6C2DE7D1C577C19A1BA858258DDF12EEF05F2FC935A0337DD1DB3DC53B1B7EB9E86531B5F56D27756E8D2AB77F2934EB3D45C3
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........,.p..p..p......p...q~.p...q~.p...s~.p...u~.p...t~..p...q~.p..q...p...t~.p...u~.p...p~.p......p...r~.p.Rich.p.........................PE..L....x.\...........!......................................................................@.............................t...T........p..@........................Y.. ...T...........................x...@............................................text...G........................... ..`.rdata...-..........................@..@.data...\=... ...6..................@....qtmetadf....`.......>..............@..P.rsrc...@....p.......@..............@..@.reloc...Y.......Z...D..............@..B........................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\qsqlmysql.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	6.30077700743668
Encrypted:	false
SSDEEP:	768:159Bw2O1kdR5p9Jjtnn+iLnl1Y6WbOeQD7rvbmAO1AmCHSoi1TtJp:15vzO1kdt9JjrqCegiCHSH1TtJ
MD5:	D12ACF8E8500B9745FC46B159F37BC84
SHA1:	864D046E107D1B4238B1211EF6F40EB55ACFECD7
SHA-256:	AC72AE7E2FE132962BFCA5F4E4FB1E3C9211C4675F9E9A6868B45C04103740CE
SHA-512:	7FC7216F75FCB798975EFE3C92DEE96A9E81AE65D787464E62ACCDB58A872F1CF4129E9FF417D823B29766E862BBFBEAB6D66C2B92B83B2689B46FB1104131CA
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........vL...................P...............P.......P.......P...............B...............B.......B.......B.......B.......Rich............PE..L....x.\...........!.....h...`.......n....................................................@.........................`...x..............H...............................T...........................h...@............................................text....f.......h.................. ..`.rdata...D.......F...l..............@..@.data...............................@....qtmetadl...........................@..P.rsrc...H...........................@..@.reloc..............................@..B........................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\qsqlodbc.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	67584
Entropy (8bit):	6.359453568389536
Encrypted:	false
SSDEEP:	768:yRLIHCPaHgK3g6zcEcbbRKnFi/5d0yU/qaf1MUs2SlwvrH+n1aF4Ud:eL4CmgWcbdwSiyU/Nir6rH+n1aF4W
MD5:	F08BC503386089FB1602BF239FA331C2
SHA1:	1B798FCBED5F51ABB7DDAD914F2C7261EB137E94
SHA-256:	F27779C32E5776B5EDE0F0A2EC1909C8ADCCECD797744CA9BC002BBC3CD16179
SHA-512:	67477B59CC3F18FD37F573A6423EA78DC6B2AF68FFCADC823AEC2A90AE01693552D30E834C40B7502AD78C750B35754ADF0B82F89E039859096F470F08DFAAFD
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........QC..0-..0-..0-..H...0-.)R,..0-.)R...0-.)R(..0-.)R)..0-..R,..0-.;S,..0-..0,..1-.;S(..0-.;S-..0-.;S..0-.;S/..0-.Rich.0-.................PE..L....x.\...........!.........j...............................................@............@.............................x...x........ ..H....................0..P.......T...............................@...............t............................text............................... ..`.rdata...K.......L..................@..@.data...............................@....qtmetadi...........................@..P.rsrc...H.... ......................@..@.reloc..P....0......................@..B........................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\sqldrivers\qsqlpsql.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	59904
Entropy (8bit):	6.357081102410068
Encrypted:	false
SSDEEP:	768:LMkEeA6DA/vHH0i9k/qOPoeec3+Q0KHAgdUC/W/Cxup0F/0VEkE2/htra:ZEekXjU3ArQ0KPU8bQEkE2/h4
MD5:	186250C75FF90D7F14FF62C1B9B3C0B0
SHA1:	3A6A4C0709761DA0ECA9A3A1272A12C9E37BC196
SHA-256:	6175694926164F9A5DC55BD925F778089F337E08E624BBEF84BEEF1970030F7A
SHA-512:	6F92108B96F4515B8C57CD58854DE0893D41A8488C21DF743C9AA85FAC2BA1BEABA3D0A4E7D533B183BBE4F2BAFF259EFA21D0498E787D2FE48DDA631E236799
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........_BP.>,..>,..>,.k\-..>,..\-..>,.k\/..>,.k\)..>,.k\(..>,..F...>,.y]-..>,..>-..?,.y])..>,.y],..>,.y]...>,.y]...>,.Rich.>,.................PE..L....x.\...........!.....z...r...............................................0............@............................x...H...........H.................... ......0...T................... ...........@............................................text....x.......z.................. ..`.rdata...P.......R...~..............@..@.data...X...........................@....qtmetadi...........................@..P.rsrc...H...........................@..@.reloc....... ......................@..B........................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\styles\is-E76M3.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	122880
Entropy (8bit):	6.4581218180218185
Encrypted:	false
SSDEEP:	3072:Fd7RsCUUFPwHgJ2bS/bM85NQOjBn31xusDmJzho0llX6TYlEWUrcgb:BdFYOZ/6emDllX6TYlEWUrc+
MD5:	011F23A3F078E1FBFFA7C408AE13A0CC
SHA1:	BD2BA08C64BBC7C0F265491C846EDE300FC12AF7
SHA-256:	690655DBE1AFFF4CA1FD7F5170134AF6F57D4ECB328EA12B696D568E1D4B84FF
SHA-512:	BB1B96345250FFEE1C41FE31D49B8A97CB62DCCAA8EE387CFF7102F74E5DF514003CDB9DFC73239343A3E010745F8C901130AEAEE475B445FFFDA91DF7378297
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........5...Tf..Tf..Tf..,...Tf.76g..Tf.76e..Tf.76c..Tf.76b..Tf.6g..Tf.%7g..Tf..Tg.7Uf.%7c..Tf.%7f..Tf.%7...Tf.%7d..Tf.Rich.Tf.........PE..L....x.\...........!.....F...........L.......`...............................0............@.................................`...........X............................r..T....................s......(s..@............`..X............................text...wD.......F.................. ..`.rdata...q...`...r...J..............@..@.data...............................@....qtmetadm...........................@..P.rsrc...X...........................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\styles\qwindowsvistastyle.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	122880
Entropy (8bit):	6.4581218180218185
Encrypted:	false
SSDEEP:	3072:Fd7RsCUUFPwHgJ2bS/bM85NQOjBn31xusDmJzho0llX6TYlEWUrcgb:BdFYOZ/6emDllX6TYlEWUrc+
MD5:	011F23A3F078E1FBFFA7C408AE13A0CC
SHA1:	BD2BA08C64BBC7C0F265491C846EDE300FC12AF7
SHA-256:	690655DBE1AFFF4CA1FD7F5170134AF6F57D4ECB328EA12B696D568E1D4B84FF
SHA-512:	BB1B96345250FFEE1C41FE31D49B8A97CB62DCCAA8EE387CFF7102F74E5DF514003CDB9DFC73239343A3E010745F8C901130AEAEE475B445FFFDA91DF7378297
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........5...Tf..Tf..Tf..,...Tf.76g..Tf.76e..Tf.76c..Tf.76b..Tf.6g..Tf.%7g..Tf..Tg.7Uf.%7c..Tf.%7f..Tf.%7...Tf.%7d..Tf.Rich.Tf.........PE..L....x.\...........!.....F...........L.......`...............................0............@.................................`...........X............................r..T....................s......(s..@............`..X............................text...wD.......F.................. ..`.rdata...q...`...r...J..............@..@.data...............................@....qtmetadm...........................@..P.rsrc...X...........................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\is-37MSU.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	125753
Entropy (8bit):	4.802915682852063
Encrypted:	false
SSDEEP:	3072:CoXDuC1u/2lUBGjJirE5tsd/aev1GcfOdvhw:DucMGjH5t/m
MD5:	FED9C191096819DD208E0E3E2D051170
SHA1:	996BA0A7A6C3C55AE7232BD8791D72472A85CA84
SHA-256:	0144819728779D0861859F5451CD5588B2F2DEF611EDEB77B38655D62BDBDF86
SHA-512:	52978A693A1C54A7268BFF1682AF37811399396004B98916F8EAB8BD40EB335C2C6DD6C084687840A8BF20FB6F74B481BDC453D78E6D98BE47EFD0F70E2DDE3C
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B..$x...*.......+..>....@......A......B.......C.......D...3...E...Z...F......G......H.......I.......P.......Q...D...R.......S......T.......U.......V...1...W...X...X.......Y......]...Y...t..D-......K....;...3...;.......;.......;......;...V...M.......O.._ ......l....}.......m...........T..(5...(..+;......+;..%...+O......1......E@...k..F.......H4..?I..HY..@7..H...J...I....,..IC..HT..J...H{..J...H...LD..J"..L...Jv..PS..Q...R...D...Zr..i]..[`..7...\...nB.._...o...1...&....E..(........B......19......A.......A....$..AF...[..C....,..D....y..G.......v........g......G....9..A....E..........IH...%..4.......Kf..............................5..K....0...,...0.......0.......0..Of...0.......5..P....5..........E... D...C.. D..?'..+...Y`..<U......<U..\...<...]...H5...m..H5..?...L...^...VE......f.......f...8...g.......l...aP.......................6......d....D..f(...`..f...............?....`..h5...y..H....5..j........E...e.......e..@....... ......>......oZ......l...~...zF..^

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\is-50B2S.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	160484
Entropy (8bit):	4.83165152754532
Encrypted:	false
SSDEEP:	3072:QmOMZadV9n51xXeQvjOiIzz7/Vs9Db3ihuJNvMfWxBNlYzYbTrIkfwb03l24cNKu:IkWa5pg0MahBHDd
MD5:	FD8D6145CA463351F31D6550BCBD9263
SHA1:	089BB437C4A41A2B54595B97FC36064789C34CCB
SHA-256:	D8DFC2277FCF7086BDB1F22FA22EF33371F71CC2CA9C378542FF9C318197FCBE
SHA-512:	7BA51B7312D24E5C03D067872D6C9B6856A6766472B644C7F4446F618E36F534135393C42A276D9B6EA73BC1238498D7153BC9867EEDDB2DFC373EFA6A29FEC5
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B../...........+.......@.......A...0...B...{...C.......D.......E.......F.......G...<...H...`...I.......P...s...Q.......R.......S.......T......U...N...V.......W.......X.......Y.......]..+y...s.......t.......................;..+Q...;..,U...;.......;.......;..&....M..+....O.......O...U..........}..+............=.......m..+....t..........9c..(5..,...+;..;...+;..m7..+O......1...9...D@...T..E@......H4...v..HY..Y...H.......IC......J.......J.......J.......LD......L.......PS...}..QR..!...R...]...T.......U....{..X.......Zr...=..[`......\......]x...-.._......._......yg...M..1...<....E..>...............J........T.......(.......S...$..Z....[.......,...u...y.......y...[...............#...........9..Z....E..#&...........z..!'...................%..Mv...D..._....................32.....5......9....5.......0...h...0...E...0.......0.......0..#....5...Z...5...........G......_2.. D..,... D..W...+....W..<U......<U...B..<.......H5..,...H5..X{..L....)..VE.."...VE..6l..V......f...Q...f

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\is-62R84.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	23
Entropy (8bit):	4.229871195093384
Encrypted:	false
SSDEEP:	3:j2wZC4Xl9t:Cwpvt
MD5:	4AEF4415F2E976B2CC6F24B877804A57
SHA1:	2AA2D42C51F9CF024E3777F0DDE4270388FD22AE
SHA-256:	307CEF95DD5B36FF215055D427E1885B7FC3650C9224CF76D63056545996FF60
SHA-512:	C75F089A95107997B0A786E7C1191E48EC7A69AEFFF97DAF37783791D943C612B7C1B43BCC2CACDFD15E79382E0F314C88817C7DD320F8028AF3420452CE3A1C
Malicious:	false
Reputation:	low
Preview:	<.d....!..`.........

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\is-6FIMI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	183686
Entropy (8bit):	5.366964967925085
Encrypted:	false
SSDEEP:	1536:70PQXmZaVTvwcl0KPBypgu5feOQv6sLlxnrCcF423ZL9xyuXwd2X8LZu0ajeoEeh:I4h0N5figIt1saSyriFyp
MD5:	C48060E9ACBB7FA59D42D2088FEC13D4
SHA1:	D14410FE0B809D8A1D187D10D2B600341191944F
SHA-256:	74F615EDF95023E9D8C67D0E32E607FA80FF62B99AFCAC6D019A76E0D59D09E3
SHA-512:	FD3FA666B1BFB0CD79B774821E6FF7F49B91E028C3D321AE8D6F55CDFEDF069210153C44ED263436AD25BA3CE991859B056AC16F78A10E2C1FB693CF12E6A885
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B..3....*..u....+.......@...T...A...x...B.......C.......D...A...E.......F...^...G.......H.......I.......P.......Q.......R...(...S...L...T...p...U.......V.......W.......X...6...Y...Z...]..&....s.......t...<...............O...;..&q...;..'y...;..1J...;..=....M..&....O...............}..&............=...4...m..'....t..._......Wt..(5..D...+;..J...+;..\|...+O../...1...W...D@......E@......H4.....HY..g...H.......IC......J....D..J.......LD......L....M..PS......QR...%..R...l...T.......U....B..X....'..Zr......[`..._..\.......]x...Y.._....}..yg..-,..1...L....E..N....7...3....../K......Zv......................j...$..h....[.......,......y.................w............9..iU...E..z............z...............%..]....D.......................M......QN.....X....5...%...0......0..0....0...<...0..zY...5......5..Y...............n0.. D..'... D..f...+.......<U...K..<U......<.......H5..(...H5..g7..L.......VE...F..VE..R...V...,...f...a...f...1s..f....+..g...N"..l.......r....n.......V...

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\is-7N2M6.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	131255
Entropy (8bit):	5.830347632783468
Encrypted:	false
SSDEEP:	1536:89B4TqHsU1xw5tBJea7Nrj6Rgqrd2MfjzqUTX+f0MwrcZ1hc2yp:89BaXUOvJea7Nrj+gqxtPq0ORhPyp
MD5:	D3EB25E0FFF5719E8840612727896B1D
SHA1:	58650C79B3776B87A77D816650E962DE0A96D18A
SHA-256:	487755EB0841D47748CCBC2AB8D255CA12277DD0FB687D6DDC730982F8DA77BA
SHA-512:	8F35625A7BD8922F5151A9AB9C089E4FD44153CE442E0E10458262DBF97CD2D0BEAEACA7D5C08EBA5078371ACC994A0E9B9C07E4CF2BEAFFA16B0747BC91DC9A
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B..0....*.......+..B....@...&...A...J...B......C......D.......E.......F...0...G...T...H...x...I......P......Q......R.......S.......T...B...U...f...V.......W.......X.......Y...,...].."....]..#U...s.......t..F..............N....;.."....;..$7...;.......;...V...;......;.......M.."....M..#....O.......O.._.......m....}..#....}..#...........=.......m..#-...m..#....t...I..........(5......+;../...+;..W...+O...w..1....#..D@...n..E@......H4..CG..HY..G...H...M...IC..K...J...K:..J.......J...J...LD..L...L...L...PS..S...QR...f..R...K...T..._...U...`...X...d1..Zr..j8..[`..<?..\...n...]x....._......._...o...yg......1...0....E..27.............;.......D.......D.......FT...$..H....[..F....,..GL...y.......y..J.......{...............J....9..H....E...u......K....z..................My...%..>>...D..N ......NF...........................M...5..N....0.......0.......0......0..Q....0.......5..R....5..........S.......M... D..$... D..F...+...Y...<U...0..<U..\...<...]e..H5..$...H5..G5..L

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\is-8RTM5.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	158231
Entropy (8bit):	5.401703630333425
Encrypted:	false
SSDEEP:	1536:VFoQa3dMUDPTzdAhpQgO5poZHvJllEnhmdK4I77/dnPJX/imfb1jhvv3BxT8upfk:kzDPTzaw5pCvJ8hVPdlvj3p8
MD5:	9A7A0B316CF7117BF3AA928C762C33B6
SHA1:	4B4C06191E61FB2F94FE9256F29696EB1AE694C7
SHA-256:	FD4A436733637CB4759CDB024F0C7D891E8075BE46F79796077180A9FF488D27
SHA-512:	2EC1D3047BC312B14AB55535D3704043CD4697A89B5CEC233FC4F32407007236232F0872B5E162E24A9A4BCCD0B51F4EC6BC4DEB6BCF13BD76C219637D866F37
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B../.......$...+...K...@.......A.......B...&...C...J...D.......E...g...F.......G.......H.......I...-...P.......Q...@...R.......S.......T.......U.......V...Q...W...u...X.......Y.......]..y...s...b...t...~...............M...;..Q...;..+U...;.......;...W...;..!....M......O.......O...`...........}..........$...=.......m......t..........3...(5..&...+;..:...+;..k...+O... ..1...4...D@......E@...d..H4......HY..W...H.......IC...5..J....\..J.......J.......LD......L....Y..PS......QR.. ...R...\...T.......U.......X....y..Zr......[`..~...\.......]x......_......._.......yg...B..1...;....E..=w.......L......I............................$..X....[.......,.......y.......y...........,...................9..Y....E...%.......#...z.. ........P...........%..LB...D.......................-M...../......46...5...%...0...O...0...6...0.......0...J...0.......5.......5..................^... D..+... D..V...+.......<U......<U...e..<.......H5..+...H5..V...L....2..VE..!...VE..0...V.......f...PE..f

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\is-9IQNA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	184024
Entropy (8bit):	4.689590376109741
Encrypted:	false
SSDEEP:	1536:ys9nnOd2szfzBzuJe3pEcLOJ/LZXEIphbzSwnVp5ysZ/ebdOA:zBOdJzfzB8eZpOVXEIp9SyPzZmbdOA
MD5:	D1D7AB4DA8BC6A6097AF2DB42C9BD14E
SHA1:	B2465FC39E774119E4A83D7A4C62516509BEC1C0
SHA-256:	44C6B11B0F7BF6B6423D03089BCB603DA37CB9B46BA7B10B7DC07F75FDF9708F
SHA-512:	402C788C78F7E9A7FD7DFAB3BF0DEEE9631FCE88590B36173CCEFA59112F4B3191718736773F535AB843DBA31369C6D2883F29DBE0F7F2DE37A8140DEC6CC275
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B..3H.....qr...+......@.......A.......B...I...C...m...D.......E.......F.......G.......H...,...I...P...P...I...Q...m...R.......S.......T.......U...$...V...~...W.......X.......Y.......]..+c...s...E...t...@...............e...;..+1...;..,K...;..+Z...;..8K...M..+....O.......O..."...........}..+........A...=.......m..+....t..........P^..(5..>a..+;..<...+;..ou..+O..)G..1...P...D@..."..E@......H4...w..HY..[...H.......IC...%..J....L..J.......J.......LD......L....[..PS.....QR..!(..R...`...T.......U....F..X.......Zr......[`......\....3..]x......_......._.......yg..(...1...=u...E..@(...7... ......)s......M...............a.......x...$..\#...[.......,......y...w...y.................r............9..\....E..z............z.. ....................%..P....D.................k.....F......J0.....P....5...=...0.......0......0...0...0..zd...5...}...5..U........h......a:.. D..,... D..Z...+....h..<U......<U......<.......H5..,...H5..Z...H5......L.......VE.."s..VE..K...V...&...f...U...f

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\is-A34HC.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	174098
Entropy (8bit):	4.764849595574624
Encrypted:	false
SSDEEP:	3072:/2NZ5yZ9jFTkmq/gnBiW/+PcXrqH2olYz0DGdaS4KSLZ0kTTgTUR0toT:/mhH2Pc+CT
MD5:	D541CC7F5EA2248E72D2E86CE6CBFA45
SHA1:	E05158572255FD30F5F118453EE6E6551D4DB6CA
SHA-256:	423E88732439997DEB776F45F1B808F446F8023AB25FA925E949EC27724AB7E0
SHA-512:	24FB6998DCB66327D17100B0E364F6370A120190E462B9F574DC5C935F0CB12778B1B9FB5D2CE5A432BCA606D16B42C8C135211AD8926143591830DEF89E77DA
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B..38.....M....+.......@...-...A...Q...B.......C.......D.......E.......F...=...G...a...H.......I.......P.......Q.......R.......S...!...T...E...U...i...V.......W.......X.......Y...1...]..)c...s.......t.................2...;..);...;..K...;.......;..'&...M..)....O.......O...w...........}..)............=.......m..)....t.........=...(5..-...+;..8...+;..h...+O......1...>U..D@...u..E@......H4...J..HY..U&..H.......IC...(..J....O..J.......J.......LD......L....6..PS...G..QR......R...Z%..T...."..U......X...."..Zr......[`...\..\.......]x...".._....-.._.......yg......1...9....E..<l...7..et..............H............................$..V5...[...<...,.......y...c...y.................O"...........9..V....E..Um...........z...;...................%..Kp...D......................5......8M.....>....5.......0.......0.......0.......0..U....5...<...5..1...............[b.. D..... D..T...+....E..<U......<U......<....X..H5..*...H5..T...H5......L....G..VE.. ...VE..9...V....O..f...O...f

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\is-BIKC0.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	161129
Entropy (8bit):	4.6790639686297455
Encrypted:	false
SSDEEP:	1536:wL5ef7fdO4BKOb0t55pqCOIUP/PFIM7gxGQ9sRrFM6QJ4m8ihkM:wdeDFO4BKOb0t55pnOrvCqg9mRK4IkM
MD5:	B183FE971035ADA2E95401263C79AA3B
SHA1:	9FA419CFA95360227A86FCC4D2ED5D946A019CB4
SHA-256:	54BDD9856E6007B443F553F03B5B83BCA9F08595BF18D3293663517F04E89333
SHA-512:	F0B4C7100497CFD09684A57485EF833CBE1A6DD869506AEA64724177E7AD9230957E89DFE356DFA0FFF8DCDD0DAACC53C3897BD27F93A06F390DF372A966407A
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B../....*.......+...i...@.......A.......B...L...C...p...D.......E.......F.......G.......H...3...I...W...P...P...Q...t...R.......S.......T.......U...+...V.......W.......X.......Y.......]..+....s.......t..................=...;..+[...;..,g...;.......;.......;..!!...M..+....O...D...O...............}..+........(...=.......m..,....t..........4...(5..'m..+;..<...+;..o5..+O......1...4...D@...%..E@......H4...)..HY..Z...H.......IC...+..J....R..J....j..J.......LD......L....E..PS...j..QR..!...R..._...T.......U.......X.......Zr......[`...0..\.......]x......_......._.......yg..."..1...=....E..?o..............Kf.......G...............(...$..[....[.......,...L...y...9...y...........Y.......Y...........9..\=...E..$T...........z.. k...................%..N....D..................,......_.....0......5....5.......0.......0.......0... ...0.......0..$....5...a...5...).......@......a... D..,... D..Y...+.......<U..._..<U......<....U..H5..-...H5..Z...L.......VE.."c..VE..1...V....7..f...SQ..f

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\is-DV1JN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	162972
Entropy (8bit):	4.841793231271997
Encrypted:	false
SSDEEP:	1536:1Xpestp/YIFtDT8FIWYbIJmPYuIpnmxAk6mwyJNqSm9+P:1xpTDT8FIWfJmdCmxApmbnqSm9+P
MD5:	55A6BB647E176CD4CEB5096C76B87ABF
SHA1:	2D43EAF76B5BAF5078066D34E2A71954F2821EF4
SHA-256:	99A5A122DBF2E522F99F2BF83201A144E9E340D7B3DD8E16DD785A8CC79FBD69
SHA-512:	C1F4142ECE48771264922D228A8A8A21EAA726213E9A0564520B534F88BC3DC42062D20675D666F2105BE70C4277901BB900C1A38A1F01ED7912D3363CC3CF1A
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B..0......"....+.......@...F...A...j...B......C.......D...3...E.......F...P...G...t...H.......I.......P.......Q.......R.......S...>...T...b...U.......V.......W.......X...(...Y...L...]......s.......t...r.......o.......+...;......;..+....;..."...;... ...M......O...6...O...........a...}..+...........=.......m..+G...t...G......,...(5......+;..:...+;..k...+O......1...-[..D@.....E@......H4...U..HY..WU..H.......IC......J....6..J.......J.......LD......L....%..PS......QR.. ...R...[...T....1..U.......X......Zr......[`......\.......]x...A.._......._....}..yg......1...;W...E..=........%......H....................$..Xp...[.......,.......y...i...y...........}......$R...........9..X....E..+)...........z.. E...................%..K....D...p....................&......(......-....5.......0.......0...e...0.......0..+....5...]...5...........f......]-.. D..,%.. D..V?..+....V..<U......<U......<....-..H5..,M..H5..V...L....Z..VE..!...VE..)...V.......f...P...f....K..f.......g...&...l

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\is-E7IP0.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	129904
Entropy (8bit):	5.802847005244529
Encrypted:	false
SSDEEP:	1536:O8YYSCjKBJ26c1Z7f25pVmuLXpxfqt7FEUWNrfQje9kWI23pKXvx:ZYuKBJ01Z7u5pQuLbESUWNzAAI23pKfx
MD5:	1C0AB06B3388E79A2206CBFD28E374A2
SHA1:	FB94C71EE606C6CF5181840B4A6122EEFD93770B
SHA-256:	F0EE03C9936B459CC9BDF184DF9B7EFAD98D40AB7B99E89166A42E019A0EC0EA
SHA-512:	1E90991D22B0C34E7947EDBC5864F662AD01B2DA7888FBE3A6E814607EA5ABB6FC0B34A7EE0ACCEDE471D7442755F00FE99C4A8B029244BF034189CD00D74D07
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B../....*...'...+..=....@.......A.......B...?...C...c...D......E......F.......G.......H..."...I...F...P.......Q...'...R...r...S......T......U.......V...8...W...\...X......Y......].."k...s...Q...t..A...............I....;.."C...;..#A...;.......;.......;.......M.."....O...B...O..[?......h....}.."........m...=.......m.."....t...........M..(5......+;......+;..WU..+O......1.......D@......E@...K..H4..>=..HY..F...H...Hr..IC..E...J...F...J.......J...E...LD..Gz..L...G...PS..O...QR......R...K!..T...Z...U...[e..X..._f..Zr..e...[`..7...\...i...]x...'.._......._...j...yg..~+..1.../....E..1?.......#......:.......?.......?n......A....$..G....[..Ap...,..B....y.......y..Ew......\|...............E....9..H....E..........F....z...]..............HL...%..=R...D..H.......I!......[......J......M..........5..It...0...3...0.......0...C...0..M....0...a...5..N....5..........N.......L6.. D..#... D..E...+...U%..<U......<U..X ..<...X...H5..#...H5..FK..L...[...VE......VE......V......f...@...f

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\is-ECGPF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	165327
Entropy (8bit):	5.332110019894515
Encrypted:	false
SSDEEP:	1536:aULiyUxPoT6qx+J7FJlaaMJnxjqxq+0Uiff0mbVeb7wiEwYuYqDKBkKHMXHCIMll:aULpIVFnpwUiEujw27ncUQUz
MD5:	6BCB7BF161BBE019CFAEEE7D331E3E79
SHA1:	03FA92B55FFBD74DAC958934C7275D32BA0ED030
SHA-256:	47F5749032C655F8399563728B8E5591B796AABABB631D0BCA9F18D74F4ED6F0
SHA-512:	14BCE2EE6F22D725BCB4D06A50B511E801BC7172BDDF304B63B6FDB531DFC9C272F1E2AADA0C3A70E903F3992BAD9F0E1E5CC1B375B8EE96E307263DFB33F5DF
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B../......,....+..."...@...]...A.......B.......C.......D...P...E...!...F.......G.......H.......I.......P.......Q.......R...A...S...e...T.......U.......V.......W...1...X...U...Y...y...]..,....s...,...t...................P...;..+....;..-E...;..!....;..+....M..,Y...O...,...O..............}..,............=...Q...m..,....t...\|......>...(5..1...+;..<...+;..o...+O...r..1...>...D@......E@......H4......HY..[...H.......IC......J....E..J....X..J.......LD......L....L..PS......QR.."...R...`...T....X..U.......X.......Zr...q..[`...`..\.......]x......_......._....T..yg.....1...=....E..?...............L(.......(...............'...$..\....[.......,...I...y...!...y...................S...........9..]%...E..5p...........z..!q...................%..O....D..................D.....8......:......?....5...&...0.......0.. ....0...c...0..5....5.......5..................b:.. D..-... D..Z...+.......<U......<U...0..<.......H5..-...H5..[...L.......VE..#a..VE..;...V.......f...T...f...!...f.......g

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\is-FA6OV.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	160010
Entropy (8bit):	5.356016965796742
Encrypted:	false
SSDEEP:	1536:hGlAMfkX1M0RdaCkR8lfv8vtc8EFrVYA2I4AJZWEWgHg1C8COvzLKHC6Jp9NV0V7:hUr0RACkIwDEpV1Lgf16btw3Bb
MD5:	E7EC8B6E07D62634777DBCB47BD611D3
SHA1:	67B0381A54F966F59D6AB89FFBB4AAE532A5F191
SHA-256:	820EB8876A61022B371D557EEBD83A99A3872C6E93ACBF3E98026DFCB3CE8EFB
SHA-512:	D7F13F626854D4186122D0739392207A0A774CF750AE99131281B990C625624FDF5541BC3BDCF3FD44318D55A9287146BB74193A14EF4BDE3F8D2F477C7778B1
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B..2....*.......+.......@.......A.......B..._...C......D.......E......F.......G... ...H...D...I...h...P...C...Q...g...R......S.......T.......U.......V...x...W......X.......Y.......]..'=...s......t...........]...........;..'....;..(....;.......;.......M..'e...O.......O...9...........}..'........C...=......m..'....t..........!o..(5...Z..+;..5u..+;..c...+O......1...!...D@...8..E@.....H4...,..HY..QI..H.......IC......J....1..J.......J.......LD......L.......PS......QR...R..R...V2..T.......U....]..X.......Zr.....[`......\....t..]x......_......._.......yg......1...6....E..8V..............C............................$..RN...[...0...,.......y.......y...................K...........9..R....E.."............z.......................%..F;...D...[..................................!....5.......0...I...0.......0...5...0..#....5.......5...p..............W}.. D..(... D..P=..+.......<U......<U......<.......H5..(...H5..P...L.......VE......VE......V....B..f...JJ..f.......f....@..g

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\is-GNRBS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	165160
Entropy (8bit):	4.679808632649905
Encrypted:	false
SSDEEP:	1536:yVwzuvb+Ta64KQd84arHX5pxiVhA8QlOD/BnFNa8NsvsfFsfcoZtIx6F:yVwSTG4KqVaLX5pEVK7OJFczstgRtIx8
MD5:	7479D957C5309AEDD4F58E4556590F69
SHA1:	2A1787E1F387B62421F8B0233F0119F7F0A9134A
SHA-256:	F6A0734903BBFCD9FD447FBCFD7AD6B9BBEA50D038DC9388038C9ECFC13752A4
SHA-512:	2C208FA4E3C15E58A4797634B6C6653BEAF45A3BA1AF66B6C3BD8D9ECDB7A5CE03209FD2AE6818603695A5F7DD8F0DF87D687C10713E2EB18FD2C8401FED06C3
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B../......,...+...y...@.......A.......B.......C.......D...v...E...=...F.......G.......H.......I.......P.......Q... ...R...k...S.......T.......U.......V...1...W...U...X...y...Y.......]..+....s.......t...................c...;..+....;..,....;...%...;..#....;..-....M..+....O.......O...............}..,............=...]...m..,/...t..........A...(5..3...+;..<...+;..o...+O..!b..1...Ap..D@......E@...D..H4...-..HY..[F..H.......IC...%..J....L..J.......J.......LD......L....O..PS......QR..!...R...`K..T.......U....&..X.......Zr.....[`...h..\......]x...\|.._....Y.._....A..yg......1...=....E..?a......!.......K........G...............R...$..\Q...[.......,...z...y.......y..................+............9..\....E..2............z.. ....................%..ON...D........................:......=B.....A....5...7...0.......0......0.."....0...,...0..3....5...}...5...Y..............a... D..-!.. D..Z6..+....0..<U...h..<U......<.......H5..-M..H5..Z...L.......VE.."...VE..>...V.......f...S...f

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\is-HC0IE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	113849
Entropy (8bit):	5.830779291359727
Encrypted:	false
SSDEEP:	1536:DSdeMLPGI0gOs6aROcFGJl7IJoZprUKvZWIWIrPXXQIP8pa:qHP10gOs6dcFEsJoZqOWIWIrPFP8pa
MD5:	4DBE0E1B39500C503F0E4566AA3E222C
SHA1:	578D102CBFBAE8605621315ECA362F57EA825152
SHA-256:	95EB29B7DEDBF5EA84E034758470FD56C7D2FA83A11D600FC249A44BE5430D73
SHA-512:	2ADAA2DAB95D98F8EDCC1037B82424C4F2181B9C20291ACC94AE93D99102AB370E85A335616E0C25974FA1ADB51DF587F86279BECBCACE7160F22540A2BD00E5
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B..-p.....tJ...+...+...@.......A.......B...j...C......D......E.......F.......G.......H...B...I...f...P.......Q...>...R......S......T.......U.......V.......W...=...X...a...Y......]..!....s.......t...L...............P...;..!z...;.."\|...;......;......M..!....O.......O..............}..!............=.......m.." ...t...(.......e..(5......+;..;...+;.._...+O......1.......D@...C..E@...b..H4......HY..Pm..H....:..IC......J....D..J.......J.......LD...B..L.......PS...C..QR...T..R...T...T.......U.......X...!...Zr..'g..[`..._..\...+...]x......_......._...,...1...<....E..>....7..................Fo.......#...................$..QR...[.......,.......y.......y..................u............9..Q....E..zc...........z...........<...........%..H....D...............................'..........5...*...0...?...0.......0.......0..z....5...h...5..c3..............U... D.."... D..O...+.......<U......<U......<.......H5..#...H5..O...L.......VE...M..VE......f...L...f.......f.......g.......l

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\is-IRMHP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	189570
Entropy (8bit):	4.629344747922875
Encrypted:	false
SSDEEP:	1536:diaI3C87jhakhR0VGkw7ys7CskQH6y4e6IFB4xyMuhvDnJGhFaCo527arBbm07LZ:d2yGjh17yiqxTXhvQoejJd8FUjVgk
MD5:	FD5046C815BC3E89FB327044A29236E4
SHA1:	970F304BB911536E0BD8292BD72EEB575F7DFE22
SHA-256:	D1C0717546502AB3D243487AEFB22A073A4BFF8413AD51F7A6235FC722E76C82
SHA-512:	6EF0F5E09B04B600A3C25EAA97A8CF91F5783C45414AF4993AD82CB32F2EA3C3C827735629ABBB9BF427154BDAD490B04C263F866838FDF5AFE56947161208DC
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B..2....*...u...+......@.......A...B...B.......C.......D.. ....E.. ....F..!&...G..!J...H..!n...I..!....P..#m...Q..#....R..#....S..$....T..$$...U..$H...V..$....W..$....X..$....Y..%....]../....s...'...t...................F...;.......;../....;..=V...;..G....M../G...O.......O...k......$....}../o.......i...=.......m../....t..........[...(5..M...+;..@...+;..x...+O..:...1...\7..D@...f..E@..#...H4...p..HY..be..H.......IC......J.......J....R..J.......LD......L.......PS......QR..#l..R...g...T.......U.......X....\..Zr......[`......\...&...]x......_....C.._...'t..yg..?...1...BM...E..D.......;.......R'.......t.......@.......?...$..c....[......,...i...y.......y...Y.......f.......+...........9..c....E...............z.."....................%..U....D..................G.....UB.....W......\]...5.......0.......0..<....0...;...0.......5.......5..ij..............h... D..0... D..aC..+....K..<U.....<U...~..<.......H5..0...H5..a...L....1..VE..$...VE..X...V...8\|..f...Z...f...=...f....j..g

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\is-KEM5I.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	166157
Entropy (8bit):	4.685082113750114
Encrypted:	false
SSDEEP:	1536:zLZ1w8McowCppcPwL5pYFw+G00QsbLckCiWxvq+sjs06oFm:z91wxcowspc4L5pUw+cz39CiQ7tloFm
MD5:	37F2AC5CF8EA04844351AE0BCF8420FB
SHA1:	DF28A556F02E1DA470DF5DFAA5E47E36A7BED48E
SHA-256:	7D40EAA90D9094CE548A41482B496EC494396A82361D4F3D031756118ED042D2
SHA-512:	DEBDB2AB4CE27F62888AD48BD2F2468E576BF68B19C4C08940049AD32A21FEE33B2BBC8E3B9C31D3FBFFB034AA802A5937008A26DA703A3F316620B726B6071F
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B../....*..-....+.......@.......A.......B.......C...?...D.......E...\...F.......G.......H.......I..."...P.......Q...5...R.......S.......T.......U.......V...F...W...j...X.......Y.......]..+....s...=...t.......................;..+....;..,....;.......;..$b...;.......M..,....O.......O...5...........}..,3...........=.......m..,]...t..........A...(5..5j..+;..<T..+;..o...+O.."+..1...B\..D@......E@...Y..H4...8..HY..[{..H.......IC......J.......J.......J.......LD...\|..L.......PS...?..QR..!...R...`j..T.......U....[..X.......Zr.....[`...)..\......]x......_....7.._.......yg...i..1...=Q...E..?@......"Y......K............................$..\....[...^...,...'...y.......y...+.......o....../c.......Y...9..\....E..6(...........z..!................j...%..OC...D...+.......[......a.....;......>......B....5.......0.......0...m...0..#....0.......0..6....5.......5..................a... D..-Y.. D..Ze..+....]..<U...;..<U......<.......H5..-...H5..Z...L.......VE.."...VE..?...V.......f...S...f

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\is-NRBKP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	174691
Entropy (8bit):	4.871810448526154
Encrypted:	false
SSDEEP:	3072:pWjuhX0CVRaakGjW9E8SSOQfX/JlwVOMxrboRPqWxXfQvO7zjBf:piFGj1QfXr8Gd
MD5:	987E045E06AEBA29A8E05A074E6BDB91
SHA1:	63D1280382E5DA5EEC4FD6F94608FEC8BA5CE7B4
SHA-256:	86E174EFF79F096D81146860DD5CA9E946C643A3464C7DA8919C972747B8DF09
SHA-512:	ECC03B78668A2C791EF74071B719204C8FAD6DD75E4D9B7C1D57B9A45DB5A5603A657BC71469AC8D11C464C0CF153234610CB5455924347A98FCBA79CE31565B
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B..3p.....F....+.......@..!....@..Ef...A..!....A..E....B.."1...B..E....C.."U...C..E....D.."....D..F....E..#p...E..F)...F..#....F..FP...G..#....G..Fw...H..$....H..F....I..$6...I..F....P..&%...P..Gr...Q..&I...Q..G....R..&....R..G....S..&....S..H....T..&....T..H8...U..'....U..H_...V..'Z...V..H....W..'~...W..H....X..'....X..H....Y..'....Y..H....]..,....]..,....s.......t...9..................;.......;..+....;..1B...;......;..?x...;..N....;..iY...;..s3...M..,B...M..,....O.......O...w...O..rr...........}..,j...}..-....... 5...=.. ....m..,....m..-8...t.. .......ay..(5..TT..+;...A..+;..B...+;..u...+O......+O..=a..1...a...D@.."...E@..&m..E@..G...F...J...H4...=..HY..`...H.......I...J...IC......J....-..J.......J.......LD......L....(..PS.....QR.."S..R...e...T.... ..U......X.......Zr...g..[`......\......]x......_......._......._...v...yg......1...C....E..E...............=.......Q........................s...$..a....[.......,.......y.......y...y..............G............9..b....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\is-QIKJP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	179934
Entropy (8bit):	4.720905954554612
Encrypted:	false
SSDEEP:	3072:hvdTgO2Yl97ZWnbgTLt/Tf9IlqAeiy5uWkYGM0wNCdRjSK2YUlUs:hvdkA9vh5uWkY0MK2YXs
MD5:	FF556242E6061DAC90683223351ABD61
SHA1:	D0AD225D3FF0E98619821B68692B996A6F68D580
SHA-256:	D04666A656680BE2756B58CE45DB175B846C5928EB6AF62DBA841444DD10E03A
SHA-512:	4F7D5C242EC381FDA7FB9142D9333673583215E0578D1BF1D661FB5C2CC6C5F626981E59AAF8AC8EC76EE4096BC3F05F91F40A0A9E1250610A79C38F0662BCBF
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B..38.....ct...+......@.......A.......B.......C...@...D.......E...]...F.......G.......H.......I...#...P.......Q...6...R.......S.......T.......U.......V...G...W...k...X.......Y.......]......s...T...t.......................;......;..+....;..&....;..3....M..+!...O.......O...e...........}..+K...........=.......m..+w...t..........J...(5..9...+;..:y..+;..mW..+O..$...1...KY..D@......E@...Z..H4...l..HY..X&..H.......IC......J.......J...."..J......LD.....L.......PS...'..QR.. L..R...]...T.......U.......X.......Zr......[`......\.......]x......_....k.._....>..yg.. /..1...;....E..>....7..{(......%.......J........T.......&.......U...$..Y[...[......,...s...y.......y...a.......}......d...........9..Y....E..k'...........z...........V..........%..M....D...Q.......{......d.....A......E......K....5.......0.......0..&J...0.......0..k....5......5..I9.............._:.. D..,O.. D..W...+....9..<U...G..<U...*..<.......H5..,y..H5..W...H5......L....5..VE..!u..VE..E...V..."{..f...R=..f

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\is-RRRF3.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	138680
Entropy (8bit):	5.486983968009447
Encrypted:	false
SSDEEP:	3072:gSue8FDn3iJsqBejd/zNDSLzdetY2ZISfCPS:gSuem7w7IjdIzUtYAISfCPS
MD5:	6A8A53D365F564BE4804B3F1167186AD
SHA1:	ED876E836243FB6BA790DE8F709F6BFAD45D3936
SHA-256:	19A8F435880328F9CCDA4FECDFC20BAC7AFAE589C07D0E2B5563366E908AC8E3
SHA-512:	1C6F03718D0AD94BE05A57EE2C12882F4233D025FAC2AC603649E3DBD6DA0DBC32FC2312F426F31046ACFE98355895971D55B389D09E324344DD3733EBE393CD
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B../....*......+..Sw...@......A......B.......C.......D...X...E.......F.../...G...O...H...o...I......P.......Q.......R...I...S...i...T......U......V.......W.......X.../...Y...O...]..$....s......t..X:.......4......`Y...;..$....;..%....;.......;...5...;.......M..$....O...6...O..s............}..%-...........=...m...m..%k...t..........^..(5......+;..2...+;..^...+O...N..1.......D@......E@...(..H4..T...HY..L...H..._...IC..\...J...\...J.......J...\j..LD..^...L...^o..PS..fl..QR......R...Q...T...su..U...s...X...x3..Zr..~...[`..L\..\.......]x....._......._....o..yg...(..1...3....E..5C.......z......?V......U.......U.......W....$..M....[..W....,..X....y.......y..\........a..............\@...9..NO...E...?......]s...z...G.......(......^....%..B^...D.._......._.................... ..........5..`/...0.......0...L...0......0..d(...0......5..ek...5..........fB......R... D..&O.. D..K...+...l...<U......<U..p)..<...p...H5..&w..H5..La..L...s...VE......VE......V......f...FM..f

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\is-SAHLD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	153598
Entropy (8bit):	4.843660409697438
Encrypted:	false
SSDEEP:	3072:H5pmbKIhooMbGe91MrjOhmGzP6LJbWz5XIxELpU6:HObeqrjPGzeJyJLy6
MD5:	788862615B8FB13B52E4A80A8C54B3BF
SHA1:	802BD10E82BDEEC9596F31464C73DF371A5894CA
SHA-256:	257D1201DA42C19C34EA0A5F0DFBBA3D438FC273A7D5B5B97CD13196E963ED28
SHA-512:	EA2D877689EC809BCB27E12731DAA51236264DA10775E528FE259F35EEF8E7D84C542C25153E39997A1C7FAA8D849393E3ECF48ED67890A8D5FD4D2DB7CDB1CF
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B..........B...+..y....@.......A...=...B......C......D.......E.......F...#...G...G...H...k...I.......P...~...Q......R.......S.......T...5...U...Y...V......W.......X.......Y.......]..%....s.......t...8.......n.......A...;..&....;.......;...!...;...A...;../....M..%....O.......O...............}..%...........=.......m..&....t...(......(g..(5...+..+;..4...+;..d...+O......1...(...D@...a..E@......H4..z...HY..Q...H.......IC......J....6..J.......J.......LD......L....9..PS......QR......R...U...T....S..U.......X...._..Zr......[`..r...\.......]x....._......._....{..yg......1...5v...E..7........(......B.......\|.......\|W......~r...$..R....[..~....,.......y...l...y...............................9..S....E...g...........z...z...................%..F....D........................"Z.....$......)....5.......0...\...0.......0...r...0.......0.......5...a...5..........J......V... D..&... D..P...+.......<U......<U......<.......H5..'"..H5..P...L....~..VE...R..VE..%...V.......f...J]..f

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\is-TCUEK.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	200848
Entropy (8bit):	4.642693496322357
Encrypted:	false
SSDEEP:	3072:VqsSAhYTB8oVXYWpSNXgQ+vaD+p4N8DDTEKagwGX2lh1FRh6tfedPXPYXCZPbUUf:ak8bjF92p
MD5:	BE8AAC1BDC1DD2212165F64E0C755F17
SHA1:	768D655D7E0DA751DE36B554DF538FAD774F50DA
SHA-256:	D4231CF8839E7BF238369A11F44B76FB6A95718D06DB12ABE51F219961DA3DC3
SHA-512:	783624490F4661A0A7208E15CCC4C2BEC66215607CAF060BD055E7A4918BA62E72481F5443D2AB48F89C307D6CA059A5F760C062769DF12E638C0ACFB081D237
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B..4....*...b...+.......@..;....A..<....B..<a...C..<....D..<....E..=....F..=....G..> ...H..>D...I..>h...P..@W...Q..@{...R..@....S..@....T..A....U..A2...V..A....W..A....X..A....Y..A....]..0....s..3i...t...(......4'.......O...;..0d...;..1r...;..Z....;..i....M..0....O...8...O..4:......E....}..0.......:Y...=..:....m..1....t..:........4..(5..p...+;..X...+;......+O..X...1.......D@..<:..E@..@...H4......HY..x{..H.......IC......J....6..J....\..J.......LD......L....7..PS..%...QR.."X..R...}...T...3...U...4b..X...9...Zr..A"..[`......\...F...]x..8..._......._...H...yg..a~..1...Y....E..\....7..........X.......jg...............s.......h...$..y....[.......,.......y...%...y...z...........................9..y....E...............z..!....................%..m....D.................4......z......~...........5...#...0...F...0..Z-...0..#2...0...>...5..$....5..........%r......~... D..1... D..wo..+...-&..<U......<U..0...<...1#..H5..2...H5..w...L...4...VE..#...VE..~...V...VB..f...r,..f...[...f

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\qt_ar.qm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	160010
Entropy (8bit):	5.356016965796742
Encrypted:	false
SSDEEP:	1536:hGlAMfkX1M0RdaCkR8lfv8vtc8EFrVYA2I4AJZWEWgHg1C8COvzLKHC6Jp9NV0V7:hUr0RACkIwDEpV1Lgf16btw3Bb
MD5:	E7EC8B6E07D62634777DBCB47BD611D3
SHA1:	67B0381A54F966F59D6AB89FFBB4AAE532A5F191
SHA-256:	820EB8876A61022B371D557EEBD83A99A3872C6E93ACBF3E98026DFCB3CE8EFB
SHA-512:	D7F13F626854D4186122D0739392207A0A774CF750AE99131281B990C625624FDF5541BC3BDCF3FD44318D55A9287146BB74193A14EF4BDE3F8D2F477C7778B1
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B..2....*.......+.......@.......A.......B..._...C......D.......E......F.......G... ...H...D...I...h...P...C...Q...g...R......S.......T.......U.......V...x...W......X.......Y.......]..'=...s......t...........]...........;..'....;..(....;.......;.......M..'e...O.......O...9...........}..'........C...=......m..'....t..........!o..(5...Z..+;..5u..+;..c...+O......1...!...D@...8..E@.....H4...,..HY..QI..H.......IC......J....1..J.......J.......LD......L.......PS......QR...R..R...V2..T.......U....]..X.......Zr.....[`......\....t..]x......_......._.......yg......1...6....E..8V..............C............................$..RN...[...0...,.......y.......y...................K...........9..R....E.."............z.......................%..F;...D...[..................................!....5.......0...I...0.......0...5...0..#....5.......5...p..............W}.. D..(... D..P=..+.......<U......<U......<.......H5..(...H5..P...L.......VE......VE......V....B..f...JJ..f.......f....@..g

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\qt_bg.qm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	165327
Entropy (8bit):	5.332110019894515
Encrypted:	false
SSDEEP:	1536:aULiyUxPoT6qx+J7FJlaaMJnxjqxq+0Uiff0mbVeb7wiEwYuYqDKBkKHMXHCIMll:aULpIVFnpwUiEujw27ncUQUz
MD5:	6BCB7BF161BBE019CFAEEE7D331E3E79
SHA1:	03FA92B55FFBD74DAC958934C7275D32BA0ED030
SHA-256:	47F5749032C655F8399563728B8E5591B796AABABB631D0BCA9F18D74F4ED6F0
SHA-512:	14BCE2EE6F22D725BCB4D06A50B511E801BC7172BDDF304B63B6FDB531DFC9C272F1E2AADA0C3A70E903F3992BAD9F0E1E5CC1B375B8EE96E307263DFB33F5DF
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B../......,....+..."...@...]...A.......B.......C.......D...P...E...!...F.......G.......H.......I.......P.......Q.......R...A...S...e...T.......U.......V.......W...1...X...U...Y...y...]..,....s...,...t...................P...;..+....;..-E...;..!....;..+....M..,Y...O...,...O..............}..,............=...Q...m..,....t...\|......>...(5..1...+;..<...+;..o...+O...r..1...>...D@......E@......H4......HY..[...H.......IC......J....E..J....X..J.......LD......L....L..PS......QR.."...R...`...T....X..U.......X.......Zr...q..[`...`..\.......]x......_......._....T..yg.....1...=....E..?...............L(.......(...............'...$..\....[.......,...I...y...!...y...................S...........9..]%...E..5p...........z..!q...................%..O....D..................D.....8......:......?....5...&...0.......0.. ....0...c...0..5....5.......5..................b:.. D..-... D..Z...+.......<U......<U...0..<.......H5..-...H5..[...L.......VE..#a..VE..;...V.......f...T...f...!...f.......g

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\qt_ca.qm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	184024
Entropy (8bit):	4.689590376109741
Encrypted:	false
SSDEEP:	1536:ys9nnOd2szfzBzuJe3pEcLOJ/LZXEIphbzSwnVp5ysZ/ebdOA:zBOdJzfzB8eZpOVXEIp9SyPzZmbdOA
MD5:	D1D7AB4DA8BC6A6097AF2DB42C9BD14E
SHA1:	B2465FC39E774119E4A83D7A4C62516509BEC1C0
SHA-256:	44C6B11B0F7BF6B6423D03089BCB603DA37CB9B46BA7B10B7DC07F75FDF9708F
SHA-512:	402C788C78F7E9A7FD7DFAB3BF0DEEE9631FCE88590B36173CCEFA59112F4B3191718736773F535AB843DBA31369C6D2883F29DBE0F7F2DE37A8140DEC6CC275
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B..3H.....qr...+......@.......A.......B...I...C...m...D.......E.......F.......G.......H...,...I...P...P...I...Q...m...R.......S.......T.......U...$...V...~...W.......X.......Y.......]..+c...s...E...t...@...............e...;..+1...;..,K...;..+Z...;..8K...M..+....O.......O..."...........}..+........A...=.......m..+....t..........P^..(5..>a..+;..<...+;..ou..+O..)G..1...P...D@..."..E@......H4...w..HY..[...H.......IC...%..J....L..J.......J.......LD......L....[..PS.....QR..!(..R...`...T.......U....F..X.......Zr......[`......\....3..]x......_......._.......yg..(...1...=u...E..@(...7... ......)s......M...............a.......x...$..\#...[.......,......y...w...y.................r............9..\....E..z............z.. ....................%..P....D.................k.....F......J0.....P....5...=...0.......0......0...0...0..zd...5...}...5..U........h......a:.. D..,... D..Z...+....h..<U......<U......<.......H5..,...H5..Z...H5......L.......VE.."s..VE..K...V...&...f...U...f

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\qt_cs.qm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	174691
Entropy (8bit):	4.871810448526154
Encrypted:	false
SSDEEP:	3072:pWjuhX0CVRaakGjW9E8SSOQfX/JlwVOMxrboRPqWxXfQvO7zjBf:piFGj1QfXr8Gd
MD5:	987E045E06AEBA29A8E05A074E6BDB91
SHA1:	63D1280382E5DA5EEC4FD6F94608FEC8BA5CE7B4
SHA-256:	86E174EFF79F096D81146860DD5CA9E946C643A3464C7DA8919C972747B8DF09
SHA-512:	ECC03B78668A2C791EF74071B719204C8FAD6DD75E4D9B7C1D57B9A45DB5A5603A657BC71469AC8D11C464C0CF153234610CB5455924347A98FCBA79CE31565B
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B..3p.....F....+.......@..!....@..Ef...A..!....A..E....B.."1...B..E....C.."U...C..E....D.."....D..F....E..#p...E..F)...F..#....F..FP...G..#....G..Fw...H..$....H..F....I..$6...I..F....P..&%...P..Gr...Q..&I...Q..G....R..&....R..G....S..&....S..H....T..&....T..H8...U..'....U..H_...V..'Z...V..H....W..'~...W..H....X..'....X..H....Y..'....Y..H....]..,....]..,....s.......t...9..................;.......;..+....;..1B...;......;..?x...;..N....;..iY...;..s3...M..,B...M..,....O.......O...w...O..rr...........}..,j...}..-....... 5...=.. ....m..,....m..-8...t.. .......ay..(5..TT..+;...A..+;..B...+;..u...+O......+O..=a..1...a...D@.."...E@..&m..E@..G...F...J...H4...=..HY..`...H.......I...J...IC......J....-..J.......J.......LD......L....(..PS.....QR.."S..R...e...T.... ..U......X.......Zr...g..[`......\......]x......_......._......._...v...yg......1...C....E..E...............=.......Q........................s...$..a....[.......,.......y.......y...y..............G............9..b....

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\qt_da.qm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	174098
Entropy (8bit):	4.764849595574624
Encrypted:	false
SSDEEP:	3072:/2NZ5yZ9jFTkmq/gnBiW/+PcXrqH2olYz0DGdaS4KSLZ0kTTgTUR0toT:/mhH2Pc+CT
MD5:	D541CC7F5EA2248E72D2E86CE6CBFA45
SHA1:	E05158572255FD30F5F118453EE6E6551D4DB6CA
SHA-256:	423E88732439997DEB776F45F1B808F446F8023AB25FA925E949EC27724AB7E0
SHA-512:	24FB6998DCB66327D17100B0E364F6370A120190E462B9F574DC5C935F0CB12778B1B9FB5D2CE5A432BCA606D16B42C8C135211AD8926143591830DEF89E77DA
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B..38.....M....+.......@...-...A...Q...B.......C.......D.......E.......F...=...G...a...H.......I.......P.......Q.......R.......S...!...T...E...U...i...V.......W.......X.......Y...1...]..)c...s.......t.................2...;..);...;..K...;.......;..'&...M..)....O.......O...w...........}..)............=.......m..)....t.........=...(5..-...+;..8...+;..h...+O......1...>U..D@...u..E@......H4...J..HY..U&..H.......IC...(..J....O..J.......J.......LD......L....6..PS...G..QR......R...Z%..T...."..U......X...."..Zr......[`...\..\.......]x...".._....-.._.......yg......1...9....E..<l...7..et..............H............................$..V5...[...<...,.......y...c...y.................O"...........9..V....E..Um...........z...;...................%..Kp...D......................5......8M.....>....5.......0.......0.......0.......0..U....5...<...5..1...............[b.. D..... D..T...+....E..<U......<U......<....X..H5..*...H5..T...H5......L....G..VE.. ...VE..9...V....O..f...O...f

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\qt_de.qm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	200848
Entropy (8bit):	4.642693496322357
Encrypted:	false
SSDEEP:	3072:VqsSAhYTB8oVXYWpSNXgQ+vaD+p4N8DDTEKagwGX2lh1FRh6tfedPXPYXCZPbUUf:ak8bjF92p
MD5:	BE8AAC1BDC1DD2212165F64E0C755F17
SHA1:	768D655D7E0DA751DE36B554DF538FAD774F50DA
SHA-256:	D4231CF8839E7BF238369A11F44B76FB6A95718D06DB12ABE51F219961DA3DC3
SHA-512:	783624490F4661A0A7208E15CCC4C2BEC66215607CAF060BD055E7A4918BA62E72481F5443D2AB48F89C307D6CA059A5F760C062769DF12E638C0ACFB081D237
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B..4....*...b...+.......@..;....A..<....B..<a...C..<....D..<....E..=....F..=....G..> ...H..>D...I..>h...P..@W...Q..@{...R..@....S..@....T..A....U..A2...V..A....W..A....X..A....Y..A....]..0....s..3i...t...(......4'.......O...;..0d...;..1r...;..Z....;..i....M..0....O...8...O..4:......E....}..0.......:Y...=..:....m..1....t..:........4..(5..p...+;..X...+;......+O..X...1.......D@..<:..E@..@...H4......HY..x{..H.......IC......J....6..J....\..J.......LD......L....7..PS..%...QR.."X..R...}...T...3...U...4b..X...9...Zr..A"..[`......\...F...]x..8..._......._...H...yg..a~..1...Y....E..\....7..........X.......jg...............s.......h...$..y....[.......,.......y...%...y...z...........................9..y....E...............z..!....................%..m....D.................4......z......~...........5...#...0...F...0..Z-...0..#2...0...>...5..$....5..........%r......~... D..1... D..wo..+...-&..<U......<U..0...<...1#..H5..2...H5..w...L...4...VE..#...VE..~...V...VB..f...r,..f...[...f

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\qt_en.qm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	23
Entropy (8bit):	4.229871195093384
Encrypted:	false
SSDEEP:	3:j2wZC4Xl9t:Cwpvt
MD5:	4AEF4415F2E976B2CC6F24B877804A57
SHA1:	2AA2D42C51F9CF024E3777F0DDE4270388FD22AE
SHA-256:	307CEF95DD5B36FF215055D427E1885B7FC3650C9224CF76D63056545996FF60
SHA-512:	C75F089A95107997B0A786E7C1191E48EC7A69AEFFF97DAF37783791D943C612B7C1B43BCC2CACDFD15E79382E0F314C88817C7DD320F8028AF3420452CE3A1C
Malicious:	false
Reputation:	low
Preview:	<.d....!..`.........

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\qt_es.qm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	165160
Entropy (8bit):	4.679808632649905
Encrypted:	false
SSDEEP:	1536:yVwzuvb+Ta64KQd84arHX5pxiVhA8QlOD/BnFNa8NsvsfFsfcoZtIx6F:yVwSTG4KqVaLX5pEVK7OJFczstgRtIx8
MD5:	7479D957C5309AEDD4F58E4556590F69
SHA1:	2A1787E1F387B62421F8B0233F0119F7F0A9134A
SHA-256:	F6A0734903BBFCD9FD447FBCFD7AD6B9BBEA50D038DC9388038C9ECFC13752A4
SHA-512:	2C208FA4E3C15E58A4797634B6C6653BEAF45A3BA1AF66B6C3BD8D9ECDB7A5CE03209FD2AE6818603695A5F7DD8F0DF87D687C10713E2EB18FD2C8401FED06C3
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B../......,...+...y...@.......A.......B.......C.......D...v...E...=...F.......G.......H.......I.......P.......Q... ...R...k...S.......T.......U.......V...1...W...U...X...y...Y.......]..+....s.......t...................c...;..+....;..,....;...%...;..#....;..-....M..+....O.......O...............}..,............=...]...m..,/...t..........A...(5..3...+;..<...+;..o...+O..!b..1...Ap..D@......E@...D..H4...-..HY..[F..H.......IC...%..J....L..J.......J.......LD......L....O..PS......QR..!...R...`K..T.......U....&..X.......Zr.....[`...h..\......]x...\|.._....Y.._....A..yg......1...=....E..?a......!.......K........G...............R...$..\Q...[.......,...z...y.......y..................+............9..\....E..2............z.. ....................%..ON...D........................:......=B.....A....5...7...0.......0......0.."....0...,...0..3....5...}...5...Y..............a... D..-!.. D..Z6..+....0..<U...h..<U......<.......H5..-M..H5..Z...L.......VE.."...VE..>...V.......f...S...f

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\qt_fi.qm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	179934
Entropy (8bit):	4.720905954554612
Encrypted:	false
SSDEEP:	3072:hvdTgO2Yl97ZWnbgTLt/Tf9IlqAeiy5uWkYGM0wNCdRjSK2YUlUs:hvdkA9vh5uWkY0MK2YXs
MD5:	FF556242E6061DAC90683223351ABD61
SHA1:	D0AD225D3FF0E98619821B68692B996A6F68D580
SHA-256:	D04666A656680BE2756B58CE45DB175B846C5928EB6AF62DBA841444DD10E03A
SHA-512:	4F7D5C242EC381FDA7FB9142D9333673583215E0578D1BF1D661FB5C2CC6C5F626981E59AAF8AC8EC76EE4096BC3F05F91F40A0A9E1250610A79C38F0662BCBF
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B..38.....ct...+......@.......A.......B.......C...@...D.......E...]...F.......G.......H.......I...#...P.......Q...6...R.......S.......T.......U.......V...G...W...k...X.......Y.......]......s...T...t.......................;......;..+....;..&....;..3....M..+!...O.......O...e...........}..+K...........=.......m..+w...t..........J...(5..9...+;..:y..+;..mW..+O..$...1...KY..D@......E@...Z..H4...l..HY..X&..H.......IC......J.......J...."..J......LD.....L.......PS...'..QR.. L..R...]...T.......U.......X.......Zr......[`......\.......]x......_....k.._....>..yg.. /..1...;....E..>....7..{(......%.......J........T.......&.......U...$..Y[...[......,...s...y.......y...a.......}......d...........9..Y....E..k'...........z...........V..........%..M....D...Q.......{......d.....A......E......K....5.......0.......0..&J...0.......0..k....5......5..I9.............._:.. D..,O.. D..W...+....9..<U...G..<U...*..<.......H5..,y..H5..W...H5......L....5..VE..!u..VE..E...V..."{..f...R=..f

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\qt_fr.qm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	166157
Entropy (8bit):	4.685082113750114
Encrypted:	false
SSDEEP:	1536:zLZ1w8McowCppcPwL5pYFw+G00QsbLckCiWxvq+sjs06oFm:z91wxcowspc4L5pUw+cz39CiQ7tloFm
MD5:	37F2AC5CF8EA04844351AE0BCF8420FB
SHA1:	DF28A556F02E1DA470DF5DFAA5E47E36A7BED48E
SHA-256:	7D40EAA90D9094CE548A41482B496EC494396A82361D4F3D031756118ED042D2
SHA-512:	DEBDB2AB4CE27F62888AD48BD2F2468E576BF68B19C4C08940049AD32A21FEE33B2BBC8E3B9C31D3FBFFB034AA802A5937008A26DA703A3F316620B726B6071F
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B../....*..-....+.......@.......A.......B.......C...?...D.......E...\...F.......G.......H.......I..."...P.......Q...5...R.......S.......T.......U.......V...F...W...j...X.......Y.......]..+....s...=...t.......................;..+....;..,....;.......;..$b...;.......M..,....O.......O...5...........}..,3...........=.......m..,]...t..........A...(5..5j..+;..<T..+;..o...+O.."+..1...B\..D@......E@...Y..H4...8..HY..[{..H.......IC......J.......J.......J.......LD...\|..L.......PS...?..QR..!...R...`j..T.......U....[..X.......Zr.....[`...)..\......]x......_....7.._.......yg...i..1...=Q...E..?@......"Y......K............................$..\....[...^...,...'...y.......y...+.......o....../c.......Y...9..\....E..6(...........z..!................j...%..OC...D...+.......[......a.....;......>......B....5.......0.......0...m...0..#....0.......0..6....5.......5..................a... D..-Y.. D..Ze..+....]..<U...;..<U......<.......H5..-...H5..Z...L.......VE.."...VE..?...V.......f...S...f

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\qt_gd.qm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	189570
Entropy (8bit):	4.629344747922875
Encrypted:	false
SSDEEP:	1536:diaI3C87jhakhR0VGkw7ys7CskQH6y4e6IFB4xyMuhvDnJGhFaCo527arBbm07LZ:d2yGjh17yiqxTXhvQoejJd8FUjVgk
MD5:	FD5046C815BC3E89FB327044A29236E4
SHA1:	970F304BB911536E0BD8292BD72EEB575F7DFE22
SHA-256:	D1C0717546502AB3D243487AEFB22A073A4BFF8413AD51F7A6235FC722E76C82
SHA-512:	6EF0F5E09B04B600A3C25EAA97A8CF91F5783C45414AF4993AD82CB32F2EA3C3C827735629ABBB9BF427154BDAD490B04C263F866838FDF5AFE56947161208DC
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B..2....*...u...+......@.......A...B...B.......C.......D.. ....E.. ....F..!&...G..!J...H..!n...I..!....P..#m...Q..#....R..#....S..$....T..$$...U..$H...V..$....W..$....X..$....Y..%....]../....s...'...t...................F...;.......;../....;..=V...;..G....M../G...O.......O...k......$....}../o.......i...=.......m../....t..........[...(5..M...+;..@...+;..x...+O..:...1...\7..D@...f..E@..#...H4...p..HY..be..H.......IC......J.......J....R..J.......LD......L.......PS......QR..#l..R...g...T.......U.......X....\..Zr......[`......\...&...]x......_....C.._...'t..yg..?...1...BM...E..D.......;.......R'.......t.......@.......?...$..c....[......,...i...y.......y...Y.......f.......+...........9..c....E...............z.."....................%..U....D..................G.....UB.....W......\]...5.......0.......0..<....0...;...0.......5.......5..ij..............h... D..0... D..aC..+....K..<U.....<U...~..<.......H5..0...H5..a...L....1..VE..$...VE..X...V...8\|..f...Z...f...=...f....j..g

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\qt_he.qm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	138680
Entropy (8bit):	5.486983968009447
Encrypted:	false
SSDEEP:	3072:gSue8FDn3iJsqBejd/zNDSLzdetY2ZISfCPS:gSuem7w7IjdIzUtYAISfCPS
MD5:	6A8A53D365F564BE4804B3F1167186AD
SHA1:	ED876E836243FB6BA790DE8F709F6BFAD45D3936
SHA-256:	19A8F435880328F9CCDA4FECDFC20BAC7AFAE589C07D0E2B5563366E908AC8E3
SHA-512:	1C6F03718D0AD94BE05A57EE2C12882F4233D025FAC2AC603649E3DBD6DA0DBC32FC2312F426F31046ACFE98355895971D55B389D09E324344DD3733EBE393CD
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B../....*......+..Sw...@......A......B.......C.......D...X...E.......F.../...G...O...H...o...I......P.......Q.......R...I...S...i...T......U......V.......W.......X.../...Y...O...]..$....s......t..X:.......4......`Y...;..$....;..%....;.......;...5...;.......M..$....O...6...O..s............}..%-...........=...m...m..%k...t..........^..(5......+;..2...+;..^...+O...N..1.......D@......E@...(..H4..T...HY..L...H..._...IC..\...J...\...J.......J...\j..LD..^...L...^o..PS..fl..QR......R...Q...T...su..U...s...X...x3..Zr..~...[`..L\..\.......]x....._......._....o..yg...(..1...3....E..5C.......z......?V......U.......U.......W....$..M....[..W....,..X....y.......y..\........a..............\@...9..NO...E...?......]s...z...G.......(......^....%..B^...D.._......._.................... ..........5..`/...0.......0...L...0......0..d(...0......5..ek...5..........fB......R... D..&O.. D..K...+...l...<U......<U..p)..<...p...H5..&w..H5..La..L...s...VE......VE......V......f...FM..f

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\qt_hu.qm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	160484
Entropy (8bit):	4.83165152754532
Encrypted:	false
SSDEEP:	3072:QmOMZadV9n51xXeQvjOiIzz7/Vs9Db3ihuJNvMfWxBNlYzYbTrIkfwb03l24cNKu:IkWa5pg0MahBHDd
MD5:	FD8D6145CA463351F31D6550BCBD9263
SHA1:	089BB437C4A41A2B54595B97FC36064789C34CCB
SHA-256:	D8DFC2277FCF7086BDB1F22FA22EF33371F71CC2CA9C378542FF9C318197FCBE
SHA-512:	7BA51B7312D24E5C03D067872D6C9B6856A6766472B644C7F4446F618E36F534135393C42A276D9B6EA73BC1238498D7153BC9867EEDDB2DFC373EFA6A29FEC5
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B../...........+.......@.......A...0...B...{...C.......D.......E.......F.......G...<...H...`...I.......P...s...Q.......R.......S.......T......U...N...V.......W.......X.......Y.......]..+y...s.......t.......................;..+Q...;..,U...;.......;.......;..&....M..+....O.......O...U..........}..+............=.......m..+....t..........9c..(5..,...+;..;...+;..m7..+O......1...9...D@...T..E@......H4...v..HY..Y...H.......IC......J.......J.......J.......LD......L.......PS...}..QR..!...R...]...T.......U....{..X.......Zr...=..[`......\......]x...-.._......._......yg...M..1...<....E..>...............J........T.......(.......S...$..Z....[.......,...u...y.......y...[...............#...........9..Z....E..#&...........z..!'...................%..Mv...D..._....................32.....5......9....5.......0...h...0...E...0.......0.......0..#....5...Z...5...........G......_2.. D..,... D..W...+....W..<U......<U...B..<.......H5..,...H5..X{..L....)..VE.."...VE..6l..V......f...Q...f

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\qt_it.qm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	161129
Entropy (8bit):	4.6790639686297455
Encrypted:	false
SSDEEP:	1536:wL5ef7fdO4BKOb0t55pqCOIUP/PFIM7gxGQ9sRrFM6QJ4m8ihkM:wdeDFO4BKOb0t55pnOrvCqg9mRK4IkM
MD5:	B183FE971035ADA2E95401263C79AA3B
SHA1:	9FA419CFA95360227A86FCC4D2ED5D946A019CB4
SHA-256:	54BDD9856E6007B443F553F03B5B83BCA9F08595BF18D3293663517F04E89333
SHA-512:	F0B4C7100497CFD09684A57485EF833CBE1A6DD869506AEA64724177E7AD9230957E89DFE356DFA0FFF8DCDD0DAACC53C3897BD27F93A06F390DF372A966407A
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B../....*.......+...i...@.......A.......B...L...C...p...D.......E.......F.......G.......H...3...I...W...P...P...Q...t...R.......S.......T.......U...+...V.......W.......X.......Y.......]..+....s.......t..................=...;..+[...;..,g...;.......;.......;..!!...M..+....O...D...O...............}..+........(...=.......m..,....t..........4...(5..'m..+;..<...+;..o5..+O......1...4...D@...%..E@......H4...)..HY..Z...H.......IC...+..J....R..J....j..J.......LD......L....E..PS...j..QR..!...R..._...T.......U.......X.......Zr......[`...0..\.......]x......_......._.......yg..."..1...=....E..?o..............Kf.......G...............(...$..[....[.......,...L...y...9...y...........Y.......Y...........9..\=...E..$T...........z.. k...................%..N....D..................,......_.....0......5....5.......0.......0.......0... ...0.......0..$....5...a...5...).......@......a... D..,... D..Y...+.......<U..._..<U......<....U..H5..-...H5..Z...L.......VE.."c..VE..1...V....7..f...SQ..f

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\qt_ja.qm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	129904
Entropy (8bit):	5.802847005244529
Encrypted:	false
SSDEEP:	1536:O8YYSCjKBJ26c1Z7f25pVmuLXpxfqt7FEUWNrfQje9kWI23pKXvx:ZYuKBJ01Z7u5pQuLbESUWNzAAI23pKfx
MD5:	1C0AB06B3388E79A2206CBFD28E374A2
SHA1:	FB94C71EE606C6CF5181840B4A6122EEFD93770B
SHA-256:	F0EE03C9936B459CC9BDF184DF9B7EFAD98D40AB7B99E89166A42E019A0EC0EA
SHA-512:	1E90991D22B0C34E7947EDBC5864F662AD01B2DA7888FBE3A6E814607EA5ABB6FC0B34A7EE0ACCEDE471D7442755F00FE99C4A8B029244BF034189CD00D74D07
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B../....*...'...+..=....@.......A.......B...?...C...c...D......E......F.......G.......H..."...I...F...P.......Q...'...R...r...S......T......U.......V...8...W...\...X......Y......].."k...s...Q...t..A...............I....;.."C...;..#A...;.......;.......;.......M.."....O...B...O..[?......h....}.."........m...=.......m.."....t...........M..(5......+;......+;..WU..+O......1.......D@......E@...K..H4..>=..HY..F...H...Hr..IC..E...J...F...J.......J...E...LD..Gz..L...G...PS..O...QR......R...K!..T...Z...U...[e..X..._f..Zr..e...[`..7...\...i...]x...'.._......._...j...yg..~+..1.../....E..1?.......#......:.......?.......?n......A....$..G....[..Ap...,..B....y.......y..Ew......\|...............E....9..H....E..........F....z...]..............HL...%..=R...D..H.......I!......[......J......M..........5..It...0...3...0.......0...C...0..M....0...a...5..N....5..........N.......L6.. D..#... D..E...+...U%..<U......<U..X ..<...X...H5..#...H5..FK..L...[...VE......VE......V......f...@...f

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\qt_ko.qm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	131255
Entropy (8bit):	5.830347632783468
Encrypted:	false
SSDEEP:	1536:89B4TqHsU1xw5tBJea7Nrj6Rgqrd2MfjzqUTX+f0MwrcZ1hc2yp:89BaXUOvJea7Nrj+gqxtPq0ORhPyp
MD5:	D3EB25E0FFF5719E8840612727896B1D
SHA1:	58650C79B3776B87A77D816650E962DE0A96D18A
SHA-256:	487755EB0841D47748CCBC2AB8D255CA12277DD0FB687D6DDC730982F8DA77BA
SHA-512:	8F35625A7BD8922F5151A9AB9C089E4FD44153CE442E0E10458262DBF97CD2D0BEAEACA7D5C08EBA5078371ACC994A0E9B9C07E4CF2BEAFFA16B0747BC91DC9A
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B..0....*.......+..B....@...&...A...J...B......C......D.......E.......F...0...G...T...H...x...I......P......Q......R.......S.......T...B...U...f...V.......W.......X.......Y...,...].."....]..#U...s.......t..F..............N....;.."....;..$7...;.......;...V...;......;.......M.."....M..#....O.......O.._.......m....}..#....}..#...........=.......m..#-...m..#....t...I..........(5......+;../...+;..W...+O...w..1....#..D@...n..E@......H4..CG..HY..G...H...M...IC..K...J...K:..J.......J...J...LD..L...L...L...PS..S...QR...f..R...K...T..._...U...`...X...d1..Zr..j8..[`..<?..\...n...]x....._......._...o...yg......1...0....E..27.............;.......D.......D.......FT...$..H....[..F....,..GL...y.......y..J.......{...............J....9..H....E...u......K....z..................My...%..>>...D..N ......NF...........................M...5..N....0.......0.......0......0..Q....0.......5..R....5..........S.......M... D..$... D..F...+...Y...<U...0..<U..\...<...]e..H5..$...H5..G5..L

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\qt_lv.qm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	153598
Entropy (8bit):	4.843660409697438
Encrypted:	false
SSDEEP:	3072:H5pmbKIhooMbGe91MrjOhmGzP6LJbWz5XIxELpU6:HObeqrjPGzeJyJLy6
MD5:	788862615B8FB13B52E4A80A8C54B3BF
SHA1:	802BD10E82BDEEC9596F31464C73DF371A5894CA
SHA-256:	257D1201DA42C19C34EA0A5F0DFBBA3D438FC273A7D5B5B97CD13196E963ED28
SHA-512:	EA2D877689EC809BCB27E12731DAA51236264DA10775E528FE259F35EEF8E7D84C542C25153E39997A1C7FAA8D849393E3ECF48ED67890A8D5FD4D2DB7CDB1CF
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B..........B...+..y....@.......A...=...B......C......D.......E.......F...#...G...G...H...k...I.......P...~...Q......R.......S.......T...5...U...Y...V......W.......X.......Y.......]..%....s.......t...8.......n.......A...;..&....;.......;...!...;...A...;../....M..%....O.......O...............}..%...........=.......m..&....t...(......(g..(5...+..+;..4...+;..d...+O......1...(...D@...a..E@......H4..z...HY..Q...H.......IC......J....6..J.......J.......LD......L....9..PS......QR......R...U...T....S..U.......X...._..Zr......[`..r...\.......]x....._......._....{..yg......1...5v...E..7........(......B.......\|.......\|W......~r...$..R....[..~....,.......y...l...y...............................9..S....E...g...........z...z...................%..F....D........................"Z.....$......)....5.......0...\...0.......0...r...0.......0.......5...a...5..........J......V... D..&... D..P...+.......<U......<U......<.......H5..'"..H5..P...L....~..VE...R..VE..%...V.......f...J]..f

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\qt_pl.qm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	162972
Entropy (8bit):	4.841793231271997
Encrypted:	false
SSDEEP:	1536:1Xpestp/YIFtDT8FIWYbIJmPYuIpnmxAk6mwyJNqSm9+P:1xpTDT8FIWfJmdCmxApmbnqSm9+P
MD5:	55A6BB647E176CD4CEB5096C76B87ABF
SHA1:	2D43EAF76B5BAF5078066D34E2A71954F2821EF4
SHA-256:	99A5A122DBF2E522F99F2BF83201A144E9E340D7B3DD8E16DD785A8CC79FBD69
SHA-512:	C1F4142ECE48771264922D228A8A8A21EAA726213E9A0564520B534F88BC3DC42062D20675D666F2105BE70C4277901BB900C1A38A1F01ED7912D3363CC3CF1A
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B..0......"....+.......@...F...A...j...B......C.......D...3...E.......F...P...G...t...H.......I.......P.......Q.......R.......S...>...T...b...U.......V.......W.......X...(...Y...L...]......s.......t...r.......o.......+...;......;..+....;..."...;... ...M......O...6...O...........a...}..+...........=.......m..+G...t...G......,...(5......+;..:...+;..k...+O......1...-[..D@.....E@......H4...U..HY..WU..H.......IC......J....6..J.......J.......LD......L....%..PS......QR.. ...R...[...T....1..U.......X......Zr......[`......\.......]x...A.._......._....}..yg......1...;W...E..=........%......H....................$..Xp...[.......,.......y...i...y...........}......$R...........9..X....E..+)...........z.. E...................%..K....D...p....................&......(......-....5.......0.......0...e...0.......0..+....5...]...5...........f......]-.. D..,%.. D..V?..+....V..<U......<U......<....-..H5..,M..H5..V...L....Z..VE..!...VE..)...V.......f...P...f....K..f.......g...&...l

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\qt_ru.qm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	183686
Entropy (8bit):	5.366964967925085
Encrypted:	false
SSDEEP:	1536:70PQXmZaVTvwcl0KPBypgu5feOQv6sLlxnrCcF423ZL9xyuXwd2X8LZu0ajeoEeh:I4h0N5figIt1saSyriFyp
MD5:	C48060E9ACBB7FA59D42D2088FEC13D4
SHA1:	D14410FE0B809D8A1D187D10D2B600341191944F
SHA-256:	74F615EDF95023E9D8C67D0E32E607FA80FF62B99AFCAC6D019A76E0D59D09E3
SHA-512:	FD3FA666B1BFB0CD79B774821E6FF7F49B91E028C3D321AE8D6F55CDFEDF069210153C44ED263436AD25BA3CE991859B056AC16F78A10E2C1FB693CF12E6A885
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B..3....*..u....+.......@...T...A...x...B.......C.......D...A...E.......F...^...G.......H.......I.......P.......Q.......R...(...S...L...T...p...U.......V.......W.......X...6...Y...Z...]..&....s.......t...<...............O...;..&q...;..'y...;..1J...;..=....M..&....O...............}..&............=...4...m..'....t..._......Wt..(5..D...+;..J...+;..\|...+O../...1...W...D@......E@......H4.....HY..g...H.......IC......J....D..J.......LD......L....M..PS......QR...%..R...l...T.......U....B..X....'..Zr......[`..._..\.......]x...Y.._....}..yg..-,..1...L....E..N....7...3....../K......Zv......................j...$..h....[.......,......y.................w............9..iU...E..z............z...............%..]....D.......................M......QN.....X....5...%...0......0..0....0...<...0..zY...5......5..Y...............n0.. D..'... D..f...+.......<U...K..<U......<.......H5..(...H5..g7..L.......VE...F..VE..R...V...,...f...a...f...1s..f....+..g...N"..l.......r....n.......V...

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\qt_sk.qm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	125753
Entropy (8bit):	4.802915682852063
Encrypted:	false
SSDEEP:	3072:CoXDuC1u/2lUBGjJirE5tsd/aev1GcfOdvhw:DucMGjH5t/m
MD5:	FED9C191096819DD208E0E3E2D051170
SHA1:	996BA0A7A6C3C55AE7232BD8791D72472A85CA84
SHA-256:	0144819728779D0861859F5451CD5588B2F2DEF611EDEB77B38655D62BDBDF86
SHA-512:	52978A693A1C54A7268BFF1682AF37811399396004B98916F8EAB8BD40EB335C2C6DD6C084687840A8BF20FB6F74B481BDC453D78E6D98BE47EFD0F70E2DDE3C
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B..$x...*.......+..>....@......A......B.......C.......D...3...E...Z...F......G......H.......I.......P.......Q...D...R.......S......T.......U.......V...1...W...X...X.......Y......]...Y...t..D-......K....;...3...;.......;.......;......;...V...M.......O.._ ......l....}.......m...........T..(5...(..+;......+;..%...+O......1......E@...k..F.......H4..?I..HY..@7..H...J...I....,..IC..HT..J...H{..J...H...LD..J"..L...Jv..PS..Q...R...D...Zr..i]..[`..7...\...nB.._...o...1...&....E..(........B......19......A.......A....$..AF...[..C....,..D....y..G.......v........g......G....9..A....E..........IH...%..4.......Kf..............................5..K....0...,...0.......0.......0..Of...0.......5..P....5..........E... D...C.. D..?'..+...Y`..<U......<U..\...<...]...H5...m..H5..?...L...^...VE......f.......f...8...g.......l...aP.......................6......d....D..f(...`..f...............?....`..h5...y..H....5..j........E...e.......e..@....... ......>......oZ......l...~...zF..^

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\qt_uk.qm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	158231
Entropy (8bit):	5.401703630333425
Encrypted:	false
SSDEEP:	1536:VFoQa3dMUDPTzdAhpQgO5poZHvJllEnhmdK4I77/dnPJX/imfb1jhvv3BxT8upfk:kzDPTzaw5pCvJ8hVPdlvj3p8
MD5:	9A7A0B316CF7117BF3AA928C762C33B6
SHA1:	4B4C06191E61FB2F94FE9256F29696EB1AE694C7
SHA-256:	FD4A436733637CB4759CDB024F0C7D891E8075BE46F79796077180A9FF488D27
SHA-512:	2EC1D3047BC312B14AB55535D3704043CD4697A89B5CEC233FC4F32407007236232F0872B5E162E24A9A4BCCD0B51F4EC6BC4DEB6BCF13BD76C219637D866F37
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B../.......$...+...K...@.......A.......B...&...C...J...D.......E...g...F.......G.......H.......I...-...P.......Q...@...R.......S.......T.......U.......V...Q...W...u...X.......Y.......]..y...s...b...t...~...............M...;..Q...;..+U...;.......;...W...;..!....M......O.......O...`...........}..........$...=.......m......t..........3...(5..&...+;..:...+;..k...+O... ..1...4...D@......E@...d..H4......HY..W...H.......IC...5..J....\..J.......J.......LD......L....Y..PS......QR.. ...R...\...T.......U.......X....y..Zr......[`..~...\.......]x......_......._.......yg...B..1...;....E..=w.......L......I............................$..X....[.......,.......y.......y...........,...................9..Y....E...%.......#...z.. ........P...........%..LB...D.......................-M...../......46...5...%...0...O...0...6...0.......0...J...0.......5.......5..................^... D..+... D..V...+.......<U......<U...e..<.......H5..+...H5..V...L....2..VE..!...VE..0...V.......f...PE..f

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\translations\qt_zh_TW.qm (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	Qt Translation file
Category:	dropped
Size (bytes):	113849
Entropy (8bit):	5.830779291359727
Encrypted:	false
SSDEEP:	1536:DSdeMLPGI0gOs6aROcFGJl7IJoZprUKvZWIWIrPXXQIP8pa:qHP10gOs6dcFEsJoZqOWIWIrPFP8pa
MD5:	4DBE0E1B39500C503F0E4566AA3E222C
SHA1:	578D102CBFBAE8605621315ECA362F57EA825152
SHA-256:	95EB29B7DEDBF5EA84E034758470FD56C7D2FA83A11D600FC249A44BE5430D73
SHA-512:	2ADAA2DAB95D98F8EDCC1037B82424C4F2181B9C20291ACC94AE93D99102AB370E85A335616E0C25974FA1ADB51DF587F86279BECBCACE7160F22540A2BD00E5
Malicious:	false
Reputation:	low
Preview:	<.d....!..`...B..-p.....tJ...+...+...@.......A.......B...j...C......D......E.......F.......G.......H...B...I...f...P.......Q...>...R......S......T.......U.......V.......W...=...X...a...Y......]..!....s.......t...L...............P...;..!z...;.."\|...;......;......M..!....O.......O..............}..!............=.......m.." ...t...(.......e..(5......+;..;...+;.._...+O......1.......D@...C..E@...b..H4......HY..Pm..H....:..IC......J....D..J.......J.......LD...B..L.......PS...C..QR...T..R...T...T.......U.......X...!...Zr..'g..[`..._..\...+...]x......_......._...,...1...<....E..>....7..................Fo.......#...................$..QR...[.......,.......y.......y..................u............9..Q....E..zc...........z...........<...........%..H....D...............................'..........5...*...0...?...0.......0.......0..z....5...h...5..c3..............U... D.."... D..O...+.......<U......<U......<.......H5..#...H5..O...L.......VE...M..VE......f...L...f.......f.......g.......l

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\unins000.dat

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	InnoSetup Log Farnsworth-Munsell 100 Hue Test {42DBB333-836A-4F99-A69A-AA4F4EE23A24}, version 0x418, 130375 bytes, 445817\37\user\37, C:\Program Files (x86)\Farnsworth-Munsell
Category:	dropped
Size (bytes):	130375
Entropy (8bit):	3.48336927894643
Encrypted:	false
SSDEEP:	1536:/9UJk6P7VEbXctyrwBGv02KF0vWZIDytx9CnsRW7AVaMYTupP/aVA7HLQhm38NS1:/uJzjX
MD5:	49FD06C16B31212ED2D2AD2EB5C91DD2
SHA1:	DC0D0735657A7696B55EC12A5770700476F8379E
SHA-256:	2DEAA3955FBC15D52D06AA9B7EF67E5FE7E0BD0D66C89BC7F61F65838E879EE5
SHA-512:	40014D8E699C92907259ED83636827E7E1CBC99D97BEC2563111D79908BF68C81C9C1AF93C2FACAAA6FB7A9DF11DB1577D96BE65A3E1605E30EA3F26E34B5830
Malicious:	false
Reputation:	low
Preview:	Inno Setup Uninstall Log (b)....................................{42DBB333-836A-4F99-A69A-AA4F4EE23A24}..........................................................................................Farnsworth-Munsell 100 Hue Test.........................................................................................................G...%...............................................................................................................cl#..........%.?...............4.4.5.8.1.7......a.l.f.o.n.s......C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.F.a.r.n.s.w.o.r.t.h.-.M.u.n.s.e.l.l. .1.0.0. .H.u.e. .T.e.s.t..................2.X.. ........................C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.F.a.r.n.s.w.o.r.t.h.-.M.u.n.s.e.l.l. .1.0.0. .H.u.e. .T.e.s.t..X...C.:.\.P.r.o.g.r.a.m.D.a.t.a.\.M.i.c.r.o.s.o.f.t.\.W.i.n.d.o.w.s.\.S.t.a.r.t. .M.e.n.u.\.P.r.o.g.r.a.m.s.\.F.a.r.n.s.w.o.r.t.h.-.M.u.n.s.e.l.l. .1.0.0. .H.u.e. .T.e.s.t......F.a.r.n.s.w.o.r.t.h.-.M.u.n.s.e.l.l. .1.0.0. .H.u.

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\unins000.exe (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1216713
Entropy (8bit):	6.341351766016818
Encrypted:	false
SSDEEP:	24576:G1VqyG3T/+ofiDIZE2kChYYmpY9a2nWEdEC6GnJJ3GIvx94Y:GQdhZgEN6GnJdr
MD5:	418BB6549B507B290C7F86D6443219ED
SHA1:	D5B5758F4D01B8945223FFFE3DB55B751DBD6C17
SHA-256:	F5B8D9B858212B145D4A0C6A37FEF25880D3DFFB836339B66D9848D6563D8254
SHA-512:	93BFD30A7CCBE0EF43B1F27875A863C224C2C2B6D6D04CB62B57AF3FA7F811CBD1B06E8F91950BD13A7177CE50FB33202C9DAC69BE96DB385263D9D6C45F39ED
Malicious:	false
Reputation:	low
Preview:	MZP.....................@.......................InUn....................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L......S.....................P....................@..............................................@...............................7..................................................................................t................................text............................... ..`.itext.. ........................... ..`.data...80.......2..................@....bss.....a...@...........................idata...7.......8..................@....tls....<............R...................rdata...............R..............@..@.rsrc................T..............@..@....................................@..@........................................................................................................................................

C:\ProgramData\Farnworth-MunsellHueTest\FM100DB.sqlite

Download File

Process:	C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe
File Type:	SQLite 3.x database, last written using SQLite version 3026000, file counter 5, database pages 6, cookie 0x4, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	24576
Entropy (8bit):	0.6058191574129191
Encrypted:	false
SSDEEP:	48:TwVzue4VgGFHHwH/m8H/IWku+uQv28kPI8S2:cVye4VgGVQf5fI/6S2
MD5:	520919883D9E58729BD036B555389F83
SHA1:	A9169CC874A8F4ECE3E3C1818CEBEE29AA56A67F
SHA-256:	154A5399F8CFB53A2BF86EF11AEC5384E116B483C9BE119A637229C9AC380C37
SHA-512:	EAF5ECA84E7C0AF2AD72B4879219042B8B702CFA553A8C8938E3C1F370F50336B9CEC9678A42D66A7651F10B3B0106CB47B5F7AD2F1119621CBE0AE70E296012
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................,P.........,.....o....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Farnworth-MunsellHueTest\FM100DB.sqlite-journal

Download File

Process:	C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe
File Type:	SQLite Rollback Journal
Category:	modified
Size (bytes):	12824
Entropy (8bit):	1.0390603187042404
Encrypted:	false
SSDEEP:	48:7M2q3QVzue4VgGFHHwH/m8H/IWku+uQv28kPIu:7LqQVye4VgGVQf5fI/4
MD5:	5DE6E0F26E4DE467C958FA75B7CEC4F4
SHA1:	6703FF4DFC7E3F543D4C1D553070DC23BCDC9882
SHA-256:	DD31BC48EC1A67E42C5FD348D3E835D331ADA663CC5DABC944EA5EAF9F052093
SHA-512:	145FA539B426BD2BFD9C4322BE40D3ADE32551034FAF1B7BAF0982BC8326ECE85C3C3D86094F71E3AA619048186E7D8666F23F607C3EE2D2C15A3478DFEB62B4
Malicious:	false
Reputation:	low
Preview:	.... .c.....n..[........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Farnworth-MunsellHueTest\is-3IK53.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	SQLite 3.x database, last written using SQLite version 3020001, file counter 2, database pages 4, cookie 0x2, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.39908527224618595
Encrypted:	false
SSDEEP:	12:TLCFlPhgGz59CFqkin4PbB+JUQsxj4TSFlyMJ3Cy59rTLgvJZnAHL1Q:TLKhXKPb86QEj428yrPaJZwQ
MD5:	C810E74EDC91985D7D07B0EA1C278237
SHA1:	FAFC8EAFA77E7001E6473D5D4DDAEE12B4E3F15C
SHA-256:	5BAA5AB4107ED037E8E12331E0021374224FF278992C3632689C9D980DDE5965
SHA-512:	6D6A09297AF91489418CF76B43B662C9BFEFD229ADECC48ABAC6AEFB5BD913ED54C5653A9989FFEC3D2736069A9A2D72DD57CD2F67D0B4B8B8DA63A77C22C577
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ .....................................................................................,..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.lnk

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Wed Apr 24 11:27:50 2024, mtime=Wed Apr 24 11:27:51 2024, atime=Tue Aug 1 13:22:16 2023, length=3560960, window=hide
Category:	dropped
Size (bytes):	1374
Entropy (8bit):	4.5738118886286365
Encrypted:	false
SSDEEP:	24:8mViETddOEmgXUhZgAhBd3vWd3lUUZJC4qygm:8mVVpdOWEhZ3hBd3vWd3m7yg
MD5:	E490745C9CB8FA5D30AF97FAE4092230
SHA1:	46E62B935D9386144BE5508C7A71DC33393231DC
SHA-256:	2D5A64F690059445A99B831C73D00490D27D33459DDA521A199BF006532FC5F6
SHA-512:	E0062D7E61E9670E7D684014438CEA46777F6954DB998430F701C8F4DF696A91F5980AF8947067EBDE8CAB85737F5DF4A27000EA609972F8BD0642426C1F114B
Malicious:	false
Reputation:	low
Preview:	L..................F.... .......B....F..B.....e......V6..........................P.O. .:i.....+00.../C:\.....................1......Xic..PROGRA~2.........O.I.Xic....................V.....AP).P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.)...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.7.......1......X.c..FARNSW~1..p......Xzc.X.c....[.....................(...F.a.r.n.s.w.o.r.t.h.-.M.u.n.s.e.l.l. .1.0.0. .H.u.e. .T.e.s.t.......2..V6..W.r .FARNSW~1.EXE..x......Xzc.Xzc.............................F.a.r.n.s.w.o.r.t.h.-.M.u.n.s.e.l.l. .1.0.0. .H.u.e. .T.e.s.t...e.x.e.......................-....................X.......C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe..i.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.F.a.r.n.s.w.o.r.t.h.-.M.u.n.s.e.l.l. .1.0.0. .H.u.e. .T.e.s.t.\.F.a.r.n.s.w.o.r.t.h.-.M.u.n.s.e.l.l. .1.0.0. .H.u.e. .T.e.s.t...e.x.e.6.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.F.a.r.n.s.w.o.r.t.h.-.M.u.n.s.e.l.l. .1.0.

C:\Users\user\AppData\Local\Temp\is-0R3CD.tmp\_isetup\_setup64.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	6144
Entropy (8bit):	4.363359036723334
Encrypted:	false
SSDEEP:	48:SvrzfWvPcXegCPUo1vlZQrAxoONfHFZONfH3d1xCWMBFNL2piSS4k+bkg6j0KHc:+fkcXegaJ/ZAYNzcld1xaX12pTSKvkc
MD5:	526426126AE5D326D0A24706C77D8C5C
SHA1:	68BAEC323767C122F74A269D3AA6D49EB26903DB
SHA-256:	B20A8D88C550981137ED831F2015F5F11517AEB649C29642D9D61DEA5EBC37D1
SHA-512:	A2D824FB08BF0B2B2CC0B5E4AF8B13D5BC752EA0D195C6D40FD72AEC05360A3569EADE1749BDAC81CFB075112D0D3CD030D40F629DAF7ABCC243F9D8DCA8BFBE
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......^...............l...............=\......=\......=\......Rich............................PE..d.....R..........#............................@.............................`..............................................................<!.......P.......@..0.................................................................... ...............................text............................... ..`.rdata..\|.... ......................@..@.data...,....0......................@....pdata..0....@......................@..@.rsrc........P......................@..@................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\is-0R3CD.tmp\_isetup\_shfoldr.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	23312
Entropy (8bit):	4.596242908851566
Encrypted:	false
SSDEEP:	384:+Vm08QoKkiWZ76UJuP71W55iWHHoSHigH2euwsHTGHVb+VHHmnH+aHjHqLHxmoq1:2m08QotiCjJuPGw4
MD5:	92DC6EF532FBB4A5C3201469A5B5EB63
SHA1:	3E89FF837147C16B4E41C30D6C796374E0B8E62C
SHA-256:	9884E9D1B4F8A873CCBD81F8AD0AE257776D2348D027D811A56475E028360D87
SHA-512:	9908E573921D5DBC3454A1C0A6C969AB8A81CC2E8B5385391D46B1A738FB06A76AA3282E0E58D0D2FFA6F27C85668CD5178E1500B8A39B1BBAE04366AE6A86D3
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......IzJ^..$...$...$...%.".$.T87...$.[."...$...$...$.Rich..$.........................PE..L.....\;...........#..... ...4.......'.......0.....q....................................................................k...l)..<....@.../...................p..T....................................................................................text...{........ .................. ..`.data...\....0.......&..............@....rsrc..../...@...0...(..............@..@.reloc.......p.......X..............@..B................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp

Download File

Process:	C:\Users\user\Desktop\download\FM100_HueTest_32-bit_v407.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1193984
Entropy (8bit):	6.36880225523859
Encrypted:	false
SSDEEP:	24576:u1VqyG3T/+ofiDIZE2kChYYmpY9a2nWEdEC6GnJJ3GIvx94j:eQdhZgEN6GnJdC
MD5:	7D11FE4182B8554D47DE2DF7F5AD3F23
SHA1:	523D62A2030D59FD4726287FDC7B2C818EE38943
SHA-256:	A5B3BF5C8D50665093FEB0E17EAF2A0E341F0EBFDDFBA97146BBC83666077AC3
SHA-512:	21369268C76D76391130C2CF18235F6BB462026CD1C610761BF74FFF805DA5189E672F211996A4E4233D0F8C36F07150C6A7B37D80E9BEC88B2F76CDE6E342F0
Malicious:	false
Reputation:	low
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L......S.....................P....................@..............................................@...............................7..................................................................................t................................text............................... ..`.itext.. ........................... ..`.data...80.......2..................@....bss.....a...@...........................idata...7.......8..................@....tls....<............R...................rdata...............R..............@..@.rsrc................T..............@..@....................................@..@........................................................................................................................................

C:\Users\user\Desktop\cmdline.out

Download File

Process:	C:\Windows\SysWOW64\cmd.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	22523
Entropy (8bit):	2.269191379183004
Encrypted:	false
SSDEEP:	96:Iim01weQkMgPH8e3XFhubsRYijrGST9Nsb8LZeX5v4Iz7/njMATPQWgBLS8:Q01wDgEOXFQbyYi3Hox4Iz77MAT4WgBp
MD5:	8EFF9870804B35B7AC97DD241C2AF18C
SHA1:	870D4B0A72FDB00E969CFA42D44354A695157A9A
SHA-256:	58634D05CFEBBE044FE151A1B380862FCF2A6EAD3A3BA3FE4D2B55482A5ABE20
SHA-512:	CF95F1BF998B90A492B8B164C6981F426301DC1C695BAA15AA4EFAC96742FDF62C2D8D9D522FCCC44FC2F622E0065464D504BD2F73057A70311EC31B5A145556
Malicious:	false
Reputation:	low
Preview:	--2024-04-24 14:27:20-- https://downloads.xrite.com/downloads/software/FM100_Scoring_SW/v4.0.7/FM100_HueTest_32-bit_v407.exe..Resolving downloads.xrite.com (downloads.xrite.com)... 18.154.206.90, 18.154.206.117, 18.154.206.26, .....Connecting to downloads.xrite.com (downloads.xrite.com)\|18.154.206.90\|:443... connected...HTTP request sent, awaiting response... 200 OK..Length: 14516624 (14M) [application/octet-stream]..Saving to: 'C:/Users/user/Desktop/download/FM100_HueTest_32-bit_v407.exe'.... 0K .......... .......... .......... .......... .......... 0% 287K 49s.. 50K .......... .......... .......... .......... .......... 0% 375K 43s.. 100K .......... .......... .......... .......... .......... 1% 699K 35s.. 150K .......... .......... .......... .......... .......... 1% 988K 30s.. 200K .......... .......... .......... .......... .......... 1% 880K 27s.. 250K .......... .......... .......... .......... .......... 2% 1.21M 24s.. 300K .......... .......... .

C:\Users\user\Desktop\download\FM100_HueTest_32-bit_v407.exe

Download File

Process:	C:\Windows\SysWOW64\wget.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	14516624
Entropy (8bit):	7.998260031465198
Encrypted:	true
SSDEEP:	393216:AoHy9rzD8Btlasi6W2mb62RbI/SxnaNWIbdVJO+U:VSFzD8zlan6Q5Rc/jWIb/O
MD5:	D80F7F0B4F609526D80E7919A73C1EA0
SHA1:	529A7D39C5DE0255C1F6BC1E8F84871BECF1F3A3
SHA-256:	CCE93212B0C45F2F3FE14ED772246588A711BC94C7CEA24C4ED854DD451E6533
SHA-512:	3CE196A655C953AF86AAB0559EEFEB96E6AD177D110D80369D07B82F6C418389E9C93908CC530739A23834F158A37DA8925F4C4575D2E6C2726C8AE936786AF1
Malicious:	false
Reputation:	low
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L......S..................... ............... ....@.............................................@......................................4............a... ...........................................................................................text...,........................... ..`.itext..D........................... ..`.data........ ......................@....bss.....V...0...........................idata..............................@....tls.....................................rdata..............................@..@.rsrc...4............ ..............@..@....................................@..@........................................................................................................................................

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 24, 2024 14:27:21.596684933 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:21.596714973 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:21.596775055 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:21.598329067 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:21.598342896 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:21.927069902 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:21.927288055 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:21.930834055 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:21.930840015 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:21.931067944 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:21.933296919 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:21.980128050 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.604852915 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.627197027 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.627218962 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.627294064 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:22.627324104 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.627372980 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:22.627580881 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:22.653935909 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.653976917 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.654027939 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:22.654035091 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.654079914 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:22.779431105 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.779500008 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.779576063 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:22.779588938 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.779629946 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:22.779681921 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:22.803693056 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.803720951 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.803807020 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:22.803819895 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.803865910 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:22.818358898 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.818473101 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:22.818485022 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.847656012 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.847680092 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.847742081 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:22.847764015 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.847791910 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:22.866446018 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.866497993 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.866523027 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:22.866539001 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.866579056 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:22.870770931 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.870831966 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:22.936685085 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.936734915 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.936786890 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:22.936794996 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.936822891 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:22.936861992 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:22.943653107 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.943741083 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:22.960809946 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.960867882 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.960899115 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:22.960907936 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.960947990 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:22.976404905 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.976454973 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.976501942 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:22.976515055 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.976547003 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:22.992799044 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.992856026 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.992892981 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:22.992914915 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:22.992940903 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:22.992955923 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.008150101 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.008194923 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.008352995 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.008366108 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.008423090 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.024282932 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.024323940 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.024359941 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.024374962 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.024394989 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.024421930 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.039278984 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.039326906 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.039356947 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.039370060 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.039406061 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.039427042 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.045119047 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.045190096 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.058157921 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.058209896 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.058228970 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.058243036 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.058263063 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.058301926 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.063903093 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.063973904 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.078500032 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.078545094 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.078572035 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.078583002 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.078622103 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.089142084 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.089198112 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.089226961 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.089237928 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.089284897 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.095530987 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.095606089 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.100056887 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.100153923 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.106520891 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.106612921 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.116126060 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.116162062 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.116194010 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.116205931 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.116226912 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.126215935 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.126264095 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.126291037 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.126302958 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.126339912 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.126358986 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.137109041 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.137145042 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.137177944 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.137188911 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.137207031 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.137259960 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.147463083 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.147500992 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.147526979 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.147538900 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.147566080 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.147605896 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.156548023 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.156583071 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.156615019 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.156625032 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.156650066 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.156668901 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.163155079 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.163228989 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.163244009 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.164971113 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.165043116 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.165051937 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.165093899 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.172485113 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.172523975 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.172627926 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.172636032 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.172719002 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.181220055 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.181256056 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.181325912 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.181334019 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.181432962 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.185600042 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.185666084 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.189137936 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.189196110 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.197654009 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.197691917 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.197722912 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.197730064 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.197756052 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.197796106 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.206736088 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.206774950 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.206811905 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.206821918 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.206840992 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.206870079 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.214781046 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.214812040 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.214844942 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.214849949 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.214874029 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.214886904 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.222536087 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.222564936 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.222594976 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.222599983 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.222635984 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.229429960 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.229459047 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.229485989 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.229491949 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.229521036 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.236879110 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.236907959 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.236932039 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.236938000 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.236963034 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.246521950 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.246542931 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.246589899 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.246602058 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.246633053 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.255508900 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.255525112 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.255568027 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.255599022 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.255614996 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.261535883 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.261570930 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.261594057 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.261617899 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.261634111 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.267970085 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.267986059 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.268038034 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.268064022 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.268079996 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.268126011 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.268944025 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.276005030 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.276037931 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.276072979 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.276094913 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.276127100 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.281035900 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.281079054 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.281095028 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.281115055 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.281130075 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.281151056 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.287961960 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.287985086 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.288038969 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.288059950 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.288074970 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.288093090 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.291601896 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.291649103 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.291663885 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.291681051 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.291695118 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.297892094 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.297913074 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.297976017 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.298001051 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.299077034 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.299128056 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.299135923 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.305512905 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.305532932 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.305597067 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.305622101 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.305634975 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.306513071 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.306552887 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.306561947 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.312441111 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.312467098 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.312527895 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.312547922 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.312565088 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.316752911 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.317918062 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.317945004 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.317975044 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.317986965 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.318011999 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.319631100 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.323630095 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.323649883 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.323685884 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.323702097 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.323718071 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.324809074 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.328474998 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.328982115 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.329030991 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.329042912 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.329049110 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.329083920 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.329102039 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.334367990 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.334397078 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.334443092 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.334462881 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.334491014 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.334510088 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.337976933 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.339405060 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.339427948 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.339457989 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.339469910 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.339498997 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.339525938 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.340132952 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.340181112 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.340281963 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.345551968 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.345576048 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.345618010 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.345649004 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.345665932 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.345693111 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.348628044 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.348683119 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.348699093 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.349411964 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.353852987 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.353876114 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.353909969 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.353925943 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.353949070 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.356087923 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.358808041 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.358829021 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.358855009 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.358897924 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.358910084 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.360630989 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.362027884 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.363378048 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.363389969 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.363492012 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.363509893 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.364245892 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.365021944 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.365087986 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.369378090 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.369400024 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.369474888 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.369493008 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.374327898 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.374351978 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.374449968 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.374465942 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.376264095 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.376333952 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.376348972 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.380242109 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.380261898 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.380316973 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.380337954 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.380352974 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.383074045 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.383117914 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.383151054 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.383160114 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.383199930 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.386739016 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.386802912 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.386838913 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.386852980 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.386887074 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.386909008 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.391324997 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.391386986 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.391438007 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.391458035 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.391474009 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.391489029 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.395400047 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.395451069 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.395494938 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.395514965 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.395536900 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.395561934 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.398258924 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.398338079 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.398350000 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.402209044 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.402255058 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.402291059 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.402343988 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.402374029 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.405895948 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.405944109 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.405994892 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.406022072 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.406034946 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.406804085 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.406991959 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.407002926 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.410758018 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.410814047 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.410851955 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.410871983 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.410914898 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.414788008 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.414813995 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.414860964 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.414876938 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.414889097 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.418481112 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.418502092 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.418550014 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.418564081 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.418586016 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.422377110 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.422410965 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.422445059 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.422458887 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.422487020 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.422511101 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.426424980 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.426461935 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.426506042 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.426521063 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.426562071 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.426562071 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.426568985 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.430311918 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.430356026 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.430387020 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.430392981 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.430463076 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.433760881 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.433809042 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.433842897 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.433855057 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.433873892 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.437475920 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.437532902 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.437550068 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.437568903 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.437582016 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.437602043 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.440618038 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.440665007 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.440696955 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.440716028 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.440736055 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.444879055 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.444945097 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.444962978 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.444993019 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.445020914 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.447794914 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.447839022 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.447889090 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.447902918 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.447917938 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.451227903 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.451293945 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.451327085 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.451344013 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.451376915 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.454890966 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.454935074 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.454978943 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.454993963 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.455008030 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.457915068 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.457964897 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.458004951 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.458020926 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.458033085 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.461049080 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.461091042 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.461127996 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.461143017 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.461153984 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.463974953 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.464030027 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.464056969 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.464067936 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.464112043 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.467269897 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.467353106 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.467400074 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.467417955 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.467428923 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.470112085 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.470180035 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.470200062 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.470225096 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.470238924 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.473823071 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.473862886 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.473906994 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.473925114 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.473942041 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.476317883 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.476388931 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.476408005 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.476423979 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.476438999 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.476461887 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.479204893 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.479249954 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.479302883 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.479321003 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.479332924 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.482004881 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.482054949 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.482095957 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.482109070 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.482142925 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.485688925 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.485728979 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.485769987 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.485796928 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.485810041 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.487943888 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.487994909 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.488030910 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.488042116 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.488078117 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.490712881 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.490753889 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.490792990 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.490808964 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.490823984 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.493913889 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.493961096 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.493992090 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.494018078 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.494031906 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.496427059 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.496469021 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.496505022 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.496529102 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.496541023 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.498855114 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.498935938 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.498953104 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.498999119 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.499052048 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.499058962 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.501568079 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.501607895 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.501636982 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.501658916 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.501671076 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.505130053 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.505177021 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.505211115 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.505228996 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.505239964 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.507312059 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.507352114 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.507376909 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.507397890 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.507410049 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.509321928 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.509371042 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.509424925 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.509434938 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.509454012 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.511682034 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.511720896 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.511759043 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.511770964 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.511782885 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.514426947 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.514473915 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.514504910 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.514523029 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.514548063 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.517148018 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.517190933 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.517230034 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.517251968 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.517272949 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.519344091 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.519393921 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.519438028 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.519453049 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.519464970 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.522017002 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.522073984 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.522097111 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.522118092 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.522136927 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.524086952 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.524159908 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.524175882 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.524207115 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.524245977 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.527916908 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.527971029 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.528001070 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.528012037 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.528022051 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.529244900 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.529284000 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.529314041 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.529329062 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.529341936 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.531295061 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.531315088 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.531373978 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.531393051 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.531409025 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.533401966 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.533427954 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.533468008 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.533484936 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.533499956 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.535777092 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.535797119 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.535845041 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.535859108 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.535878897 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.537916899 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.537940025 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.537977934 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.538000107 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.538011074 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.540426016 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.540445089 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.540502071 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.540520906 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.542324066 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.542346954 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.542402983 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.542414904 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.542432070 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.544590950 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.544616938 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.544660091 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.544681072 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.544702053 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.546403885 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.546428919 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.546477079 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.546499014 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.546510935 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.548857927 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.548876047 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.548924923 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.548952103 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.548965931 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.550652981 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.550678015 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.550715923 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.550731897 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.550743103 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.553122044 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.553141117 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.553227901 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.553248882 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.555068970 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.555093050 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.555135012 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.555155993 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.555167913 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.556853056 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.556871891 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.556916952 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.556935072 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.556945086 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.559055090 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.559082031 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.559119940 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.559134007 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.559144974 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.560834885 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.560853004 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.560915947 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.560930967 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.563008070 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.563031912 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.563082933 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.563097000 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.563107014 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.564960003 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.564980984 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.565035105 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.565045118 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.565067053 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.566771030 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.566793919 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.566838026 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.566845894 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.566859007 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.568855047 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.568873882 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.568921089 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.568938017 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.568948984 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.570750952 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.570775986 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.570822954 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.570830107 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.570846081 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.572582960 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.572602987 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.572647095 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.572654009 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.572668076 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.574827909 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.574851990 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.574894905 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.574914932 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.574928045 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.576888084 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.576906919 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.576958895 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.576970100 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.577012062 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.578531027 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.578556061 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.578599930 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.578608036 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.578618050 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.580091953 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.580122948 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.580172062 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.580180883 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.580208063 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.582040071 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.582062960 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.582103014 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.582117081 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.582132101 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.584001064 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.584021091 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.584085941 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.584096909 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.585736036 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.585758924 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.585803032 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.585814953 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.585824966 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.587362051 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.587380886 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.587447882 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.587461948 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.589288950 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.589310884 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.589353085 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.589366913 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.589379072 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.591203928 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.591223955 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.591269970 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.591288090 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.591306925 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.592670918 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.592694044 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.592740059 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.592750072 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.592761040 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.594837904 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.594856024 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.594908953 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.594928980 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.594976902 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.596640110 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.596662998 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.596709013 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.596751928 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.596765041 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.598222017 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.598241091 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.598303080 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.598319054 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.598346949 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.599849939 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.599874020 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.599916935 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.599937916 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.599948883 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.601511002 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.601528883 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.601579905 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.601593018 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.601613998 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.603354931 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.603379011 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.603419065 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.603429079 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.603451014 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.605112076 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.605129957 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.605185986 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.605195045 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.606344938 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.606369019 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.606415987 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.606429100 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.606456041 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.608251095 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.608268976 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.608340979 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.608352900 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.609891891 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.609915972 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.609961033 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.609985113 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.609997988 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.611478090 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.611498117 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.611543894 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.611562014 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.611587048 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.613918066 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.613941908 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.613990068 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.614003897 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.614022017 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.615253925 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.615274906 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.615308046 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.615315914 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.615335941 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.616223097 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.616251945 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.616291046 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.616303921 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.616316080 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.617949009 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.617968082 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.618024111 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.618036985 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.618071079 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.621392012 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.621417999 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.621455908 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.621481895 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.621495008 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.622709036 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.622725964 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.622786045 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.622798920 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.623707056 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.623730898 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.623760939 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.623769045 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.623795986 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.625447989 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.625468016 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.625499010 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.625515938 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.625534058 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.626583099 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.626605988 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.626636028 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.626642942 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.626657963 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.628447056 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.628465891 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.628504038 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.628520966 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.628531933 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.630532026 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.630556107 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.630589008 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.630614996 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.630630970 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.632152081 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.632173061 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.632210016 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.632216930 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.632230043 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.633281946 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.633305073 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.633342981 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.633351088 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.633361101 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.634673119 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.634694099 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.634733915 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.634742022 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.634752035 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.635982990 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.636007071 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.636039019 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.636046886 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.636065960 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.637684107 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.637702942 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.637746096 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.637761116 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.637769938 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.639430046 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.639455080 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.639506102 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.639524937 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.639539003 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.640779972 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.640799999 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.640840054 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.640851974 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.640872002 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.641886950 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.641910076 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.641952038 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.641964912 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.641976118 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.643126965 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.643146038 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.643208981 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.643227100 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.644567966 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.644593000 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.644634962 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.644654989 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.644666910 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.645838976 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.645859003 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.645930052 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.645939112 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.647063017 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.647087097 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.647124052 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.647134066 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.647149086 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.648747921 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.648768902 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.648812056 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.648819923 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.648838043 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.650178909 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.650202990 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.650293112 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.650310040 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.651653051 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.651681900 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.651719093 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.651729107 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.651746988 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.652728081 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.652755022 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.652786970 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.652796984 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.652812958 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.654017925 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.654297113 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.654319048 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.654359102 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.654366970 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.654393911 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.655201912 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.655229092 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.655261993 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.655272961 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.655299902 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.656831026 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.656851053 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.656897068 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.656915903 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.656928062 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.658493042 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.658518076 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.658549070 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.658557892 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.658581972 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.659843922 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.659866095 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.659934044 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.659941912 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.661277056 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.661309958 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.661350965 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.661370039 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.661381960 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.662734032 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.662754059 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.662796974 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.662811041 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.662836075 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.664127111 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.664151907 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.664186954 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.664200068 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.664211035 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.665836096 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.665853977 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.665899038 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.665910959 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.665921926 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.667326927 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.667350054 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.667381048 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.667393923 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.667416096 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.668435097 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.668453932 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.668493032 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.668505907 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.668515921 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.669529915 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.669555902 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.669584990 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.669595003 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.669616938 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.670857906 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.670876980 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.670911074 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.670923948 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.670941114 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.672363997 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.672394037 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.672429085 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.672444105 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.672465086 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.674133062 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.674151897 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.674199104 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.674213886 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.674242020 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.675275087 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.675302982 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.675347090 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.675355911 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.675369024 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.676054001 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.676111937 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.676120996 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.676126957 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.676156998 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.677022934 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.677319050 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.677381039 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.677505970 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.677570105 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.678632975 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.678662062 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.678690910 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.678699970 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.678719044 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.678738117 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.679972887 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.680342913 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.680360079 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.680413008 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.680424929 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.680443048 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.680469036 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.680514097 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.680530071 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.680557013 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.680563927 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.680593967 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.680619955 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.681510925 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.681519032 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.681545019 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.681571960 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.681576014 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.681602001 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.683232069 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.683290958 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.683304071 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.683327913 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.683352947 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.683671951 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.683713913 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.683736086 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.683749914 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.683768034 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.684720039 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.684761047 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.684778929 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.684793949 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.684834003 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.685889959 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.685930014 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.685955048 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.685981989 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.686002970 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.686018944 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.686050892 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.686100006 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.687124968 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.687181950 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.687251091 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.687328100 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.688186884 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.688227892 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.688249111 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.688277006 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.688349009 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.688349009 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.688368082 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.689209938 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.689251900 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.689285040 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.689299107 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.689311028 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.689340115 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.690123081 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.690169096 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.690184116 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.690188885 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.690210104 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.691832066 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.691871881 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.691900969 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.691921949 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.691937923 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.693065882 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.693109989 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.693128109 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.693147898 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.693166971 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.694381952 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.694420099 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.694439888 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.694452047 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.694480896 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.695858955 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.695918083 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.695935011 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.695951939 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.695967913 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.695981979 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.696094036 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.696147919 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.697738886 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.697782993 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.697801113 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.697824955 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.697838068 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.697860956 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.698400974 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.698447943 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.698462963 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.698478937 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.698499918 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.698514938 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.699459076 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.699513912 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.699528933 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.699548960 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.699567080 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.699583054 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.700525999 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.700572014 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.700583935 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.700598955 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.700623035 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.700638056 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.701877117 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.701935053 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.701968908 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.702023029 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.702863932 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.702912092 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.702924013 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.702948093 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.702965975 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.702980995 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.704261065 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.704277992 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.704341888 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.704369068 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.704384089 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.704411030 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.705389977 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.705435038 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.705467939 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.705481052 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.705499887 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.705517054 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.706417084 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.706460953 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.706494093 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.706504107 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.706551075 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.706573009 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.707607031 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.707653046 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.707688093 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.707701921 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.707734108 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.707752943 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.708076000 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.708133936 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.708165884 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.708173037 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.708189011 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.708206892 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.708349943 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.708389044 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.708406925 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.708415985 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.708462000 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.708801031 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.708842993 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.708864927 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.708873987 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.708899975 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.708921909 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.710288048 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.710339069 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.710383892 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.710403919 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.710423946 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.710438013 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.710724115 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.710747004 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.710779905 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.710786104 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.710813999 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.710828066 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.711667061 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.711709023 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.711730957 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.711740017 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.711756945 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.712577105 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.712595940 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.712652922 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.712671041 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.712682962 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.713865995 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.713907003 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.713938951 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.713952065 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.713978052 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.714764118 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.714783907 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.714827061 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.714838028 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.714863062 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.714925051 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.715735912 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.715758085 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.715794086 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.715801001 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.715822935 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.716162920 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.716753006 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.716773987 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.716871023 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.716877937 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.716905117 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.717809916 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.717835903 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.717860937 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.717873096 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.717886925 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.719010115 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.719028950 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.719065905 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.719079971 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.719091892 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.719880104 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.719902992 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.719930887 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.719940901 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.719952106 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.720962048 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.720982075 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.721008062 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.721015930 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.721031904 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.721740961 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.721764088 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.721793890 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.721801996 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.721813917 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.722799063 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.722819090 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.722848892 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.722862005 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.722882032 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.723710060 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.723733902 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.723763943 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.723774910 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.723786116 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.724786997 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.724807024 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.724832058 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.724853039 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.724865913 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.726314068 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.726339102 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.726370096 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.726385117 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.726394892 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.726402044 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.727816105 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.727834940 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.727883101 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.727897882 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.727911949 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.728939056 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.728961945 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.728992939 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.729005098 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.729021072 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.729027987 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.730114937 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.730140924 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.730169058 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.730180979 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.730196953 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.730577946 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.730603933 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.730628967 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.730639935 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.730649948 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.730659962 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.731023073 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.731718063 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.731753111 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.731780052 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.731786966 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.731810093 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.732206106 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.732673883 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.732709885 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.732742071 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.732748032 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.732777119 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.733597994 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.733639002 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.733661890 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.733669996 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.733690023 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.734672070 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.734705925 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.734735012 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.734750032 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.734760046 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.734767914 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.735552073 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.735590935 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.735610962 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.735619068 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.735637903 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.736476898 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.736510992 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.736546993 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.736558914 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.736572981 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.737592936 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.737631083 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.737657070 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.737665892 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.737687111 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.738311052 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.738343000 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.738380909 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.738389015 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.738408089 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.739511967 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.739525080 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.739567041 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.739597082 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.739619970 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.739675045 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.739682913 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.740133047 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.740443945 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.740489960 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.740509987 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.740520000 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.740550995 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.741213083 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.741296053 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.741303921 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.741395950 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.741452932 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.741457939 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.741543055 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.741596937 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.741602898 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.741636992 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.742180109 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.742218971 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.742238998 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.742249012 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.742269993 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.742291927 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.743037939 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.743077993 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.743093967 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.743105888 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.743134022 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.743150949 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.744132996 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.744153023 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.744189978 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.744199038 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.744219065 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.744240046 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.745022058 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.745022058 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.745074034 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.745088100 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.745101929 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.745130062 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.745151997 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.745692968 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.745774031 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.745821953 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.745883942 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.745883942 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.745893955 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.745930910 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.746754885 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.746797085 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.746822119 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.746831894 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.746855974 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.746875048 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.747673035 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.747715950 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.747737885 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.747745991 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.747791052 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.747791052 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.748547077 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.748843908 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.748888016 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.748910904 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.748918056 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.748940945 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.748958111 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.749337912 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.749463081 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.749504089 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.749531031 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.749538898 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.749557018 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.749578953 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.750180960 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.750247002 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.750267029 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.750330925 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.751101017 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.751142979 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.751173019 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.751187086 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.751199961 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.751221895 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.751264095 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.751965046 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.752005100 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.752032995 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.752044916 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.752063036 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.752083063 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.752130032 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.752933025 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.752975941 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.753010035 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.753019094 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.753036976 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.753055096 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.753693104 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.753731966 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.753732920 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.753768921 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.753774881 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.753803015 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.753822088 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.754730940 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.754772902 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.754810095 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.754813910 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.754853964 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.755070925 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.755269051 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.755315065 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.755338907 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.755353928 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.755379915 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.755397081 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.755737066 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.756192923 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.756234884 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.756266117 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.756273985 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.756300926 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.756324053 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.756897926 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.756953955 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.756993055 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.757020950 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.757026911 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.757050037 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.757070065 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.757755995 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.757793903 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.757831097 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.757839918 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.757860899 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.757884979 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.757992983 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.758590937 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.758636951 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.758665085 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.758671045 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.758683920 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.758711100 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.758789062 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.759573936 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.759617090 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.759654045 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.759663105 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.759674072 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.759707928 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.760286093 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.760344982 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.760348082 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.760369062 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.760394096 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.760418892 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.760454893 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.761106014 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.761313915 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.761353970 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.761372089 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.761390924 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.761405945 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.761425972 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.761480093 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.761523008 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.761545897 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.761557102 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.761567116 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.761590004 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.762536049 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.762581110 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.762599945 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.762609005 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.762629032 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.762651920 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.762764931 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.763573885 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.763614893 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.763645887 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.763658047 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.763673067 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.763698101 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.764434099 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.764475107 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.764506102 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.764513016 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.764532089 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.764554977 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.765348911 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.765417099 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.765429020 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.765508890 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.765960932 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.766005993 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.766040087 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.766047001 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.766073942 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.766092062 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.766928911 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.766972065 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.766995907 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.767003059 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.767024040 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.767045021 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.767476082 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.767697096 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.767749071 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.767762899 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.767769098 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.767796040 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.767808914 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.768119097 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.768332958 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.768373966 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.768387079 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.768398046 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.768424988 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.768448114 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.768944025 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.768999100 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.769037008 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.769046068 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.769073009 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.769082069 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.769573927 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.769895077 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.769939899 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.769957066 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.769965887 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.769995928 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.770004988 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.770179987 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.770754099 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.770798922 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.770826101 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.770843029 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.770859003 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.770883083 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.771282911 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.771326065 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.771343946 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.771353960 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.771383047 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.771394968 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.771691084 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.771889925 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.771930933 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.771958113 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.771966934 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.771996021 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.772007942 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.772543907 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.773386955 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.773442984 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.773459911 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.773478985 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.773514032 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.773528099 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.774359941 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.774405003 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.774430037 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.774444103 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.774456978 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.774655104 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.774728060 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.775002956 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.775048018 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.775063992 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.775073051 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.775104046 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.775119066 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.775464058 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.775473118 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.775516987 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.775537968 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.775543928 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.775564909 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.775583029 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.776154041 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.776195049 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.776215076 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.776225090 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.776237011 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.776259899 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.776978016 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.777044058 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.777085066 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.777106047 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.777117968 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.777142048 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.777160883 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.777448893 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.777491093 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.777513981 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.777523994 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.777546883 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.777564049 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.777666092 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.778335094 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.778377056 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.778398037 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.778408051 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.778420925 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.778440952 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.778923035 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.780256033 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.780417919 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.780462980 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.780476093 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.780488014 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.780515909 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.780531883 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.780985117 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.781949997 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.781989098 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.782017946 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.782033920 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.782046080 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.782073975 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.782345057 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.782397032 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.782427073 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.782435894 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.782449007 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.782470942 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.782603025 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.782699108 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.782747030 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.782769918 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.782778025 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.782794952 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.782824993 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.783070087 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.783504009 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.783545971 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.783576012 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.783585072 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.783608913 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.783622026 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.783723116 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.784372091 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.784410954 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.784435034 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.784447908 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.784466028 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.784485102 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.784599066 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.784743071 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.784784079 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.784806013 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.784813881 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.784831047 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.784849882 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.785104990 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.785550117 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.785598993 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.785619020 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.785629988 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.785666943 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.785684109 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.786237955 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.786711931 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.786756039 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.786783934 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.786791086 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.786808968 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.786832094 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.786925077 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.787379980 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.787420034 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.787446022 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.787456989 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.787467957 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.787477970 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.787506104 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.787604094 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.787888050 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.787929058 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.787946939 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.787957907 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.787970066 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.787988901 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.788283110 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.788618088 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.788661003 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.788682938 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.788696051 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.788707018 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.788717985 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.788736105 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.788992882 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.790826082 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.790865898 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.790908098 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.790921926 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.790936947 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.790961981 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.791249990 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.791287899 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.791323900 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.791330099 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.791340113 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.791371107 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.791466951 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.791510105 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.791532993 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.791552067 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.791557074 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.791582108 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.791593075 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.792094946 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.792155027 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.792171955 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.792184114 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.792200089 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.792221069 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.792859077 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.792901993 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.792922974 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.792932034 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.792942047 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.792962074 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.793673038 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.793726921 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.793745995 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.793770075 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.793800116 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.793817997 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.794037104 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.794084072 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.794099092 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.794110060 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.794132948 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.794156075 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.794795990 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.794859886 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.794864893 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.794888020 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.794933081 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.794941902 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.795645952 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.795685053 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.795705080 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.795717001 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.795728922 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.795751095 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.796436071 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.796483040 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.796500921 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.796514034 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.796538115 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.796561003 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.797446012 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.797487020 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.797507048 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.797517061 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.797528028 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.797545910 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.798374891 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.798415899 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.798439026 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.798451900 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.798468113 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.798491001 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.798883915 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.798926115 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.798945904 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.798957109 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.798968077 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.798996925 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.799746037 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.799791098 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.799810886 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.799822092 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.799837112 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.799851894 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.800026894 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.800066948 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.800092936 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.800106049 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.800122976 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.800147057 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.800677061 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.800694942 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.800741911 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.800750017 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.800787926 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.801373005 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.801388979 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.801455975 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.801461935 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.801497936 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.802279949 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.802299976 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.802334070 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.802344084 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.802365065 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.802385092 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.802752018 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.802769899 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.802822113 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.802830935 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.802875042 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.803139925 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.803654909 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.803672075 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.803720951 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.803728104 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.803769112 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.803870916 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.804296017 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.804320097 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.804367065 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.804374933 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.804415941 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.804534912 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.805336952 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.805354118 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.805397034 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.805413008 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.805423975 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.805445910 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.806183100 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.806202888 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.806253910 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.806263924 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.806310892 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.807352066 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.807374001 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.807404995 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.807415962 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.807432890 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.807451963 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.807790995 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.807807922 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.807856083 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.807862997 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.807903051 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.808255911 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.808275938 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.808315992 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.808325052 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.808355093 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.808361053 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.808549881 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.808566093 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.808624029 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.808629990 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.808662891 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.808752060 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.809005976 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.809025049 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.809060097 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.809070110 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.809091091 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.809108973 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.809520006 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.809626102 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.809642076 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.809688091 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.809700012 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.809711933 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.809726954 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.810220003 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.810400963 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.810420036 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.810458899 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.810468912 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.810491085 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.810512066 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.810761929 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.810777903 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.810823917 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.810831070 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.810847998 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.810868025 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.810970068 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.811624050 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.811652899 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.811700106 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.811706066 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.811729908 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.811753988 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.812427998 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.812453985 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.812460899 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.812472105 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.812475920 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.812505007 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.813044071 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.813069105 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.813103914 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.813110113 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.813118935 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.813174963 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.813446045 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.813471079 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.813499928 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.813508034 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.813529968 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.814034939 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.814320087 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.814352989 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.814378023 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.814390898 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.814404011 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.814508915 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.814754009 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.814891100 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.814915895 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.814944983 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.814954042 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.814974070 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.815409899 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.815721989 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.815748930 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.815774918 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.815782070 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.815799952 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.815838099 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.816041946 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.816066980 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.816095114 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.816107035 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.816119909 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.816370010 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.816876888 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.816909075 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.816939116 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.816946983 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.816965103 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.817358971 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.817914009 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.817939043 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.817966938 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.817972898 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.817997932 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.818195105 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.818809986 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.818917990 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.818943977 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.818972111 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.818979979 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.819000006 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.819257975 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.819289923 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.819315910 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.819323063 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.819341898 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.819550991 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.819657087 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.819681883 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.819713116 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.819720030 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.819736958 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.820714951 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.820744991 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.820771933 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.820780039 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.820799112 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.820868015 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.822068930 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.822101116 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.822144985 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.822151899 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.822161913 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.822212934 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.822249889 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.822262049 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.822267056 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.822304010 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.822402954 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.822578907 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.822614908 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.822634935 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.822643995 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.822662115 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.823076963 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.823436022 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.824234009 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.824266911 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.824295998 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.824306011 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.824316978 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.824714899 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.824752092 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.824776888 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.824784040 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.824805021 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.825459003 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.825490952 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.825521946 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.825531006 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.825558901 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.825609922 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.826335907 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.826370955 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.826448917 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.826459885 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.827006102 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.827043056 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.827064991 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.827075958 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.827096939 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.827728987 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.827759981 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.827789068 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.827805042 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.827825069 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.829272032 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.829330921 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.829344988 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.829365969 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.829474926 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.830244064 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.830275059 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.830307007 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.830317974 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.830331087 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.830943108 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.830984116 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.831007004 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.831020117 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.831042051 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.831423998 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.831496000 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.831511021 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.831523895 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.831582069 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.831588984 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.831969023 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.832014084 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.832026005 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.832032919 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.832052946 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.832073927 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.832293987 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.832333088 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.832350016 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.832360983 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.832374096 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.832397938 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.833039999 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.833080053 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.833101988 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.833110094 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.833132029 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.833158016 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.834558964 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.834599018 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.834633112 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.834651947 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.834664106 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.834682941 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.835122108 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.835160017 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.835185051 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.835195065 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.835211039 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.835230112 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.835700989 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.835738897 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.835753918 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.835777044 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.835798025 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.835822105 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.836359978 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.836395979 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.836429119 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.836436033 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.836460114 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.836478949 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.837076902 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.837120056 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.837138891 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.837153912 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.837181091 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.837196112 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.837589979 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.837630987 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.837655067 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.837657928 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.837675095 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.837693930 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.838068008 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.838120937 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.838129044 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.838140965 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.838166952 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.838180065 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.839102030 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.839137077 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.839163065 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.839171886 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.839190960 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.839204073 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.839780092 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.839819908 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.839843988 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.839854002 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.839862108 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.839889050 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.840627909 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.840668917 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.840694904 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.840702057 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.840723991 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.840744019 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.840790033 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.840840101 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.841079950 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.841101885 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.841135979 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.841144085 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.841164112 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.841190100 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.841289043 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.841461897 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.841476917 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.841526985 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.841532946 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.841563940 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.841607094 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.841917992 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.841934919 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.841968060 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.841978073 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.841995001 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.842015028 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.842060089 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.842335939 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.842588902 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.842626095 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.842644930 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.842648029 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.842667103 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.842775106 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.842816114 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.842835903 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.842863083 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.842871904 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.842895031 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.843030930 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.843507051 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.843734980 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.843754053 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.843794107 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.843801975 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.843816996 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.844049931 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.844069004 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.844095945 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.844110966 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.844126940 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.844230890 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.844546080 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.844784021 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.844799042 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.844835043 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.844835997 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.844846964 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.844858885 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.844883919 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.845216990 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.845525980 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.845752954 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.845768929 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.845809937 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.845820904 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.845834970 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.845849991 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.845904112 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.846101046 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.846626997 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.846647978 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.846678019 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.846689939 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.846710920 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.846729040 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.847240925 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.847259045 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.847294092 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.847300053 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.847320080 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.847333908 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.848118067 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.848155022 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.848176956 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.848181009 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.848198891 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.848680019 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.848695040 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.848726988 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.848736048 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.848754883 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.850101948 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.850120068 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.850151062 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.850164890 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.850174904 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.850449085 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.850472927 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.850497961 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.850514889 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.850529909 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.852242947 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.852269888 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.852303028 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.852315903 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.852332115 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.852349043 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.852363110 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.852370024 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.852679014 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.852705956 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.852730989 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.852744102 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.852756023 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.853944063 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.853986025 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.854001999 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.854021072 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.854036093 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.857157946 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.857215881 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.857219934 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.857240915 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.857260942 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.857621908 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.857652903 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.857673883 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.857681990 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.857697964 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.858055115 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.858083010 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.858104944 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.858112097 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.858134031 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.859697104 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.859719992 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.859751940 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.859759092 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.859781027 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.860240936 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.860270977 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.860296011 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.860304117 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.860323906 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.861279011 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.861315966 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.861346960 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.861354113 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.861362934 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.861388922 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.862324953 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.862377882 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.862411976 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.862418890 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.862441063 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.862462044 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.863567114 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.863626003 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.863627911 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.863650084 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.863677025 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.863697052 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.864698887 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.864764929 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.864784956 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.864845037 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.866218090 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.866257906 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.866278887 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.866286993 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.866301060 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.866679907 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.866720915 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.866744995 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.866754055 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.866776943 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.867846012 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.867886066 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.867906094 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.867914915 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.867938042 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.868159056 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.868199110 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.868204117 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.868223906 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.868251085 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.869968891 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.870008945 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.870033979 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.870049953 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.870060921 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.870080948 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.870126009 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.870197058 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.870462894 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.870508909 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.870521069 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.870531082 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.870568037 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.870585918 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.870709896 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.870753050 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.870764971 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.870775938 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.870803118 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.870816946 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.871318102 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.871361971 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.871375084 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.871387005 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.871408939 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.871428013 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.872431040 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.872478962 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.872513056 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.872519016 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.872540951 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.872564077 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.872659922 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.872703075 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.872714996 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.872721910 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.872735023 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.872757912 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.872771025 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.874660015 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.874707937 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.874732971 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.874741077 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.874753952 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.874783039 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.875058889 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.875099897 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.875118971 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.875124931 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.875134945 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.875159025 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.876327038 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.876384974 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.876418114 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.876431942 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.876444101 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.876466990 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.877263069 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.877310991 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.877334118 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.877341986 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.877351999 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.877378941 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.877378941 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.878598928 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.878639936 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.878659964 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.878668070 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.878695965 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.878707886 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.880532980 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.880579948 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.880604029 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.880610943 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.880620956 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.880646944 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.881797075 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.881840944 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.881864071 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.881871939 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.881880999 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.881902933 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.883307934 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.883352995 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.883388996 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.883395910 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.883414030 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.883430004 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.885598898 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.885673046 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.885689020 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.885746002 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.888026953 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.888073921 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.888094902 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.888107061 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.888119936 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.888139963 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.889338017 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.889403105 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.889413118 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.889436960 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.889462948 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.889487982 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.890585899 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.890630007 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.890650988 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.890660048 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.890670061 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.890697002 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.891329050 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.891374111 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.891390085 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.891396999 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.891427994 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.891686916 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.891730070 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.891746044 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.891752005 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.891782999 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.891992092 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.892041922 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.892056942 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.892064095 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.892095089 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.892108917 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.892349005 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.892394066 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.892405987 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.892416954 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.892441034 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.892460108 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.892698050 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.892741919 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.892754078 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.892765045 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.892792940 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.892803907 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.893098116 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.893152952 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.893167019 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.893176079 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.893204927 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.893224955 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.893429041 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.893475056 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.893506050 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.893512964 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.893531084 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.893546104 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.893836975 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.893886089 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.893902063 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.893908978 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.893939018 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.895467997 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.895512104 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.895531893 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.895539999 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.895560980 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.895577908 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.897102118 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.897144079 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.897171021 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.897176981 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.897185087 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.897196054 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.897217035 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.897613049 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.897659063 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.897680998 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.897689104 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.897699118 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.897713900 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.897728920 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.897969007 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.898030043 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.898032904 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.898053885 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.898080111 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.898101091 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.898869991 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.898914099 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.898926973 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.898935080 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.898967981 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.900146961 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.900192022 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.900213957 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.900223017 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.900244951 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.900259972 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.900804996 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.900820971 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.900866985 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.900875092 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.900891066 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.900913000 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.901633978 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.901650906 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.901696920 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.901704073 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.901726961 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.901735067 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.902628899 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.902646065 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.902698994 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.902705908 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.902741909 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.903091908 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.903110027 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.903162956 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.903170109 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.903229952 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.904215097 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.904230118 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.904297113 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.904303074 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.904321909 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.904341936 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.904944897 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.904963017 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.905004978 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.905013084 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.905030012 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.905050993 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.906285048 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.906306028 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.906354904 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.906362057 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.906378031 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.906404972 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.908004045 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.908024073 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.908065081 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.908081055 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.908092976 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.908116102 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.908391953 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.908406973 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.908448935 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.908458948 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.908483028 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.908499002 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.908843994 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.908859015 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.908886909 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.908895016 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.908916950 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.908938885 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.909976006 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.909991026 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.910034895 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.910042048 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.910057068 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.910075903 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.910375118 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.910393000 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.910425901 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.910433054 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.910455942 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.910475969 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.911588907 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.911612988 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.911647081 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.911657095 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.911669970 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.911691904 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.912245989 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.912267923 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.912297964 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.912305117 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.912322998 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.912343979 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.913011074 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.913033962 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.913069010 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.913074970 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.913095951 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.913117886 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.914165020 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.914174080 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.914215088 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.914220095 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.914244890 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.914257050 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.914885044 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.914907932 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.914968967 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.914975882 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.915013075 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.915020943 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.915576935 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.915601015 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.915632963 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.915638924 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.915662050 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.915683031 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.916970968 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.916994095 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.917042017 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.917061090 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.917072058 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.917093992 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.918076038 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.918100119 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.918147087 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.918154955 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.918169022 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.918186903 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.918371916 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.918416977 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.918428898 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.918436050 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.918456078 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.918474913 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.919599056 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.919631958 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.919683933 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.919708014 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.919722080 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.919749975 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.920078039 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.920116901 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.920142889 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.920155048 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.920171976 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.920192957 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.921511889 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.921551943 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.921587944 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.921607971 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.921622038 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.921644926 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.921695948 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.921740055 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.922054052 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.922113895 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.922137976 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.922198057 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.923110962 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.923151970 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.923187971 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.923193932 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.923211098 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.923420906 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.923468113 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.923482895 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.923496962 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.923515081 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.923528910 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.924918890 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.924954891 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.925003052 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.925010920 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.925039053 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.925242901 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.925286055 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.925299883 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.925307989 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.925342083 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.926326990 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.926366091 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.926400900 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.926407099 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.926426888 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.926700115 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.926740885 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.926754951 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.926762104 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.926800966 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.927846909 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.927889109 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.927911997 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.927918911 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.927941084 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.928236008 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.928282976 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.928292990 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.928297043 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.928325891 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.928493023 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.928534031 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.928550959 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.928555012 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.928565979 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.928585052 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.929807901 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.929846048 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.929874897 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.929882050 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.929900885 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.929927111 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.931823969 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.931890965 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.931919098 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.931978941 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.932684898 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.932729959 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.932760000 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.932773113 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.932800055 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.932818890 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.933020115 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.933064938 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.933106899 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.933120966 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.933139086 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.933163881 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.933212996 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.933221102 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.933255911 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.934710979 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.934752941 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.934776068 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.934793949 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.934803963 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.934832096 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.935956955 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.936003923 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.936039925 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.936044931 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.936067104 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.936085939 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.936804056 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.936853886 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.936876059 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.936883926 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.936893940 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.936922073 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.937359095 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.937401056 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.937424898 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.937433004 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.937443972 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.937457085 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.937789917 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.937850952 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.937858105 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.937886000 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.937939882 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.937946081 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.938338041 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.938401937 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.938410044 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.938429117 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.938483953 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.938491106 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.938591003 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.938630104 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.938641071 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.938656092 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.938683987 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.938783884 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.938833952 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.938842058 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.939451933 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.939510107 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.939516068 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.939554930 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.939604998 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.939610958 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.939866066 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.939913034 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.939922094 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.939938068 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.939971924 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.941479921 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.941519022 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.941543102 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.941551924 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.941574097 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.942140102 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.942193985 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.942200899 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.942225933 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.942253113 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.942377090 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.942449093 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.942456007 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.942502975 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.943428040 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.943471909 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.943506002 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.943511963 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.943542957 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.943561077 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.943955898 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.943995953 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.944024086 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.944030046 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.944050074 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.944073915 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.944427013 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.944500923 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.944509029 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.944533110 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.944561005 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.944582939 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.945121050 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.945162058 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.945182085 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.945189953 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.945216894 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.946315050 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.946357965 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.946408033 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.946414948 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.946446896 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.946822882 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.946861982 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.946887016 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.946896076 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.946916103 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.948343039 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.948384047 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.948420048 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.948430061 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.948441029 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.948884964 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.948921919 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.948961973 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.948970079 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.948982954 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.949004889 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.949031115 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.949079990 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.950719118 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.950759888 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.950789928 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.950797081 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.950823069 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.951210976 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.951267958 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.951276064 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.951297045 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.951323986 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.952316046 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.952358007 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.952379942 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.952400923 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.952418089 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.952827930 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.952874899 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.952889919 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.952900887 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.952931881 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.954313040 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.954353094 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.954391956 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.954408884 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.954420090 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.954735041 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.954782009 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.954797029 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.954803944 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.954840899 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.955142975 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.955187082 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.955210924 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.955219030 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.955243111 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.955657005 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.955694914 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.955718040 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.955724955 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.955745935 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.955766916 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.956444025 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.956500053 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.956532955 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.956538916 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.956573009 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.956592083 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.956912994 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.956968069 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.956989050 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.956996918 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.957010984 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.957034111 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.957196951 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.957242012 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.957276106 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.957282066 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.957304955 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.957325935 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.958435059 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.958483934 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.958498001 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.958507061 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.958539963 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.958558083 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.958631992 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.958686113 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.959500074 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.959547043 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.959563971 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.959572077 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.959595919 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.959825039 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.959872961 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.959881067 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.959897041 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.959928036 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.960231066 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.960762978 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.960813999 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.960829020 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.960836887 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.960871935 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.961102962 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.961232901 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.961272955 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.961283922 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.961287975 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.961313009 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.961313009 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.961622953 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.961827040 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.961993933 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.962009907 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.962052107 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.962059021 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.962080956 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.962208986 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.962452888 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.962537050 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.962551117 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.962582111 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.962588072 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.962608099 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.962822914 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.962824106 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.962833881 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.962857008 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.962869883 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.962873936 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.962898970 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.963179111 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.963272095 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.963295937 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.963326931 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.963332891 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.963354111 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.963433027 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.963804960 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.963824034 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.963869095 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.963875055 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.963886976 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.964013100 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.964287043 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.964303017 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.964343071 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.964349031 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.964365005 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.964786053 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.965321064 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.965337038 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.965363979 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.965370893 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.965409994 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.965455055 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.965989113 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.966010094 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.966053009 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.966059923 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.966087103 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.966275930 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.966809034 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.966948986 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.966970921 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.967014074 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.967020035 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.967037916 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.967514992 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.968028069 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.968044996 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.968091965 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.968103886 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.968122959 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.968306065 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.968662024 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.968678951 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.968724966 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.968734026 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.968772888 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.968996048 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.969130993 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.969146013 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.969193935 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.969202042 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.969571114 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.969703913 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.969718933 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.969775915 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.969782114 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.970058918 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.970077038 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.970109940 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.970117092 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.970133066 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.970252037 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.970352888 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.970367908 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.970412970 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.970422029 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.970432997 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.971035004 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.971069098 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.971086979 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.971091032 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.971117973 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.971383095 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.971862078 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.971878052 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.971929073 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.971935034 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.972356081 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.972376108 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.972404957 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.972412109 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.972433090 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.972433090 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.972716093 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.972729921 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.972747087 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.972755909 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.972765923 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.972800016 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.973407030 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.973426104 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.973462105 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.973467112 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.973484039 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.973933935 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.974234104 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.974513054 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.974528074 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.974565983 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.974571943 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.974590063 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.974878073 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.974895954 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.974922895 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.974927902 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.974948883 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.975164890 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.975178957 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.975219965 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.975229025 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.975239038 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.975248098 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.975799084 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.975820065 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.975848913 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.975856066 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.975878954 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.976350069 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.977091074 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.977104902 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.977165937 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.977171898 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.977180958 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.977180958 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.977399111 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.977415085 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.977442980 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.977447987 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.977471113 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.977471113 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.977782965 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.978019953 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.978672981 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.978688955 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.978730917 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.978744984 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.978755951 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.979008913 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.979026079 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.979051113 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.979063034 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.979079962 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.979151011 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.979197025 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.979208946 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.979341030 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.980034113 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.980050087 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.980104923 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.980122089 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.980137110 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.980355024 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.980381966 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.980407953 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.980417967 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.980442047 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.981529951 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.981544018 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.981574059 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.981583118 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.981601000 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.982038021 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.982055902 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.982084036 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.982089996 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.982106924 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.983428955 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.983442068 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.983489037 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.983496904 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.983510017 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.984591961 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.984611034 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.984647036 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.984654903 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.984678984 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.984934092 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.984947920 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.984978914 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.984986067 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.985004902 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.985330105 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.985348940 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.985373020 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.985379934 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.985404015 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.986440897 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.986454964 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.986498117 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.986502886 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.986517906 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.987931967 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.987950087 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.987989902 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.987998962 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.988015890 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.988224983 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.988239050 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.988275051 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.988282919 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.988297939 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.988820076 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.988862038 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.988867998 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.989123106 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.989140987 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.989168882 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.989176989 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.989197969 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.990235090 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.990247965 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.990287066 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.990293980 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.990303993 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.991530895 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.991549969 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.991579056 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.991585016 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.991607904 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.991910934 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.991925955 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.991966009 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.991972923 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.991991997 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.992224932 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.992242098 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.992269039 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.992275953 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.992299080 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.992310047 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.992731094 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.993153095 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.993179083 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.993205070 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.993211985 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.993233919 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.993525028 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.993700027 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.993724108 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.993760109 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.993766069 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.993805885 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.994291067 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.994704008 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.994729996 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.994757891 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.994766951 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.994800091 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.994807005 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.994843006 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.994858980 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.994863033 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.994895935 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.995151997 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.996067047 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.996082067 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.996119976 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.996129036 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.996154070 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.996179104 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.996601105 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.997191906 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.997208118 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.997271061 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.997278929 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.997320890 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.997405052 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.997508049 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.997522116 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.997560024 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.997566938 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.997591972 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.997612953 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.997757912 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.997921944 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.997936010 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.997965097 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.997973919 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.997999907 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.998016119 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.998316050 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.998598099 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.998924017 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.998940945 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.998980999 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.998987913 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.999010086 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.999031067 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.999355078 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.999371052 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.999408007 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.999418020 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:23.999434948 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.999455929 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:23.999584913 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.000201941 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.000220060 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.000258923 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.000277042 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.000293016 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.000298977 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.000319004 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.000327110 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.000339031 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.000732899 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.000754118 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.000783920 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.000797033 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.000825882 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.001264095 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.001625061 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.001641035 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.001696110 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.001703978 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.002032995 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.002053022 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.002087116 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.002094030 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.002120972 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.002408028 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.002425909 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.002466917 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.002480030 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.002496004 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.002657890 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.002713919 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.002751112 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.002774000 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.002783060 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.002796888 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.002809048 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.003112078 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.003607035 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.003628969 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.003676891 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.003689051 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.003707886 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.005198002 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.005218029 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.005256891 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.005274057 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.005291939 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.005763054 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.006005049 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.006103992 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.006119013 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.006160021 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.006170988 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.006182909 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.006650925 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.006669998 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.006711960 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.006725073 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.006737947 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.007023096 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.007256031 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.007271051 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.007340908 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.007340908 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.007356882 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.007374048 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.007913113 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.007931948 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.007962942 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.007973909 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.008002043 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.008604050 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.008618116 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.008680105 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.008697033 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.009670019 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.009684086 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.009728909 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.009747028 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.009763956 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.009783983 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.010432005 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.010447979 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.010505915 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.010520935 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.010564089 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.011621952 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.011639118 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.011693001 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.011704922 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.011744022 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.012531042 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.012547970 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.012588024 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.012594938 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.012625933 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.012645006 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.013319969 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.013334990 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.013381958 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.013389111 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.013427973 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.014118910 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.014136076 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.014183044 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.014190912 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.014228106 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.014707088 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.014722109 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.014772892 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.014780045 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.014820099 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.017487049 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.017503977 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.017574072 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.017590046 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.017620087 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.017632961 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.018090010 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.018106937 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.018145084 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.018155098 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.018178940 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.018199921 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.018920898 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.018935919 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.018975973 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.018989086 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.019007921 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.019032955 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.020481110 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.020497084 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.020546913 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.020555019 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.020592928 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.021121979 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.021136045 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.021187067 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.021193981 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.021229982 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.021552086 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.021678925 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.021694899 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.021733046 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.021739960 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.021766901 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.021790028 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.021949053 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.022715092 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.022730112 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.022789955 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.022797108 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.022864103 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.024115086 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.024130106 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.024178982 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.024185896 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.024224997 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.025357008 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.025372028 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.025429010 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.025434971 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.025474072 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.025796890 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.025815010 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.025856018 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.025862932 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.025883913 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.025906086 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.026932955 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.026947975 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.026983976 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.026989937 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.027009010 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.027031898 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.029181004 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.029206038 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.029264927 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.029272079 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.029287100 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.029309988 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.029611111 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.029625893 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.029671907 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.029678106 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.029701948 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.029725075 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.030772924 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.030803919 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.030833006 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.030838013 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.030859947 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.030883074 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.031162024 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.031191111 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.031220913 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.031229019 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.031255960 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.031274080 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.031980038 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.032067060 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.032110929 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.032135010 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.032143116 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.032160044 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.032262087 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.032344103 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.032375097 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.032406092 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.032413960 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.032437086 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.032449961 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.032773972 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.034049034 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.034094095 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.034123898 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.034132004 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.034156084 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.034173012 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.034373045 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.034420013 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.034446001 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.034452915 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.034471989 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.034490108 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.035753965 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.035806894 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.035824060 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.035834074 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.035847902 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.035870075 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.037116051 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.037147045 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.037178040 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.037187099 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.037206888 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.037234068 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.038829088 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.038878918 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.038889885 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.038898945 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.038930893 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.038959026 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.039100885 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.039150000 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.039179087 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.039211988 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.039221048 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.039241076 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.039272070 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.040576935 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.041349888 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.041402102 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.041429996 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.041438103 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.041471958 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.041493893 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.042013884 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.042056084 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.042082071 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.042094946 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.042109013 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.042124987 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.043236971 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.043278933 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.043312073 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.043319941 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.043329000 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.043355942 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.043505907 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.043550014 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.043571949 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.043581009 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.043598890 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.043613911 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.044111967 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.044740915 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.045646906 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.045691013 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.045721054 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.045732975 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.045749903 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.045764923 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.047447920 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.049360037 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.049407005 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.049458027 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.049473047 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.049499035 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.049515963 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.050491095 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.050539017 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.050563097 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.050576925 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.050601959 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.050616980 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.052031994 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.052119017 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.052133083 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.052192926 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.053025961 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.053066969 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.053097010 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.053105116 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.053121090 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.053142071 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.053670883 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.053711891 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.053736925 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.053745985 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.053769112 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.053785086 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.054399014 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.054440975 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.054470062 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.054476023 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.054505110 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.054521084 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.055017948 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.055078983 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.055093050 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.055150032 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.055324078 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.055382013 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.055402040 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.055465937 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.055670023 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.055727959 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.055741072 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.055794001 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.056276083 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.056318998 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.056333065 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.056339979 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.056376934 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.056528091 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.056571960 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.056591034 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.056612015 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.056639910 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.056662083 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.057354927 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.057395935 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.057419062 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.057426929 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.057449102 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.057466984 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.057691097 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.057733059 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.057760000 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.057768106 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.057781935 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.057805061 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.058995008 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.059036016 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.059067965 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.059077978 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.059101105 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.059123039 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.059232950 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.059274912 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.059307098 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.059312105 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.059324026 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.059348106 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.060697079 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.060738087 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.060789108 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.060796022 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.060822964 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.060841084 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.061928034 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.061944008 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.061985016 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.061990976 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.062015057 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.062033892 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.062407017 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.062422037 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.062483072 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.062483072 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.062491894 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.062525034 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.062726021 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.062741041 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.062772989 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.062779903 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.062813997 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.062829971 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.063091993 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.063107967 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.063146114 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.063153982 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.063172102 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.063188076 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.063750982 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.063766003 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.063802004 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.063807964 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.063829899 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.063848019 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.065212011 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.065226078 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.065275908 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.065284967 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.065299988 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.065315008 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.065643072 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.065659046 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.065687895 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.065695047 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.065716982 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.065733910 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.067619085 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.067635059 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.067673922 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.067679882 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.067702055 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.067722082 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.068002939 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.068016052 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.068038940 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.068048954 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.068056107 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.068079948 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.069329023 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.069348097 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.069385052 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.069397926 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.069412947 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.070498943 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.070513010 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.070554018 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.070560932 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.070576906 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.070818901 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.070836067 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.070884943 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.070893049 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.070909023 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.071150064 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.071175098 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.071197033 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.071203947 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.071213007 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.071229935 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.072088003 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.072139025 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.072139978 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.072155952 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.072186947 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.072441101 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.072489977 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.072493076 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.072506905 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.072537899 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.073829889 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.073877096 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.073889971 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.073896885 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.073920965 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.074332952 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.074364901 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.074383020 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.074389935 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.074409008 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.075495005 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.075520039 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.075557947 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.075563908 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.075577974 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.075601101 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.075638056 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.075643063 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.077287912 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.077317953 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.077339888 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.077346087 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.077366114 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.077724934 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.077749968 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.077776909 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.077783108 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.077797890 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.078294992 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.078322887 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.078342915 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.078350067 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.078361034 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.078382015 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.079303980 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.079336882 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.079365015 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.079370975 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.079396963 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.080904007 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.080943108 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.080982924 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.080990076 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.081012011 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.081490040 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.081522942 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.081543922 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.081552029 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.081573009 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.081703901 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.081764936 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.081768990 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.081787109 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.081811905 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.082633972 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.082665920 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.082684994 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.082694054 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.082712889 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.084424019 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.084464073 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.084485054 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.084491968 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.084506989 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.084525108 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.084928036 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.084961891 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.084985971 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.084991932 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.085006952 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.085342884 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.085460901 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.085469007 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.085489988 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.085517883 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.085618019 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.085664988 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.085671902 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.085957050 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.085988998 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.086009026 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.086016893 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.086030960 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.087142944 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.087203026 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.087212086 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.087243080 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.087269068 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.087793112 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.087826014 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.087851048 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.087857962 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.087867022 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.087883949 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.089127064 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.089165926 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.089186907 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.089194059 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.089217901 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.089265108 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.089302063 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.089308023 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.089621067 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.089653015 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.089682102 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.089689970 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.089699030 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.089711905 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.091289043 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.091305971 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.091330051 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.091337919 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.091367006 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.092319012 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.092370033 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.092390060 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.092396975 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.092422962 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.093972921 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.094012022 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.094041109 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.094047070 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.094067097 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.094300985 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.094335079 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.094356060 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.094363928 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.094384909 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.095521927 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.095585108 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.095590115 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.095622063 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.095652103 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.096303940 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.096338987 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.096364975 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.096370935 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.096390009 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.097485065 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.097528934 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.097556114 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.097563982 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.097573042 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.097596884 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.097831964 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.097867012 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.097914934 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.097920895 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.097954035 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.098529100 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.098566055 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.098593950 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.098598957 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.098635912 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.098763943 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.098820925 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.098831892 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.098886013 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.099291086 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.099329948 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.099347115 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.099354982 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.099378109 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.099395990 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.099735975 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.099785089 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.099797964 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.099802971 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.099837065 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.099855900 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.100665092 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.100707054 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.100733995 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.100743055 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.100785971 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.100785971 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.101722002 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.101762056 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.101797104 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.101803064 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.101830006 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.101849079 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.102981091 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.103023052 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.103046894 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.103053093 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.103080988 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.103096962 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.103991985 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.104032993 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.104057074 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.104063988 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.104087114 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.104106903 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.104379892 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.104434967 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.104743004 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.104784966 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.104806900 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.104819059 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.104847908 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.104876041 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.105606079 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.105669975 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.105679989 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.105703115 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.105730057 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.105748892 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.106080055 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.106121063 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.106138945 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.106153011 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.106167078 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.106189966 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.107621908 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.107676029 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.107709885 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.107728958 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.107744932 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.107765913 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.108395100 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.108416080 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.108513117 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.108513117 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.108526945 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.108562946 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.110074043 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.110121012 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.110148907 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.110168934 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.110186100 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.110203028 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.110255957 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.110308886 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.110326052 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.111447096 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.111459017 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.111496925 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.111514091 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.111530066 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.112152100 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.112199068 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.112230062 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.112237930 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.112256050 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.112560034 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.112598896 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.112612963 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.112626076 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.112653017 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.113814116 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.113862038 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.113869905 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.113888979 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.113918066 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.114062071 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.114109039 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.114115953 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.114912987 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.114953041 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.114969969 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.114980936 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.115008116 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.115510941 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.115616083 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.115629911 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.115642071 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.115669012 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.116059065 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.116096973 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.116111994 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.116139889 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.116175890 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.116494894 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.116533995 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.116561890 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.116568089 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.116580963 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.116827011 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.116877079 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.116879940 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.116906881 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.116934061 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.117732048 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.117749929 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.117778063 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.117784023 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.117803097 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.118180037 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.118197918 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.118225098 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.118232012 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.118251085 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.119285107 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.119297981 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.119328976 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.119335890 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.119349003 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.120371103 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.120501041 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.120518923 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.120582104 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.120590925 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.120604038 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.121231079 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.121249914 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.121277094 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.121282101 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.121309996 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.121798038 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.121813059 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.121845961 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.121851921 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.121875048 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.122437954 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.122452021 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.122507095 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.122512102 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.122535944 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.122553110 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.122948885 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.122963905 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.122997046 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.123003006 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.123025894 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.123045921 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.123295069 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.123310089 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.123353004 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.123358011 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.123382092 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.123400927 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.123822927 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.123840094 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.123892069 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.123898029 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.123930931 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.124387980 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.124403000 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.124612093 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.124620914 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.124664068 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.124759912 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.124773979 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.124811888 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.124818087 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.124836922 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.124856949 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.125144005 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.125159025 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.125194073 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.125200033 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.125226021 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.125241995 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.126146078 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.126169920 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.126208067 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.126215935 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.126245975 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.126265049 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.127651930 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.127684116 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.127718925 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.127722979 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.127764940 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.127969980 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.127985001 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.128029108 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.128034115 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.128077984 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.128283024 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.128303051 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.128339052 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.128344059 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.128367901 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.128387928 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.128609896 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.128623962 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.128659010 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.128664970 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.128691912 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.128707886 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.130685091 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.130700111 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.130764008 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.130772114 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.130808115 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.130820036 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.130861998 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.131305933 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.131321907 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.131357908 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.131364107 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.131386042 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.132231951 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.132251024 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.132291079 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.132297993 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.132339001 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.133310080 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.133325100 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.133404016 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.133410931 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.134501934 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.134521008 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.134557962 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.134562969 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.134602070 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.134850979 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.134865046 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.134900093 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.134905100 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.134919882 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.135162115 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.135179996 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.135204077 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.135210037 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.135231972 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.135530949 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.135544062 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.135574102 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.135581970 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.135602951 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.136133909 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.136152983 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.136183977 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.136188984 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.136212111 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.136652946 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.136667013 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.136698008 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.136706114 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.136729956 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.137056112 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.137083054 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.137105942 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.137116909 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.137135983 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.137392998 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.137407064 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.137439966 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.137448072 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.137463093 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.137720108 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.137738943 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.137765884 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.137772083 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.137798071 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.138895035 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.138917923 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.138943911 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.138952017 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.138972998 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.139738083 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.139756918 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.139790058 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.139801025 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.139812946 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.140784025 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.140798092 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.140856028 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.140866041 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.140881062 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.141161919 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.141185045 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.141208887 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.141220093 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.141235113 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.141238928 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.141258955 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.141266108 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.141303062 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.141908884 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.141925097 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.141964912 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.141972065 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.141992092 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.142013073 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.142153025 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.142165899 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.142194033 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.142199993 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.142226934 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.142246962 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.143495083 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.143508911 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.143563986 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.143569946 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.143588066 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.143609047 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.143790007 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.143822908 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.143837929 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.143842936 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.143872976 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.144490004 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.144515038 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.144542933 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.144550085 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.144576073 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.145055056 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.145068884 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.145103931 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.145111084 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.145136118 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.146213055 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.146228075 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.146264076 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.146270990 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.146291018 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.146864891 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.146879911 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.146924019 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.146931887 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.146965981 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.146967888 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.146980047 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.147002935 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.147635937 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.147654057 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.147685051 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.147691011 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.147713900 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.147811890 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.148137093 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.148150921 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.148190975 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.148197889 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.148211002 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.150439978 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.150460005 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.150490999 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.150499105 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.150527000 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.150710106 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.150724888 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.150753021 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.150759935 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.150772095 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.150801897 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.151674986 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.151706934 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.151736021 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.151741982 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.151774883 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.152053118 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.152066946 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.152107000 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.152113914 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.152129889 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.153315067 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.153335094 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.153383017 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.153393984 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.153410912 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.153886080 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.153899908 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.153969049 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.153976917 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.154020071 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.154747963 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.154763937 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.154829979 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.154835939 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.154881001 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.155571938 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.155586958 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.155649900 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.155658960 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.155699968 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.156464100 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.156478882 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.156531096 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.156538963 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.156562090 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.156585932 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.156768084 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.156783104 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.156809092 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.156817913 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.156824112 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.156847954 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.157255888 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.157283068 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.157314062 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.157320976 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.157354116 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.158174992 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.158188105 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.158250093 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.158257008 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.159729958 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.159746885 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.159796953 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.159804106 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.159822941 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.160165071 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.160177946 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.160227060 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.160233974 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.160270929 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.160543919 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.160561085 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.160618067 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.160624981 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.160662889 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.160896063 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.160912037 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.160972118 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.160978079 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.161021948 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.162210941 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.162228107 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.162296057 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.162302017 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.162338972 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.162548065 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.162564039 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.162600994 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.162610054 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.162628889 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.162652016 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.162662029 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.162708998 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.163022995 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.163038969 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.163093090 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.163100004 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.163132906 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.163379908 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.163403988 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.163434029 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.163439989 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.163474083 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.163489103 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.164371014 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.164387941 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.164474010 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.164479017 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.164522886 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.164716959 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.164743900 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.164774895 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.164782047 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.164813995 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.164875984 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.165133953 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.165150881 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.165191889 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.165196896 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.165220022 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.165240049 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.165586948 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.165604115 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.165643930 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.165648937 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.165679932 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.165693045 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.166728020 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.166744947 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.166812897 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.166819096 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.166866064 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.166961908 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.166976929 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.167018890 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.167026043 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.167047977 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.167068958 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.167922020 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.167938948 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.168008089 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.168013096 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.168051004 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.168204069 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.168220043 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.168257952 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.168263912 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.168293953 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.168314934 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.169203043 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.169218063 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.169289112 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.169306040 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.169343948 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.170440912 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.170456886 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.170523882 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.170531988 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.170569897 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.171013117 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.171030045 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.171076059 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.171082973 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.171104908 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.171125889 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.171932936 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.171948910 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.171989918 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.171994925 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.172019958 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.172043085 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.173027039 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.173043013 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.173099041 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.173105955 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.173136950 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.173163891 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.173412085 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.173446894 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.173466921 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.173470020 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.173497915 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.173517942 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.174549103 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.174565077 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.174658060 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.174664021 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.174704075 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.174832106 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.174854994 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.174880981 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.174887896 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.174920082 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.174938917 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.178006887 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.178021908 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.178076029 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.178085089 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.178119898 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.178141117 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.179534912 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.179552078 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.179577112 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.179598093 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.179603100 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.179620028 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.179639101 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.179670095 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.179673910 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.179867983 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.179887056 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.179918051 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.179925919 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.179951906 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.180377960 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.180402040 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.180435896 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.180444002 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.180458069 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.181749105 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.181766987 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.181796074 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.181802034 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.181822062 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.183154106 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.183166981 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.183192968 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.183202028 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.183207989 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.183218956 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.183243036 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.183479071 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.183492899 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.183530092 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.183537006 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.183551073 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.184806108 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.184822083 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.184861898 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.184870958 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.184891939 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.186239004 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.186252117 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.186289072 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.186296940 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.186316013 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.188358068 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.188370943 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.188393116 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.188404083 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.188412905 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.188431025 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.188869953 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.188891888 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.188920021 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.188925982 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.188947916 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.189260006 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.189285994 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.189308882 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.189317942 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.189338923 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.190344095 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.190356970 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.190397978 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.190404892 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.190418005 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.191397905 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.191411018 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.191447973 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.191448927 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.191458941 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.191473007 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.191481113 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.191720963 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.191732883 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.191833019 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.191840887 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.192020893 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.192038059 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.192065001 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.192071915 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.192106009 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.193634033 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.193646908 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.193702936 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.193710089 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.193722963 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.194909096 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.194922924 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.194981098 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.194988012 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.195008039 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.195022106 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.195051908 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.195092916 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.195379019 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.195394039 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.195440054 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.195445061 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.195472956 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.195494890 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.195627928 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.195647955 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.195683002 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.195688963 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.195710897 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.195734978 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.196764946 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.196782112 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.196827888 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.196835041 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.196857929 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.196877003 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.200422049 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.200453043 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.200483084 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.200489998 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.200520992 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.200535059 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.201313019 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.201328039 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.201385021 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.201391935 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.201431036 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.201596975 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.201611996 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.201653004 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.201658010 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.201689959 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.201711893 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.202667952 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.202677965 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.202745914 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.202753067 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.202795982 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.202986002 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.203022957 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.203047037 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.203053951 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.203083038 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.203100920 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.206541061 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.206557035 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.206639051 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.206644058 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.206661940 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.206686974 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.208403111 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.208419085 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.208430052 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.208477974 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.208484888 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.208518028 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.208978891 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.209908009 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.209923029 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.209976912 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.209984064 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.210014105 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.210036039 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.211251020 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.211278915 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.211302996 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.211318970 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.211323023 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.211358070 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.212485075 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.212501049 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.212543011 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.212549925 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.212744951 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.212804079 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.212817907 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.212856054 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.212862968 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.212953091 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.214083910 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.214098930 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.214162111 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.214165926 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.214317083 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.214473963 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.214502096 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.214534044 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.214538097 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.214560986 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.215120077 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.215135098 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.215176105 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.215181112 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.215207100 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.215547085 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.215559959 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.215586901 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.215595007 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.215619087 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.216590881 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.216603994 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.216672897 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.216679096 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.216696978 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.216988087 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.217012882 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.217032909 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.217040062 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.217056036 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.217061043 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.217097998 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.217101097 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.217397928 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.217418909 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.217444897 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.217449903 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.217475891 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.217701912 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.217715025 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.217770100 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.217777967 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.218472958 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.218501091 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.218513966 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.218518972 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.218549013 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.219753981 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.219767094 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.219837904 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.219837904 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.219847918 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.220091105 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.220109940 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.220139027 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.220146894 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.220163107 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.220186949 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.221285105 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.221301079 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.221355915 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.221364021 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.221677065 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.222598076 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.222611904 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.222654104 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.222661018 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.222687960 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.222704887 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.223156929 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.223167896 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.223233938 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.223239899 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.223294020 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.223444939 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.223459005 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.223514080 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.223520994 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.223732948 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.223848104 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.223862886 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.223905087 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.223911047 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.223939896 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.223958969 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.224699974 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.224714994 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.224770069 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.224776030 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.224822998 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.226821899 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.226836920 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.226881981 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.226886988 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.226917028 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.226934910 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.227324963 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.227339029 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.227375031 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.227380991 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.227405071 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.227421999 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.227602959 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.227617025 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.227667093 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.227674961 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.227937937 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.228662968 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.228677988 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.228728056 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.228733063 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.230072975 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.230091095 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.230124950 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.230130911 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.230149031 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.230173111 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.230345964 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.230357885 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.230401993 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.230407000 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.230426073 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.230443001 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.231021881 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.231036901 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.231077909 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.231084108 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.231105089 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.231121063 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.231674910 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.231688976 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.231724977 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.231733084 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.231748104 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.231764078 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.232050896 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.232064962 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.232106924 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.232111931 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.232129097 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.232146978 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.233170986 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.233185053 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.233223915 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.233238935 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.233253002 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.233289003 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.234546900 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.234561920 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.234601021 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.234618902 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.234635115 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.234824896 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.235775948 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.235790014 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.235836983 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.235852003 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.235898018 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.237672091 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.237687111 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.237751007 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.237757921 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.237812042 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.238800049 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.238816023 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.238856077 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.238862991 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.238887072 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.238902092 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.239100933 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.239115000 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.239151001 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.239159107 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.239176035 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.239191055 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.239890099 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.239905119 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.239937067 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.239943027 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.239974976 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.239979982 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.240164995 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.240180016 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.240210056 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.240216017 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.240238905 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.240252972 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.241158009 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.241172075 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.241219044 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.241225958 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.241275072 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.241487026 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.241508007 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.241552114 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.241558075 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.241662979 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.242400885 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.242419004 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.242466927 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.242474079 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.242573977 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.243611097 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.243626118 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.243680000 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.243702888 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.243868113 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.245189905 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.245206118 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.245249987 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.245264053 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.245491028 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.245493889 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.245506048 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.245522022 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.245544910 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.245556116 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.245579004 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.245596886 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.246788025 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.246803045 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.246844053 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.246851921 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.246870041 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.246886015 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.247452974 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.247467041 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.247517109 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.247524023 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.247587919 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.247821093 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.247834921 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.247904062 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.247911930 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.247963905 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.248385906 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.248400927 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.248450041 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.248456001 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.248513937 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.248724937 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.248739004 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.248788118 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.248796940 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.248975039 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.252023935 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.252043962 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.252091885 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.252129078 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.252155066 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.252295017 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.252434969 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.252449036 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.252492905 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.252501011 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.252517939 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.252563953 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.254940033 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.254959106 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.255008936 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.255023956 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.255044937 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.255063057 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.255930901 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.255944967 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.256000042 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.256007910 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.256112099 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.257544041 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.257781982 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.257796049 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.257833004 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.257838964 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.257860899 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.257877111 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.258055925 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.258073092 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.258130074 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.258136034 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.258155107 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.258172035 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.258393049 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.258409023 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.258465052 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.258470058 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.258589029 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.258658886 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.258676052 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.258719921 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.258728027 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.258764029 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.259505033 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.259519100 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.259552956 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.259557009 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.259581089 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.259596109 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.259903908 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.259918928 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.259952068 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.259958982 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.259982109 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.259995937 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.260514975 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.260530949 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.260564089 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.260567904 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.260591030 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.260606050 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.260807037 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.260821104 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.260868073 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.260874033 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.260968924 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.261168957 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.261184931 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.261214972 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.261219978 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.261243105 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.261259079 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.261451960 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.261468887 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.261504889 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.261511087 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.261533022 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.261545897 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.263546944 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.263562918 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.263609886 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.263617039 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.263653040 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.264028072 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.264045954 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.264080048 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.264086008 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.264107943 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.264127016 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.264445066 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.264458895 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.264491081 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.264499903 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.264523029 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.264539003 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.265023947 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.265038013 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.265088081 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.265099049 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.265160084 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.266629934 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.266645908 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.266701937 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.266712904 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.266885042 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.267198086 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.267211914 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.267261028 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.267270088 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.267322063 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.267805099 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.267818928 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.267868996 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.267874956 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.267966986 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.268479109 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.268492937 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.268553019 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.268560886 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.268577099 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.268625975 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.269232988 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.269247055 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.269304037 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.269310951 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.269521952 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.269895077 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.269908905 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.269947052 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.269953012 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.269977093 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.269993067 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.271099091 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.271116018 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.271153927 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.271162033 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.271186113 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.271204948 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.271625996 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.271641016 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.271691084 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.271696091 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.272023916 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.272809982 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.272825003 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.272876024 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.272883892 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.273117065 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.273325920 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.273340940 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.273379087 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.273386002 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.273408890 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.273426056 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.274614096 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.274627924 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.274677038 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.274686098 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.274739981 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.275269985 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.275285006 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.275337934 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.275343895 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.275398016 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.276765108 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.276803970 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.276844025 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.276850939 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.276885033 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.277220011 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.277237892 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.277251005 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.277257919 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.277267933 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.277306080 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.277601004 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.277616024 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.277662039 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.277668953 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.277798891 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.278279066 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.278292894 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.278342009 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.278347969 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.278433084 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.278517962 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.278584003 CEST	443	49705	18.154.206.90	192.168.2.5
Apr 24, 2024 14:27:24.278598070 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.278640032 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.295876980 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.297497034 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.345530987 CEST	49705	443	192.168.2.5	18.154.206.90
Apr 24, 2024 14:27:24.345570087 CEST	443	49705	18.154.206.90	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 24, 2024 14:27:21.415179968 CEST	59951	53	192.168.2.5	1.1.1.1
Apr 24, 2024 14:27:21.589198112 CEST	53	59951	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 24, 2024 14:27:21.415179968 CEST	192.168.2.5	1.1.1.1	0xb1ab	Standard query (0)	downloads.xrite.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 24, 2024 14:27:21.589198112 CEST	1.1.1.1	192.168.2.5	0xb1ab	No error (0)	downloads.xrite.com	ddw46c9gijmcm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:27:21.589198112 CEST	1.1.1.1	192.168.2.5	0xb1ab	No error (0)	ddw46c9gijmcm.cloudfront.net		18.154.206.90	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:27:21.589198112 CEST	1.1.1.1	192.168.2.5	0xb1ab	No error (0)	ddw46c9gijmcm.cloudfront.net		18.154.206.117	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:27:21.589198112 CEST	1.1.1.1	192.168.2.5	0xb1ab	No error (0)	ddw46c9gijmcm.cloudfront.net		18.154.206.26	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:27:21.589198112 CEST	1.1.1.1	192.168.2.5	0xb1ab	No error (0)	ddw46c9gijmcm.cloudfront.net		18.154.206.99	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

downloads.xrite.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49705	18.154.206.90	443	2892	C:\Windows\SysWOW64\wget.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:27:21 UTC	267	OUT	GET /downloads/software/FM100_Scoring_SW/v4.0.7/FM100_HueTest_32-bit_v407.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko Accept: / Accept-Encoding: identity Host: downloads.xrite.com Connection: Keep-Alive
2024-04-24 12:27:22 UTC	991	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Length: 14516624 Connection: close Date: Wed, 24 Apr 2024 12:27:22 GMT Set-Cookie: AWSALB=r1DJpx0zISY4GyTY2FKx3nrFkafT3dzcyFtQh7OMVhjhvnS6+EBnAwwebScbm2BP4853Ij6NXou68nFEXYuuqximeDZPvOG1Fc/zDRwoDjBuCqw8r2oZguT+y62c; Expires=Wed, 01 May 2024 12:27:22 GMT; Path=/ Set-Cookie: AWSALBCORS=r1DJpx0zISY4GyTY2FKx3nrFkafT3dzcyFtQh7OMVhjhvnS6+EBnAwwebScbm2BP4853Ij6NXou68nFEXYuuqximeDZPvOG1Fc/zDRwoDjBuCqw8r2oZguT+y62c; Expires=Wed, 01 May 2024 12:27:22 GMT; Path=/; SameSite=None; Secure Last-Modified: Tue, 01 Aug 2023 20:22:39 GMT Accept-Ranges: bytes ETag: "8011b5eab5c4d91:0" Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000;includeSubdomains; X-Content-Type-Options: nosniff X-Cache: Miss from cloudfront Via: 1.1 9ef871a92fc71abe6961de97ef19600e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: i-iFWfL1p151W4zTsTpXC5PL-orCe7WxyQ-zKiTgKRz9Xfv6tJAQ0A==
2024-04-24 12:27:22 UTC	16384	IN	Data Raw: 4d 5a 50 00 02 00 00 00 04 00 0f 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ba 10 00 0e 1f b4 09 cd 21 b8 01 4c cd 21 90 90 54 68 69 73 20 70 72 6f 67 72 61 6d 20 6d 75 73 74 20 62 65 20 72 75 6e 20 75 6e 64 65 72 20 57 69 6e 33 32 0d 0a 24 37 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: MZP@!L!This program must be run under Win32$7
2024-04-24 12:27:22 UTC	16020	IN	Data Raw: 87 0c 24 51 0f b7 4a f4 87 4c 24 04 e9 df fe ff ff e9 76 ff ff ff e9 81 ff ff ff c3 85 c0 74 04 c3 90 00 00 b8 22 4c 40 00 c3 8b c0 53 56 57 51 8b f2 8b f8 33 db 85 f6 7e 35 8b c6 e8 23 fe ff ff 8b d8 8b 17 8b c2 89 04 24 8b 04 24 85 c0 74 07 83 e8 04 8b 00 d1 e8 85 c0 7e 13 3b f0 7d 02 8b c6 8b c8 03 c9 8b c2 8b d3 e8 4d e3 ff ff 8b c7 8b d3 e8 04 fe ff ff 5a 5f 5e 5b c3 8d 40 00 e9 b7 fc ff ff c3 8b c0 e9 37 fa ff ff c3 8b c0 e9 53 fa ff ff c3 8b c0 85 d2 74 32 66 83 7a f6 02 74 05 e9 c4 01 00 00 8b 4a f8 41 7f 1c 50 52 8b 42 fc e8 fc 07 00 00 89 c2 58 52 8b 48 fc d1 e1 e8 f6 e2 ff ff 5a 58 eb 04 f0 ff 42 f8 87 10 85 d2 74 14 8b 4a f8 49 7c 0e f0 ff 4a f8 75 08 8d 42 f4 e8 38 e1 ff ff c3 8d 40 00 85 d2 74 16 66 83 7a f6 02 74 05 e9 70 01 00 00 8b 4a f8 Data Ascii: $QJL$vt"L@SVWQ3~5#$$t~;}MZ_^[@7St2fztJAPRBXRHZXBtJI\|JuB8@tfztpJ
2024-04-24 12:27:22 UTC	12792	IN	Data Raw: ff ff ff 66 ab 49 74 12 4b 75 f3 66 8b 45 f4 66 85 c0 74 ea 66 ab b3 03 eb e4 09 d2 74 23 66 8b 45 f6 66 85 c0 74 02 66 ab e3 0c 66 b8 30 00 66 ab 4a 74 0d 41 75 f8 e8 c9 fe ff ff 66 ab 4a 75 f6 c3 31 db 8a 5d f3 b9 03 00 00 00 80 7d dc 00 74 08 8a 5d f2 b9 0f 04 00 00 38 cb 76 02 88 cb 00 eb 8d 9c 9b 3a 8b 40 00 b9 05 00 00 00 8a 03 3c 40 74 21 51 53 3c 24 74 0a 3c 2a 74 0d 32 e4 66 ab eb 0c e8 0d 00 00 00 eb 05 e8 3f ff ff ff 5b 59 43 e2 d9 c3 56 8b 75 f8 85 f6 74 06 8b 4e fc f3 66 a5 5e c3 24 2a 40 40 40 2a 24 40 40 40 24 20 2a 40 40 2a 20 24 40 40 28 24 2a 29 40 2d 24 2a 40 40 24 2d 2a 40 40 24 2a 2d 40 40 28 2a 24 29 40 2d 2a 24 40 40 2a 2d 24 40 40 2a 24 2d 40 40 2d 2a 20 24 40 2d 24 20 2a 40 2a 20 24 2d 40 24 20 2a 2d 40 24 20 2d 2a 40 2a 2d 20 24 Data Ascii: fItKufEftft#fEftff0fJtAufJu1]}t]8v:@<@t!QS<$t<t2f?[YCVutNf^$@@@$@@@$ @@* $@@($)@-$@@$-@@$-@@($)@-$@@-$@@$-@@-* $@-$ @ $-@$ -@$ -@*- $
2024-04-24 12:27:22 UTC	16384	IN	Data Raw: 00 8d 45 f0 e8 f3 8f ff ff 8d 45 fc e8 eb 8f ff ff c3 e9 05 82 ff ff eb e8 8b c3 5b 8b e5 5d c3 47 00 65 00 74 00 55 00 73 00 65 00 72 00 44 00 65 00 66 00 61 00 75 00 6c 00 74 00 55 00 49 00 4c 00 61 00 6e 00 67 00 75 00 61 00 67 00 65 00 00 00 00 00 6b 00 65 00 72 00 6e 00 65 00 6c 00 33 00 32 00 2e 00 64 00 6c 00 6c 00 00 00 00 00 2e 00 44 00 45 00 46 00 41 00 55 00 4c 00 54 00 5c 00 43 00 6f 00 6e 00 74 00 72 00 6f 00 6c 00 20 00 50 00 61 00 6e 00 65 00 6c 00 5c 00 49 00 6e 00 74 00 65 00 72 00 6e 00 61 00 74 00 69 00 6f 00 6e 00 61 00 6c 00 00 00 00 00 4c 00 6f 00 63 00 61 00 6c 00 65 00 00 00 00 00 43 00 6f 00 6e 00 74 00 72 00 6f 00 6c 00 20 00 50 00 61 00 6e 00 65 00 6c 00 5c 00 44 00 65 00 73 00 6b 00 74 00 6f 00 70 00 5c 00 52 00 65 00 73 00 6f Data Ascii: EE[]GetUserDefaultUILanguagekernel32.dll.DEFAULT\Control Panel\InternationalLocaleControl Panel\Desktop\Reso
2024-04-24 12:27:22 UTC	9200	IN	Data Raw: 69 00 73 00 74 00 20 00 6f 00 66 00 20 00 74 00 61 00 73 00 6b 00 73 00 20 00 74 00 68 00 61 00 74 00 20 00 73 00 68 00 6f 00 75 00 6c 00 64 00 20 00 62 00 65 00 20 00 69 00 6e 00 69 00 74 00 69 00 61 00 6c 00 6c 00 79 00 20 00 73 00 65 00 6c 00 65 00 63 00 74 00 65 00 64 00 2e 00 0d 00 0a 00 2f 00 4d 00 45 00 52 00 47 00 45 00 54 00 41 00 53 00 4b 00 53 00 3d 00 22 00 63 00 6f 00 6d 00 6d 00 61 00 20 00 73 00 65 00 70 00 61 00 72 00 61 00 74 00 65 00 64 00 20 00 6c 00 69 00 73 00 74 00 20 00 6f 00 66 00 20 00 74 00 61 00 73 00 6b 00 20 00 6e 00 61 00 6d 00 65 00 73 00 22 00 0d 00 0a 00 4c 00 69 00 6b 00 65 00 20 00 74 00 68 00 65 00 20 00 2f 00 54 00 41 00 53 00 4b 00 53 00 20 00 70 00 61 00 72 00 61 00 6d 00 65 00 74 00 65 00 72 00 2c 00 20 00 65 00 78 Data Ascii: ist of tasks that should be initially selected./MERGETASKS="comma separated list of task names"Like the /TASKS parameter, ex
2024-04-24 12:27:22 UTC	16384	IN	Data Raw: 6e 9b 01 00 7e 9b 01 00 92 9b 01 00 a0 9b 01 00 b6 9b 01 00 cc 9b 01 00 e6 9b 01 00 fa 9b 01 00 0e 9c 01 00 20 9c 01 00 2c 9c 01 00 42 9c 01 00 60 9c 01 00 6e 9c 01 00 80 9c 01 00 90 9c 01 00 a4 9c 01 00 b2 9c 01 00 c4 9c 01 00 d2 9c 01 00 e2 9c 01 00 f6 9c 01 00 00 00 00 00 12 9d 01 00 26 9d 01 00 36 9d 01 00 44 9d 01 00 58 9d 01 00 00 00 00 00 7e 9d 01 00 00 00 00 00 a2 9d 01 00 00 00 00 00 b8 9d 01 00 00 00 00 00 6f 6c 65 61 75 74 33 32 2e 64 6c 6c 00 00 00 00 53 79 73 46 72 65 65 53 74 72 69 6e 67 00 00 00 53 79 73 52 65 41 6c 6c 6f 63 53 74 72 69 6e 67 4c 65 6e 00 00 00 53 79 73 41 6c 6c 6f 63 53 74 72 69 6e 67 4c 65 6e 00 61 64 76 61 70 69 33 32 2e 64 6c 6c 00 00 00 00 52 65 67 51 75 65 72 79 56 61 6c 75 65 45 78 57 00 00 00 00 52 65 67 4f 70 65 6e Data Ascii: n~ ,B`n&6DX~oleaut32.dllSysFreeStringSysReAllocStringLenSysAllocStringLenadvapi32.dllRegQueryValueExWRegOpen
2024-04-24 12:27:22 UTC	9200	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 04 1d 85 dc e4 04 16 24 26 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 07 07 0f 61 5e 5d c9 7a 77 75 fe 7b 78 76 ff 7a 77 75 fe 7b 78 76 ff 7a 77 75 fe 7b 78 76 ff 7a 77 75 fe 7b 78 76 ff 7a 77 75 fe 7b 78 76 ff 79 76 74 fb 2c 2b 2a 5b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3a 39 38 7b 0b 0a 0a 17 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 04 21 95 f7 ff 1d 85 dc e3 04 16 24 26 00 00 00 Data Ascii: $&a^]zwu{xvzwu{xvzwu{xvzwu{xvzwu{xvyvt,+*[:98{!$&
2024-04-24 12:27:22 UTC	1576	IN	Data Raw: 7b 78 76 ff 7b 78 76 ff 7b 78 76 ff 7a 77 75 fe 7b 78 76 ff 79 76 74 fc 08 08 08 11 00 00 00 00 00 00 00 00 16 65 a7 ad 21 95 f7 ff 20 94 f6 fe 21 95 f7 ff 21 95 f7 ff 21 95 f7 ff 1a 76 c4 cb 02 09 10 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1d 1c 1c 3e 75 72 70 f3 7a 77 75 fe 7b 78 76 ff 7b 78 76 ff 7b 78 76 ff 7a 77 75 fe 7b 78 76 ff 7b 78 76 ff 1e 1e 1d 3f 00 00 00 00 00 00 00 00 16 65 a7 ad 21 95 f7 ff 20 94 f6 fe 21 95 f7 ff 21 95 f7 ff 21 95 f7 ff 20 94 f6 fe 1a 76 c4 ca 02 09 10 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1d 1c 1c 3e 75 72 70 f3 7b 78 76 ff 7a 77 75 Data Ascii: {xv{xv{xvzwu{xvyvte! !!!v>urpzwu{xv{xv{xvzwu{xv{xv?e! !!! v>urp{xvzwu
2024-04-24 12:27:22 UTC	12792	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1d 1c 1c 3e 75 72 70 f3 7a 77 75 fe 7b 78 76 ff 7b 78 76 ff 7b 78 76 ff 7a 77 75 fe 7b 78 76 ff 7b 78 76 ff 7b 78 76 ff 61 5f 5e cb 08 07 07 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1d 1c 1c 3e 75 72 70 f3 7b 78 76 ff 7a 77 75 fe 7b 78 76 ff 7b 78 76 ff 7b 78 76 ff 7a 77 75 fe 7b 78 76 ff 7b 78 76 ff 7b 78 76 ff 7a 77 75 fe 61 5f 5d cb 08 07 07 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: >urpzwu{xv{xv{xvzwu{xv{xv{xva_^>urp{xvzwu{xv{xv{xvzwu{xv{xv{xvzwua_]
2024-04-24 12:27:22 UTC	3592	IN	Data Raw: 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 40 05 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 03 90 Data Ascii: @

Target ID:	0
Start time:	14:27:20
Start date:	24/04/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\cmd.exe /c wget -t 2 -v -T 60 -P "C:\Users\user\Desktop\download" --no-check-certificate --content-disposition --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko" "https://downloads.xrite.com/downloads/software/FM100_Scoring_SW/v4.0.7/FM100_HueTest_32-bit_v407.exe" > cmdline.out 2>&1
Imagebase:	0x790000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	14:27:20
Start date:	24/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	14:27:20
Start date:	24/04/2024
Path:	C:\Windows\SysWOW64\wget.exe
Wow64 process (32bit):	true
Commandline:	wget -t 2 -v -T 60 -P "C:\Users\user\Desktop\download" --no-check-certificate --content-disposition --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko" "https://downloads.xrite.com/downloads/software/FM100_Scoring_SW/v4.0.7/FM100_HueTest_32-bit_v407.exe"
Imagebase:	0x400000
File size:	3'895'184 bytes
MD5 hash:	3DADB6E2ECE9C4B3E1E322E617658B60
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	14:27:25
Start date:	24/04/2024
Path:	C:\Users\user\Desktop\download\FM100_HueTest_32-bit_v407.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\download\FM100_HueTest_32-bit_v407.exe"
Imagebase:	0x400000
File size:	14'516'624 bytes
MD5 hash:	D80F7F0B4F609526D80E7919A73C1EA0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	14:27:26
Start date:	24/04/2024
Path:	C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\is-5VM9G.tmp\FM100_HueTest_32-bit_v407.tmp" /SL5="$2048E,14043495,139776,C:\Users\user\Desktop\download\FM100_HueTest_32-bit_v407.exe"
Imagebase:	0x400000
File size:	1'193'984 bytes
MD5 hash:	7D11FE4182B8554D47DE2DF7F5AD3F23
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	14:27:59
Start date:	24/04/2024
Path:	C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe"
Imagebase:	0xc60000
File size:	3'560'960 bytes
MD5 hash:	37D045BEFB2167D772D5C234869304EE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	14:27:59
Start date:	24/04/2024
Path:	C:\Windows\splwow64.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\splwow64.exe 12288
Imagebase:	0x7ff6f6da0000
File size:	163'840 bytes
MD5 hash:	77DE7761B037061C7C112FD3C5B91E73
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	24%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	1.1%
Total number of Nodes:	2000
Total number of Limit Nodes:	52

Executed Functions

Function 6B30BBB0 Relevance: 21.1, APIs: 11, Strings: 1, Instructions: 129windowcomCOMMON

Download Yara Rule

APIs

Part of subcall function 6B313350: ??0QLocale@@QAE@XZ.QT5CORE(00000000,00000004,6B30BBE2,00000000,?,?,?,?,?,?,6B30BB4A), ref: 6B31335D
Part of subcall function 6B313350: memset.VCRUNTIME140(00000028,00000000,00002C00,?,?,?,?,?,?,6B30BB4A), ref: 6B313381
Part of subcall function 6B313350: ?connectImpl@QObject@@CA?AVConnection@QMetaObject@@PBV1@PAPAX01PAVQSlotObjectBase@QtPrivate@@W4ConnectionType@Qt@@PBHPBU3@@Z.QT5CORE(?,00000004,?,00000004,00000000,00000000,00000000,00000000,0000000C,00000028,00000000,00002C00), ref: 6B3133CA
Part of subcall function 6B313350: ??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 6B3133D7

OleInitialize.OLE32(00000000), ref: 6B30BC7C

Part of subcall function 6B30DB40: ??0?$QVector@VQPointF@@@@QAE@XZ.QT5CORE(?), ref: 6B30DB62
Part of subcall function 6B30DB40: ??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(00000000), ref: 6B30DB6D
Part of subcall function 6B30DB40: ??1QString@@QAE@XZ.QT5CORE ref: 6B30DB84
Part of subcall function 6B30DB40: ?utf16@QString@@QBEPBGXZ.QT5CORE(00000001), ref: 6B30DBA4
Part of subcall function 6B30DB40: ?load@QSystemLibrary@@SAPAUHINSTANCE__@@PB_W_N@Z.QT5CORE(00000000), ref: 6B30DBA7
Part of subcall function 6B30DB40: ?utf16@QString@@QBEPBGXZ.QT5CORE(00000001), ref: 6B30DBE9
Part of subcall function 6B30DB40: ?load@QSystemLibrary@@SAPAUHINSTANCE__@@PB_W_N@Z.QT5CORE(00000000), ref: 6B30DBEC
Part of subcall function 6B30DB40: ?utf16@QString@@QBEPBGXZ.QT5CORE(00000001), ref: 6B30DC22
Part of subcall function 6B30DB40: ?load@QSystemLibrary@@SAPAUHINSTANCE__@@PB_W_N@Z.QT5CORE(00000000), ref: 6B30DC25
Part of subcall function 6B30DB40: ?utf16@QString@@QBEPBGXZ.QT5CORE(00000001), ref: 6B30DC5B
Part of subcall function 6B30DB40: ?load@QSystemLibrary@@SAPAUHINSTANCE__@@PB_W_N@Z.QT5CORE(00000000), ref: 6B30DC5E
Part of subcall function 6B30DB40: ?utf16@QString@@QBEPBGXZ.QT5CORE(00000001), ref: 6B30DC94
Part of subcall function 6B30DB40: ?load@QSystemLibrary@@SAPAUHINSTANCE__@@PB_W_N@Z.QT5CORE(00000000), ref: 6B30DC97

Part of subcall function 6B30D9E0: ?current@QOperatingSystemVersion@@SA?AV1@XZ.QT5CORE(?,00000000,00000004,?,?,?,?,?,?,?,?,00000000), ref: 6B30D9F2
Part of subcall function 6B30D9E0: ?compare@QOperatingSystemVersion@@CAHABV1@0@Z.QT5CORE(00000000,6B949868,?,?,?,?,?,?,?,?,?,00000000), ref: 6B30DA03
Part of subcall function 6B30D9E0: ??0?$QVector@VQPointF@@@@QAE@XZ.QT5CORE(?), ref: 6B30DA2F
Part of subcall function 6B30D9E0: ??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(00000000), ref: 6B30DA3A
Part of subcall function 6B30D9E0: ??1QString@@QAE@XZ.QT5CORE ref: 6B30DA51
Part of subcall function 6B30D9E0: ?utf16@QString@@QBEPBGXZ.QT5CORE(00000001), ref: 6B30DA71
Part of subcall function 6B30D9E0: ?load@QSystemLibrary@@SAPAUHINSTANCE__@@PB_W_N@Z.QT5CORE(00000000), ref: 6B30DA74
Part of subcall function 6B30D9E0: ?utf16@QString@@QBEPBGXZ.QT5CORE(00000001), ref: 6B30DAB5
Part of subcall function 6B30D9E0: ?load@QSystemLibrary@@SAPAUHINSTANCE__@@PB_W_N@Z.QT5CORE(00000000), ref: 6B30DAB8
Part of subcall function 6B30D9E0: ?utf16@QString@@QBEPBGXZ.QT5CORE(00000001), ref: 6B30DAEE
Part of subcall function 6B30D9E0: ?load@QSystemLibrary@@SAPAUHINSTANCE__@@PB_W_N@Z.QT5CORE(00000000), ref: 6B30DAF1
Part of subcall function 6B30D9E0: ??1QString@@QAE@XZ.QT5CORE ref: 6B30DB0C

GetDC.USER32(00000000), ref: 6B30BCC5
GetDeviceCaps.GDI32(00000000,0000005A), ref: 6B30BCD1
GetKeyboardLayoutList.USER32(00000000,00000000), ref: 6B30BCDE
GetKeyboardLayoutList.USER32(00000000,00000000,00000000,?,?,?,?,?,?,6B30BB4A), ref: 6B30BD08
??0QMessageLogger@@QAE@PBDH0@Z.QT5CORE(00000000,00000000,00000000,?,QWindowsContext: OleInitialize() failed: ,00000000,?,00000000,?,?,?,?,?,?,6B30BB4A), ref: 6B30BD6F
?warning@QMessageLogger@@QBE?AVQDebug@@XZ.QT5CORE(?,00000000,?,?,?,?,?,?,6B30BB4A), ref: 6B30BD77
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE(?,00000000,?,?,?,?,?,?,6B30BB4A), ref: 6B30BD7F
??6QDebug@@QAEAAV0@ABVQByteArray@@@Z.QT5CORE(?,00000000,?,?,?,?,?,?,6B30BB4A), ref: 6B30BD87
??1QDebug@@QAE@XZ.QT5CORE(?,00000000,?,?,?,?,?,?,6B30BB4A), ref: 6B30BD91
??1QByteArray@@QAE@XZ.QT5CORE(?,00000000,?,?,?,?,?,?,6B30BB4A), ref: 6B30BD9B

Strings

QWindowsContext: OleInitialize() failed: , xrefs: 6B30BD5F

Memory Dump Source

Source File: 00000007.00000002.3336124309.000000006B301000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6B300000, based on PE: true

Associated: 00000007.00000002.3336078379.000000006B300000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336232454.000000006B3D2000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336296015.000000006B416000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336342659.000000006B417000.00000008.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336389257.000000006B418000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336436882.000000006B41B000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336485192.000000006B41D000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6b300000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$System$?load@?utf16@E__@@Library@@$Debug@@$Object@@$??0?$ByteConnection@F@@@@KeyboardLayoutListLogger@@MessageMetaOperatingPointV0@@Vector@Version@@$?compare@?connect?current@?warning@Array@@Array@@@Base@CapsConnectionDeviceImpl@InitializeLocale@@ObjectPrivate@@Qt@@SlotType@U3@@V1@0@memset
String ID: QWindowsContext: OleInitialize() failed:
API String ID: 2462241363-1565728777
Opcode ID: 389220429b6ac3e058879632717d755ed4e6432d05f7137d116105992899a38f
Instruction ID: 005b7e2e2bab56858a6a4200ede9f61ed4c44c171761c41a9c0e086a1e9ad8e8
Opcode Fuzzy Hash: 389220429b6ac3e058879632717d755ed4e6432d05f7137d116105992899a38f
Instruction Fuzzy Hash: 9F5160B0704602AFE71C9F74C85DB5AFBE8BF45305F004629E45A8A280EF79E569CB91

Uniqueness

Uniqueness Score: -1.00%

Function 6B336990 Relevance: 14.0, APIs: 7, Strings: 1, Instructions: 44librarynativeloaderCOMMON

Download Yara Rule

APIs

??0?$QVector@VQPointF@@@@QAE@XZ.QT5CORE(?,00000000,00000000,?), ref: 6B3369AB
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(00000000), ref: 6B3369B5
??1QString@@QAE@XZ.QT5CORE ref: 6B3369C9
?utf16@QString@@QBEPBGXZ.QT5CORE(00000001), ref: 6B3369DB
?load@QSystemLibrary@@SAPAUHINSTANCE__@@PB_W_N@Z.QT5CORE(00000000), ref: 6B3369E2
GetProcAddress.KERNEL32(00000000,Direct3DCreate9), ref: 6B3369FB
NtProtectVirtualMemory.NTDLL(00000020), ref: 6B336A07

Strings

Direct3DCreate9, xrefs: 6B3369F5

Memory Dump Source

Source File: 00000007.00000002.3336124309.000000006B301000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6B300000, based on PE: true

Associated: 00000007.00000002.3336078379.000000006B300000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336232454.000000006B3D2000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336296015.000000006B416000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336342659.000000006B417000.00000008.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336389257.000000006B418000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336436882.000000006B41B000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336485192.000000006B41D000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6b300000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$??0?$?load@?utf16@AddressE__@@F@@@@Library@@MemoryPointProcProtectSystemV0@@Vector@Virtual
String ID: Direct3DCreate9
API String ID: 506923152-2790205071
Opcode ID: 914e3c66d234a378c357e0012b1f15a61e505a2f2eba967dc3cec02ee7df0e0c
Instruction ID: 03db3b5304f4398d76eb112f140728f405b5ba95f1d6f6f4a0d97eb112d7fe65
Opcode Fuzzy Hash: 914e3c66d234a378c357e0012b1f15a61e505a2f2eba967dc3cec02ee7df0e0c
Instruction Fuzzy Hash: 23011E716042509FEF00EFA4DE98B967FA8EF46215F088468E90ACA145DB79D508CB71

Uniqueness

Uniqueness Score: -1.00%

Function 00C6B470 Relevance: 945.6, APIs: 470, Strings: 69, Instructions: 2320
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?objectName@QObject@@QBE?AVQString@@XZ.QT5CORE(?,676E6AEE,?,00000000,00000000), ref: 00C6B4A9
??1QString@@QAE@XZ.QT5CORE ref: 00C6B4B7
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,MainWindow,000000FF), ref: 00C6B4CC
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6B4DB
??1QString@@QAE@XZ.QT5CORE ref: 00C6B4EB
?resize@QWidget@@QAEXHH@Z.QT5WIDGETS(000003B6,000002BC), ref: 00C6B4FD
new.LIBCMT ref: 00C6B505
??0QAction@@QAE@PAVQObject@@@Z.QT5WIDGETS(?), ref: 00C6B522
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,actionPreferences,000000FF), ref: 00C6B541
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6B557
??1QString@@QAE@XZ.QT5CORE ref: 00C6B567
new.LIBCMT ref: 00C6B56F
??0QAction@@QAE@PAVQObject@@@Z.QT5WIDGETS(?), ref: 00C6B586
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,actionNew,000000FF), ref: 00C6B5A6
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6B5BD
??1QString@@QAE@XZ.QT5CORE ref: 00C6B5CD
new.LIBCMT ref: 00C6B5D5
??0QAction@@QAE@PAVQObject@@@Z.QT5WIDGETS(?), ref: 00C6B5EC
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,actionOpen,000000FF), ref: 00C6B60C
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6B623
??1QString@@QAE@XZ.QT5CORE ref: 00C6B633
new.LIBCMT ref: 00C6B63B
??0QAction@@QAE@PAVQObject@@@Z.QT5WIDGETS(?), ref: 00C6B652
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,actionSave_As,000000FF), ref: 00C6B672
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6B689
??1QString@@QAE@XZ.QT5CORE ref: 00C6B699
new.LIBCMT ref: 00C6B6A1

Part of subcall function 00CAC0B7: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0DE

??0QAction@@QAE@PAVQObject@@@Z.QT5WIDGETS(?), ref: 00C6B6B8
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,actionSubmit_Online,000000FF), ref: 00C6B6D8
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6B6EF
??1QString@@QAE@XZ.QT5CORE ref: 00C6B6FF
new.LIBCMT ref: 00C6B707

Part of subcall function 00CAC0B7: _callnewh.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0BF

??0QAction@@QAE@PAVQObject@@@Z.QT5WIDGETS(?), ref: 00C6B71E
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,actionPage_Setup,000000FF), ref: 00C6B73E
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6B755
??1QString@@QAE@XZ.QT5CORE ref: 00C6B765
new.LIBCMT ref: 00C6B76D

Part of subcall function 00CAC0B7: Concurrency::cancel_current_task.LIBCPMT ref: 00CAC0D6

??0QAction@@QAE@PAVQObject@@@Z.QT5WIDGETS(?), ref: 00C6B784
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,actionPrint,000000FF), ref: 00C6B7A4
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6B7BB
??1QString@@QAE@XZ.QT5CORE ref: 00C6B7CB
new.LIBCMT ref: 00C6B7D3
??0QAction@@QAE@PAVQObject@@@Z.QT5WIDGETS(?), ref: 00C6B7EA
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,actionExit,000000FF), ref: 00C6B80A
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6B821
??1QString@@QAE@XZ.QT5CORE ref: 00C6B831
new.LIBCMT ref: 00C6B839
??0QAction@@QAE@PAVQObject@@@Z.QT5WIDGETS(?), ref: 00C6B850
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,actionSelected_Records_as_PDF,000000FF), ref: 00C6B870
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6B887
??1QString@@QAE@XZ.QT5CORE ref: 00C6B897
new.LIBCMT ref: 00C6B89F
??0QAction@@QAE@PAVQObject@@@Z.QT5WIDGETS(?), ref: 00C6B8B6
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,actionSelected_Records_as_CSV,000000FF), ref: 00C6B8D6
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6B8ED
??1QString@@QAE@XZ.QT5CORE ref: 00C6B8FD
new.LIBCMT ref: 00C6B905
??0QAction@@QAE@PAVQObject@@@Z.QT5WIDGETS(?), ref: 00C6B91C
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,actionFM100_Database_Version_1_HDB,000000FF), ref: 00C6B93C
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6B953
??1QString@@QAE@XZ.QT5CORE ref: 00C6B963
new.LIBCMT ref: 00C6B96B
??0QAction@@QAE@PAVQObject@@@Z.QT5WIDGETS(?), ref: 00C6B982
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,actionComma_Separated_Values_CSV,000000FF), ref: 00C6B9A2
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6B9B9
??1QString@@QAE@XZ.QT5CORE ref: 00C6B9C9
new.LIBCMT ref: 00C6B9D1
??0QAction@@QAE@PAVQObject@@@Z.QT5WIDGETS(?), ref: 00C6B9E8
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,actionUndo,000000FF), ref: 00C6BA08
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6BA1F
??1QString@@QAE@XZ.QT5CORE ref: 00C6BA2F
new.LIBCMT ref: 00C6BA37
??0QAction@@QAE@PAVQObject@@@Z.QT5WIDGETS(?), ref: 00C6BA4E
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,actionCut,000000FF), ref: 00C6BA6E
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6BA85
??1QString@@QAE@XZ.QT5CORE ref: 00C6BA95
new.LIBCMT ref: 00C6BA9D
??0QAction@@QAE@PAVQObject@@@Z.QT5WIDGETS(?), ref: 00C6BAB4
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,actionCopy,000000FF), ref: 00C6BAD4
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6BAEB
??1QString@@QAE@XZ.QT5CORE ref: 00C6BAFB
new.LIBCMT ref: 00C6BB03
??0QAction@@QAE@PAVQObject@@@Z.QT5WIDGETS(?), ref: 00C6BB1A
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,actionPaste,000000FF), ref: 00C6BB3A
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6BB51
??1QString@@QAE@XZ.QT5CORE ref: 00C6BB61
new.LIBCMT ref: 00C6BB69
??0QAction@@QAE@PAVQObject@@@Z.QT5WIDGETS(?), ref: 00C6BB80
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,actionClear,000000FF), ref: 00C6BBA0
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6BBB7
??1QString@@QAE@XZ.QT5CORE ref: 00C6BBC7
new.LIBCMT ref: 00C6BBCF
??0QAction@@QAE@PAVQObject@@@Z.QT5WIDGETS(?), ref: 00C6BBE6
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,actionSelect_All,000000FF), ref: 00C6BC06
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6BC1D
??1QString@@QAE@XZ.QT5CORE ref: 00C6BC2D
new.LIBCMT ref: 00C6BC35
??0QAction@@QAE@PAVQObject@@@Z.QT5WIDGETS(?), ref: 00C6BC4C
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,actionNew_Record,000000FF), ref: 00C6BC6C
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6BC83
??1QString@@QAE@XZ.QT5CORE ref: 00C6BC93
new.LIBCMT ref: 00C6BC9B
??0QAction@@QAE@PAVQObject@@@Z.QT5WIDGETS(?), ref: 00C6BCB2
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,actionDelete_Record,000000FF), ref: 00C6BCD2
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6BCE9
??1QString@@QAE@XZ.QT5CORE ref: 00C6BCF9
new.LIBCMT ref: 00C6BD01
??0QAction@@QAE@PAVQObject@@@Z.QT5WIDGETS(?), ref: 00C6BD18
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,actionSave_Current_Record,000000FF), ref: 00C6BD38
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6BD4F
??1QString@@QAE@XZ.QT5CORE ref: 00C6BD5F
new.LIBCMT ref: 00C6BD67
??0QAction@@QAE@PAVQObject@@@Z.QT5WIDGETS(?), ref: 00C6BD7E
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,actionCopy_Name_and_Analysis,000000FF), ref: 00C6BD9E
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6BDB5
??1QString@@QAE@XZ.QT5CORE ref: 00C6BDC5
new.LIBCMT ref: 00C6BDCD
??0QAction@@QAE@PAVQObject@@@Z.QT5WIDGETS(?), ref: 00C6BDE4
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,actionCopy_Graph,000000FF), ref: 00C6BE04
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6BE1B
??1QString@@QAE@XZ.QT5CORE ref: 00C6BE2B
new.LIBCMT ref: 00C6BE33
??0QAction@@QAE@PAVQObject@@@Z.QT5WIDGETS(?), ref: 00C6BE4A
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,actionAbout_Application,000000FF), ref: 00C6BE6A
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6BE81
??1QString@@QAE@XZ.QT5CORE ref: 00C6BE91
new.LIBCMT ref: 00C6BE99
??0QAction@@QAE@PAVQObject@@@Z.QT5WIDGETS(?), ref: 00C6BEB0
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,actionContents,000000FF), ref: 00C6BED0
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6BEE7
??1QString@@QAE@XZ.QT5CORE ref: 00C6BEF7
new.LIBCMT ref: 00C6BEFF
??0QAction@@QAE@PAVQObject@@@Z.QT5WIDGETS(?), ref: 00C6BF16
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,actionData_Entry_Screen,000000FF), ref: 00C6BF36
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6BF4D
??1QString@@QAE@XZ.QT5CORE ref: 00C6BF5D
new.LIBCMT ref: 00C6BF65
??0QAction@@QAE@PAVQObject@@@Z.QT5WIDGETS(?), ref: 00C6BF7C
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,actionDatabase,000000FF), ref: 00C6BF9C
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6BFB3
??1QString@@QAE@XZ.QT5CORE ref: 00C6BFC3
new.LIBCMT ref: 00C6BFCB
??0QAction@@QAE@PAVQObject@@@Z.QT5WIDGETS(?), ref: 00C6BFE2
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,actionPolar_Graph,000000FF), ref: 00C6C002
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6C019
??1QString@@QAE@XZ.QT5CORE ref: 00C6C029
new.LIBCMT ref: 00C6C031
??0QAction@@QAE@PAVQObject@@@Z.QT5WIDGETS(?), ref: 00C6C048
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,actionLinear_Graph,000000FF), ref: 00C6C068
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6C07F
??1QString@@QAE@XZ.QT5CORE ref: 00C6C08F
new.LIBCMT ref: 00C6C097
??0QAction@@QAE@PAVQObject@@@Z.QT5WIDGETS(?), ref: 00C6C0AE
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,actionFM100_Database_Version_2_FMT,000000FF), ref: 00C6C0CE
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6C0E5
??1QString@@QAE@XZ.QT5CORE ref: 00C6C0F5
new.LIBCMT ref: 00C6C0FD
??0QAction@@QAE@PAVQObject@@@Z.QT5WIDGETS(?), ref: 00C6C114
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,actionAboutQt,000000FF), ref: 00C6C134
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6C148
??1QString@@QAE@XZ.QT5CORE ref: 00C6C158
new.LIBCMT ref: 00C6C160
??0QWidget@@QAE@PAV0@V?$QFlags@W4WindowType@Qt@@@@@Z.QT5WIDGETS(?,00000000), ref: 00C6C179
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,centralWidget,000000FF), ref: 00C6C1A1
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6C1B5
??1QString@@QAE@XZ.QT5CORE ref: 00C6C1C5
new.LIBCMT ref: 00C6C1CD
??0QVBoxLayout@@QAE@PAVQWidget@@@Z.QT5WIDGETS(?), ref: 00C6C1E6
?setSpacing@QBoxLayout@@QAEXH@Z.QT5WIDGETS(00000006), ref: 00C6C210
?setContentsMargins@QLayout@@QAEXHHHH@Z.QT5WIDGETS(0000000B,0000000B,0000000B,0000000B), ref: 00C6C226
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,verticalLayout_2,000000FF), ref: 00C6C233
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6C24A
??1QString@@QAE@XZ.QT5CORE ref: 00C6C25A
?setContentsMargins@QLayout@@QAEXHHHH@Z.QT5WIDGETS(00000005,00000005,00000005,00000005), ref: 00C6C26E
new.LIBCMT ref: 00C6C272
??0QVBoxLayout@@QAE@XZ.QT5WIDGETS ref: 00C6C28E
?setSpacing@QBoxLayout@@QAEXH@Z.QT5WIDGETS(00000000), ref: 00C6C2B1
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,verticalLayout,000000FF), ref: 00C6C2BE
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6C2D8
??1QString@@QAE@XZ.QT5CORE ref: 00C6C2E8
new.LIBCMT ref: 00C6C2F0
??0QHBoxLayout@@QAE@XZ.QT5WIDGETS ref: 00C6C30C
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,horizontalLayout,000000FF), ref: 00C6C341
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6C35B
??1QString@@QAE@XZ.QT5CORE ref: 00C6C36B
new.LIBCMT ref: 00C6C373
??0QVBoxLayout@@QAE@XZ.QT5WIDGETS ref: 00C6C389
?setSpacing@QBoxLayout@@QAEXH@Z.QT5WIDGETS(00000000), ref: 00C6C3B2
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,verticalLayout_4,000000FF), ref: 00C6C3BF
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6C3D9
??1QString@@QAE@XZ.QT5CORE ref: 00C6C3E9
?setSizeConstraint@QLayout@@QAEXW4SizeConstraint@1@@Z.QT5WIDGETS(00000000), ref: 00C6C3F7
new.LIBCMT ref: 00C6C3FF
??0QHBoxLayout@@QAE@XZ.QT5WIDGETS ref: 00C6C415
?setSpacing@QBoxLayout@@QAEXH@Z.QT5WIDGETS(00000006), ref: 00C6C438
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,horizontalLayout_2,000000FF), ref: 00C6C445
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6C465
??1QString@@QAE@XZ.QT5CORE ref: 00C6C471
new.LIBCMT ref: 00C6C479
??0QPushButton@@QAE@PAVQWidget@@@Z.QT5WIDGETS(?), ref: 00C6C492
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,NewButton,000000FF), ref: 00C6C4BD
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6C4D4
??1QString@@QAE@XZ.QT5CORE ref: 00C6C4E0
??0QSizePolicy@@QAE@W4Policy@0@0W4ControlType@0@@Z.QT5WIDGETS(00000005,00000005,00000001), ref: 00C6C4EF
?setHorizontalStretch@QSizePolicy@@QAEXH@Z.QT5WIDGETS(00000000), ref: 00C6C4FA
?setVerticalStretch@QSizePolicy@@QAEXH@Z.QT5WIDGETS(00000000), ref: 00C6C505
?sizePolicy@QWidget@@QBE?AVQSizePolicy@@XZ.QT5WIDGETS(?), ref: 00C6C515
?hasHeightForWidth@QSizePolicy@@QBE_NXZ.QT5WIDGETS ref: 00C6C51D
?setHeightForWidth@QSizePolicy@@QAEX_N@Z.QT5WIDGETS(?), ref: 00C6C52A
?setSizePolicy@QWidget@@QAEXVQSizePolicy@@@Z.QT5WIDGETS(?), ref: 00C6C539
??0QFont@@QAE@XZ.QT5GUI ref: 00C6C542
?setPointSize@QFont@@QAEXH@Z.QT5GUI(0000000A), ref: 00C6C554
?setFont@QWidget@@QAEXABVQFont@@@Z.QT5WIDGETS(?), ref: 00C6C564
??0QIcon@@QAE@XZ.QT5GUI ref: 00C6C56D
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,:/Images/add.png,000000FF), ref: 00C6C582
??0QSize@@QAE@XZ.QT5CORE(00000000,00000001), ref: 00C6C598
?addFile@QIcon@@QAEXABVQString@@ABVQSize@@W4Mode@1@W4State@1@@Z.QT5GUI(00000000,00000000), ref: 00C6C5A9
??1QString@@QAE@XZ.QT5CORE ref: 00C6C5B2
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,:/Images/add-selected.png,000000FF), ref: 00C6C5C3
??0QSize@@QAE@XZ.QT5CORE(00000003,00000000), ref: 00C6C5D9
?addFile@QIcon@@QAEXABVQString@@ABVQSize@@W4Mode@1@W4State@1@@Z.QT5GUI(00000000,00000000), ref: 00C6C5E4
??1QString@@QAE@XZ.QT5CORE ref: 00C6C5ED
?setIcon@QAbstractButton@@QAEXABVQIcon@@@Z.QT5WIDGETS(?), ref: 00C6C5FD
?setCheckable@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(00000001), ref: 00C6C611
?setFlat@QPushButton@@QAEX_N@Z.QT5WIDGETS(00000001), ref: 00C6C621
?addWidget@QBoxLayout@@QAEXPAVQWidget@@HV?$QFlags@W4AlignmentFlag@Qt@@@@@Z.QT5WIDGETS(?,00000000,00000000), ref: 00C6C636
new.LIBCMT ref: 00C6C63E
??0QPushButton@@QAE@PAVQWidget@@@Z.QT5WIDGETS(?), ref: 00C6C657
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,ViewButton,000000FF), ref: 00C6C682
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6C699
??1QString@@QAE@XZ.QT5CORE ref: 00C6C6A6
?sizePolicy@QWidget@@QBE?AVQSizePolicy@@XZ.QT5WIDGETS(?), ref: 00C6C6B6
?hasHeightForWidth@QSizePolicy@@QBE_NXZ.QT5WIDGETS ref: 00C6C6BE
?setHeightForWidth@QSizePolicy@@QAEX_N@Z.QT5WIDGETS(?), ref: 00C6C6CB
?setSizePolicy@QWidget@@QAEXVQSizePolicy@@@Z.QT5WIDGETS(?), ref: 00C6C6DA
?setFont@QWidget@@QAEXABVQFont@@@Z.QT5WIDGETS(?), ref: 00C6C6EA
??0QIcon@@QAE@XZ.QT5GUI ref: 00C6C6F3
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,:/Images/view.png,000000FF), ref: 00C6C708
??0QSize@@QAE@XZ.QT5CORE(00000000,00000001), ref: 00C6C71E
?addFile@QIcon@@QAEXABVQString@@ABVQSize@@W4Mode@1@W4State@1@@Z.QT5GUI(00000000,00000000), ref: 00C6C729
??1QString@@QAE@XZ.QT5CORE ref: 00C6C736
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,:/Images/view-selected.png,000000FF), ref: 00C6C747
??0QSize@@QAE@XZ.QT5CORE(00000003,00000000), ref: 00C6C75D
?addFile@QIcon@@QAEXABVQString@@ABVQSize@@W4Mode@1@W4State@1@@Z.QT5GUI(00000000,00000000), ref: 00C6C768
??1QString@@QAE@XZ.QT5CORE ref: 00C6C775
?setIcon@QAbstractButton@@QAEXABVQIcon@@@Z.QT5WIDGETS(?), ref: 00C6C788
?setCheckable@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(00000001), ref: 00C6C796
?setFlat@QPushButton@@QAEX_N@Z.QT5WIDGETS(00000001), ref: 00C6C7A0
?addWidget@QBoxLayout@@QAEXPAVQWidget@@HV?$QFlags@W4AlignmentFlag@Qt@@@@@Z.QT5WIDGETS(00C614B6,00000000,00000000), ref: 00C6C7B2
new.LIBCMT ref: 00C6C7BA
??0QPushButton@@QAE@PAVQWidget@@@Z.QT5WIDGETS(?), ref: 00C6C7D3
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,AnalysisButton,000000FF), ref: 00C6C7FE
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6C815
??1QString@@QAE@XZ.QT5CORE ref: 00C6C822
?sizePolicy@QWidget@@QBE?AVQSizePolicy@@XZ.QT5WIDGETS(?), ref: 00C6C832
?hasHeightForWidth@QSizePolicy@@QBE_NXZ.QT5WIDGETS ref: 00C6C83A
?setHeightForWidth@QSizePolicy@@QAEX_N@Z.QT5WIDGETS(?), ref: 00C6C847
?setSizePolicy@QWidget@@QAEXVQSizePolicy@@@Z.QT5WIDGETS(?), ref: 00C6C856
?setFont@QWidget@@QAEXABVQFont@@@Z.QT5WIDGETS(?), ref: 00C6C866
??0QIcon@@QAE@XZ.QT5GUI ref: 00C6C86F
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,:/Images/analysis.png,000000FF), ref: 00C6C884
??0QSize@@QAE@XZ.QT5CORE(00000000,00000001), ref: 00C6C89A
?addFile@QIcon@@QAEXABVQString@@ABVQSize@@W4Mode@1@W4State@1@@Z.QT5GUI(00000000,00000000), ref: 00C6C8A5
??1QString@@QAE@XZ.QT5CORE ref: 00C6C8B2
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,:/Images/analysis-selected.png,000000FF), ref: 00C6C8C3
??0QSize@@QAE@XZ.QT5CORE(00000003,00000000), ref: 00C6C8D9
?addFile@QIcon@@QAEXABVQString@@ABVQSize@@W4Mode@1@W4State@1@@Z.QT5GUI(00000000,00000000), ref: 00C6C8E4
??1QString@@QAE@XZ.QT5CORE ref: 00C6C8F1
?setIcon@QAbstractButton@@QAEXABVQIcon@@@Z.QT5WIDGETS(?), ref: 00C6C904
?setCheckable@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(00000001), ref: 00C6C912
?setFlat@QPushButton@@QAEX_N@Z.QT5WIDGETS(00000001), ref: 00C6C91C
?addWidget@QBoxLayout@@QAEXPAVQWidget@@HV?$QFlags@W4AlignmentFlag@Qt@@@@@Z.QT5WIDGETS(?,00000000,00000000), ref: 00C6C92E
new.LIBCMT ref: 00C6C936
??0QPushButton@@QAE@PAVQWidget@@@Z.QT5WIDGETS(?), ref: 00C6C94F
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,DatabaseButton,000000FF), ref: 00C6C97A
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6C991
??1QString@@QAE@XZ.QT5CORE ref: 00C6C99E
?sizePolicy@QWidget@@QBE?AVQSizePolicy@@XZ.QT5WIDGETS(?), ref: 00C6C9AE
?hasHeightForWidth@QSizePolicy@@QBE_NXZ.QT5WIDGETS ref: 00C6C9B6
?setHeightForWidth@QSizePolicy@@QAEX_N@Z.QT5WIDGETS(?), ref: 00C6C9C3
?setSizePolicy@QWidget@@QAEXVQSizePolicy@@@Z.QT5WIDGETS(?), ref: 00C6C9D2
?setFont@QWidget@@QAEXABVQFont@@@Z.QT5WIDGETS(?), ref: 00C6C9E2
??0QIcon@@QAE@XZ.QT5GUI ref: 00C6C9EB
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,:/Images/database.png,000000FF), ref: 00C6CA00
??0QSize@@QAE@XZ.QT5CORE(00000000,00000001), ref: 00C6CA16
?addFile@QIcon@@QAEXABVQString@@ABVQSize@@W4Mode@1@W4State@1@@Z.QT5GUI(00000000,00000000), ref: 00C6CA21
??1QString@@QAE@XZ.QT5CORE ref: 00C6CA2E
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,:/Images/database-selected.png,000000FF), ref: 00C6CA3F
??0QSize@@QAE@XZ.QT5CORE(00000003,00000000), ref: 00C6CA55
?addFile@QIcon@@QAEXABVQString@@ABVQSize@@W4Mode@1@W4State@1@@Z.QT5GUI(00000000,00000000), ref: 00C6CA60
??1QString@@QAE@XZ.QT5CORE ref: 00C6CA6D
?setIcon@QAbstractButton@@QAEXABVQIcon@@@Z.QT5WIDGETS(?), ref: 00C6CA80
?setCheckable@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(00000001), ref: 00C6CA8E
?setFlat@QPushButton@@QAEX_N@Z.QT5WIDGETS(00000001), ref: 00C6CA98
?addWidget@QBoxLayout@@QAEXPAVQWidget@@HV?$QFlags@W4AlignmentFlag@Qt@@@@@Z.QT5WIDGETS(?,00000000,00000000), ref: 00C6CAAA
new.LIBCMT ref: 00C6CAB2
??0QSpacerItem@@QAE@HHW4Policy@QSizePolicy@@0@Z.QT5WIDGETS(00000028,00000014,00000007,00000001), ref: 00C6CACD
new.LIBCMT ref: 00C6CAF4
??0QPushButton@@QAE@PAVQWidget@@@Z.QT5WIDGETS(?), ref: 00C6CB0D
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,PrintButton,000000FF), ref: 00C6CB38
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6CB4F
??1QString@@QAE@XZ.QT5CORE ref: 00C6CB5C
?setFont@QWidget@@QAEXABVQFont@@@Z.QT5WIDGETS(?), ref: 00C6CB6C
??0QIcon@@QAE@XZ.QT5GUI ref: 00C6CB75
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,:/Images/print.png,000000FF), ref: 00C6CB8A
??0QSize@@QAE@XZ.QT5CORE(00000000,00000001), ref: 00C6CBA0
?addFile@QIcon@@QAEXABVQString@@ABVQSize@@W4Mode@1@W4State@1@@Z.QT5GUI(00000000,00000000), ref: 00C6CBAB
??1QString@@QAE@XZ.QT5CORE ref: 00C6CBB8
?setIcon@QAbstractButton@@QAEXABVQIcon@@@Z.QT5WIDGETS(?), ref: 00C6CBCB
?setCheckable@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(00000000), ref: 00C6CBD9
?setFlat@QPushButton@@QAEX_N@Z.QT5WIDGETS(00000001), ref: 00C6CBE3
?addWidget@QBoxLayout@@QAEXPAVQWidget@@HV?$QFlags@W4AlignmentFlag@Qt@@@@@Z.QT5WIDGETS(?,00000000,00000000), ref: 00C6CBF5
new.LIBCMT ref: 00C6CBFD
??0QPushButton@@QAE@PAVQWidget@@@Z.QT5WIDGETS(?), ref: 00C6CC16
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,HelpButton,000000FF), ref: 00C6CC41
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6CC58
??1QString@@QAE@XZ.QT5CORE ref: 00C6CC65
?setFont@QWidget@@QAEXABVQFont@@@Z.QT5WIDGETS(?), ref: 00C6CC75
??0QIcon@@QAE@XZ.QT5GUI ref: 00C6CC7E
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,:/Images/help.png,000000FF), ref: 00C6CC93
??0QSize@@QAE@XZ.QT5CORE(00000000,00000001), ref: 00C6CCA9
?addFile@QIcon@@QAEXABVQString@@ABVQSize@@W4Mode@1@W4State@1@@Z.QT5GUI(00000000,00000000), ref: 00C6CCB4
??1QString@@QAE@XZ.QT5CORE ref: 00C6CCC1
?setIcon@QAbstractButton@@QAEXABVQIcon@@@Z.QT5WIDGETS(?), ref: 00C6CCD4
?setCheckable@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(00000000), ref: 00C6CCE2
?setFlat@QPushButton@@QAEX_N@Z.QT5WIDGETS(00000001), ref: 00C6CCEC
?addWidget@QBoxLayout@@QAEXPAVQWidget@@HV?$QFlags@W4AlignmentFlag@Qt@@@@@Z.QT5WIDGETS(?,00000000,00000000), ref: 00C6CD04
?addLayout@QBoxLayout@@QAEXPAVQLayout@@H@Z.QT5WIDGETS(?,00000000), ref: 00C6CD1A
new.LIBCMT ref: 00C6CD1E
??0QHBoxLayout@@QAE@XZ.QT5WIDGETS ref: 00C6CD31
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,horizontalLayout_3,000000FF), ref: 00C6CD67
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6CD7E
??1QString@@QAE@XZ.QT5CORE ref: 00C6CD8B
?addLayout@QBoxLayout@@QAEXPAVQLayout@@H@Z.QT5WIDGETS(?,00000000), ref: 00C6CD9F
?addLayout@QBoxLayout@@QAEXPAVQLayout@@H@Z.QT5WIDGETS(?,00000000), ref: 00C6CDAF
?addLayout@QBoxLayout@@QAEXPAVQLayout@@H@Z.QT5WIDGETS(00000003,00000000), ref: 00C6CDBF
new.LIBCMT ref: 00C6CDC3
??0QFrame@@QAE@PAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z.QT5WIDGETS(?,00000000), ref: 00C6CDDE
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,topLine,000000FF), ref: 00C6CE09
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6CE20
??1QString@@QAE@XZ.QT5CORE ref: 00C6CE2D
??0QSizePolicy@@QAE@W4Policy@0@0W4ControlType@0@@Z.QT5WIDGETS(00000001,00000000,00000001), ref: 00C6CE3C
?setHorizontalStretch@QSizePolicy@@QAEXH@Z.QT5WIDGETS(00000000), ref: 00C6CE47
?setVerticalStretch@QSizePolicy@@QAEXH@Z.QT5WIDGETS(00000000), ref: 00C6CE52
?sizePolicy@QWidget@@QBE?AVQSizePolicy@@XZ.QT5WIDGETS(?), ref: 00C6CE62
?hasHeightForWidth@QSizePolicy@@QBE_NXZ.QT5WIDGETS ref: 00C6CE6A
?setHeightForWidth@QSizePolicy@@QAEX_N@Z.QT5WIDGETS(?), ref: 00C6CE77
?setSizePolicy@QWidget@@QAEXVQSizePolicy@@@Z.QT5WIDGETS(?), ref: 00C6CE86
?setFrameShadow@QFrame@@QAEXW4Shadow@1@@Z.QT5WIDGETS(00000020), ref: 00C6CE94
?setFrameShape@QFrame@@QAEXW4Shape@1@@Z.QT5WIDGETS(00000004), ref: 00C6CEA2
?addWidget@QBoxLayout@@QAEXPAVQWidget@@HV?$QFlags@W4AlignmentFlag@Qt@@@@@Z.QT5WIDGETS(?,00000000,00000000), ref: 00C6CEB8
new.LIBCMT ref: 00C6CEBC
??0QStackedWidget@@QAE@PAVQWidget@@@Z.QT5WIDGETS(?), ref: 00C6CED5
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,stackedWidget,000000FF), ref: 00C6CF00
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6CF17
??1QString@@QAE@XZ.QT5CORE ref: 00C6CF24
new.LIBCMT ref: 00C6CF2F

Part of subcall function 00C80040: ??0QWidget@@QAE@PAV0@V?$QFlags@W4WindowType@Qt@@@@@Z.QT5WIDGETS(00C6CF47,00000000,676E6AEE,6B9DED70,?,6B9DEE70,00000000,00000000,00CB150B,000000FF,?,00C6CF47,00000000), ref: 00C80070
Part of subcall function 00C80040: new.LIBCMT ref: 00C8009B
Part of subcall function 00C80040: ??0QString@@QAE@XZ.QT5CORE ref: 00C800AD
Part of subcall function 00C80040: ?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(00000000,00CBD240,2clearIcons(),00000000,1removeDragIcons(),00000000,00000000), ref: 00C800E9
Part of subcall function 00C80040: ??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C800F7
Part of subcall function 00C80040: ?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2clearIcons(),00000000,1removeDragIcons(),00000000), ref: 00C80110
Part of subcall function 00C80040: ??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C80118
Part of subcall function 00C80040: ?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2clearIcons(),00000000,1removeDragIcons(),00000000), ref: 00C80131
Part of subcall function 00C80040: ??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C80139
Part of subcall function 00C80040: ?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2clearIcons(),00000000,1removeDragIcons(),00000000), ref: 00C80152
Part of subcall function 00C80040: ??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C8015A

?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(00000000,newHueTestWidget,000000FF,00000000), ref: 00C6CF5C
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6CF70
??1QString@@QAE@XZ.QT5CORE ref: 00C6CF7D
?addWidget@QStackedWidget@@QAEHPAVQWidget@@@Z.QT5WIDGETS(?), ref: 00C6CF95
new.LIBCMT ref: 00C6CF9C
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,viewHueTestWidget,000000FF,00000000), ref: 00C6CFCC
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6CFE3
??1QString@@QAE@XZ.QT5CORE ref: 00C6CFF0
?addWidget@QStackedWidget@@QAEHPAVQWidget@@@Z.QT5WIDGETS(?), ref: 00C6D005
new.LIBCMT ref: 00C6D00C

Part of subcall function 00C6E0D0: ??0QWidget@@QAE@PAV0@V?$QFlags@W4WindowType@Qt@@@@@Z.QT5WIDGETS(00C6D024,00000000,676E6AEE,6BB0CEB0,00000000,00000000,00CAEE33,000000FF,?,00C6D024,00000000), ref: 00C6E0FE
Part of subcall function 00C6E0D0: new.LIBCMT ref: 00C6E11D
Part of subcall function 00C6E0D0: ??0QString@@QAE@XZ.QT5CORE ref: 00C6E1C1
Part of subcall function 00C6E0D0: ??0QString@@QAE@XZ.QT5CORE ref: 00C6E1CD
Part of subcall function 00C6E0D0: ??0QString@@QAE@XZ.QT5CORE ref: 00C6E1D9
Part of subcall function 00C6E0D0: ??0QString@@QAE@XZ.QT5CORE ref: 00C6E1E5
Part of subcall function 00C6E0D0: ?setReadOnly@QPlainTextEdit@@QAEX_N@Z.QT5WIDGETS(00000001,00000000), ref: 00C6E207

?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,analysisWidget,000000FF,00000000), ref: 00C6D03C
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6D053
??1QString@@QAE@XZ.QT5CORE ref: 00C6D060
?addWidget@QStackedWidget@@QAEHPAVQWidget@@@Z.QT5WIDGETS(?), ref: 00C6D075
new.LIBCMT ref: 00C6D079

Part of subcall function 00C79680: ??0QWidget@@QAE@PAV0@V?$QFlags@W4WindowType@Qt@@@@@Z.QT5WIDGETS(00C6D091,00000000,676E6AEE,6B9DED70,6BB0CEB0,6B9DEE70,00000000,00000000,00CB02A1,000000FF,?,00C6D091,00000000), ref: 00C796B0
Part of subcall function 00C79680: new.LIBCMT ref: 00C796CC
Part of subcall function 00C79680: ?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(00000000,?,2clicked(bool),00000000,1clearSearchClick(),00000000,00000000), ref: 00C79721
Part of subcall function 00C79680: ??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C7972F
Part of subcall function 00C79680: ?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2clicked(bool),00000000,1deleteClick(),00000000), ref: 00C79748
Part of subcall function 00C79680: ??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C79750
Part of subcall function 00C79680: ?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2clicked(bool),00000000,1selectTestClick(),00000000), ref: 00C79769
Part of subcall function 00C79680: ??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C79771
Part of subcall function 00C79680: ?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2itemSelectionChanged(),00000000,1selectionChanged(),00000000), ref: 00C7978A
Part of subcall function 00C79680: ??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C79792
Part of subcall function 00C79680: ?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2textChanged(QString),00000000,1displaySearchResults(),00000000), ref: 00C797AB

?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,databaseWidget,000000FF,00000000), ref: 00C6D0A9
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6D0C0
??1QString@@QAE@XZ.QT5CORE ref: 00C6D0CD
?addWidget@QStackedWidget@@QAEHPAVQWidget@@@Z.QT5WIDGETS(?), ref: 00C6D0E2
?addWidget@QBoxLayout@@QAEXPAVQWidget@@HV?$QFlags@W4AlignmentFlag@Qt@@@@@Z.QT5WIDGETS(?,00000000,00000000), ref: 00C6D0F7
?addLayout@QBoxLayout@@QAEXPAVQLayout@@H@Z.QT5WIDGETS(?,00000000), ref: 00C6D107
?setCentralWidget@QMainWindow@@QAEXPAVQWidget@@@Z.QT5WIDGETS(?), ref: 00C6D111
new.LIBCMT ref: 00C6D119
??0QMenuBar@@QAE@PAVQWidget@@@Z.QT5WIDGETS(00CB9B84), ref: 00C6D12D
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,menuBar,000000FF), ref: 00C6D158
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6D16C
??1QString@@QAE@XZ.QT5CORE ref: 00C6D179
??0QRect@@QAE@HHHH@Z.QT5CORE(00000000,00000000,000003B6,00000014), ref: 00C6D18D
?setGeometry@QWidget@@QAEXABVQRect@@@Z.QT5WIDGETS(00000000), ref: 00C6D19A
new.LIBCMT ref: 00C6D1A2
??0QMenu@@QAE@PAVQWidget@@@Z.QT5WIDGETS(?), ref: 00C6D1C1
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,menuFIle,000000FF), ref: 00C6D1E8
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6D1FF
??1QString@@QAE@XZ.QT5CORE ref: 00C6D20C
new.LIBCMT ref: 00C6D214
??0QMenu@@QAE@PAVQWidget@@@Z.QT5WIDGETS(?), ref: 00C6D230
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,menuImport,000000FF), ref: 00C6D257
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6D26E
??1QString@@QAE@XZ.QT5CORE ref: 00C6D27B
new.LIBCMT ref: 00C6D283
??0QMenu@@QAE@PAVQWidget@@@Z.QT5WIDGETS(?), ref: 00C6D29F
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,menuExport,000000FF), ref: 00C6D2C6
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6D2DD
??1QString@@QAE@XZ.QT5CORE ref: 00C6D2EA
new.LIBCMT ref: 00C6D2F2
??0QMenu@@QAE@PAVQWidget@@@Z.QT5WIDGETS(?), ref: 00C6D30E
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,menuEdit,000000FF), ref: 00C6D335
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6D34C
??1QString@@QAE@XZ.QT5CORE ref: 00C6D359
new.LIBCMT ref: 00C6D361
??0QMenu@@QAE@PAVQWidget@@@Z.QT5WIDGETS(?), ref: 00C6D37D
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,menuView,000000FF), ref: 00C6D3A4
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6D3BB
??1QString@@QAE@XZ.QT5CORE ref: 00C6D3C8
new.LIBCMT ref: 00C6D3D0
??0QMenu@@QAE@PAVQWidget@@@Z.QT5WIDGETS(?), ref: 00C6D3EC
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,menuHelp,000000FF), ref: 00C6D413
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C6D427
??1QString@@QAE@XZ.QT5CORE ref: 00C6D434
?setMenuBar@QMainWindow@@QAEXPAVQMenuBar@@@Z.QT5WIDGETS(?), ref: 00C6D442
?menuAction@QMenu@@QBEPAVQAction@@XZ.QT5WIDGETS ref: 00C6D454
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(00000000), ref: 00C6D463
?menuAction@QMenu@@QBEPAVQAction@@XZ.QT5WIDGETS ref: 00C6D46B
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(00000000), ref: 00C6D474
?menuAction@QMenu@@QBEPAVQAction@@XZ.QT5WIDGETS ref: 00C6D47C
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(00000000), ref: 00C6D485
?menuAction@QMenu@@QBEPAVQAction@@XZ.QT5WIDGETS ref: 00C6D48D
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(00000000), ref: 00C6D496
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(?), ref: 00C6D4A0
?addSeparator@QMenu@@QAEPAVQAction@@XZ.QT5WIDGETS ref: 00C6D4AE
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(00000008), ref: 00C6D4BC
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(00CB98EC), ref: 00C6D4CA
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(?), ref: 00C6D4D8
?addSeparator@QMenu@@QAEPAVQAction@@XZ.QT5WIDGETS ref: 00C6D4E3
?menuAction@QMenu@@QBEPAVQAction@@XZ.QT5WIDGETS ref: 00C6D4EE
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(00000000), ref: 00C6D4FA
?menuAction@QMenu@@QBEPAVQAction@@XZ.QT5WIDGETS ref: 00C6D505
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(00000000), ref: 00C6D511
?addSeparator@QMenu@@QAEPAVQAction@@XZ.QT5WIDGETS ref: 00C6D519
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(?), ref: 00C6D524
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(?), ref: 00C6D52F
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(?), ref: 00C6D53A
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(?), ref: 00C6D545
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(?), ref: 00C6D550
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(?), ref: 00C6D55B
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(?), ref: 00C6D566
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(?), ref: 00C6D571
?addSeparator@QMenu@@QAEPAVQAction@@XZ.QT5WIDGETS ref: 00C6D579
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(?), ref: 00C6D584
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(?), ref: 00C6D58F
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(?), ref: 00C6D59A
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(?), ref: 00C6D5A5
?addSeparator@QMenu@@QAEPAVQAction@@XZ.QT5WIDGETS ref: 00C6D5AD
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(?), ref: 00C6D5B8
?addSeparator@QMenu@@QAEPAVQAction@@XZ.QT5WIDGETS ref: 00C6D5C0
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(?), ref: 00C6D5CB
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(?), ref: 00C6D5D6
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(?), ref: 00C6D5E1
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(?), ref: 00C6D5EC
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(?), ref: 00C6D5F7
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(?), ref: 00C6D602
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(?), ref: 00C6D60D
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(?), ref: 00C6D618
?addAction@QWidget@@QAEXPAVQAction@@@Z.QT5WIDGETS(?), ref: 00C6D623

Part of subcall function 00C6A840: ?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(00CB98EC,MainWindow,Farnsworth-Munsell 100 Hue Test Scoring Software,00000000,000000FF,676E6AEE,6BAF0660,00CB98EC,?,00C6D633,00CB98EC), ref: 00C6A882
Part of subcall function 00C6A840: ?setWindowTitle@QWidget@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C6A892
Part of subcall function 00C6A840: ??1QString@@QAE@XZ.QT5CORE ref: 00C6A8A2
Part of subcall function 00C6A840: ?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,MainWindow,Preferences,00000000,000000FF), ref: 00C6A8BA
Part of subcall function 00C6A840: ?setText@QAction@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C6A8CF
Part of subcall function 00C6A840: ??1QString@@QAE@XZ.QT5CORE ref: 00C6A8DB
Part of subcall function 00C6A840: ?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,MainWindow,New,00000000,000000FF), ref: 00C6A8F3
Part of subcall function 00C6A840: ?setText@QAction@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C6A903
Part of subcall function 00C6A840: ??1QString@@QAE@XZ.QT5CORE ref: 00C6A90F
Part of subcall function 00C6A840: ?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,MainWindow,Open,00000000,000000FF), ref: 00C6A927
Part of subcall function 00C6A840: ?setText@QAction@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C6A937
Part of subcall function 00C6A840: ??1QString@@QAE@XZ.QT5CORE ref: 00C6A943
Part of subcall function 00C6A840: ?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,MainWindow,Save As,00000000,000000FF), ref: 00C6A95B
Part of subcall function 00C6A840: ?setText@QAction@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C6A96B
Part of subcall function 00C6A840: ??1QString@@QAE@XZ.QT5CORE ref: 00C6A977
Part of subcall function 00C6A840: ?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,MainWindow,Submit Online,00000000,000000FF), ref: 00C6A98F

?setCurrentIndex@QStackedWidget@@QAEXH@Z.QT5WIDGETS(00000000,00CB98EC), ref: 00C6D63B
?connectSlotsByName@QMetaObject@@SAXPAVQObject@@@Z.QT5CORE(00CB98EC), ref: 00C6D642
??1QIcon@@QAE@XZ.QT5GUI ref: 00C6D654
??1QIcon@@QAE@XZ.QT5GUI ref: 00C6D659
??1QIcon@@QAE@XZ.QT5GUI ref: 00C6D65E
??1QIcon@@QAE@XZ.QT5GUI ref: 00C6D663
??1QIcon@@QAE@XZ.QT5GUI ref: 00C6D668
??1QIcon@@QAE@XZ.QT5GUI ref: 00C6D66D
??1QFontMetrics@@QAE@XZ.QT5GUI ref: 00C6D672

Strings

databaseWidget, xrefs: 00C6D096
actionExit, xrefs: 00C6B7F7
:/Images/help.png, xrefs: 00C6CC8D
jng, xrefs: 00C6B48C
actionSelected_Records_as_PDF, xrefs: 00C6B85D
actionPage_Setup, xrefs: 00C6B732
actionUndo, xrefs: 00C6B9F5
actionCopy, xrefs: 00C6BAC1
:/Images/view-selected.png, xrefs: 00C6C741
actionClear, xrefs: 00C6BB9A
horizontalLayout_2, xrefs: 00C6C43F
menuHelp, xrefs: 00C6D3F6
actionCopy_Name_and_Analysis, xrefs: 00C6BD8B
topLine, xrefs: 00C6CDFF
horizontalLayout_3, xrefs: 00C6CD61
menuBar, xrefs: 00C6D13B
actionPolar_Graph, xrefs: 00C6BFEF
horizontalLayout, xrefs: 00C6C33B
ViewButton, xrefs: 00C6C678
actionLinear_Graph, xrefs: 00C6C055
actionNew_Record, xrefs: 00C6BC59
actionAboutQt, xrefs: 00C6C12B
actionComma_Separated_Values_CSV, xrefs: 00C6B98F
:/Images/analysis.png, xrefs: 00C6C87E
actionFM100_Database_Version_2_FMT, xrefs: 00C6C0BB
actionSave_Current_Record, xrefs: 00C6BD25
actionDelete_Record, xrefs: 00C6BCBF
actionSubmit_Online, xrefs: 00C6B6C5
actionSelected_Records_as_CSV, xrefs: 00C6B8C3
actionContents, xrefs: 00C6BEBD
NewButton, xrefs: 00C6C4A3
HelpButton, xrefs: 00C6CC37
:/Images/view.png, xrefs: 00C6C702
DatabaseButton, xrefs: 00C6C970
:/Images/print.png, xrefs: 00C6CB84
menuImport, xrefs: 00C6D24E
actionSelect_All, xrefs: 00C6BBF3
verticalLayout, xrefs: 00C6C2B8
:/Images/add-selected.png, xrefs: 00C6C5BD
actionCut, xrefs: 00C6BA5B
menuView, xrefs: 00C6D39A
actionFM100_Database_Version_1_HDB, xrefs: 00C6B929
stackedWidget, xrefs: 00C6CEF6
menuEdit, xrefs: 00C6D32B
newHueTestWidget, xrefs: 00C6CF52
actionAbout_Application, xrefs: 00C6BE57
:/Images/analysis-selected.png, xrefs: 00C6C8BD
actionCopy_Graph, xrefs: 00C6BDF1
centralWidget, xrefs: 00C6C18A
viewHueTestWidget, xrefs: 00C6CFB9
actionOpen, xrefs: 00C6B5F9
actionPrint, xrefs: 00C6B791
verticalLayout_4, xrefs: 00C6C3B9
:/Images/database-selected.png, xrefs: 00C6CA39
verticalLayout_2, xrefs: 00C6C22D
actionSave_As, xrefs: 00C6B65F
actionPreferences, xrefs: 00C6B52C
actionPaste, xrefs: 00C6BB27
PrintButton, xrefs: 00C6CB2E
AnalysisButton, xrefs: 00C6C7F4
menuFIle, xrefs: 00C6D1DE
MainWindow, xrefs: 00C6B4C6
actionDatabase, xrefs: 00C6BF89
:/Images/database.png, xrefs: 00C6C9FA
actionData_Entry_Screen, xrefs: 00C6BF23
actionNew, xrefs: 00C6B593
:/Images/add.png, xrefs: 00C6C57C
analysisWidget, xrefs: 00C6D029
menuExport, xrefs: 00C6D2BC

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$?set$Object@@$Widget@@$?fromUtf8@$?add$String@@@$Name@$Object$Action@@$Action@$Size$Action@@@Object@@@$Layout@@$Button@@$Icon@@$Policy@@$Size@@Widget@@@$Menu@@Meta$Connection@$Type@$Flags@Qt@@@@@Widget@$AbstractPush$Policy@$File@HeightMode@1@State@1@@Width@$?connect@ConnectionQt@@@$AlignmentFlag@$?menu?translate@Application@@Checkable@CoreFlat@Font@Font@@@Icon@Icon@@@Separator@StackedWindow$?has?sizeLayout@Policy@@@$Spacing@Stretch@Text@$Frame@@Menu$ContentsControlFont@@FrameHorizontalMainMargins@Policy@0@0Type@0@@VerticalWindow@@$?connect?object?resize@Bar@Bar@@Bar@@@CentralConcurrency::cancel_current_taskConstraint@Constraint@1@@CurrentEdit@@FontGeometry@Index@Item@@Metrics@@Only@PlainPointPolicy@@0@ReadRect@@Rect@@@Shadow@Shadow@1@@Shape@Shape@1@@Size@SlotsSpacerTextTitle@_callnewhmalloc
String ID: :/Images/add-selected.png$:/Images/add.png$:/Images/analysis-selected.png$:/Images/analysis.png$:/Images/database-selected.png$:/Images/database.png$:/Images/help.png$:/Images/print.png$:/Images/view-selected.png$:/Images/view.png$AnalysisButton$DatabaseButton$HelpButton$MainWindow$NewButton$PrintButton$ViewButton$actionAboutQt$actionAbout_Application$actionClear$actionComma_Separated_Values_CSV$actionContents$actionCopy$actionCopy_Graph$actionCopy_Name_and_Analysis$actionCut$actionData_Entry_Screen$actionDatabase$actionDelete_Record$actionExit$actionFM100_Database_Version_1_HDB$actionFM100_Database_Version_2_FMT$actionLinear_Graph$actionNew$actionNew_Record$actionOpen$actionPage_Setup$actionPaste$actionPolar_Graph$actionPreferences$actionPrint$actionSave_As$actionSave_Current_Record$actionSelect_All$actionSelected_Records_as_CSV$actionSelected_Records_as_PDF$actionSubmit_Online$actionUndo$analysisWidget$centralWidget$databaseWidget$horizontalLayout$horizontalLayout_2$horizontalLayout_3$menuBar$menuEdit$menuExport$menuFIle$menuHelp$menuImport$menuView$newHueTestWidget$stackedWidget$topLine$verticalLayout$verticalLayout_2$verticalLayout_4$viewHueTestWidget$jng
API String ID: 199518110-1107684201
Opcode ID: f76f3dbd9eec94308b8639f82e90ffb2c57e69ea378e9463c9a3bd85e43ba7b6
Instruction ID: 1b0555ca0e3240bb1d27e1f39311e92857f7a89cc8caed6643e5c15baf44cf02
Opcode Fuzzy Hash: f76f3dbd9eec94308b8639f82e90ffb2c57e69ea378e9463c9a3bd85e43ba7b6
Instruction Fuzzy Hash: DB335971900649EFDB10EFA8DC48B9D7BB8FF08314F144259F96A972E1CB70AA09DB51

Uniqueness

Uniqueness Score: -1.00%

Function 00C95FB0 Relevance: 153.2, APIs: 86, Strings: 1, Instructions: 962
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000FF,000000A0,00000095,000000FF,000000FF,00000000,?,?,?,?,00C94FFE,00000000), ref: 00C95FE0

Part of subcall function 00C9AF60: new.LIBCMT ref: 00C9AFD7
Part of subcall function 00C9AF60: ??0QColor@@QAE@ABV0@@Z.QT5GUI(?), ref: 00C9AFE4

?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000FF,000000A0,00000091,000000FF,00000000,?,?,?,?,?,00C94FFE,00000000), ref: 00C9600B
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000FF,000000A2,0000008B,000000FF,00000001,?,?,?,?,?,00C94FFE,00000000), ref: 00C96033
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000FF,000000A3,00000082,000000FF,00000002,?,?,?,?,?,00C94FFE,00000000), ref: 00C9605B
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000FF,000000A7,00000082,000000FF,00000003,?,?,?,?,?,00C94FFE,00000000), ref: 00C96083
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000FF,000000A8,00000080,000000FF,00000004,?,?,?,?,?,00C94FFE,00000000), ref: 00C960AB
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000FF,000000AC,0000007E,000000FF,00000005,?,?,?,?,?,00C94FFE,00000000), ref: 00C960D0
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000FF,000000AE,0000007A,000000FF,00000006,?,?,?,?,?,00C94FFE,00000000), ref: 00C960F5
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000FF,000000AF,00000077,000000FF,00000007,?,?,?,?,?,00C94FFE,00000000), ref: 00C9611A
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000FF,000000B3,0000006E,000000FF,00000008,?,?,?,?,?,00C94FFE,00000000), ref: 00C9613F
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000FF,000000B9,0000006C,000000FF,00000009,?,?,?,?,?,00C94FFE,00000000), ref: 00C96164
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000FF,000000BB,00000068,000000FF,0000000A,?,?,?,?,?,00C94FFE,00000000), ref: 00C96189
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000FF,000000BD,00000062,000000FF,0000000B,?,?,?,?,?,00C94FFE,00000000), ref: 00C961AE
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000FF,000000C3,00000061,000000FF,0000000C,?,?,?,?,?,00C94FFE,00000000), ref: 00C961D3
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000FF,000000C9,0000005D,000000FF,0000000D,?,?,?,?,?,00C94FFE,00000000), ref: 00C961F8
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000FF,000000CB,0000005B,000000FF,0000000E,?,?,?,?,?,00C94FFE,00000000), ref: 00C9621D
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000FF,000000CB,00000059,000000FF,0000000F,?,?,?,?,?,00C94FFE,00000000), ref: 00C96242
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000FF,000000D1,0000005E,000000FF,00000010,?,?,?,?,?,00C94FFE,00000000), ref: 00C96267
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000FF,000000D3,0000005E,000000FF,00000011,?,?,?,?,?,00C94FFE,00000000), ref: 00C9628C
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000FF,000000D6,0000005F,000000FF,00000012,?,?,?,?,?,00C94FFE,00000000), ref: 00C962B1
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000F7,000000D6,00000061,000000FF,00000013,?,?,?,?,?,00C94FFE,00000000), ref: 00C962D6
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000F7,000000DB,0000005F,000000FF,00000014,?,?,?,?,?,00C94FFE,00000000), ref: 00C962FB
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000E8,000000E1,00000072,000000FF,00000015,?,?,?,?,?,00C94FFE,00000000), ref: 00C96320
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000E0,000000E0,00000072,000000FF,00000016,?,?,?,?,?,00C94FFE,00000000), ref: 00C96345
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000DC,000000E0,00000079,000000FF,00000017,?,?,?,?,?,00C94FFE,00000000), ref: 00C9636A
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000CE,000000DF,00000080,000000FF,00000018,?,?,?,?,?,00C94FFE,00000000), ref: 00C96392
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000C9,000000E1,0000007E,000000FF,00000019,?,?,?,?,?,00C94FFE,00000000), ref: 00C963B7
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000BD,000000DF,00000085,000000FF,0000001A,?,?,?,?,?,00C94FFE,00000000), ref: 00C963DF
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000B3,000000DD,00000086,000000FF,0000001B,?,?,?,?,?,00C94FFE,00000000), ref: 00C96407
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000B0,000000DB,0000008A,000000FF,0000001C,?,?,?,?,?,00C94FFE,00000000), ref: 00C9642F
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000A2,000000DB,0000008A,000000FF,0000001D,?,?,?,?,?,00C94FFE,00000000), ref: 00C96457
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(0000009E,000000DE,0000008A,000000FF,0000001E,?,?,?,?,?,00C94FFE,00000000), ref: 00C9647F
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(00000096,000000DE,0000008B,000000FF,0000001F,?,?,?,?,?,00C94FFE,00000000), ref: 00C964A7
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(00000089,000000DD,0000008F,000000FF,00000020,?,?,?,?,?,00C94FFE,00000000), ref: 00C964CF
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(00000081,000000DB,00000096,000000FF,00000021,?,?,?,?,?,00C94FFE,00000000), ref: 00C964F7
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(00000081,000000DB,00000097,000000FF,00000022,?,?,?,?,?,00C94FFE,00000000), ref: 00C9651F
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(00000074,000000DC,0000009A,000000FF,00000023,?,?,?,?,?,00C94FFE,00000000), ref: 00C96544
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(0000006B,000000DC,000000AB,000000FF,00000024,?,?,?,?,?,00C94FFE,00000000), ref: 00C96569
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(0000006B,000000DD,000000AD,000000FF,00000025,?,?,?,?,?,00C94FFE,00000000), ref: 00C9658E
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(0000006B,000000DD,000000B2,000000FF,00000026,?,?,?,?,?,00C94FFE,00000000), ref: 00C965B3
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(00000068,000000DE,000000B9,000000FF,00000027,?,?,?,?,?,00C94FFE,00000000), ref: 00C965D8
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(00000063,000000DE,000000BB,000000FF,00000028,?,?,?,?,?,00C94FFE,00000000), ref: 00C965FD
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(0000005B,000000E2,000000BC,000000FF,00000029,?,?,?,?,?,00C94FFE,00000000), ref: 00C96622
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(0000005C,000000DE,000000C2,000000FF,0000002A,?,?,?,?,?,00C94FFE,00000000), ref: 00C96647
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(00000063,000000DE,000000CA,000000FF,0000002B,?,?,?,?,?,00C94FFE,00000000), ref: 00C9666C
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(00000059,000000E0,000000D0,000000FF,0000002C,?,?,?,?,?,00C94FFE,00000000), ref: 00C96691
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(0000004A,000000E4,000000D7,000000FF,0000002D,?,?,?,?,?,00C94FFE,00000000), ref: 00C966B6
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(00000042,000000E3,000000D9,000000FF,0000002E,?,?,?,?,?,00C94FFE,00000000), ref: 00C966DB
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(0000004D,000000E1,000000DD,000000FF,0000002F,?,?,?,?,?,00C94FFE,00000000), ref: 00C96700
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(00000053,000000E1,000000DE,000000FF,00000030,?,?,?,?,?,00C94FFE,00000000), ref: 00C96725
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(00000059,000000D9,000000E1,000000FF,00000031,?,?,?,?,?,00C94FFE,00000000), ref: 00C9674A
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(0000005D,000000D9,000000E8,000000FF,00000032,?,?,?,?,?,00C94FFE,00000000), ref: 00C9676F
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(00000060,000000D8,000000E9,000000FF,00000033,?,?,?,?,?,00C94FFE,00000000), ref: 00C96794
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(00000060,000000D4,000000EC,000000FF,00000034,?,?,?,?,?,00C94FFE,00000000), ref: 00C967B9
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(0000006C,000000D0,000000ED,000000FF,00000035,?,?,?,?,?,00C94FFE,00000000), ref: 00C967DE
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(0000007A,000000CC,000000E9,000000FF,00000036,?,?,?,?,?,00C94FFE,00000000), ref: 00C96803
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(0000007A,000000CA,000000ED,000000FF,00000037,?,?,?,?,?,00C94FFE,00000000), ref: 00C96828
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(00000084,000000C5,000000ED,000000FF,00000038,?,?,?,?,?,00C94FFE,00000000), ref: 00C96850
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(00000084,000000C2,000000EC,000000FF,00000039,?,?,?,?,?,00C94FFE,00000000), ref: 00C96878
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(00000088,000000C0,000000EF,000000FF,0000003A,?,?,?,?,?,00C94FFE,00000000), ref: 00C968A0
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(0000008F,000000BC,000000F1,000000FF,0000003B,?,?,?,?,?,00C94FFE,00000000), ref: 00C968C8
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(0000008F,000000BC,000000EE,000000FF,0000003C,?,?,?,?,?,00C94FFE,00000000), ref: 00C968F0
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(00000099,000000B7,000000ED,000000FF,0000003D,?,?,?,?,?,00C94FFE,00000000), ref: 00C96918
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000A1,000000B4,000000EA,000000FF,0000003E,?,?,?,?,?,00C94FFE,00000000), ref: 00C96940
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000A5,000000B4,000000E6,000000FF,0000003F,?,?,?,?,?,00C94FFE,00000000), ref: 00C96968
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000AE,000000B0,000000E6,000000FF,00000040,?,?,?,?,?,00C94FFE,00000000), ref: 00C96990
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000B8,000000AF,000000E5,000000FF,00000041,?,?,?,?,?,00C94FFE,00000000), ref: 00C969B8
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000C1,000000AE,000000E1,000000FF,00000042,?,?,?,?,?,00C94FFE,00000000), ref: 00C969E0
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000C5,000000AD,000000E2,000000FF,00000043,?,?,?,?,?,00C94FFE,00000000), ref: 00C96A08
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000CD,000000AB,000000E2,000000FF,00000044,?,?,?,?,?,00C94FFE,00000000), ref: 00C96A30
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000CD,000000AC,000000E0,000000FF,00000045,?,?,?,?,?,00C94FFE,00000000), ref: 00C96A58
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000D4,000000AD,000000DD,000000FF,00000046,?,?,?,?,?,00C94FFE,00000000), ref: 00C96A80
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000D8,000000AE,000000D9,000000FF,00000047,?,?,?,?,?,00C94FFE,00000000), ref: 00C96AA8
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000DF,000000AC,000000D8,000000FF,00000048,?,?,?,?,?,00C94FFE,00000000), ref: 00C96AD0
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000E5,000000A9,000000D8,000000FF,00000049,?,?,?,?,?,00C94FFE,00000000), ref: 00C96AF8
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000E7,000000AA,000000D5,000000FF,0000004A,?,?,?,?,?,00C94FFE,00000000), ref: 00C96B20
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000EB,000000A9,000000D1,000000FF,0000004B,?,?,?,?,?,00C94FFE,00000000), ref: 00C96B48
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000EB,000000A9,000000CB,000000FF,0000004C,?,?,?,?,?,00C94FFE,00000000), ref: 00C96B70
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000EF,000000A7,000000C9,000000FF,0000004D,?,?,?,?,?,00C94FFE,00000000), ref: 00C96B98
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000F3,000000A3,000000C8,000000FF,0000004E,?,?,?,?,?,00C94FFE,00000000), ref: 00C96BC0
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000F8,000000A3,000000C1,000000FF,0000004F,?,?,?,?,?,00C94FFE,00000000), ref: 00C96BE8
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000F1,000000A2,000000BC,000000FF,00000050,?,?,?,?,?,00C94FFE,00000000), ref: 00C96C10
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000FD,000000A1,000000B4,000000FF,00000051,?,?,?,?,?,00C94FFE,00000000), ref: 00C96C38
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000FF,0000009E,000000A6,000000FF,00000052,?,?,?,?,?,00C94FFE,00000000), ref: 00C96C60
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000FF,0000009C,0000009D,000000FF,00000053,?,?,?,?,?,00C94FFE,00000000), ref: 00C96C88
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000FF,0000009F,00000099,000000FF,00000054,?,?,?,?,?,00C94FFE,00000000), ref: 00C96CB0

Strings

jng, xrefs: 00C95FB3

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Color@@$?setRgb@$V0@@
String ID: jng
API String ID: 3350895101-1186463058
Opcode ID: 15ff0904aacd78f58fff84459094c9934b6c52d91d55154ee221ad50b4bc5996
Instruction ID: ed8d2244fb6af6bf7ea90747a59530788e50dac05975b7d774c0722c03fcdfa3
Opcode Fuzzy Hash: 15ff0904aacd78f58fff84459094c9934b6c52d91d55154ee221ad50b4bc5996
Instruction Fuzzy Hash: EB627FB53C430B7AF534E650CC57FBE7A989F90F90F004428B7866A0EADEE06949D593

Uniqueness

Uniqueness Score: -1.00%

Function 6B354B90 Relevance: 151.0, APIs: 72, Strings: 14, Instructions: 469
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 6B355F00: memset.VCRUNTIME140(?,?,?,?,?,?,?,?,?,?,?,6B354BD8), ref: 6B355F3A

CreateFontIndirectW.GDI32(?), ref: 6B354C14
?qErrnoWarning@@YAXPBDZZ.QT5CORE(%s: CreateFontIndirect failed,QWindowsFontDatabase::createEngine), ref: 6B354C2A
SelectObject.GDI32(?,00000000), ref: 6B354C47
GetTextMetricsW.GDI32(?,?), ref: 6B354C61
?qErrnoWarning@@YAXPBDZZ.QT5CORE(%s: GetTextMetrics failed,QWindowsFontDatabase::createEngine), ref: 6B354C75
SelectObject.GDI32(?,?), ref: 6B354CAE
DeleteObject.GDI32(00000000), ref: 6B354CB5
?fromWCharArray@QString@@SA?AV1@PB_WH@Z.QT5CORE(?,?,000000FF,?), ref: 6B354CE2
??8@YA_NABVQString@@0@Z.QT5CORE(?,?,?,?), ref: 6B354D01
?length@QString@@QBEHXZ.QT5CORE ref: 6B354D17
?utf16@QString@@QBEPBGXZ.QT5CORE(0000001F), ref: 6B354D29
memmove.VCRUNTIME140(?,00000000), ref: 6B354D38
CreateFontIndirectW.GDI32(?), ref: 6B354D4F
?qErrnoWarning@@YAXPBDZZ.QT5CORE(%s: CreateFontIndirect failed,QWindowsFontDatabase::createEngine), ref: 6B354D69
SelectObject.GDI32(?,00000000), ref: 6B354D80
?qt_error_string@@YA?AVQString@@H@Z.QT5CORE(?,00000000), ref: 6B354DB9
??0QMessageLogger@@QAE@PBDH0@Z.QT5CORE(00000000,00000000,00000000,?), ref: 6B354DD4
?warning@QMessageLogger@@QBE?AVQDebug@@XZ.QT5CORE ref: 6B354DDC
?noquote@QDebug@@QAEAAV1@XZ.QT5CORE ref: 6B354DE4
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE(DirectWrite: CreateFontFaceFromHDC() failed (,?,) for ,?,00000020, dpi=,?), ref: 6B354E0D
??6QDebug@@QAEAAV0@ABVQString@@@Z.QT5CORE ref: 6B354E15
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE ref: 6B354E1D
??6QDebug@@QAEAAV0@D@Z.QT5CORE ref: 6B354E41
??0QDebugStateSaver@@QAE@AAVQDebug@@@Z.QT5CORE(?), ref: 6B354E59
?noquote@QDebug@@QAEAAV1@XZ.QT5CORE ref: 6B354E6B
?fromWCharArray@QString@@SA?AV1@PB_WH@Z.QT5CORE(?,?,000000FF,", lfWidth=,?,, lfHeight=,?,00000029), ref: 6B354E9A
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE(LOGFONT(",00000000), ref: 6B354EAD
??6QDebug@@QAEAAV0@ABVQString@@@Z.QT5CORE ref: 6B354EB5
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE ref: 6B354EBD
??6QDebug@@QAEAAV0@J@Z.QT5CORE ref: 6B354EC5
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE ref: 6B354ECD
??6QDebug@@QAEAAV0@J@Z.QT5CORE ref: 6B354ED5
??6QDebug@@QAEAAV0@D@Z.QT5CORE ref: 6B354EDD
??1QString@@QAE@XZ.QT5CORE ref: 6B354EE7
??1QDebugStateSaver@@QAE@XZ.QT5CORE ref: 6B354EFC
??1QDebug@@QAE@XZ.QT5CORE ref: 6B354F0C
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE ref: 6B354F12
??6QDebug@@QAEAAV0@J@Z.QT5CORE ref: 6B354F1A
??1QDebug@@QAE@XZ.QT5CORE ref: 6B354F24
??1QDebug@@QAE@XZ.QT5CORE ref: 6B354F2A
??1QDebug@@QAE@XZ.QT5CORE ref: 6B354F30
??1QString@@QAE@XZ.QT5CORE ref: 6B354F36
SelectObject.GDI32(?,?), ref: 6B3551E5
DeleteObject.GDI32(?), ref: 6B3551EF
??1QString@@QAE@XZ.QT5CORE ref: 6B3551F9
??1QString@@QAE@XZ.QT5CORE ref: 6B355203

Strings

QWindowsFontDatabase::createEngine, xrefs: 6B354C20, 6B354C6B, 6B354D5F, 6B354FF7
useDirectWrite=, xrefs: 6B354FCD
", lfWidth=, xrefs: 6B354E8D
dpi, xrefs: 6B354FD2
, lfHeight=, xrefs: 6B354E81
DirectWrite: CreateFontFaceFromHDC() failed (, xrefs: 6B354E08
) for , xrefs: 6B354DFA
HintingPreference, xrefs: 6B355043
%s: GetTextMetrics failed, xrefs: 6B354C70
LOGFONT(", xrefs: 6B354EA8
%s: CreateFontIndirect failed, xrefs: 6B354C25, 6B354D64
color=, xrefs: 6B354FDF
hintingPreference=, xrefs: 6B354FE4
dpi=, xrefs: 6B354DF0

Memory Dump Source

Source File: 00000007.00000002.3336124309.000000006B301000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6B300000, based on PE: true

Associated: 00000007.00000002.3336078379.000000006B300000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336232454.000000006B3D2000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336296015.000000006B416000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336342659.000000006B417000.00000008.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336389257.000000006B418000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336436882.000000006B41B000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336485192.000000006B41D000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6b300000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Debug@@$String@@$Object$Select$ErrnoWarning@@$?from?noquote@Array@CharCreateDebugDeleteFontIndirectLogger@@MessageSaver@@StateString@@@$??8@?length@?qt_error_string@@?utf16@?warning@Debug@@@MetricsString@@0@Textmemmovememset
String ID: dpi=$", lfWidth=$%s: CreateFontIndirect failed$%s: GetTextMetrics failed$) for $, lfHeight=$DirectWrite: CreateFontFaceFromHDC() failed ($HintingPreference$LOGFONT("$QWindowsFontDatabase::createEngine$color=$dpi$hintingPreference=$useDirectWrite=
API String ID: 1969158683-1484568272
Opcode ID: 82829015f038307950eea9af5ed166699e8e8b16373da3c2de7313b5d256cc8f
Instruction ID: 2884eb6abb368a2d314d7811d958268ae2035b7a60aaea360fde9ad608fa14ce
Opcode Fuzzy Hash: 82829015f038307950eea9af5ed166699e8e8b16373da3c2de7313b5d256cc8f
Instruction Fuzzy Hash: 11125B726043459FCB149FB4CD48BAABBF8FF8A305F004829F98697250EB35D955CB62

Uniqueness

Uniqueness Score: -1.00%

Function 6B302E60 Relevance: 121.2, APIs: 59, Strings: 10, Instructions: 465
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleW.KERNEL32(00000000), ref: 6B302EB1

Part of subcall function 6B30EA40: ?flags@QWindow@@QBE?AV?$QFlags@W4WindowType@Qt@@@@XZ.QT5GUI(?), ref: 6B30EA5C
Part of subcall function 6B30EA40: ?property@QObject@@QBE?AVQVariant@@PBD@Z.QT5CORE(?,_q_windowsDropShadow), ref: 6B30EAB1
Part of subcall function 6B30EA40: ?toBool@QVariant@@QBE_NXZ.QT5CORE ref: 6B30EAB9
Part of subcall function 6B30EA40: ??1QVariant@@QAE@XZ.QT5CORE ref: 6B30EAD4

?initialGeometry@QPlatformWindow@@SA?AVQRect@@PBVQWindow@@ABV2@HH@Z.QT5GUI(?,?,?,000000A0,000000A0,?,?), ref: 6B302EF6
?qAppName@@YA?AVQString@@XZ.QT5CORE(?,?,?,?,?,?), ref: 6B302F24
?objectName@QObject@@QBE?AVQString@@XZ.QT5CORE(?,?,?,?,?,?), ref: 6B302F3B
??4QUrl@@QAEAAV0@$$QAV0@@Z.QT5CORE(00000000,?,?,?,?,?), ref: 6B302F49
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?), ref: 6B302F58
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?), ref: 6B302F67
?utf16@QString@@QBEPBGXZ.QT5CORE(?,?,?,?,?), ref: 6B302F7A
?utf16@QString@@QBEPBGXZ.QT5CORE(?,?,?,?,?), ref: 6B302F84
?qt_window_private@@YAPAVQWindowPrivate@@PAVQWindow@@@Z.QT5GUI(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6B303071
?isDebugEnabled@QLoggingCategory@@QBE_NXZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6B3030C6
??0QMessageLogger@@QAE@PBDH00@Z.QT5CORE(00000000,00000000,00000000,?,?), ref: 6B3030F2
?debug@QMessageLogger@@QBE?AVQDebug@@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,?), ref: 6B3030FA
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE(CreateWindowEx: ,?, class=,?, title=,?,0000000A,?,?,requested: ,?,?,6B3D3AE8,?,00000078,?), ref: 6B303180
??6@YA?AVQDebug@@V0@PBVQWindow@@@Z.QT5GUI(?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6B303198
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6B3031A3
??6QDebug@@QAEAAV0@ABVQString@@@Z.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6B3031AB
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6B3031B3
??6QDebug@@QAEAAV0@ABVQString@@@Z.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6B3031BB
??6QDebug@@QAEAAV0@D@Z.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6B3031C3
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE ref: 6B3031E2
??6@YA?AVQDebug@@V0@ABVQRect@@@Z.QT5CORE(?), ref: 6B3031F4
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE ref: 6B3031FF
??6QDebug@@QAEAAV0@J@Z.QT5CORE ref: 6B303207
??6QDebug@@QAEAAV0@D@Z.QT5CORE ref: 6B30320F
??6QDebug@@QAEAAV0@J@Z.QT5CORE ref: 6B303217
??6QDebug@@QAEAAV0@D@Z.QT5CORE ref: 6B30321F
??6QDebug@@QAEAAV0@J@Z.QT5CORE ref: 6B303227
??6QDebug@@QAEAAV0@D@Z.QT5CORE ref: 6B30322F
??6QDebug@@QAEAAV0@J@Z.QT5CORE ref: 6B303237
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE ref: 6B30323F
??6@YA?AVQDebug@@V0@ABVQMargins@@@Z.QT5CORE(?), ref: 6B303257
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE ref: 6B30325E
??6@YA?AVQDebug@@V0@ABVQMargins@@@Z.QT5CORE(?), ref: 6B303271
??1QDebug@@QAE@XZ.QT5CORE ref: 6B303280
??1QDebug@@QAE@XZ.QT5CORE ref: 6B303286
??1QDebug@@QAE@XZ.QT5CORE ref: 6B30328C
??1QDebug@@QAE@XZ.QT5CORE ref: 6B303292
??1QDebug@@QAE@XZ.QT5CORE ref: 6B303298
??1QDebug@@QAE@XZ.QT5CORE ref: 6B30329E
CreateWindowExW.USER32(?,?,?,?,?,?,?,?,?,00000000,?,00000000), ref: 6B303303
?isDebugEnabled@QLoggingCategory@@QBE_NXZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6B303317
??0QMessageLogger@@QAE@PBDH00@Z.QT5CORE(00000000,00000000,00000000,?,?), ref: 6B303343
?debug@QMessageLogger@@QBE?AVQDebug@@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6B30334B
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE(CreateWindowEx: returns ,?,00000020,?, obtained geometry: ,?,?,00000020,?,?), ref: 6B30337D
??6@YA?AVQDebug@@V0@PBVQWindow@@@Z.QT5GUI(?), ref: 6B303395
??6QDebug@@QAEAAV0@D@Z.QT5CORE ref: 6B3033A0
??6QDebug@@QAEAAV0@PBX@Z.QT5CORE ref: 6B3033A8
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE ref: 6B3033B0
??6@YA?AVQDebug@@V0@ABVQRect@@@Z.QT5CORE(?), ref: 6B3033C2
??6QDebug@@QAEAAV0@D@Z.QT5CORE ref: 6B3033CD
??6@YA?AVQDebug@@V0@ABVQMargins@@@Z.QT5CORE(?), ref: 6B3033DF
??1QDebug@@QAE@XZ.QT5CORE ref: 6B3033F2
??1QDebug@@QAE@XZ.QT5CORE ref: 6B3033F8
??1QDebug@@QAE@XZ.QT5CORE ref: 6B3033FE
??1QDebug@@QAE@XZ.QT5CORE ref: 6B303404
?qErrnoWarning@@YAXPBDZZ.QT5CORE(%s: CreateWindowEx failed,WindowCreationData::create), ref: 6B30341E
??1QString@@QAE@XZ.QT5CORE ref: 6B3034D5
??1QString@@QAE@XZ.QT5CORE ref: 6B3034E2

Strings

class=, xrefs: 6B30316D
title=, xrefs: 6B303163
invisible margins: , xrefs: 6B303114
CreateWindowEx: returns , xrefs: 6B303378
WindowCreationData::create, xrefs: 6B303414
obtained geometry: , xrefs: 6B303369
CreateWindowEx: , xrefs: 6B30317B
custom margins: , xrefs: 6B303124
requested: , xrefs: 6B30314D
%s: CreateWindowEx failed, xrefs: 6B303419

Memory Dump Source

Source File: 00000007.00000002.3336124309.000000006B301000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6B300000, based on PE: true

Associated: 00000007.00000002.3336078379.000000006B300000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336232454.000000006B3D2000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336296015.000000006B416000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336342659.000000006B417000.00000008.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336389257.000000006B418000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336436882.000000006B41B000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336485192.000000006B41D000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6b300000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Debug@@$String@@$??6@$Logger@@Message$Margins@@@Variant@@WindowWindow@@Window@@@$?debug@?utf16@Category@@DebugEnabled@H00@LoggingObject@@Rect@@@String@@@$?flags@?initial?object?property@?qt_window_private@@Bool@CreateErrnoFlags@Geometry@HandleModuleName@Name@@PlatformPrivate@@Qt@@@@Rect@@Type@Url@@V0@$$V0@@Warning@@
String ID: requested: $ class=$ custom margins: $ invisible margins: $ obtained geometry: $ title=$%s: CreateWindowEx failed$CreateWindowEx: $CreateWindowEx: returns $WindowCreationData::create
API String ID: 3477245127-1297568575
Opcode ID: c4e49baf1fd83685b31e79008b7795621134ae970663616247cb0e35423257fa
Instruction ID: 9ba64bb9586fd2dbfed28c50e00a732a6f7209ff63c7f6d124810bc4b7562335
Opcode Fuzzy Hash: c4e49baf1fd83685b31e79008b7795621134ae970663616247cb0e35423257fa
Instruction Fuzzy Hash: 4A12A072A043459FDB248F74CD48BAAB7E8FF89304F00491DF98A93251EB35E958CB52

Uniqueness

Uniqueness Score: -1.00%

Function 00C73080 Relevance: 101.8, APIs: 44, Strings: 14, Instructions: 291
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00C767F0: ?tr@QMetaObject@@QBE?AVQString@@PBD0H@Z.QT5CORE(000000FF,000000FF,000000FF,000000FF,00000000,00C730C6,6B9DEE70,Total Error Score (TES): ,00000000,000000FF,676E6AEE,6B9DED70,00000000), ref: 00C7680E

?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000,676E6AEE,6B9DED70,00000000), ref: 00C730DD
??1QString@@QAE@XZ.QT5CORE ref: 00C730E9
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C73112
??1QString@@QAE@XZ.QT5CORE ref: 00C7311E
new.LIBCMT ref: 00C73126

Part of subcall function 00CAC0B7: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0DE

??0QGraphicsScene@@QAE@PAVQObject@@@Z.QT5WIDGETS(00000000), ref: 00C7313E
?setMinimumWidth@QWidget@@QAEXH@Z.QT5WIDGETS(000000C8), ref: 00C73169
?setMinimumHeight@QWidget@@QAEXH@Z.QT5WIDGETS(000000C8), ref: 00C7317A
?setMaximumWidth@QWidget@@QAEXH@Z.QT5WIDGETS(000000FA), ref: 00C7318B
?setMaximumHeight@QWidget@@QAEXH@Z.QT5WIDGETS(000000FA), ref: 00C7319C
new.LIBCMT ref: 00C731A4

Part of subcall function 00CAC0B7: _callnewh.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0BF

??0QButtonGroup@@QAE@PAVQObject@@@Z.QT5WIDGETS(00000000), ref: 00C731C2
?addButton@QButtonGroup@@QAEXPAVQAbstractButton@@H@Z.QT5WIDGETS(?,000000FF), ref: 00C731E7
?addButton@QButtonGroup@@QAEXPAVQAbstractButton@@H@Z.QT5WIDGETS(?,000000FF), ref: 00C731FA
new.LIBCMT ref: 00C731FE

Part of subcall function 00CAC0B7: Concurrency::cancel_current_task.LIBCPMT ref: 00CAC0D6

??0QButtonGroup@@QAE@PAVQObject@@@Z.QT5WIDGETS(00000000), ref: 00C73216
?addButton@QButtonGroup@@QAEXPAVQAbstractButton@@H@Z.QT5WIDGETS(00C614B6,000000FF), ref: 00C7323B
?addButton@QButtonGroup@@QAEXPAVQAbstractButton@@H@Z.QT5WIDGETS(?,000000FF), ref: 00C7324E
new.LIBCMT ref: 00C73255

Part of subcall function 00C94F20: ??0QWidget@@QAE@PAV0@V?$QFlags@W4WindowType@Qt@@@@@Z.QT5WIDGETS(00C73270,00000000,676E6AEE,00000000,00000000,00000000,00CB4C8F,000000FF,?,00C73270,00000000), ref: 00C94F4E
Part of subcall function 00C94F20: new.LIBCMT ref: 00C94F6A
Part of subcall function 00C94F20: ??0QRectF@@QAE@XZ.QT5CORE ref: 00C94F78
Part of subcall function 00C94F20: ??0QRectF@@QAE@XZ.QT5CORE ref: 00C94F81
Part of subcall function 00C94F20: new.LIBCMT ref: 00C94FE1
Part of subcall function 00C94F20: ?setHorizontalScrollBarPolicy@QAbstractScrollArea@@QAEXW4ScrollBarPolicy@Qt@@@Z.QT5WIDGETS(00000001,00000000), ref: 00C95005
Part of subcall function 00C94F20: ?setVerticalScrollBarPolicy@QAbstractScrollArea@@QAEXW4ScrollBarPolicy@Qt@@@Z.QT5WIDGETS(00000001), ref: 00C95012

new.LIBCMT ref: 00C73284

Part of subcall function 00C9ACE0: ?setRenderHint@QGraphicsView@@QAEXW4RenderHint@QPainter@@_N@Z.QT5WIDGETS(00000001,00000001,676E6AEE,000000FF,00000000,000000FF,?,?,?,?,?,?,?,?,00000000,00CB5373), ref: 00C9AD1D
Part of subcall function 00C9ACE0: new.LIBCMT ref: 00C9AD25
Part of subcall function 00C9ACE0: ??0QGraphicsScene@@QAE@PAVQObject@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,?,00000000,00CB5373,000000FF,?,00C732B7), ref: 00C9AD3D
Part of subcall function 00C9ACE0: ?height@QWidget@@QBEHXZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,00000000,00CB5373,000000FF,?,00C732B7), ref: 00C9AD58
Part of subcall function 00C9ACE0: ?width@QWidget@@QBEHXZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,00000000,00CB5373,000000FF,?,00C732B7), ref: 00C9AD73
Part of subcall function 00C9ACE0: ?setSceneRect@QGraphicsScene@@QAEXNNNN@Z.QT5WIDGETS ref: 00C9AD94
Part of subcall function 00C9ACE0: ?width@QGraphicsScene@@QBENXZ.QT5WIDGETS ref: 00C9AD9D
Part of subcall function 00C9ACE0: ?width@QGraphicsScene@@QBENXZ.QT5WIDGETS ref: 00C9ADBA
Part of subcall function 00C9ACE0: ?width@QGraphicsScene@@QBENXZ.QT5WIDGETS ref: 00C9ADDF
Part of subcall function 00C9ACE0: ??0QRectF@@QAE@NNNN@Z.QT5CORE ref: 00C9AE38

Part of subcall function 00C9AAD0: ?setRenderHint@QGraphicsView@@QAEXW4RenderHint@QPainter@@_N@Z.QT5WIDGETS(00000001,00000001,676E6AEE,000000FF,00000000,000000FF), ref: 00C9AB0D
Part of subcall function 00C9AAD0: new.LIBCMT ref: 00C9AB15
Part of subcall function 00C9AAD0: ??0QGraphicsScene@@QAE@PAVQObject@@@Z.QT5WIDGETS(00000000), ref: 00C9AB2D
Part of subcall function 00C9AAD0: ?height@QWidget@@QBEHXZ.QT5WIDGETS ref: 00C9AB48
Part of subcall function 00C9AAD0: ?width@QWidget@@QBEHXZ.QT5WIDGETS ref: 00C9AB63
Part of subcall function 00C9AAD0: ?setSceneRect@QGraphicsScene@@QAEXNNNN@Z.QT5WIDGETS ref: 00C9AB84
Part of subcall function 00C9AAD0: ?width@QGraphicsScene@@QBENXZ.QT5WIDGETS ref: 00C9AB8D
Part of subcall function 00C9AAD0: ?height@QGraphicsScene@@QBENXZ.QT5WIDGETS ref: 00C9ABAA
Part of subcall function 00C9AAD0: ?width@QGraphicsScene@@QBENXZ.QT5WIDGETS ref: 00C9ABC7
Part of subcall function 00C9AAD0: ?height@QGraphicsScene@@QBENXZ.QT5WIDGETS ref: 00C9ABE4
Part of subcall function 00C9AAD0: ??0QLineF@@QAE@ABVQLine@@@Z.QT5CORE(?), ref: 00C9AC2F
Part of subcall function 00C9AAD0: ??0QPen@@QAE@XZ.QT5GUI ref: 00C9AC3E

?addWidget@QStackedWidget@@QAEHPAVQWidget@@@Z.QT5WIDGETS(?,00000000,00000000), ref: 00C732D4
?addWidget@QStackedWidget@@QAEHPAVQWidget@@@Z.QT5WIDGETS(?), ref: 00C732E2
?setCurrentWidget@QStackedWidget@@QAEXPAVQWidget@@@Z.QT5WIDGETS(?), ref: 00C732F0
?setChecked@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(00000001), ref: 00C73304
?setChecked@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(00000001), ref: 00C73311
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(00000000,?,2toggled(bool),000000FF,1graphSelectionChanged(),00000000), ref: 00C73330
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C7333E
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(00000000,?,2stateChanged(int),000000FF,1confusionAxisChanged(),00000000), ref: 00C73357
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C7335F
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(00000000,00000000,2textChanged(QString),000000FF,1scaleValueChanged(),00000000), ref: 00C7337B
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C73383
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(00000000,00C614B6,2toggled(bool),000000FF,1scaleModeChanged(),00000000), ref: 00C7339F
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C733A7
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(00000000,?,2stateChanged(int),000000FF,1filterChecked(),00000000), ref: 00C733C3
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C733CB
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(00000000,?,2stateChanged(int),000000FF,1averageChecked(),00000000), ref: 00C733E7
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C733EF
new.LIBCMT ref: 00C733F3
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE([0-9_]{1,3},0000000B,0000000C), ref: 00C7340B
??0QRegExp@@QAE@ABVQString@@W4CaseSensitivity@Qt@@W4PatternSyntax@0@@Z.QT5CORE(?,00000001,00000000), ref: 00C7342D
??0QRegExpValidator@@QAE@ABVQRegExp@@PAVQObject@@@Z.QT5GUI(00000000,000000FF), ref: 00C73445
??1QRegExp@@QAE@XZ.QT5CORE ref: 00C7345A
??1QString@@QAE@XZ.QT5CORE ref: 00C7346A
?setValidator@QLineEdit@@QAEXPBVQValidator@@@Z.QT5WIDGETS(?), ref: 00C7347F

Strings

1filterChecked(), xrefs: 00C733AE
1scaleValueChanged(), xrefs: 00C73366
jng, xrefs: 00C73097
1averageChecked(), xrefs: 00C733D2
1confusionAxisChanged(), xrefs: 00C73345
2toggled(bool), xrefs: 00C73324, 00C73390
[0-9_]{1,3}, xrefs: 00C73406
2textChanged(QString), xrefs: 00C7336C
Classification: , xrefs: 00C730F6
2stateChanged(int), xrefs: 00C7334B, 00C733B4, 00C733D8
1graphSelectionChanged(), xrefs: 00C7331E
1scaleModeChanged(), xrefs: 00C7338A
0^Pk, xrefs: 00C7345A
Total Error Score (TES): , xrefs: 00C730BB

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Object@@$?set$Graphics$Meta$Connection@Scene@@Widget@@$AbstractQt@@@$?width@Type@$?add?connect@ButtonButton@@ConnectionGroup@@Object@@@ScrollString@@$?height@Button@Hint@Policy@Render$Exp@@RectStackedWidget@Widget@@@$Area@@Checked@Height@Label@@LineMaximumMinimumPainter@@_Rect@SceneString@@@Text@View@@Width@$?from?tr@ArrayAscii_helper@CaseConcurrency::cancel_current_taskCurrentData@Edit@@Flags@HorizontalLine@@@PatternPen@@Qt@@Qt@@@@@Sensitivity@Syntax@0@@TypedValidator@Validator@@Validator@@@VerticalWindow_callnewhmalloc
String ID: 0^Pk$1averageChecked()$1confusionAxisChanged()$1filterChecked()$1graphSelectionChanged()$1scaleModeChanged()$1scaleValueChanged()$2stateChanged(int)$2textChanged(QString)$2toggled(bool)$Classification: $Total Error Score (TES): $[0-9_]{1,3}$jng
API String ID: 2445108826-373651815
Opcode ID: 4314d14a19f6b6e2d79db8b60e6666a86d637c9d95fb6d9eb33d63bd5f1a40eb
Instruction ID: 9cb678cfadbf34c31db2b5dbc3ffad46b58fa8a29582abd5eead8b763d98413b
Opcode Fuzzy Hash: 4314d14a19f6b6e2d79db8b60e6666a86d637c9d95fb6d9eb33d63bd5f1a40eb
Instruction Fuzzy Hash: C4C12B71A00209EFDB04DF94CC95FAE7BB9FB14714F200269E9156B2D1DBB1AE05CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 6B30EC10 Relevance: 94.8, APIs: 45, Strings: 9, Instructions: 301
windowregistryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleW.KERNEL32(00000000,?,00000000), ref: 6B30EC1F
?utf16@QString@@QBEPBGXZ.QT5CORE(?,?,00000000), ref: 6B30EC44
GetClassInfoW.USER32(00000000,00000000), ref: 6B30EC4C
?number@QString@@SA?AV1@KH@Z.QT5CORE(?,?,0000000A,?,00000000), ref: 6B30EC80
?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE(00000000), ref: 6B30EC91
??1QString@@QAE@XZ.QT5CORE ref: 6B30EC9B
?qHash@@YAIABVQString@@I@Z.QT5CORE(?,?,?,00000000), ref: 6B30ECB9
LoadImageW.USER32(00000000,IDI_ICON1,00000001,00000000,00000000,00000040), ref: 6B30ED3C
GetSystemMetrics.USER32(00000031), ref: 6B30ED4E
GetSystemMetrics.USER32(00000032), ref: 6B30ED54
LoadImageW.USER32(00000000,IDI_ICON1,00000001,00000000,00000000,00000000), ref: 6B30ED62
LoadImageW.USER32(00000000,00007F00,00000001,00000000,00000000,00008040), ref: 6B30ED83
?utf16@QString@@QBEPBGXZ.QT5CORE ref: 6B30EDB4
RegisterClassExW.USER32(00000030), ref: 6B30EDC6
?toLocal8Bit@QString@@QGBE?AVQByteArray@@XZ.QT5CORE(?), ref: 6B30EDE4
??BQByteArray@@QBEPBDXZ.QT5CORE ref: 6B30EDEC
?qErrnoWarning@@YAXPBDZZ.QT5CORE(QApplication::regClass: Registering window class '%s' failed.,00000000), ref: 6B30EDF8
??1QByteArray@@QAE@XZ.QT5CORE ref: 6B30EE05
?detach_helper@QHashData@@QAEPAU1@P6AXPAUNode@1@PAX@ZP6AX0@ZHH@Z.QT5CORE(6B30D530,6B328620,0000000C,00000004), ref: 6B30EE2E
?free_helper@QHashData@@QAEXP6AXPAUNode@1@@Z@Z.QT5CORE(6B328620), ref: 6B30EE60
?qHash@@YAIABVQString@@I@Z.QT5CORE(?,?), ref: 6B30EE77
?rehash@QHashData@@QAEXH@Z.QT5CORE(?,?,00000000), ref: 6B30EEAA
?allocateNode@QHashData@@QAEPAXH@Z.QT5CORE(00000004,?,00000000), ref: 6B30EEC8
??0QByteArray@@QAE@ABV0@@Z.QT5CORE(?), ref: 6B30EEE2
?isDebugEnabled@QLoggingCategory@@QBE_NXZ.QT5CORE(?,00000000), ref: 6B30EEF7
??0QMessageLogger@@QAE@PBDH00@Z.QT5CORE(00000000,00000000,00000000,?), ref: 6B30EF3A
?debug@QMessageLogger@@QBE?AVQDebug@@XZ.QT5CORE ref: 6B30EF42
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE(QWindowsContext::registerWindowClass,00000020,?, style=0x,?, brush=,?, icon=,?, atom=,?), ref: 6B30EF98
??6QDebug@@QAEAAV0@D@Z.QT5CORE ref: 6B30EFA0
??6QDebug@@QAEAAV0@ABVQString@@@Z.QT5CORE ref: 6B30EFA8
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE ref: 6B30EFB0
??6QDebug@@QAEAAV0@P6AAAVQTextStream@@AAV1@@Z@Z.QT5CORE ref: 6B30EFB8
??6QDebug@@QAEAAV0@K@Z.QT5CORE ref: 6B30EFC0
??6QDebug@@QAEAAV0@P6AAAVQTextStream@@AAV1@@Z@Z.QT5CORE ref: 6B30EFC8
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE ref: 6B30EFD0
??6QDebug@@QAEAAV0@PBX@Z.QT5CORE ref: 6B30EFD8
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE ref: 6B30EFE0
??6QDebug@@QAEAAV0@_N@Z.QT5CORE ref: 6B30EFE8
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE ref: 6B30EFF0
??6QDebug@@QAEAAV0@G@Z.QT5CORE ref: 6B30EFF8
??1QDebug@@QAE@XZ.QT5CORE ref: 6B30F002
??0QByteArray@@QAE@$$QAV0@@Z.QT5CORE(?,?,00000000,?,00000000), ref: 6B30F017
??1QString@@QAE@XZ.QT5CORE(?,00000000), ref: 6B30F024
??0QLoggingCategory@@QAE@PBD@Z.QT5CORE(qt.qpa.windows), ref: 6B30F05F
__Init_thread_footer.LIBCMT ref: 6B30F074

Strings

QWindowsContext::registerWindowClass, xrefs: 6B30EF91
QApplication::regClass: Registering window class '%s' failed., xrefs: 6B30EDF3
atom=, xrefs: 6B30EF4C
0, xrefs: 6B30ECFA
icon=, xrefs: 6B30EF5A
style=0x, xrefs: 6B30EF89
brush=, xrefs: 6B30EF66
qt.qpa.windows, xrefs: 6B30F055
IDI_ICON1, xrefs: 6B30ED36, 6B30ED5C

Memory Dump Source

Source File: 00000007.00000002.3336124309.000000006B301000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6B300000, based on PE: true

Associated: 00000007.00000002.3336078379.000000006B300000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336232454.000000006B3D2000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336296015.000000006B416000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336342659.000000006B417000.00000008.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336389257.000000006B418000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336436882.000000006B41B000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336485192.000000006B41D000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6b300000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Debug@@$String@@$Array@@Byte$Data@@Hash$ImageLoadV1@@$?utf16@Category@@ClassHash@@Logger@@LoggingMessageMetricsStream@@SystemTextV0@@$?allocate?append@?debug@?detach_helper@?free_helper@?number@?rehash@Bit@DebugE@$$Enabled@ErrnoH00@HandleInfoInit_thread_footerLocal8ModuleNode@Node@1@Node@1@@RegisterString@@@V0@_Warning@@
String ID: atom=$ brush=$ icon=$ style=0x$0$IDI_ICON1$QApplication::regClass: Registering window class '%s' failed.$QWindowsContext::registerWindowClass$qt.qpa.windows
API String ID: 769514937-2171196308
Opcode ID: 6d710acdf2f91cbbc2b61c6c8f6d927d8b2327e33b970ff0378f04b7fc2a79d8
Instruction ID: 93d074f05528daa42812177649006102721336be889f0713b0ade51be205a327
Opcode Fuzzy Hash: 6d710acdf2f91cbbc2b61c6c8f6d927d8b2327e33b970ff0378f04b7fc2a79d8
Instruction Fuzzy Hash: B9C16D71B04305AFDB24DF64CD58B6ABBE9FF89701F004919E95A87280DF39E805CB61

Uniqueness

Uniqueness Score: -1.00%

Function 6B3015A0 Relevance: 87.9, APIs: 49, Strings: 1, Instructions: 401
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

??0QPlatformWindow@@QAE@PAVQWindow@@@Z.QT5GUI(?), ref: 6B3015AF

Part of subcall function 6B3CFF96: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,?,6B350121,00000008), ref: 6B3CFFAB

Part of subcall function 6B3CFF96: _callnewh.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,?,6B350121,00000008), ref: 6B3CFF9E
Part of subcall function 6B3CFF96: _CxxThrowException.VCRUNTIME140(6B350121,6B4014D4,6B350121), ref: 6B3D128D
Part of subcall function 6B3CFF96: _CxxThrowException.VCRUNTIME140(6B350121,6B401528,6B350121), ref: 6B3D12AA

?requestedFormat@QWindow@@QBE?AVQSurfaceFormat@@XZ.QT5GUI(?,?,?,?,?), ref: 6B30169F

Part of subcall function 6B30D030: ?rehash@QHashData@@QAEXH@Z.QT5CORE(?,?,?,?,?,?,?,6B3016E7,?,?,?,?,?,?), ref: 6B30D06F
Part of subcall function 6B30D030: ?allocateNode@QHashData@@QAEPAXH@Z.QT5CORE(00000004,?,?,?,?,?,?,6B3016E7,?,?,?,?,?,?), ref: 6B30D088

?type@QWindow@@QBE?AW4WindowType@Qt@@XZ.QT5GUI(?,?,?,?,?,?,?,?,?,?,?), ref: 6B3016E9
?openGLModuleType@QOpenGLContext@@SA?AW4OpenGLModuleType@1@XZ.QT5GUI(?,?,?,?,?,?,?,?,?,?,?), ref: 6B301708
?window@QPlatformWindow@@QBEPAVQWindow@@XZ.QT5GUI(?,?,?,?,?,?,?,?,?,?,?), ref: 6B30173B
?isTopLevel@QWindow@@QBE_NXZ.QT5GUI(?,?,?,?,?,?,?,?,?,?,?), ref: 6B30173F
?qt_window_private@@YAPAVQWindowPrivate@@PAVQWindow@@@Z.QT5GUI(?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6B301764
?isDebugEnabled@QLoggingCategory@@QBE_NXZ.QT5CORE ref: 6B3017C4
??0QMessageLogger@@QAE@PBDH00@Z.QT5CORE(00000000,00000000,00000000,?,?,QWindowsWindow::setOpacity), ref: 6B3017F8
?debug@QMessageLogger@@QBE?AVQDebug@@XZ.QT5CORE ref: 6B301800
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE ref: 6B301808
??6QDebug@@QAEAAV0@N@Z.QT5CORE ref: 6B301810
??1QDebug@@QAE@XZ.QT5CORE ref: 6B30181A
?hasAlpha@QSurfaceFormat@@QBE_NXZ.QT5GUI ref: 6B3018B0
??1QSurfaceFormat@@QAE@XZ.QT5GUI ref: 6B3018CC
?window@QPlatformWindow@@QBEPAVQWindow@@XZ.QT5GUI ref: 6B3018DA
?window@QPlatformWindow@@QBEPAVQWindow@@XZ.QT5GUI(?,00000000), ref: 6B3018E4
?mask@QWindow@@QBE?AVQRegion@@XZ.QT5GUI ref: 6B3018E8
?isEmpty@QRegion@@QBE_NXZ.QT5GUI ref: 6B301904
SetWindowRgn.USER32(?,00000000,00000001), ref: 6B301915
?begin@QRegion@@QBEPBVQRect@@XZ.QT5GUI ref: 6B301922
?end@QRegion@@QBEPBVQRect@@XZ.QT5GUI ref: 6B30192E
CreateRectRgn.GDI32(00000000,?,?,?), ref: 6B301952
CreateRectRgn.GDI32(?,00000001,6B303731,?), ref: 6B301976
CreateRectRgn.GDI32(00000000,00000000,00000000,00000000), ref: 6B30198C
CombineRgn.GDI32(00000000,00000000,?,00000002), ref: 6B30199E
DeleteObject.GDI32(00000000), ref: 6B3019A9
DeleteObject.GDI32(?), ref: 6B3019B7
?isTopLevel@QWindow@@QBE_NXZ.QT5GUI ref: 6B3019DD
OffsetRgn.GDI32(?,?,?), ref: 6B3019FF
SetWindowRgn.USER32(?,?,00000001), ref: 6B301A0B
DeleteObject.GDI32(?), ref: 6B301A16
??1QRegion@@QAE@XZ.QT5GUI ref: 6B301A26
??1QRegion@@QAE@XZ.QT5GUI ref: 6B301A2C
?isTopLevel@QWindow@@QBE_NXZ.QT5GUI ref: 6B301A34
?icon@QWindow@@QBE?AVQIcon@@XZ.QT5GUI(?), ref: 6B301A49
DestroyIcon.USER32(?), ref: 6B301A6E
DestroyIcon.USER32(?), ref: 6B301A85
GetSystemMetrics.USER32(00000032), ref: 6B301A99
GetSystemMetrics.USER32(00000031), ref: 6B301A9E
GetSystemMetrics.USER32(0000000C), ref: 6B301AB5
GetSystemMetrics.USER32(0000000B), ref: 6B301ABA
SendMessageW.USER32(00000000,00000080,00000000,?), ref: 6B301AE9
SendMessageW.USER32(00000000,00000080,00000000,?), ref: 6B301AF3
SendMessageW.USER32(00000000,00000080,00000001,?), ref: 6B301B05
??1QIcon@@QAE@XZ.QT5GUI ref: 6B301B0F
?property@QObject@@QBE?AVQVariant@@PBD@Z.QT5CORE(?), ref: 6B301B22
?toBool@QVariant@@QBE_NXZ.QT5CORE ref: 6B301B2A
??1QVariant@@QAE@XZ.QT5CORE ref: 6B301B38

Strings

QWindowsWindow::setOpacity, xrefs: 6B3017E5

Memory Dump Source

Source File: 00000007.00000002.3336124309.000000006B301000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6B300000, based on PE: true

Associated: 00000007.00000002.3336078379.000000006B300000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336232454.000000006B3D2000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336296015.000000006B416000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336342659.000000006B417000.00000008.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336389257.000000006B418000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336436882.000000006B41B000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336485192.000000006B41D000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6b300000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Window@@$Region@@$Message$Debug@@MetricsPlatformSystemWindow$?window@CreateDeleteFormat@@Level@ObjectRectSendSurfaceVariant@@$Data@@DestroyExceptionHashIconIcon@@Logger@@ModuleOpenRect@@ThrowType@Window@@@$?allocate?begin@?debug@?end@?has?icon@?mask@?open?property@?qt_window_private@@?rehash@?requested?type@Alpha@Bool@Category@@CombineContext@@DebugEmpty@Enabled@Format@H00@LoggingNode@Object@@OffsetPrivate@@Qt@@Type@1@_callnewhmalloc
String ID: QWindowsWindow::setOpacity
API String ID: 3361754980-54840919
Opcode ID: 92ec71b578dd00648b9f08f795a6395356c70d11c6b75385cc9e55743f6ddcfa
Instruction ID: 8ea307d6113707c1bd4e67f6f57ead19f73403aeadf0f1c27aba9de4e79e19f1
Opcode Fuzzy Hash: 92ec71b578dd00648b9f08f795a6395356c70d11c6b75385cc9e55743f6ddcfa
Instruction Fuzzy Hash: 99F1AF70B04B15AFDB159F34C848B6ABBB9FF86304F008A09F89697290DF75E855CB91

Uniqueness

Uniqueness Score: -1.00%

Function 6B307170 Relevance: 86.1, APIs: 42, Strings: 7, Instructions: 317
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

??0QRect@@QAE@ABVQPoint@@0@Z.QT5CORE(?,?), ref: 6B3071DD
?isDebugEnabled@QLoggingCategory@@QBE_NXZ.QT5CORE ref: 6B3071EA
?marginsRemoved@QRect@@QBE?AV1@ABVQMargins@@@Z.QT5CORE(?,00000000), ref: 6B307221

Part of subcall function 6B30E790: ??0QLoggingCategory@@QAE@PBD@Z.QT5CORE(qt.qpa.windows), ref: 6B30E7D2
Part of subcall function 6B30E790: __Init_thread_footer.LIBCMT ref: 6B30E7E7

?window@QPlatformWindow@@QBEPAVQWindow@@XZ.QT5GUI( from ,?,?, frame: ,?,?, to ,?,?, new frame: ,?,?), ref: 6B307265
??0QMessageLogger@@QAE@PBDH00@Z.QT5CORE(00000000,00000000,00000000,?,?,0000003E,QWindowsBaseWindow::setGeometry_sys,00000000,?,?, frame: ,?,?, to ,?,?), ref: 6B307286
?debug@QMessageLogger@@QBE?AVQDebug@@XZ.QT5CORE(?,?, frame: ,?,?, to ,?,?, new frame: ,?,?), ref: 6B30728E
??6QDebug@@QAEAAV0@D@Z.QT5CORE(?,?, frame: ,?,?, to ,?,?, new frame: ,?,?), ref: 6B307296
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE(?,?, frame: ,?,?, to ,?,?, new frame: ,?,?), ref: 6B30729E
??6@YA?AVQDebug@@V0@PBVQWindow@@@Z.QT5GUI(?,?,?,?, frame: ,?,?, to ,?,?, new frame: ,?,?), ref: 6B3072B3
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE ref: 6B3072BE
??6@YA?AVQDebug@@V0@ABVQRect@@@Z.QT5CORE(?), ref: 6B3072D6
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE ref: 6B3072DD
??6@YA?AVQDebug@@V0@ABVQMargins@@@Z.QT5CORE(?), ref: 6B3072EF
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE ref: 6B3072FA
??6@YA?AVQDebug@@V0@ABVQRect@@@Z.QT5CORE(?), ref: 6B30730D
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE ref: 6B307314
??6@YA?AVQDebug@@V0@ABVQRect@@@Z.QT5CORE(?), ref: 6B30732A
??1QDebug@@QAE@XZ.QT5CORE ref: 6B307339
??1QDebug@@QAE@XZ.QT5CORE ref: 6B30733F
??1QDebug@@QAE@XZ.QT5CORE ref: 6B307345
??1QDebug@@QAE@XZ.QT5CORE ref: 6B30734B
??1QDebug@@QAE@XZ.QT5CORE ref: 6B307351
??1QDebug@@QAE@XZ.QT5CORE ref: 6B307357
GetWindowPlacement.USER32(00000000,0000002C), ref: 6B30737D
IsWindowVisible.USER32(00000000), ref: 6B307390
?translated@QRect@@QBE?AV1@ABVQPoint@@@Z.QT5CORE(?,?), ref: 6B3073EC
SetWindowPlacement.USER32(00000000,?), ref: 6B30743D
MoveWindow.USER32(00000000,?,?,?,?,00000001), ref: 6B307462
?isDebugEnabled@QLoggingCategory@@QBE_NXZ.QT5CORE(?), ref: 6B307476
?marginsRemoved@QRect@@QBE?AV1@ABVQMargins@@@Z.QT5CORE(?,00000000), ref: 6B3074AA
?window@QPlatformWindow@@QBEPAVQWindow@@XZ.QT5GUI( resulting ,?,?,?), ref: 6B3074CB

Part of subcall function 6B303F80: GetWindowPlacement.USER32(00000000,?), ref: 6B303FCD
Part of subcall function 6B303F80: ??0QRect@@QAE@ABVQPoint@@ABVQSize@@@Z.QT5CORE(?,?), ref: 6B30400C
Part of subcall function 6B303F80: ?translated@QRect@@QBE?AV1@ABVQPoint@@@Z.QT5CORE(?,00000000), ref: 6B30403B

??0QMessageLogger@@QAE@PBDH00@Z.QT5CORE(00000000,00000000,00000000,?,?,0000003C,QWindowsBaseWindow::setGeometry_sys,00000000,?,?), ref: 6B3074EC
?debug@QMessageLogger@@QBE?AVQDebug@@XZ.QT5CORE(?,?), ref: 6B3074F4
??6QDebug@@QAEAAV0@D@Z.QT5CORE(?,?), ref: 6B3074FC
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE(?,?), ref: 6B307504
??6@YA?AVQDebug@@V0@PBVQWindow@@@Z.QT5GUI(?,?,?,?), ref: 6B307519
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE ref: 6B307524
??6QDebug@@QAEAAV0@_N@Z.QT5CORE ref: 6B30752C
??6@YA?AVQDebug@@V0@ABVQRect@@@Z.QT5CORE(?), ref: 6B30753E
??1QDebug@@QAE@XZ.QT5CORE ref: 6B30754B
??1QDebug@@QAE@XZ.QT5CORE ref: 6B307551
??1QDebug@@QAE@XZ.QT5CORE ref: 6B307557

Strings

,, xrefs: 6B307369
resulting , xrefs: 6B3074C6
to , xrefs: 6B307246
QWindowsBaseWindow::setGeometry_sys, xrefs: 6B30726C, 6B3074D2
frame: , xrefs: 6B307253
from , xrefs: 6B307260
new frame: , xrefs: 6B30723D

Memory Dump Source

Source File: 00000007.00000002.3336124309.000000006B301000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6B300000, based on PE: true

Associated: 00000007.00000002.3336078379.000000006B300000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336232454.000000006B3D2000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336296015.000000006B416000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336342659.000000006B417000.00000008.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336389257.000000006B418000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336436882.000000006B41B000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336485192.000000006B41D000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6b300000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Debug@@$??6@$Rect@@$Window$Logger@@MessageRect@@@Window@@$Category@@LoggingMargins@@@Placement$?debug@?margins?translated@?window@DebugEnabled@H00@PlatformPoint@@@Removed@Window@@@$Init_thread_footerMovePoint@@Point@@0@Size@@@V0@_Visible
String ID: from $ resulting $ frame: $ new frame: $ to $,$QWindowsBaseWindow::setGeometry_sys
API String ID: 3135988052-3840528456
Opcode ID: c15aedfb8ba9293665b701a2ed94216286257d1ec0ccafa780d3945ca9275bb6
Instruction ID: 41313cb748a5d4ce60e8a2072e0b04391a0f448a38d64187cbe00c2384132c55
Opcode Fuzzy Hash: c15aedfb8ba9293665b701a2ed94216286257d1ec0ccafa780d3945ca9275bb6
Instruction Fuzzy Hash: D4C1F7716043059FCB14DF64C989A6ABBE9FF8A305F00496DF58AC7250EB34E919CB52

Uniqueness

Uniqueness Score: -1.00%

Function 6B311010 Relevance: 58.0, APIs: 26, Strings: 7, Instructions: 252
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?isDebugEnabled@QLoggingCategory@@QBE_NXZ.QT5CORE(?,?,00000000,?,?,?,00000000), ref: 6B3110A3
?isDebugEnabled@QLoggingCategory@@QBE_NXZ.QT5CORE(?,00000000,?,00000000), ref: 6B3110CD
??0QMessageLogger@@QAE@PBDH00@Z.QT5CORE(00000000,00000000,00000000,?,?,?,00000000,?,00000000), ref: 6B3110F2
?debug@QMessageLogger@@QBE?AVQDebug@@XZ.QT5CORE(?,00000000,?,00000000), ref: 6B3110FA
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE(EVENT: hwd=,?,00000020,?, msg=0x,?, et=0x,?, wp=,?, at ,00000000,0000002C,?, handled=,?), ref: 6B311154
??6QDebug@@QAEAAV0@PBX@Z.QT5CORE(?,00000000,?,00000000), ref: 6B31115C
??6QDebug@@QAEAAV0@D@Z.QT5CORE(?,00000000,?,00000000), ref: 6B311164
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE(?,00000000,?,00000000), ref: 6B31116C
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE(?,00000000,?,00000000), ref: 6B311174
??6QDebug@@QAEAAV0@P6AAAVQTextStream@@AAV1@@Z@Z.QT5CORE(?,00000000,?,00000000), ref: 6B31117C
??6QDebug@@QAEAAV0@K@Z.QT5CORE(?,00000000,?,00000000), ref: 6B311184
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE(?,00000000,?,00000000), ref: 6B31118C
??6QDebug@@QAEAAV0@J@Z.QT5CORE(?,00000000,?,00000000), ref: 6B311194
??6QDebug@@QAEAAV0@P6AAAVQTextStream@@AAV1@@Z@Z.QT5CORE(?,00000000,?,00000000), ref: 6B31119C
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE(?,00000000,?,00000000), ref: 6B3111A4
??6QDebug@@QAEAAV0@J@Z.QT5CORE(?,00000000,?,00000000), ref: 6B3111AC
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE(?,00000000,?,00000000), ref: 6B3111B4
??6QDebug@@QAEAAV0@J@Z.QT5CORE(?,00000000,?,00000000), ref: 6B3111BC
??6QDebug@@QAEAAV0@D@Z.QT5CORE(?,00000000,?,00000000), ref: 6B3111C4
??6QDebug@@QAEAAV0@J@Z.QT5CORE(?,00000000,?,00000000), ref: 6B3111CC
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE(?,00000000,?,00000000), ref: 6B3111D4
??6QDebug@@QAEAAV0@_N@Z.QT5CORE(?,00000000,?,00000000), ref: 6B3111DC
??1QDebug@@QAE@XZ.QT5CORE(?,00000000,?,00000000), ref: 6B3111E6
DefWindowProcW.USER32(?,?,?,?,?,?,00000000,?,?,?,00000000), ref: 6B3111F8
GetWindowLongW.USER32(?,000000F0), ref: 6B311233
GetWindowPlacement.USER32(?,?), ref: 6B311254

Strings

,, xrefs: 6B31124A
EVENT: hwd=, xrefs: 6B31114F
handled=, xrefs: 6B311109
wp=, xrefs: 6B311126
at , xrefs: 6B311120
et=0x, xrefs: 6B311137
msg=0x, xrefs: 6B311143

Memory Dump Source

Source File: 00000007.00000002.3336124309.000000006B301000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6B300000, based on PE: true

Associated: 00000007.00000002.3336078379.000000006B300000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336232454.000000006B3D2000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336296015.000000006B416000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336342659.000000006B417000.00000008.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336389257.000000006B418000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336436882.000000006B41B000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336485192.000000006B41D000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6b300000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Debug@@$Window$Category@@DebugEnabled@Logger@@LoggingMessageStream@@TextV1@@$?debug@H00@LongPlacementProcV0@_
String ID: at $ et=0x$ handled=$ msg=0x$ wp=$,$EVENT: hwd=
API String ID: 701970810-3642434740
Opcode ID: ba618883052114f1d442ac76b00ec03303611402fd4ede67e17edb52ca4fd239
Instruction ID: cafb4792e99061326a8b8c06f584117c9d2d8ca4bf4d6b29ba26b244e9614560
Opcode Fuzzy Hash: ba618883052114f1d442ac76b00ec03303611402fd4ede67e17edb52ca4fd239
Instruction Fuzzy Hash: 6E91BF31B097049BDF189F74C919B6EBBE9AFDA605F00492CF98693241DB39D844CB52

Uniqueness

Uniqueness Score: -1.00%

Function 6B2D93E0 Relevance: 54.3, APIs: 36, Instructions: 287
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?deviceMatrix@QPainter@@QBEABVQMatrix@@XZ.QT5GUI(00000002,?,?,?), ref: 6B2D9428
?deviceMatrix@QPainter@@QBEABVQMatrix@@XZ.QT5GUI ref: 6B2D9437
??0QRectF@@QAE@ABVQRect@@@Z.QT5CORE(?), ref: 6B2D945B
?translated@QRectF@@QBE?AV1@ABVQPointF@@@Z.QT5CORE(?,?,?), ref: 6B2D94F2
?toRect@QRectF@@QBE?AVQRect@@XZ.QT5CORE ref: 6B2D94FA
?paintEngine@QPainter@@QBEPAVQPaintEngine@@XZ.QT5GUI(?), ref: 6B2D9507
?systemClip@QPaintEngine@@QBE?AVQRegion@@XZ.QT5GUI ref: 6B2D950F
?isEmpty@QRegion@@QBE_NXZ.QT5GUI ref: 6B2D9519
??0QRegion@@QAE@ABVQRect@@W4RegionType@0@@Z.QT5GUI(?,00000000), ref: 6B2D9534
??4QRegion@@QAEAAV0@$$QAV0@@Z.QT5GUI(?), ref: 6B2D9543
??1QRegion@@QAE@XZ.QT5GUI ref: 6B2D954D
??_4QRegion@@QAEAAV0@ABVQRect@@@Z.QT5GUI(?), ref: 6B2D9556
?hasClipping@QPainter@@QBE_NXZ.QT5GUI ref: 6B2D955E
?toPoint@QPointF@@QBE?AVQPoint@@XZ.QT5CORE(?), ref: 6B2D9571
?clipRegion@QPainter@@QBE?AVQRegion@@XZ.QT5GUI(?), ref: 6B2D958E
?translated@QRegion@@QBE?AV1@HH@Z.QT5GUI(?,00000000,?), ref: 6B2D95AE
??_4QRegion@@QAEAAV0@ABV0@@Z.QT5GUI(?), ref: 6B2D95BD
??1QRegion@@QAE@XZ.QT5GUI ref: 6B2D95C7
??1QRegion@@QAE@XZ.QT5GUI ref: 6B2D95CD
??1QRegion@@QAE@XZ.QT5GUI ref: 6B2D95D3
CreateRectRgn.GDI32(00000000,00000000,00000000,00000000), ref: 6B2D95E3
?rectCount@QRegion@@QBEHXZ.QT5GUI ref: 6B2D95EF
?boundingRect@QRegion@@QBE?AVQRect@@XZ.QT5GUI(?), ref: 6B2D9609
?begin@QRegion@@QBEPBVQRect@@XZ.QT5GUI ref: 6B2D9630
?end@QRegion@@QBEPBVQRect@@XZ.QT5GUI ref: 6B2D963C
CreateRectRgn.GDI32(00000002,00000002,00000002,00000001), ref: 6B2D9681
CreateRectRgn.GDI32(00000000,00000000,00000000,00000000), ref: 6B2D9691
CombineRgn.GDI32(00000000,00000000,00000000,00000002), ref: 6B2D969E
DeleteObject.GDI32(00000000), ref: 6B2D96A9
DeleteObject.GDI32(00000000), ref: 6B2D96B8
SelectClipRgn.GDI32(?,00000000), ref: 6B2D96D5
?boundingRect@QRegion@@QBE?AVQRect@@XZ.QT5GUI ref: 6B2D972E
#47.UXTHEME(00000000,?,?,?,?,?), ref: 6B2D979B
SelectClipRgn.GDI32(?,00000000), ref: 6B2D97A9
DeleteObject.GDI32(00000000), ref: 6B2D97AC
??1QRegion@@QAE@XZ.QT5GUI ref: 6B2D97B2

Memory Dump Source

Source File: 00000007.00000002.3335881964.000000006B2D1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6B2D0000, based on PE: true

Associated: 00000007.00000002.3335832489.000000006B2D0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000007.00000002.3335932267.000000006B2E6000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000007.00000002.3335979294.000000006B2EE000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000007.00000002.3336025576.000000006B2EF000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6b2d0000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Region@@$RectRect@@$Painter@@$CreateDeleteObjectRect@$??_4?bounding?device?translated@ClipEngine@@Matrix@Matrix@@PaintPointRect@@@SelectV0@@$?begin@?clip?end@?has?paint?rect?systemClip@Clipping@CombineCount@Empty@Engine@F@@@Point@Point@@RegionRegion@Type@0@@V0@$$
String ID:
API String ID: 3563474523-0
Opcode ID: 026790ac4925ca970d40364444c88d2a70f44a01412fa994073393d1d3f6f1b4
Instruction ID: 0fa834b5b3c9b2c1ca4857eb84d2242932f35480a61c8c654db3cf65dd0c5e39
Opcode Fuzzy Hash: 026790ac4925ca970d40364444c88d2a70f44a01412fa994073393d1d3f6f1b4
Instruction Fuzzy Hash: 09C1C5719087458FC712DF36C894AABB7E8FF9A304F004A1DF69AA3151EB30E585CB52

Uniqueness

Uniqueness Score: -1.00%

Function 6B317C00 Relevance: 49.1, APIs: 24, Strings: 4, Instructions: 124
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetSystemMetrics.USER32(0000005E), ref: 6B317C1B
GetSystemMetrics.USER32(00000056), ref: 6B317C35
GetSystemMetrics.USER32(0000005F), ref: 6B317C3B
?isDebugEnabled@QLoggingCategory@@QBE_NXZ.QT5CORE(?,?,?,00000000,?,?,6B30A528,00000000,00000000,00000000), ref: 6B317C4A
??0QMessageLogger@@QAE@PBDH00@Z.QT5CORE(00000000,00000000,00000000,?,?,Digitizers:,00000000,Ready:,00000000,Tablet PC:,00000000,Max touch points:,00000000), ref: 6B317CAE
?debug@QMessageLogger@@QBE?AVQDebug@@XZ.QT5CORE(?,?,?,00000000,?,?,6B30A528,00000000,00000000,00000000), ref: 6B317CB6
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE(?,?,?,00000000,?,?,6B30A528,00000000,00000000,00000000), ref: 6B317CBE
??6QDebug@@QAEAAV0@P6AAAVQTextStream@@AAV1@@Z@Z.QT5CORE(?,?,?,00000000,?,?,6B30A528,00000000,00000000,00000000), ref: 6B317CC6
??6QDebug@@QAEAAV0@P6AAAVQTextStream@@AAV1@@Z@Z.QT5CORE(?,?,?,00000000,?,?,6B30A528,00000000,00000000,00000000), ref: 6B317CCE
??6QDebug@@QAEAAV0@J@Z.QT5CORE(?,?,?,00000000,?,?,6B30A528,00000000,00000000,00000000), ref: 6B317CD6
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE(?,?,?,00000000,?,?,6B30A528,00000000,00000000,00000000), ref: 6B317CDE
??6QDebug@@QAEAAV0@J@Z.QT5CORE(?,?,?,00000000,?,?,6B30A528,00000000,00000000,00000000), ref: 6B317CE6
??6QDebug@@QAEAAV0@P6AAAVQTextStream@@AAV1@@Z@Z.QT5CORE(?,?,?,00000000,?,?,6B30A528,00000000,00000000,00000000), ref: 6B317CEE
??6QDebug@@QAEAAV0@P6AAAVQTextStream@@AAV1@@Z@Z.QT5CORE(?,?,?,00000000,?,?,6B30A528,00000000,00000000,00000000), ref: 6B317CF6
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE(?,?,?,00000000,?,?,6B30A528,00000000,00000000,00000000), ref: 6B317CFE
??6QDebug@@QAEAAV0@J@Z.QT5CORE(?,?,?,00000000,?,?,6B30A528,00000000,00000000,00000000), ref: 6B317D06
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE(?,?,?,00000000,?,?,6B30A528,00000000,00000000,00000000), ref: 6B317D0E
??6QDebug@@QAEAAV0@J@Z.QT5CORE(?,?,?,00000000,?,?,6B30A528,00000000,00000000,00000000), ref: 6B317D16
??1QDebug@@QAE@XZ.QT5CORE(?,?,?,00000000,?,?,6B30A528,00000000,00000000,00000000), ref: 6B317D20
??0QTouchDevice@@QAE@XZ.QT5GUI(?,00000000,?,?,6B30A528,00000000,00000000,00000000), ref: 6B317D32
?setType@QTouchDevice@@QAEXW4DeviceType@1@@Z.QT5GUI(00000000,?,00000000,?,?,6B30A528,00000000,00000000,00000000), ref: 6B317D42
?type@QTouchDevice@@QBE?AW4DeviceType@1@XZ.QT5GUI(?,00000000,?,?,6B30A528,00000000,00000000,00000000), ref: 6B317D4F
?setCapabilities@QTouchDevice@@QAEXV?$QFlags@W4CapabilityFlag@QTouchDevice@@@@@Z.QT5GUI(00000023,?,00000000,?,?,6B30A528,00000000,00000000,00000000), ref: 6B317D63
?setMaximumTouchPoints@QTouchDevice@@QAEXH@Z.QT5GUI(?,?,00000000,?,?,6B30A528,00000000,00000000,00000000), ref: 6B317D6F

Strings

Tablet PC:, xrefs: 6B317C69
Digitizers:, xrefs: 6B317C9D
Ready:, xrefs: 6B317C80
Max touch points:, xrefs: 6B317C5E

Memory Dump Source

Source File: 00000007.00000002.3336124309.000000006B301000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6B300000, based on PE: true

Associated: 00000007.00000002.3336078379.000000006B300000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336232454.000000006B3D2000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336296015.000000006B416000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336342659.000000006B417000.00000008.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336389257.000000006B418000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336436882.000000006B41B000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336485192.000000006B41D000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6b300000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Debug@@$Touch$Device@@$Stream@@TextV1@@$?setMetricsSystem$DeviceLogger@@Message$?debug@?type@Capabilities@CapabilityCategory@@DebugDevice@@@@@Enabled@Flag@Flags@H00@LoggingMaximumPoints@Type@Type@1@Type@1@@
String ID: Digitizers:$Max touch points:$Ready:$Tablet PC:
API String ID: 1074269435-3611611755
Opcode ID: d7028ee6b8f2d39a5b3d3fa645d23ec5bc993da3eb9034db328cda9c48c195a9
Instruction ID: 8381b9d3c9adb11133e619b777a0920eb46c0820022b4410428e08a6773f3534
Opcode Fuzzy Hash: d7028ee6b8f2d39a5b3d3fa645d23ec5bc993da3eb9034db328cda9c48c195a9
Instruction Fuzzy Hash: 83414C35B013089BDF186B74CE1DB7D7BEAEBCA212F440429F906D3290DE79D9188A61

Uniqueness

Uniqueness Score: -1.00%

Function 6B30F210 Relevance: 47.4, APIs: 21, Strings: 6, Instructions: 141
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?isDebugEnabled@QLoggingCategory@@QBE_NXZ.QT5CORE(00000000,?,?,?,?,?,6B30A495,?), ref: 6B30F21B
??0QMessageLogger@@QAE@PBDH00@Z.QT5CORE(00000000,00000000,00000000,?,QWindowsContext::setProcessDpiAwareness,?,?,?,?,?,?,?,6B30A495,?), ref: 6B30F264
?debug@QMessageLogger@@QBE?AVQDebug@@XZ.QT5CORE(?,?,?,?,?,?,6B30A495,?), ref: 6B30F26C
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE(?,?,?,?,?,?,6B30A495,?), ref: 6B30F274
??6QDebug@@QAEAAV0@J@Z.QT5CORE(?,?,?,?,?,?,6B30A495,?), ref: 6B30F27C
??1QDebug@@QAE@XZ.QT5CORE(?,?,?,?,?,?,6B30A495,?), ref: 6B30F286
?isDebugEnabled@QLoggingCategory@@QBE_NXZ.QT5CORE(?,?,?,?,?,?,6B30A495,?), ref: 6B30F2D0
??0QMessageLogger@@QAE@PBDH0@Z.QT5CORE(00000000,00000000,00000000,?,?,?,?,?,?,?,?,?,6B30A495,?), ref: 6B30F30E
?warning@QMessageLogger@@QBE?AVQDebug@@XZ.QT5CORE(?,?,?,?,?,?,?,?,6B30A495,?), ref: 6B30F316
?noquote@QDebug@@QAEAAV1@XZ.QT5CORE(?,?,?,?,?,?,?,?,6B30A495,?), ref: 6B30F31E
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE(SetProcessDpiAwareness(,?,) failed: ,00000000,?,?,?,?,?,?,?,6B30A495,?), ref: 6B30F34E
??6QDebug@@QAEAAV0@J@Z.QT5CORE(?,?,?,?,?,?,?,6B30A495,?), ref: 6B30F356
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE(?,?,?,?,?,?,?,6B30A495,?), ref: 6B30F35E
??6QDebug@@QAEAAV0@ABVQByteArray@@@Z.QT5CORE(?,?,?,?,?,?,?,6B30A495,?), ref: 6B30F366
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE(?,?,?,?,?,?,?,6B30A495,?), ref: 6B30F36E
??6QDebug@@QAEAAV0@J@Z.QT5CORE(?,?,?,?,?,?,?,6B30A495,?), ref: 6B30F376
??1QDebug@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,6B30A495,?), ref: 6B30F380
??1QByteArray@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,6B30A495,?), ref: 6B30F38A
?qErrnoWarning@@YAXPBDZZ.QT5CORE(SetProcessDPIAware() failed,?,?,?,?,?,6B30A495,?), ref: 6B30F3B2
??0QLoggingCategory@@QAE@PBD@Z.QT5CORE(qt.qpa.windows,?,?,?,?,?,?,6B30A495,?), ref: 6B30F3E6
__Init_thread_footer.LIBCMT ref: 6B30F3FB

Strings

, using , xrefs: 6B30F32B
) failed: , xrefs: 6B30F343
SetProcessDPIAware() failed, xrefs: 6B30F3AD
QWindowsContext::setProcessDpiAwareness, xrefs: 6B30F24A
SetProcessDpiAwareness(, xrefs: 6B30F349
qt.qpa.windows, xrefs: 6B30F3DC

Memory Dump Source

Source File: 00000007.00000002.3336124309.000000006B301000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6B300000, based on PE: true

Associated: 00000007.00000002.3336078379.000000006B300000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336232454.000000006B3D2000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336296015.000000006B416000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336342659.000000006B417000.00000008.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336389257.000000006B418000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336436882.000000006B41B000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336485192.000000006B41D000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6b300000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Debug@@$Logger@@Message$Category@@Logging$ByteDebugEnabled@$?debug@?noquote@?warning@Array@@Array@@@ErrnoH00@Init_thread_footerWarning@@
String ID: ) failed: $, using $QWindowsContext::setProcessDpiAwareness$SetProcessDPIAware() failed$SetProcessDpiAwareness($qt.qpa.windows
API String ID: 4089140257-1402918531
Opcode ID: 82458e5fd6947dbdeef10ed81c0d2689c63ca22dc18327970ae75619e6371bfc
Instruction ID: 370b36e71406f83a2ea7d4c18512055790be70a4a6089541705f569a63ae0cd0
Opcode Fuzzy Hash: 82458e5fd6947dbdeef10ed81c0d2689c63ca22dc18327970ae75619e6371bfc
Instruction Fuzzy Hash: 0441CD35B043099BDF14ABB4CD19B6A37A8EFC6716F040568E942C3280EF3AD905CB26

Uniqueness

Uniqueness Score: -1.00%

Function 6B312130 Relevance: 44.0, APIs: 21, Strings: 4, Instructions: 229
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

memset.VCRUNTIME140(?,00000000,00000068), ref: 6B31215D
GetMonitorInfoW.USER32(?,00000068), ref: 6B312173
?fromWCharArray@QString@@SA?AV1@PB_WH@Z.QT5CORE(?,?,000000FF), ref: 6B3121FB
??4QUrl@@QAEAAV0@$$QAV0@@Z.QT5CORE(00000000), ref: 6B312208
??1QString@@QAE@XZ.QT5CORE ref: 6B312212
??8QString@@QBE_NVQLatin1String@@@Z.QT5CORE(00000007,WinDisc), ref: 6B312222

Strings

%s: Unable to obtain handle for monitor '%s', defaulting to %g DPI., xrefs: 6B3123BE
h, xrefs: 6B312165
WinDisc, xrefs: 6B312218
monitorData, xrefs: 6B3123B9

Memory Dump Source

Source File: 00000007.00000002.3336124309.000000006B301000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6B300000, based on PE: true

Associated: 00000007.00000002.3336078379.000000006B300000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336232454.000000006B3D2000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336296015.000000006B416000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336342659.000000006B417000.00000008.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336389257.000000006B418000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336436882.000000006B41B000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336485192.000000006B41D000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6b300000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$?fromArray@CharInfoLatin1MonitorString@@@Url@@V0@$$V0@@memset
String ID: %s: Unable to obtain handle for monitor '%s', defaulting to %g DPI.$WinDisc$h$monitorData
API String ID: 3030265178-425584237
Opcode ID: f0100f38bd2a5b7964dc8e951a146549da19c81edab816884dc72719162d8bc7
Instruction ID: 05e5488ff57940dd5ff63c45940237dd0c3b989805e27a6639258ea9e46222ad
Opcode Fuzzy Hash: f0100f38bd2a5b7964dc8e951a146549da19c81edab816884dc72719162d8bc7
Instruction Fuzzy Hash: 8391AD31A18B05AFD715CF38CD41B5AB7E8FF8A304F008A19F689A6181EB34E595CB52

Uniqueness

Uniqueness Score: -1.00%

Function 6B353C40 Relevance: 42.1, APIs: 21, Strings: 3, Instructions: 126
registrywindowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

??0?$QVector@VQPointF@@@@QAE@XZ.QT5CORE ref: 6B353C5C
RegOpenKeyExW.KERNEL32(80000001,EUDC\1252,00000000,00020019,?), ref: 6B353C78
memset.VCRUNTIME140(?), ref: 6B353C99
RegQueryValueExW.ADVAPI32(?,SystemDefaultEUDCFont,00000000,00000000,?,?,00000208), ref: 6B353CB8
?fromWCharArray@QString@@SA?AV1@PB_WH@Z.QT5CORE(?,?,000000FF), ref: 6B353CCE
??4QUrl@@QAEAAV0@$$QAV0@@Z.QT5CORE(00000000), ref: 6B353CDC
??1QString@@QAE@XZ.QT5CORE ref: 6B353CE6
RegCloseKey.ADVAPI32(?), ref: 6B353CF0
?isEmpty@QString@@QBE_NXZ.QT5CORE ref: 6B353CFA
??0QFile@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 6B353D11
?open@QFile@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z.QT5CORE ref: 6B353D24
?isWarningEnabled@QLoggingCategory@@QBE_NXZ.QT5CORE ref: 6B353D35
??0QMessageLogger@@QAE@PBDH00@Z.QT5CORE(00000000,00000000,00000000,?,?,Unable to open default EUDC font:,?), ref: 6B353D64
?warning@QMessageLogger@@QBE?AVQDebug@@XZ.QT5CORE ref: 6B353D6C
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE ref: 6B353D74
??6QDebug@@QAEAAV0@ABVQString@@@Z.QT5CORE ref: 6B353D7C
??1QDebug@@QAE@XZ.QT5CORE ref: 6B353D86
?readAll@QIODevice@@QAE?AVQByteArray@@XZ.QT5CORE(?,?), ref: 6B353D9E

Part of subcall function 6B31AB60: ??1QString@@QAE@XZ.QT5CORE(?,6B5136D0,00000000,6B35E9D1,?,?,00000000,?,?), ref: 6B31ABA5
Part of subcall function 6B31AB60: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(00000000,?,6B5136D0,00000000,6B35E9D1,?,?,00000000,?,?), ref: 6B31ABB0

??1QByteArray@@QAE@XZ.QT5CORE ref: 6B353DD9
??1QFile@@UAE@XZ.QT5CORE ref: 6B353DE3
??1QString@@QAE@XZ.QT5CORE ref: 6B353DED

Strings

SystemDefaultEUDCFont, xrefs: 6B353CAF
Unable to open default EUDC font:, xrefs: 6B353D4D
EUDC\1252, xrefs: 6B353C6E

Memory Dump Source

Source File: 00000007.00000002.3336124309.000000006B301000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6B300000, based on PE: true

Associated: 00000007.00000002.3336078379.000000006B300000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336232454.000000006B3D2000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336296015.000000006B416000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336342659.000000006B417000.00000008.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336389257.000000006B418000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336436882.000000006B41B000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336485192.000000006B41D000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6b300000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Debug@@$File@@$Array@@ByteLogger@@MessageOpenString@@@$??0?$?dispose@?from?open@?read?warning@All@Array@Category@@CharCloseData@1@@Data@@Device@@Device@@@@@Empty@Enabled@F@@@@Flag@Flags@H00@ListLoggingModePointQueryUrl@@V0@$$V0@@ValueVector@Warningmemset
String ID: EUDC\1252$SystemDefaultEUDCFont$Unable to open default EUDC font:
API String ID: 3714437036-3770364387
Opcode ID: 6417c8b08379e19581079b11ff9f141bb0c964b8b2ee1e2ea88a2304cc0bc364
Instruction ID: b7f7a941e3761ecd4f7ad0e181d0459218c299b345d6deea1e19fb54323547ee
Opcode Fuzzy Hash: 6417c8b08379e19581079b11ff9f141bb0c964b8b2ee1e2ea88a2304cc0bc364
Instruction Fuzzy Hash: 8841F875604206AFCB14DF60CD59E9ABBBCFF85305F00891DF59693190EB34E519CB62

Uniqueness

Uniqueness Score: -1.00%

Function 00C61150 Relevance: 36.9, APIs: 19, Strings: 2, Instructions: 118
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

??0QApplication@@QAE@AAHPAPADH@Z.QT5WIDGETS(?,?,00050A01,676E6AEE), ref: 00C61187

Part of subcall function 00C9BC50: new.LIBCMT ref: 00C9BC80
Part of subcall function 00C9BC50: ??0QObject@@QAE@PAV0@@Z.QT5CORE(00000000), ref: 00C9BC98
Part of subcall function 00C9BC50: ??0QString@@QAE@XZ.QT5CORE ref: 00C9BCA7
Part of subcall function 00C9BC50: ??4QString@@QAEAAV0@PBD@Z.QT5CORE(00CB9364), ref: 00C9BCD0

?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CB9350,00000002), ref: 00C611AC
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(00CB9354), ref: 00C611C0
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:/Style.css,0000000B), ref: 00C611CD
??0QFile@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C611E0
??1QString@@QAE@XZ.QT5CORE ref: 00C611ED
?open@QFile@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z.QT5CORE ref: 00C611FF
?readAll@QIODevice@@QAE?AVQByteArray@@XZ.QT5CORE(?), ref: 00C6120C
?constData@QByteArray@@QBEPBDXZ.QT5CORE ref: 00C6121F
?constData@QByteArray@@QBEPBDXZ.QT5CORE ref: 00C61240
??0QString@@QAE@VQLatin1String@@@Z.QT5CORE(00000000,00000000), ref: 00C6124F
??1QByteArray@@QAE@XZ.QT5CORE ref: 00C6125C
?setStyleSheet@QApplication@@QAEXABVQString@@@Z.QT5WIDGETS(?), ref: 00C61269
?show@QWidget@@QAEXXZ.QT5WIDGETS(00000000), ref: 00C61280
?exec@QApplication@@SAHXZ.QT5WIDGETS ref: 00C61286
??1QString@@QAE@XZ.QT5CORE ref: 00C61299
??1QFile@@UAE@XZ.QT5CORE ref: 00C612A2
??1QString@@QAE@XZ.QT5CORE ref: 00C612AB
??1QApplication@@UAE@XZ.QT5WIDGETS ref: 00C612B4

Strings

jng, xrefs: 00C61167
:/Style.css, xrefs: 00C611C8

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Application@@Array@@ByteData@$File@@String@@@$?const?fromArrayAscii_helper@Typed$?append@?exec@?open@?read?set?show@All@Device@@Device@@@@@Flag@Flags@Latin1ModeObject@@OpenSheet@StyleV0@@Widget@@
String ID: :/Style.css$jng
API String ID: 3916993094-707144603
Opcode ID: b24f5d93418644c957b4f3ca8493bd3bc3c7530ae094bc80b1a72f646f87f067
Instruction ID: 0ce980cec8bca142b38b61a688ae65ac480fb64b376620cc4a1e50fd5c615459
Opcode Fuzzy Hash: b24f5d93418644c957b4f3ca8493bd3bc3c7530ae094bc80b1a72f646f87f067
Instruction Fuzzy Hash: 4D415F3190024ADFCF04DBA4ED99BEEBBB8EF15305F144259E916A3290DF715A0CCB61

Uniqueness

Uniqueness Score: -1.00%

Function 6B356370 Relevance: 33.4, APIs: 16, Strings: 3, Instructions: 130windowCOMMON

Download Yara Rule

APIs

??0QString@@QAE@PBVQChar@@H@Z.QT5CORE(?,000000FF), ref: 6B35637F
GetDC.USER32(00000000), ref: 6B356392
GetDeviceCaps.GDI32(00000000,0000005A), ref: 6B3563A1
ReleaseDC.USER32(00000000,00000000), ref: 6B3563AF
?isDebugEnabled@QLoggingCategory@@QBE_NXZ.QT5CORE ref: 6B356428
??0QMessageLogger@@QAE@PBDH00@Z.QT5CORE(00000000,00000000,00000000,?,QWindowsFontDatabase::fontEngine,FONTDEF,?,00000000,?), ref: 6B35647B
?debug@QMessageLogger@@QBE?AVQDebug@@XZ.QT5CORE ref: 6B356483
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE ref: 6B35648B
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE ref: 6B356493
??6QDebug@@QAEAAV0@PBX@Z.QT5CORE ref: 6B3564B2
??6QDebug@@QAEAAV0@PBX@Z.QT5CORE ref: 6B3564BA
??1QDebug@@QAE@XZ.QT5CORE ref: 6B3564CA
??1QDebug@@QAE@XZ.QT5CORE ref: 6B3564D0
??1QString@@QAE@XZ.QT5CORE ref: 6B3564D6
??0QLoggingCategory@@QAE@PBD@Z.QT5CORE(qt.qpa.fonts), ref: 6B35650B
__Init_thread_footer.LIBCMT ref: 6B356520

Strings

FONTDEF, xrefs: 6B356460
qt.qpa.fonts, xrefs: 6B356501
QWindowsFontDatabase::fontEngine, xrefs: 6B356465

Memory Dump Source

Source File: 00000007.00000002.3336124309.000000006B301000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6B300000, based on PE: true

Associated: 00000007.00000002.3336078379.000000006B300000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336232454.000000006B3D2000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336296015.000000006B416000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336342659.000000006B417000.00000008.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336389257.000000006B418000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336436882.000000006B41B000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336485192.000000006B41D000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6b300000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Debug@@$Category@@Logger@@LoggingMessageString@@$?debug@CapsChar@@DebugDeviceEnabled@H00@Init_thread_footerRelease
String ID: FONTDEF$QWindowsFontDatabase::fontEngine$qt.qpa.fonts
API String ID: 1560577616-2856718740
Opcode ID: c86c250d3c3f8c53a46514cca9196a62ddc8f4fad86a50428b3cd1d33b15fd94
Instruction ID: 44404896ba178b1b9f71a2ee40b553928e69ce9b4d7f7fc02f8941ec0d0bbe4c
Opcode Fuzzy Hash: c86c250d3c3f8c53a46514cca9196a62ddc8f4fad86a50428b3cd1d33b15fd94
Instruction Fuzzy Hash: 5F41F572B452119BCB10AF60CD09F6A77B8EBC6721F040529F89297390DB39E915CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 6B3093E0 Relevance: 31.7, APIs: 16, Strings: 2, Instructions: 153windowCOMMON

Download Yara Rule

APIs

?window@QPlatformWindow@@QBEPAVQWindow@@XZ.QT5GUI ref: 6B309400
?flags@QWindow@@QBE?AV?$QFlags@W4WindowType@Qt@@@@XZ.QT5GUI(?), ref: 6B309413
?type@QWindow@@QBE?AW4WindowType@Qt@@XZ.QT5GUI ref: 6B30941B
?isTopLevel@QWindow@@QBE_NXZ.QT5GUI ref: 6B309427
?windowStates@QWindow@@QBE?AV?$QFlags@W4WindowState@Qt@@@@XZ.QT5GUI(?), ref: 6B30943E
IsWindowVisible.USER32(00000000), ref: 6B309453
GetWindowLongW.USER32(00000000), ref: 6B3094B4
?property@QObject@@QBE?AVQVariant@@PBD@Z.QT5CORE(?,_q_showWithoutActivating), ref: 6B3094E6
?toBool@QVariant@@QBE_NXZ.QT5CORE ref: 6B3094FA
??1QVariant@@QAE@XZ.QT5CORE ref: 6B309512
?windowStates@QWindow@@QBE?AV?$QFlags@W4WindowState@Qt@@@@XZ.QT5GUI(?), ref: 6B309531
ShowWindow.USER32(00000000,00000004), ref: 6B309547
GetWindowLongW.USER32(00000000), ref: 6B309568
SetWindowPos.USER32(00000000,00000000,00000000,00000000,00000000,00000000,00000237), ref: 6B30958D
GetWindowPlacement.USER32 ref: 6B3095A8
SetWindowPlacement.USER32(00000000,?), ref: 6B3095BD

Strings

_q_showWithoutActivating, xrefs: 6B3094DA
,, xrefs: 6B3095A0

Memory Dump Source

Source File: 00000007.00000002.3336124309.000000006B301000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6B300000, based on PE: true

Associated: 00000007.00000002.3336078379.000000006B300000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336232454.000000006B3D2000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336296015.000000006B416000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336342659.000000006B417000.00000008.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336389257.000000006B418000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336436882.000000006B41B000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336485192.000000006B41D000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6b300000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Window$Window@@$Flags@Qt@@@@Variant@@$?windowLongPlacementState@States@Type@$?flags@?property@?type@?window@Bool@Level@Object@@PlatformQt@@ShowVisible
String ID: ,$_q_showWithoutActivating
API String ID: 1492462161-3675458727
Opcode ID: 044e7516f0a85eca6dc9a8512b16eaa7bc981a9e548cf7f43c34a0628631cd39
Instruction ID: 308215a80b5d3ac66d647639f7da83e40b9d41b948733ad265c4d01275d88690
Opcode Fuzzy Hash: 044e7516f0a85eca6dc9a8512b16eaa7bc981a9e548cf7f43c34a0628631cd39
Instruction Fuzzy Hash: 55517F717083449FDB10DF29C448B6BBBE9AF86754F000A5CF89683292DB39D948CB62

Uniqueness

Uniqueness Score: -1.00%

Function 6B306C70 Relevance: 26.3, APIs: 14, Strings: 1, Instructions: 90windowregistryCOMMON

Download Yara Rule

APIs

?isDebugEnabled@QLoggingCategory@@QBE_NXZ.QT5CORE(?,?), ref: 6B306C92
?window@QPlatformWindow@@QBEPAVQWindow@@XZ.QT5GUI(?), ref: 6B306CA7
??0QMessageLogger@@QAE@PBDH00@Z.QT5CORE(00000000,00000000,00000000,?,?,QWindowsWindow::setDropSiteEnabled,00000000), ref: 6B306CC3
?debug@QMessageLogger@@QBE?AVQDebug@@XZ.QT5CORE ref: 6B306CCB
??6QDebug@@QAEAAV0@PBD@Z.QT5CORE ref: 6B306CD3
??6@YA?AVQDebug@@V0@PBVQWindow@@@Z.QT5GUI(?), ref: 6B306CE8
??6QDebug@@QAEAAV0@_N@Z.QT5CORE ref: 6B306CF3
??1QDebug@@QAE@XZ.QT5CORE ref: 6B306D03
??1QDebug@@QAE@XZ.QT5CORE ref: 6B306D09
?window@QPlatformWindow@@QBEPAVQWindow@@XZ.QT5GUI ref: 6B306D1D
RegisterDragDrop.OLE32(?,00000000), ref: 6B306D32
CoLockObjectExternal.OLE32(00000000,00000001,00000001), ref: 6B306D3F

Part of subcall function 6B30E5D0: ??0QLoggingCategory@@QAE@PBD@Z.QT5CORE(qt.qpa.mime), ref: 6B30E612
Part of subcall function 6B30E5D0: __Init_thread_footer.LIBCMT ref: 6B30E627

CoLockObjectExternal.OLE32(00000000,00000000,00000001), ref: 6B306D55
RevokeDragDrop.OLE32(?), ref: 6B306D67

Strings

QWindowsWindow::setDropSiteEnabled, xrefs: 6B306CAE

Memory Dump Source

Source File: 00000007.00000002.3336124309.000000006B301000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6B300000, based on PE: true

Associated: 00000007.00000002.3336078379.000000006B300000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336232454.000000006B3D2000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336296015.000000006B416000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336342659.000000006B417000.00000008.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336389257.000000006B418000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336436882.000000006B41B000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336485192.000000006B41D000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6b300000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Debug@@$Window@@$?window@Category@@DragDropExternalLockLogger@@LoggingMessageObjectPlatform$??6@?debug@DebugEnabled@H00@Init_thread_footerRegisterRevokeV0@_Window@@@
String ID: QWindowsWindow::setDropSiteEnabled
API String ID: 1966571408-3096030987
Opcode ID: 8128f446d538468389408bd988b802cd190c3bc9fadddac018a1bfe43ce5c8da
Instruction ID: d0a07ac16f4d16dccf07ccb711f4de04d14510f2b959f5f66aff595bcf092110
Opcode Fuzzy Hash: 8128f446d538468389408bd988b802cd190c3bc9fadddac018a1bfe43ce5c8da
Instruction Fuzzy Hash: E2318072710601AFCB14AB74CC0DB99BBAEFF85315F040065F906972A0DF75E925DB91

Uniqueness

Uniqueness Score: -1.00%

Function 6B337B40 Relevance: 24.2, APIs: 16, Instructions: 194COMMON

Download Yara Rule

APIs

??0?$QVector@VQPointF@@@@QAE@XZ.QT5CORE ref: 6B337B88
??0?$QVector@VQPointF@@@@QAE@XZ.QT5CORE ref: 6B337B92
??0?$QVector@VQPointF@@@@QAE@XZ.QT5CORE ref: 6B337B9C

Part of subcall function 6B336990: ??0?$QVector@VQPointF@@@@QAE@XZ.QT5CORE(?,00000000,00000000,?), ref: 6B3369AB
Part of subcall function 6B336990: ??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(00000000), ref: 6B3369B5
Part of subcall function 6B336990: ??1QString@@QAE@XZ.QT5CORE ref: 6B3369C9
Part of subcall function 6B336990: ?utf16@QString@@QBEPBGXZ.QT5CORE(00000001), ref: 6B3369DB
Part of subcall function 6B336990: ?load@QSystemLibrary@@SAPAUHINSTANCE__@@PB_W_N@Z.QT5CORE(00000000), ref: 6B3369E2
Part of subcall function 6B336990: GetProcAddress.KERNEL32(00000000,Direct3DCreate9), ref: 6B3369FB
Part of subcall function 6B336990: NtProtectVirtualMemory.NTDLL(00000020), ref: 6B336A07

??4QUrl@@QAEAAV0@$$QAV0@@Z.QT5CORE(00000014), ref: 6B337C39
??4QUrl@@QAEAAV0@$$QAV0@@Z.QT5CORE(00000018), ref: 6B337C47
??4QUrl@@QAEAAV0@$$QAV0@@Z.QT5CORE(0000001C), ref: 6B337C55
??0QByteArray@@QAE@$$QAV0@@Z.QT5CORE(?), ref: 6B337D7B
??0QByteArray@@QAE@$$QAV0@@Z.QT5CORE(?), ref: 6B337D89

Part of subcall function 6B3368E0: ??0QByteArray@@QAE@$$QAV0@@Z.QT5CORE(00000014,00000000,00000000,6B337BBF,00000000), ref: 6B336912
Part of subcall function 6B3368E0: ??0QByteArray@@QAE@$$QAV0@@Z.QT5CORE(00000018), ref: 6B33691F
Part of subcall function 6B3368E0: ??0QByteArray@@QAE@$$QAV0@@Z.QT5CORE(0000001C), ref: 6B33692C

??1QString@@QAE@XZ.QT5CORE ref: 6B337DAF

Memory Dump Source

Source File: 00000007.00000002.3336124309.000000006B301000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6B300000, based on PE: true

Associated: 00000007.00000002.3336078379.000000006B300000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336232454.000000006B3D2000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336296015.000000006B416000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336342659.000000006B417000.00000008.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336389257.000000006B418000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336436882.000000006B41B000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336485192.000000006B41D000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6b300000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: V0@@$Array@@ByteE@$$$??0?$F@@@@PointString@@Vector@$Url@@V0@$$$?load@?utf16@AddressE__@@Library@@MemoryProcProtectSystemVirtual
String ID:
API String ID: 745909928-0
Opcode ID: 8db9924cc957a9e567015647fe4a9611a4b205dbf6c056df720e3ccd59e81367
Instruction ID: b0e91e4e6c8feb7ca5e539864708ad3f021dffb1dab7359b5686441e7eba5b57
Opcode Fuzzy Hash: 8db9924cc957a9e567015647fe4a9611a4b205dbf6c056df720e3ccd59e81367
Instruction Fuzzy Hash: E071E471608352DFD714CF24C994AABBBE8EF89714F00491DE49A87250DB35E949CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 6B329910 Relevance: 21.1, APIs: 14, Instructions: 119windowCOMMON

Download Yara Rule

APIs

?desktopSettingsAware@QGuiApplication@@SA_NXZ.QT5GUI(?,?,?,?,?,?,?,?,?,?,6B32770C,?,?,?,?,00000000), ref: 6B329921

Part of subcall function 6B3CFF96: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,?,6B350121,00000008), ref: 6B3CFFAB

Part of subcall function 6B32A750: ?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(000000D4,000000D0,000000C8,000000FF,00000000,0000004C,00000000), ref: 6B32A78B
Part of subcall function 6B32A750: ?light@QColor@@QBE?AV1@H@Z.QT5GUI(?,00000096), ref: 6B32A7A2
Part of subcall function 6B32A750: ?dark@QColor@@QBE?AV1@H@Z.QT5GUI(?,000000C8), ref: 6B32A7BC
Part of subcall function 6B32A750: ??0QBrush@@QAE@ABVQColor@@W4BrushStyle@Qt@@@Z.QT5GUI(?,00000001), ref: 6B32A7C9
Part of subcall function 6B32A750: ??0QColor@@QAE@W4GlobalColor@Qt@@@Z.QT5GUI(00000005), ref: 6B32A7DE
Part of subcall function 6B32A750: ??0QColor@@QAE@W4GlobalColor@Qt@@@Z.QT5GUI(00000003), ref: 6B32A7E6
Part of subcall function 6B32A750: ??0QColor@@QAE@W4GlobalColor@Qt@@@Z.QT5GUI(00000002), ref: 6B32A7EE
Part of subcall function 6B32A750: ??0QColor@@QAE@W4GlobalColor@Qt@@@Z.QT5GUI(00000002), ref: 6B32A7F6
Part of subcall function 6B32A750: ??0QPalette@@QAE@ABVQColor@@000000@Z.QT5GUI(?,?,?,?,?,?,?), ref: 6B32A823
Part of subcall function 6B32A750: ?setBrush@QPalette@@QAEXW4ColorGroup@1@W4ColorRole@1@ABVQBrush@@@Z.QT5GUI(00000001,00000000,?), ref: 6B32A83A
Part of subcall function 6B32A750: ?setBrush@QPalette@@QAEXW4ColorGroup@1@W4ColorRole@1@ABVQBrush@@@Z.QT5GUI(00000001,00000006,?), ref: 6B32A847
Part of subcall function 6B32A750: ?setBrush@QPalette@@QAEXW4ColorGroup@1@W4ColorRole@1@ABVQBrush@@@Z.QT5GUI(00000001,00000008,?), ref: 6B32A854
Part of subcall function 6B32A750: ??0QBrush@@QAE@ABVQColor@@W4BrushStyle@Qt@@@Z.QT5GUI(?,00000001), ref: 6B32A861
Part of subcall function 6B32A750: ?setBrush@QPalette@@QAEXW4ColorGroup@1@W4ColorRole@1@ABVQBrush@@@Z.QT5GUI(00000001,00000009,00000000), ref: 6B32A86E
Part of subcall function 6B32A750: ??1QBrush@@QAE@XZ.QT5GUI ref: 6B32A874
Part of subcall function 6B32A750: ??1QBrush@@QAE@XZ.QT5GUI ref: 6B32A87E
Part of subcall function 6B32A750: GetSysColor.USER32(00000008), ref: 6B32A886

Part of subcall function 6B3CFF96: _callnewh.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,?,6B350121,00000008), ref: 6B3CFF9E
Part of subcall function 6B3CFF96: _CxxThrowException.VCRUNTIME140(6B350121,6B4014D4,6B350121), ref: 6B3D128D
Part of subcall function 6B3CFF96: _CxxThrowException.VCRUNTIME140(6B350121,6B401528,6B350121), ref: 6B3D12AA

Part of subcall function 6B32B520: ??0QPalette@@QAE@ABV0@@Z.QT5GUI(?,00000000,0000004C,00000000), ref: 6B32B53F
Part of subcall function 6B32B520: GetSysColor.USER32(00000018), ref: 6B32B54D
Part of subcall function 6B32B520: ?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(?,?,?,000000FF), ref: 6B32B574
Part of subcall function 6B32B520: GetSysColor.USER32(00000017), ref: 6B32B578
Part of subcall function 6B32B520: ?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(?,?,?,000000FF), ref: 6B32B599
Part of subcall function 6B32B520: ??0QBrush@@QAE@ABVQColor@@W4BrushStyle@Qt@@@Z.QT5GUI(?,00000001,?,?,?,?,?,?,?,?,?,?,?,?,6B329950,00000000), ref: 6B32B5AC
Part of subcall function 6B32B520: ?setBrush@QPalette@@QAEXW4ColorGroup@1@W4ColorRole@1@ABVQBrush@@@Z.QT5GUI(00000005,00000001,00000000,?,?,?,?,?,?,?,?,?,?,?,?,6B329950), ref: 6B32B5BF
Part of subcall function 6B32B520: ??1QBrush@@QAE@XZ.QT5GUI(?,?,?,?,?,?,?,?,?,?,?,?,6B329950,00000000,6B30AA66,00000008), ref: 6B32B5CB
Part of subcall function 6B32B520: ??0QBrush@@QAE@ABVQColor@@W4BrushStyle@Qt@@@Z.QT5GUI(?,00000001,?,?,?,?,?,?,?,?,?,?,?,?,6B329950,00000000), ref: 6B32B5D8
Part of subcall function 6B32B520: ?setBrush@QPalette@@QAEXW4ColorGroup@1@W4ColorRole@1@ABVQBrush@@@Z.QT5GUI(00000005,0000000A,00000000,?,?,?,?,?,?,?,?,?,?,?,?,6B329950), ref: 6B32B5E1
Part of subcall function 6B32B520: ??1QBrush@@QAE@XZ.QT5GUI(?,?,?,?,?,?,?,?,?,?,?,?,6B329950,00000000,6B30AA66,00000008), ref: 6B32B5E7
Part of subcall function 6B32B520: ??0QBrush@@QAE@ABVQColor@@W4BrushStyle@Qt@@@Z.QT5GUI(?,00000001,?,?,?,?,?,?,?,?,?,?,?,?,6B329950,00000000), ref: 6B32B5F4
Part of subcall function 6B32B520: ?setBrush@QPalette@@QAEXW4ColorGroup@1@W4ColorRole@1@ABVQBrush@@@Z.QT5GUI(00000005,00000006,00000000,?,?,?,?,?,?,?,?,?,?,?,?,6B329950), ref: 6B32B5FD
Part of subcall function 6B32B520: ??1QBrush@@QAE@XZ.QT5GUI(?,?,?,?,?,?,?,?,?,?,?,?,6B329950,00000000,6B30AA66,00000008), ref: 6B32B603
Part of subcall function 6B32B520: ??0QBrush@@QAE@ABVQColor@@W4BrushStyle@Qt@@@Z.QT5GUI(?,00000001,?,?,?,?,?,?,?,?,?,?,?,?,6B329950,00000000), ref: 6B32B610
Part of subcall function 6B32B520: ?setBrush@QPalette@@QAEXW4ColorGroup@1@W4ColorRole@1@ABVQBrush@@@Z.QT5GUI(00000005,00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,?,6B329950), ref: 6B32B619
Part of subcall function 6B32B520: ??1QBrush@@QAE@XZ.QT5GUI(?,?,?,?,?,?,?,?,?,?,?,?,6B329950,00000000,6B30AA66,00000008), ref: 6B32B61F

Part of subcall function 6B329200: ??0QPalette@@QAE@ABV0@@Z.QT5GUI(?,00000000,0000004C,00000000,?,?,?,?,?,?,?,?,?,6B329963,00000000,6B30AA66), ref: 6B329221
Part of subcall function 6B329200: GetSysColor.USER32(00000004), ref: 6B32922F
Part of subcall function 6B329200: ?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(?,?,?,000000FF,?,?,?,?,?,?,?,?,?,6B329963,00000000,6B30AA66), ref: 6B329256
Part of subcall function 6B329200: GetSysColor.USER32(00000007), ref: 6B32925A
Part of subcall function 6B329200: ?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(?,?,?,000000FF,?,?,?,?,?,?,?,?,?,6B329963,00000000,6B30AA66), ref: 6B32927B
Part of subcall function 6B329200: GetSysColor.USER32(00000011), ref: 6B32927F
Part of subcall function 6B329200: ?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(?,?,?,000000FF,?,?,?,?,?,?,?,?,?,6B329963,00000000,6B30AA66), ref: 6B3292A0
Part of subcall function 6B329200: ??0QBrush@@QAE@ABVQColor@@W4BrushStyle@Qt@@@Z.QT5GUI(?,00000001,?,?,?,?,?,?,?,?,?,6B329963,00000000,6B30AA66,00000008,00000000), ref: 6B3292B3
Part of subcall function 6B329200: ?setBrush@QPalette@@QAEXW4ColorGroup@1@W4ColorRole@1@ABVQBrush@@@Z.QT5GUI(00000000,00000001,00000000,?,?,?,?,?,?,?,?,?,6B329963,00000000,6B30AA66,00000008), ref: 6B3292C2
Part of subcall function 6B329200: ??1QBrush@@QAE@XZ.QT5GUI(?,?,?,?,?,?,?,?,?,6B329963,00000000,6B30AA66,00000008,00000000,6B30AA66,00000008), ref: 6B3292CE
Part of subcall function 6B329200: ??0QBrush@@QAE@ABVQColor@@W4BrushStyle@Qt@@@Z.QT5GUI(?,00000001,?,?,?,?,?,?,?,?,?,6B329963,00000000,6B30AA66,00000008,00000000), ref: 6B3292DB
Part of subcall function 6B329200: ?setBrush@QPalette@@QAEXW4ColorGroup@1@W4ColorRole@1@ABVQBrush@@@Z.QT5GUI(00000000,00000006,00000000,?,?,?,?,?,?,?,?,?,6B329963,00000000,6B30AA66,00000008), ref: 6B3292E4
Part of subcall function 6B329200: ??1QBrush@@QAE@XZ.QT5GUI(?,?,?,?,?,?,?,?,?,6B329963,00000000,6B30AA66,00000008,00000000,6B30AA66,00000008), ref: 6B3292EA
Part of subcall function 6B329200: ??0QBrush@@QAE@ABVQColor@@W4BrushStyle@Qt@@@Z.QT5GUI(?,00000001,?,?,?,?,?,?,?,?,?,6B329963,00000000,6B30AA66,00000008,00000000), ref: 6B3292F7
Part of subcall function 6B329200: ?setBrush@QPalette@@QAEXW4ColorGroup@1@W4ColorRole@1@ABVQBrush@@@Z.QT5GUI(00000000,00000000,00000000,?,?,?,?,?,?,?,?,?,6B329963,00000000,6B30AA66,00000008), ref: 6B329300
Part of subcall function 6B329200: ??1QBrush@@QAE@XZ.QT5GUI(?,?,?,?,?,?,?,?,?,6B329963,00000000,6B30AA66,00000008,00000000,6B30AA66,00000008), ref: 6B329306

SystemParametersInfoW.USER32(00001022,00000000,?,00000000), ref: 6B329981
??0QPalette@@QAE@ABV0@@Z.QT5GUI(00000000,?,?,?,?,?,?,?,0000004C), ref: 6B3299AE
GetSysColor.USER32(0000001E), ref: 6B3299BC
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(?,?,?,000000FF,?,?,?,?,?,?,?,0000004C), ref: 6B3299E1
??0QBrush@@QAE@ABVQColor@@W4BrushStyle@Qt@@@Z.QT5GUI(?,00000001,?,?,?,?,?,?,?,0000004C), ref: 6B3299F8
?setBrush@QPalette@@QAEXW4ColorGroup@1@W4ColorRole@1@ABVQBrush@@@Z.QT5GUI(00000000,00000001,00000000,?,?,?,?,?,?,?,0000004C), ref: 6B329A07
??1QBrush@@QAE@XZ.QT5GUI(?,?,?,?,?,?,?,0000004C), ref: 6B329A13
??0QBrush@@QAE@ABVQColor@@W4BrushStyle@Qt@@@Z.QT5GUI(?,00000001,?,?,?,?,?,?,?,0000004C), ref: 6B329A20
?setBrush@QPalette@@QAEXW4ColorGroup@1@W4ColorRole@1@ABVQBrush@@@Z.QT5GUI(00000001,00000001,00000000,?,?,?,?,?,?,?,0000004C), ref: 6B329A2B
??1QBrush@@QAE@XZ.QT5GUI(?,?,?,?,?,?,?,0000004C), ref: 6B329A31
??0QBrush@@QAE@ABVQColor@@W4BrushStyle@Qt@@@Z.QT5GUI(?,00000001,?,?,?,?,?,?,?,0000004C), ref: 6B329A3E
?setBrush@QPalette@@QAEXW4ColorGroup@1@W4ColorRole@1@ABVQBrush@@@Z.QT5GUI(00000002,00000001,00000000,?,?,?,?,?,?,?,0000004C), ref: 6B329A49
??1QBrush@@QAE@XZ.QT5GUI(?,?,?,?,?,?,?,0000004C), ref: 6B329A4F

Memory Dump Source

Source File: 00000007.00000002.3336124309.000000006B301000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6B300000, based on PE: true

Associated: 00000007.00000002.3336078379.000000006B300000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336232454.000000006B3D2000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336296015.000000006B416000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336342659.000000006B417000.00000008.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336389257.000000006B418000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336436882.000000006B41B000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336485192.000000006B41D000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6b300000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Color$Color@@$Brush@@$?set$Palette@@$Qt@@@$Brush@Brush@@@Group@1@Role@1@$BrushStyle@$Rgb@$Color@Global$V0@@$ExceptionThrow$?dark@?desktop?light@Application@@Aware@Color@@000000@InfoParametersSettingsSystem_callnewhmalloc
String ID:
API String ID: 356754136-0
Opcode ID: 58e25ace825cf1c1165d9cba8a523f3b81c54f1212efa88b45695d126299b6df
Instruction ID: a95a56cae2dadfc4480679d23f4e0fbf27d392a6718f1824165a13854ac95288
Opcode Fuzzy Hash: 58e25ace825cf1c1165d9cba8a523f3b81c54f1212efa88b45695d126299b6df
Instruction Fuzzy Hash: 9E41B171704300ABEB149F61CC46BAF7BE8EB85754F00452DF989961C0DB75DA44CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6B358860 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 86registryCOMMON

Download Yara Rule

APIs

??0?$QVector@VQPointF@@@@QAE@XZ.QT5CORE(Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes), ref: 6B358870
RegOpenKeyExW.KERNEL32(?,?,00000000,00020019,?), ref: 6B358898
RegQueryValueExW.KERNEL32(?,?,00000000,?,00000000,?), ref: 6B3588BF
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6B3588F6
RegQueryValueExW.KERNEL32(?,?,00000000,00000000,?,?), ref: 6B358949
?fromWCharArray@QString@@SA?AV1@PB_WH@Z.QT5CORE(?,?,000000FF), ref: 6B35895E
??4QUrl@@QAEAAV0@$$QAV0@@Z.QT5CORE(00000000), ref: 6B35896A
??1QString@@QAE@XZ.QT5CORE ref: 6B358974
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6B358987
RegCloseKey.KERNEL32(00000000), ref: 6B358994

Strings

Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes, xrefs: 6B358866

Memory Dump Source

Source File: 00000007.00000002.3336124309.000000006B301000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6B300000, based on PE: true

Associated: 00000007.00000002.3336078379.000000006B300000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336232454.000000006B3D2000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336296015.000000006B416000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336342659.000000006B417000.00000008.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336389257.000000006B418000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336436882.000000006B41B000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336485192.000000006B41D000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6b300000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: QueryString@@Value$??0?$?fromArray@CharCloseF@@@@OpenPointUrl@@V0@$$V0@@Vector@freemalloc
String ID: Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes
API String ID: 4225361595-3047774212
Opcode ID: 69bb93708f86c1fef5cacc3903f3b34c2fc8c347854ef6aaf9a8a6b4e036169d
Instruction ID: 7c578d7c6b574cd347283a04a86d55cf330edbeeec15bbc39da9086c404fdbcb
Opcode Fuzzy Hash: 69bb93708f86c1fef5cacc3903f3b34c2fc8c347854ef6aaf9a8a6b4e036169d
Instruction Fuzzy Hash: 9A31D471608302AFDB21CF54CD48B9ABBE9EF89704F104818F599D2290D735DA69DB93

Uniqueness

Uniqueness Score: -1.00%

Function 6B358F90 Relevance: 19.3, APIs: 9, Strings: 2, Instructions: 53windowlibraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6B352C80: ??0QString@@QAE@UQStringDataPtr@@@Z.QT5CORE(6B41B788,?,?,?,?,?,?,?,?,?,?,6B354B77,?), ref: 6B352CA5

??0?$QVector@VQPointF@@@@QAE@XZ.QT5CORE(?), ref: 6B358FAD
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(00000000), ref: 6B358FB8
??1QString@@QAE@XZ.QT5CORE ref: 6B358FCF
?utf16@QString@@QBEPBGXZ.QT5CORE(00000001), ref: 6B358FE2
?load@QSystemLibrary@@SAPAUHINSTANCE__@@PB_W_N@Z.QT5CORE(00000000), ref: 6B358FE9
GetProcAddress.KERNEL32(00000000,DWriteCreateFactory), ref: 6B35900B
??0QMessageLogger@@QAE@PBDH0@Z.QT5CORE(00000000,00000000,00000000,Unable to load dwrite.dll), ref: 6B359026
?warning@QMessageLogger@@QBAXPBDZZ.QT5CORE(00000000), ref: 6B35902D
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,6B354B77,?), ref: 6B35903C

Strings

DWriteCreateFactory, xrefs: 6B359005
Unable to load dwrite.dll, xrefs: 6B359017

Memory Dump Source

Source File: 00000007.00000002.3336124309.000000006B301000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6B300000, based on PE: true

Associated: 00000007.00000002.3336078379.000000006B300000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336232454.000000006B3D2000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336296015.000000006B416000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336342659.000000006B417000.00000008.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336389257.000000006B418000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336436882.000000006B41B000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336485192.000000006B41D000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6b300000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Logger@@Message$??0?$?load@?utf16@?warning@AddressDataE__@@F@@@@Library@@PointProcPtr@@@StringSystemV0@@Vector@
String ID: DWriteCreateFactory$Unable to load dwrite.dll
API String ID: 3014551535-536298143
Opcode ID: 95001a56e770ba0978e15bdc105d48950f2ba844def9341d188df166579b59d5
Instruction ID: 0bd3849fd6124dec106651633dc293d13e94931c577c7fd7c119a2cd5aba2f7e
Opcode Fuzzy Hash: 95001a56e770ba0978e15bdc105d48950f2ba844def9341d188df166579b59d5
Instruction Fuzzy Hash: 34118F71A08351AFD714DF64CD48B9A7BA8EF95715F04481CF886A2280DB38DA58CBA3

Uniqueness

Uniqueness Score: -1.00%

Function 6B359060 Relevance: 18.2, APIs: 12, Instructions: 195threadCOMMON

Download Yara Rule

APIs

?get@QThreadStorageData@@QBEPAPAXXZ.QT5CORE(?,?,?,?,?,?,?,?), ref: 6B35909C
SystemParametersInfoW.USER32 ref: 6B3590F6
SystemParametersInfoW.USER32(?,?,0000200A,00000000), ref: 6B359172
_libm_sse2_pow_precise.API-MS-WIN-CRT-MATH-L1-1-0(?,?,0000200A,00000000,?,00000000), ref: 6B3591A8
GetDC.USER32(00000000), ref: 6B359206
CreateCompatibleDC.GDI32(00000000), ref: 6B35920F
ReleaseDC.USER32(00000000,00000000), ref: 6B35921E
?set@QThreadStorageData@@QAEPAPAXPAX@Z.QT5CORE(00000000,?,?,0000200C,00000000,?,00000000,?,?,?,?,?,?,?,?,?), ref: 6B35926A
?get@QThreadStorageData@@QBEPAPAXXZ.QT5CORE(?,?,?,?,?,?,?), ref: 6B35929F
?set@QThreadStorageData@@QAEPAPAXPAX@Z.QT5CORE(00000000,?,?,?,?,?,?,?,?,?), ref: 6B3592C3
??0QThreadStorageData@@QAE@P6AXPAX@Z@Z.QT5CORE(6B355390,?,?,?,?,?,?,?,?), ref: 6B35931B
__Init_thread_footer.LIBCMT ref: 6B35933A

Memory Dump Source

Source File: 00000007.00000002.3336124309.000000006B301000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6B300000, based on PE: true

Associated: 00000007.00000002.3336078379.000000006B300000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336232454.000000006B3D2000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336296015.000000006B416000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336342659.000000006B417000.00000008.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336389257.000000006B418000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336436882.000000006B41B000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336485192.000000006B41D000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6b300000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@StorageThread$?get@?set@InfoParametersSystem$CompatibleCreateInit_thread_footerRelease_libm_sse2_pow_precise
String ID:
API String ID: 1252166036-0
Opcode ID: 28f7cc9b1272d93aac382e31f2319fecc79196ccc86385c9bab801bb3546f4e3
Instruction ID: 686afd333f35ab94d04972b59403a1d6e6b478cb44b7cbd596282d8916963926
Opcode Fuzzy Hash: 28f7cc9b1272d93aac382e31f2319fecc79196ccc86385c9bab801bb3546f4e3
Instruction Fuzzy Hash: 7F7126B27007048FD701DF34C855B56B7B8FF86394F048365E95AAB281EB39D482CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 6B3252B0 Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 68windowregistryCOMMON

Download Yara Rule

APIs

??0QPlatformInputContext@@QAE@XZ.QT5GUI(?,?,?,?,?,6B30B4B1), ref: 6B3252B7
RegisterWindowMessageW.USER32(MSIMEMouseOperation,?,?,?,?,?,6B30B4B1), ref: 6B3252C8
??0?$QVector@VQPointF@@@@QAE@XZ.QT5CORE ref: 6B3252DF
GetKeyboardLayout.USER32(00000000), ref: 6B325304
?qt_localeFromLCID@@YA?AVQLocale@@K@Z.QT5CORE(00000034,?), ref: 6B325315
CreateBitmap.GDI32(00000002,00000002,00000001,00000001,00000000), ref: 6B325333
?inputMethod@QGuiApplication@@SAPAVQInputMethod@@XZ.QT5GUI ref: 6B32534D

Part of subcall function 6B3CFF96: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,?,6B350121,00000008), ref: 6B3CFFAB

?connectImpl@QObject@@CA?AVConnection@QMetaObject@@PBV1@PAPAX01PAVQSlotObjectBase@QtPrivate@@W4ConnectionType@Qt@@PBHPBU3@@Z.QT5CORE(?,00000000,?,00000000,?,00000000,00000000,00000000,0000000C), ref: 6B32538C
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 6B325399

Strings

MSIMEMouseOperation, xrefs: 6B3252BD

Memory Dump Source

Source File: 00000007.00000002.3336124309.000000006B301000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6B300000, based on PE: true

Associated: 00000007.00000002.3336078379.000000006B300000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336232454.000000006B3D2000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336296015.000000006B416000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336342659.000000006B417000.00000008.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336389257.000000006B418000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336436882.000000006B41B000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336485192.000000006B41D000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6b300000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Object@@$Connection@InputMeta$??0?$?connect?input?qt_localeApplication@@Base@BitmapConnectionContext@@CreateF@@@@FromImpl@KeyboardLayoutLocale@@MessageMethod@Method@@ObjectPlatformPointPrivate@@Qt@@RegisterSlotType@U3@@Vector@Windowmalloc
String ID: MSIMEMouseOperation
API String ID: 2834244316-1919246749
Opcode ID: 9915edba5cda8852787aca82df39ff473d272bce300f4c0e364bc77bc64535df
Instruction ID: 8e0712d8a8fe727ab754a81dcf92a4c77f655ec553065fbb77747fb6c3573b81
Opcode Fuzzy Hash: 9915edba5cda8852787aca82df39ff473d272bce300f4c0e364bc77bc64535df
Instruction Fuzzy Hash: 45218CB5600301AFD710DF64C949B96BBB8FF85301F408519F5458B680D7B5E528CFE2

Uniqueness

Uniqueness Score: -1.00%

Function 6B303F80 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 119COMMON

Download Yara Rule

APIs

GetWindowPlacement.USER32(00000000,?), ref: 6B303FCD
??0QRect@@QAE@ABVQPoint@@ABVQSize@@@Z.QT5CORE(?,?), ref: 6B30400C

Part of subcall function 6B30A090: GetWindowLongW.USER32(?,000000EC), ref: 6B30A099

?translated@QRect@@QBE?AV1@ABVQPoint@@@Z.QT5CORE(?,00000000), ref: 6B30403B
GetWindowRect.USER32(00000000,?), ref: 6B30404C
GetParent.USER32(00000000), ref: 6B304053
ScreenToClient.USER32(00000000,?), ref: 6B304086
??0QRect@@QAE@ABVQPoint@@ABVQSize@@@Z.QT5CORE(?,?), ref: 6B3040DD

Strings

,, xrefs: 6B303FC3

Memory Dump Source

Source File: 00000007.00000002.3336124309.000000006B301000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6B300000, based on PE: true

Associated: 00000007.00000002.3336078379.000000006B300000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336232454.000000006B3D2000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336296015.000000006B416000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336342659.000000006B417000.00000008.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336389257.000000006B418000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336436882.000000006B41B000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336485192.000000006B41D000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6b300000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Rect@@Window$Point@@Size@@@$?translated@ClientLongParentPlacementPoint@@@RectScreen
String ID: ,
API String ID: 3157457706-3772416878
Opcode ID: 7637c2ae090c7aa746c93a80bb73c9561c74c42433a609a8573b7039a67f29bf
Instruction ID: 5cfaf35dc6afc162bbb28d5169b8baa40625f19808e936e0ef3b1097d80b3f39
Opcode Fuzzy Hash: 7637c2ae090c7aa746c93a80bb73c9561c74c42433a609a8573b7039a67f29bf
Instruction Fuzzy Hash: 4941C5B56093059FD744CF28C58496BBBF9FFD9214F40492EF89593310EB35E9488B92

Uniqueness

Uniqueness Score: -1.00%

Function 00C6E0D0 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 87COMMON

Download Yara Rule

APIs

??0QWidget@@QAE@PAV0@V?$QFlags@W4WindowType@Qt@@@@@Z.QT5WIDGETS(00C6D024,00000000,676E6AEE,6BB0CEB0,00000000,00000000,00CAEE33,000000FF,?,00C6D024,00000000), ref: 00C6E0FE
new.LIBCMT ref: 00C6E11D

Part of subcall function 00CAC0B7: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0DE

Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE(?,0000002C,00C800BF), ref: 00C94608
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94611
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9461A
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94623
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9462C
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94635
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9463E
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94647
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94650
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94659
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94662
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9466B
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94674
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9467D
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94686
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9468F
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94698
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C946A1

??0QString@@QAE@XZ.QT5CORE ref: 00C6E1C1
??0QString@@QAE@XZ.QT5CORE ref: 00C6E1CD
??0QString@@QAE@XZ.QT5CORE ref: 00C6E1D9
??0QString@@QAE@XZ.QT5CORE ref: 00C6E1E5

Part of subcall function 00C74650: ?objectName@QObject@@QBE?AVQString@@XZ.QT5CORE(?,676E6AEE,6B9DED70,00000000,6B9DEE70), ref: 00C74689
Part of subcall function 00C74650: ??1QString@@QAE@XZ.QT5CORE ref: 00C74697
Part of subcall function 00C74650: ?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,AnalysisFormWidget,000000FF), ref: 00C746AC
Part of subcall function 00C74650: ?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C746BB
Part of subcall function 00C74650: ??1QString@@QAE@XZ.QT5CORE ref: 00C746CB
Part of subcall function 00C74650: ?resize@QWidget@@QAEXHH@Z.QT5WIDGETS(000003E8,00000258), ref: 00C746DD
Part of subcall function 00C74650: ??0QSizePolicy@@QAE@W4Policy@0@0W4ControlType@0@@Z.QT5WIDGETS(00000007,00000007,00000001), ref: 00C746EC
Part of subcall function 00C74650: ?setHorizontalStretch@QSizePolicy@@QAEXH@Z.QT5WIDGETS(00000000), ref: 00C746F7
Part of subcall function 00C74650: ?setVerticalStretch@QSizePolicy@@QAEXH@Z.QT5WIDGETS(00000000), ref: 00C74702
Part of subcall function 00C74650: ?sizePolicy@QWidget@@QBE?AVQSizePolicy@@XZ.QT5WIDGETS(?), ref: 00C7470E
Part of subcall function 00C74650: ?hasHeightForWidth@QSizePolicy@@QBE_NXZ.QT5WIDGETS ref: 00C74716
Part of subcall function 00C74650: ?setHeightForWidth@QSizePolicy@@QAEX_N@Z.QT5WIDGETS(?), ref: 00C74723
Part of subcall function 00C74650: ?setSizePolicy@QWidget@@QAEXVQSizePolicy@@@Z.QT5WIDGETS(?), ref: 00C74734
Part of subcall function 00C74650: new.LIBCMT ref: 00C74738
Part of subcall function 00C74650: ??0QHBoxLayout@@QAE@PAVQWidget@@@Z.QT5WIDGETS(00CBB0A4), ref: 00C7474F
Part of subcall function 00C74650: ?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,horizontalLayout_10,000000FF), ref: 00C74779
Part of subcall function 00C74650: ?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C7478C
Part of subcall function 00C74650: ??1QString@@QAE@XZ.QT5CORE ref: 00C7479C
Part of subcall function 00C74650: new.LIBCMT ref: 00C747A4

Part of subcall function 00C73080: ?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000,676E6AEE,6B9DED70,00000000), ref: 00C730DD
Part of subcall function 00C73080: ??1QString@@QAE@XZ.QT5CORE ref: 00C730E9
Part of subcall function 00C73080: ?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C73112
Part of subcall function 00C73080: ??1QString@@QAE@XZ.QT5CORE ref: 00C7311E
Part of subcall function 00C73080: new.LIBCMT ref: 00C73126
Part of subcall function 00C73080: ??0QGraphicsScene@@QAE@PAVQObject@@@Z.QT5WIDGETS(00000000), ref: 00C7313E
Part of subcall function 00C73080: ?setMinimumWidth@QWidget@@QAEXH@Z.QT5WIDGETS(000000C8), ref: 00C73169
Part of subcall function 00C73080: ?setMinimumHeight@QWidget@@QAEXH@Z.QT5WIDGETS(000000C8), ref: 00C7317A
Part of subcall function 00C73080: ?setMaximumWidth@QWidget@@QAEXH@Z.QT5WIDGETS(000000FA), ref: 00C7318B
Part of subcall function 00C73080: ?setMaximumHeight@QWidget@@QAEXH@Z.QT5WIDGETS(000000FA), ref: 00C7319C
Part of subcall function 00C73080: new.LIBCMT ref: 00C731A4
Part of subcall function 00C73080: ??0QButtonGroup@@QAE@PAVQObject@@@Z.QT5WIDGETS(00000000), ref: 00C731C2
Part of subcall function 00C73080: ?addButton@QButtonGroup@@QAEXPAVQAbstractButton@@H@Z.QT5WIDGETS(?,000000FF), ref: 00C731E7

?setReadOnly@QPlainTextEdit@@QAEX_N@Z.QT5WIDGETS(00000001,00000000), ref: 00C6E207

Strings

jng, xrefs: 00C6E0E3

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$?set$SizeWidget@@$Policy@@$String@@@Width@$Name@Object@@$?fromButtonGroup@@HeightHeight@Label@@MaximumMinimumObjectObject@@@Policy@Stretch@Text@Utf8@$?add?has?object?resize@?sizeAbstractButton@Button@@ControlEdit@@Flags@GraphicsHorizontalLayout@@Only@PlainPolicy@0@0Policy@@@Qt@@@@@ReadScene@@TextType@Type@0@@VerticalWidget@@@Windowmalloc
String ID: jng
API String ID: 122086597-1186463058
Opcode ID: e89c46b3016cb7cedfb9be79afef22259ffbd507aa7da31ddde4c65368f1c169
Instruction ID: 031e971c86a3bbed5b4dd653841acc32a40967638922e53240a937c342d22fd6
Opcode Fuzzy Hash: e89c46b3016cb7cedfb9be79afef22259ffbd507aa7da31ddde4c65368f1c169
Instruction Fuzzy Hash: 4341D6B8501645DFC760DF69E884B5EBBF8FB19300F404A2EE85693760DB71A909CF40

Uniqueness

Uniqueness Score: -1.00%

Function 00C9B240 Relevance: 9.0, APIs: 6, Instructions: 35COMMON

Download Yara Rule

APIs

?setMinimumSize@QWidget@@QAEXHH@Z.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,?,00C79609,6BEAC440), ref: 00C9B24D
?setMaximumSize@QWidget@@QAEXHH@Z.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,?,00C79609,6BEAC440), ref: 00C9B257
?setMinimumSize@QWidget@@QAEXHH@Z.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,?,00C79609,6BEAC440), ref: 00C9B264
?setMaximumSize@QWidget@@QAEXHH@Z.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,?,00C79609,6BEAC440), ref: 00C9B271
?sceneRect@QGraphicsScene@@QBE?AVQRectF@@XZ.QT5WIDGETS(?,00000001,?,?,?,?,?,?,?,?,?,?,00C79609,6BEAC440), ref: 00C9B281
?fitInView@QGraphicsView@@QAEXABVQRectF@@W4AspectRatioMode@Qt@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,?,?,00C79609,6BEAC440), ref: 00C9B28D

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: ?setSize@Widget@@$GraphicsMaximumMinimumRect$?fit?sceneAspectMode@Qt@@@RatioRect@Scene@@View@View@@
String ID:
API String ID: 3817319654-0
Opcode ID: 025b52230ed3d911d7acc53945bd866b1be7594aa322ae741e5770b53830adb5
Instruction ID: ed0a232a501bc4c98dd60f92747e5a33c5b3971840b895978eff6d6684a6843a
Opcode Fuzzy Hash: 025b52230ed3d911d7acc53945bd866b1be7594aa322ae741e5770b53830adb5
Instruction Fuzzy Hash: 17F0E7B1200109AFD7049F55DCD8FAEBBADFB4C245F040119F906826A0CA316C58DB61

Uniqueness

Uniqueness Score: -1.00%

Function 00CA8F40 Relevance: 9.0, APIs: 6, Instructions: 35COMMON

Download Yara Rule

APIs

?setMinimumWidth@QWidget@@QAEXH@Z.QT5WIDGETS(?,?,6BEAC440,?,?,?,?,?,?,?,?,00C79668,00000000), ref: 00CA8F51
?setMaximumWidth@QWidget@@QAEXH@Z.QT5WIDGETS(?,?,?,?,?,?,?,?,?,00C79668,00000000), ref: 00CA8F5D
?setMinimumHeight@QWidget@@QAEXH@Z.QT5WIDGETS(?,?,?,?,?,?,?,?,?,00C79668,00000000), ref: 00CA8F6D
?setMaximumHeight@QWidget@@QAEXH@Z.QT5WIDGETS(?,?,?,?,?,?,?,?,?,00C79668,00000000), ref: 00CA8F79
?sceneRect@QGraphicsScene@@QBE?AVQRectF@@XZ.QT5WIDGETS(?,00000001,?,?,?,?,?,?,?,?,00C79668,00000000), ref: 00CA8F89
?fitInView@QGraphicsView@@QAEXABVQRectF@@W4AspectRatioMode@Qt@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,00C79668,00000000), ref: 00CA8F95

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: ?setWidget@@$GraphicsHeight@MaximumMinimumRectWidth@$?fit?sceneAspectMode@Qt@@@RatioRect@Scene@@View@View@@
String ID:
API String ID: 1130376621-0
Opcode ID: a95489ad119a6793f4abe5bb661b261edc678ca3d9e2487fd3ebc7a540e8bee8
Instruction ID: 95cf9c15ca941a6a906b68a4718596164f89075ea112c709e07e7b28881e0f2b
Opcode Fuzzy Hash: a95489ad119a6793f4abe5bb661b261edc678ca3d9e2487fd3ebc7a540e8bee8
Instruction Fuzzy Hash: AA01FB35200011AFC308DF54D898E6AB7BEFF8D305B14421AE90293AA0CF70BC59CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00CACF00 Relevance: 7.6, APIs: 5, Instructions: 104COMMON

Download Yara Rule

APIs

GetCommandLineW.KERNEL32(00000001,00000001), ref: 00CACF09
CommandLineToArgvW.SHELL32(00000000), ref: 00CACF10
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,000000FF,00000000,00000000,00000000,00000000,?,?,?,?,?,?,?,00C60000), ref: 00CACF82
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,000000FF,00000000,00000000,00000000,00000000), ref: 00CACFA2
LocalFree.KERNEL32(00000000,?,?,?,?,?,?,?,00C60000,00000000,00000000,?,00F27588,00000014), ref: 00CACFD4

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: ByteCharCommandLineMultiWide$ArgvFreeLocal
String ID:
API String ID: 4060259846-0
Opcode ID: 7d73eeac486d15d5d2a37e6ef0f6a7b7253121ffb84bc4092ca59bcdb94bfae5
Instruction ID: 9ffc4bdf04a146303af4a079e611a6d504e89bd13be697ff305cbf2eb85681ae
Opcode Fuzzy Hash: 7d73eeac486d15d5d2a37e6ef0f6a7b7253121ffb84bc4092ca59bcdb94bfae5
Instruction Fuzzy Hash: 7731B271604306AFD710EF68AC81B1F77A8EF85754F100629F957D72C1D671ED098BA2

Uniqueness

Uniqueness Score: -1.00%

Function 6B30D490 Relevance: 7.5, APIs: 5, Instructions: 40COMMON

Download Yara Rule

APIs

??0QByteArray@@QAE@ABV0@@Z.QT5CORE(?,00000000,?,00000000,00000000,00000000,00000000,6B33C3DA,00000000), ref: 6B30D4AE

Part of subcall function 6B30EC10: GetModuleHandleW.KERNEL32(00000000,?,00000000), ref: 6B30EC1F
Part of subcall function 6B30EC10: ?utf16@QString@@QBEPBGXZ.QT5CORE(?,?,00000000), ref: 6B30EC44
Part of subcall function 6B30EC10: GetClassInfoW.USER32(00000000,00000000), ref: 6B30EC4C
Part of subcall function 6B30EC10: ?number@QString@@SA?AV1@KH@Z.QT5CORE(?,?,0000000A,?,00000000), ref: 6B30EC80
Part of subcall function 6B30EC10: ?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE(00000000), ref: 6B30EC91
Part of subcall function 6B30EC10: ??1QString@@QAE@XZ.QT5CORE ref: 6B30EC9B
Part of subcall function 6B30EC10: ?qHash@@YAIABVQString@@I@Z.QT5CORE(?,?,?,00000000), ref: 6B30ECB9
Part of subcall function 6B30EC10: LoadImageW.USER32(00000000,IDI_ICON1,00000001,00000000,00000000,00000040), ref: 6B30ED3C
Part of subcall function 6B30EC10: GetSystemMetrics.USER32(00000031), ref: 6B30ED4E
Part of subcall function 6B30EC10: GetSystemMetrics.USER32(00000032), ref: 6B30ED54
Part of subcall function 6B30EC10: LoadImageW.USER32(00000000,IDI_ICON1,00000001,00000000,00000000,00000000), ref: 6B30ED62
Part of subcall function 6B30EC10: ?utf16@QString@@QBEPBGXZ.QT5CORE ref: 6B30EDB4

GetModuleHandleW.KERNEL32(00000000,00000000,?), ref: 6B30D4C4
?utf16@QString@@QBEPBGXZ.QT5CORE(?,?,80000000,80000000,80000000,80000000,000000FD,00000000,00000000), ref: 6B30D4EF
CreateWindowExW.USER32(00000000,00000000), ref: 6B30D4F8
??1QString@@QAE@XZ.QT5CORE ref: 6B30D504

Memory Dump Source

Source File: 00000007.00000002.3336124309.000000006B301000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6B300000, based on PE: true

Associated: 00000007.00000002.3336078379.000000006B300000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336232454.000000006B3D2000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336296015.000000006B416000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336342659.000000006B417000.00000008.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336389257.000000006B418000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336436882.000000006B41B000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336485192.000000006B41D000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6b300000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$?utf16@$HandleImageLoadMetricsModuleSystem$?append@?number@Array@@ByteClassCreateHash@@InfoV0@@V1@@Window
String ID:
API String ID: 797513890-0
Opcode ID: 96236287ec5283ff9a3973e9f2b32ce7d14b89c31308b088900517dc32238dd5
Instruction ID: 4fff96890ea814aaf694009c8ee626e3a7f34d95a8ebbb167333b8727c824a41
Opcode Fuzzy Hash: 96236287ec5283ff9a3973e9f2b32ce7d14b89c31308b088900517dc32238dd5
Instruction Fuzzy Hash: BA016D70308311BFEF249B60CD0AF2A77E8EF85B11F20091CFA45A61C0CA60EC10CB65

Uniqueness

Uniqueness Score: -1.00%

Function 00C9AFAE Relevance: 7.5, APIs: 5, Instructions: 26COMMON

Download Yara Rule

APIs

?remove@QListData@@QAEXH@Z.QT5CORE(?), ref: 00C9AFB4
_CxxThrowException.VCRUNTIME140(00000000,00000000), ref: 00C9AFBE
?insert@QListData@@QAEPAPAXH@Z.QT5CORE(00000000,676E6AEE,6BF7DAE0,-00000074,6BA810A0,00000000,?,?,?,?,?,00C94FFE,00000000), ref: 00C9AFC6
new.LIBCMT ref: 00C9AFD7

Part of subcall function 00CAC0B7: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0DE

??0QColor@@QAE@ABV0@@Z.QT5GUI(?), ref: 00C9AFE4

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?insert@?remove@Color@@ExceptionThrowV0@@malloc
String ID:
API String ID: 4004857895-0
Opcode ID: 29c887496b7d74515aa441e6b12816d11560ecf532be64eeeb5eab76b4577479
Instruction ID: e202d32f69e189ace29384999ee927bd6a6d68b4b73c36cda8b312e3c77c3c44
Opcode Fuzzy Hash: 29c887496b7d74515aa441e6b12816d11560ecf532be64eeeb5eab76b4577479
Instruction Fuzzy Hash: E7F06576A04204EFDB54AF50EC06BADBBB1FB54752F10812AFD46973A0DB321D18DB51

Uniqueness

Uniqueness Score: -1.00%

Function 00C9AF60 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 48COMMON

Download Yara Rule

APIs

?insert@QListData@@QAEPAPAXH@Z.QT5CORE(00000000,676E6AEE,6BF7DAE0,-00000074,6BA810A0,00000000,?,?,?,?,?,00C94FFE,00000000), ref: 00C9AFC6
new.LIBCMT ref: 00C9AFD7
??0QColor@@QAE@ABV0@@Z.QT5GUI(?), ref: 00C9AFE4

Part of subcall function 00C96F90: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(676E6AEE,6BF7DAE0,-00000074,6BA810A0,6BF7DAE0,-00000074,6BA810A0,00000000,?,?,?,?,?,00C94FFE,00000000), ref: 00C96FC0
Part of subcall function 00C96F90: ?detach_grow@QListData@@QAEPAUData@1@PAHH@Z.QT5CORE(?,?,?,?,?,?,00C94FFE,00000000), ref: 00C96FD1
Part of subcall function 00C96F90: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C96FE6
Part of subcall function 00C96F90: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(?), ref: 00C96FF5
Part of subcall function 00C96F90: ?end@QListData@@QBEPAPAXXZ.QT5CORE(?,00000000), ref: 00C97013
Part of subcall function 00C96F90: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C9701C
Part of subcall function 00C96F90: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000,00000000), ref: 00C9705D

Strings

jng, xrefs: 00C9AF77

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?begin@$?detach_grow@?end@?insert@Color@@Data@1@V0@@
String ID: jng
API String ID: 2133473424-1186463058
Opcode ID: 7e1246743093badff30fc743b560b20ba7e755a7fdb66b56fd1fd36f92e842c9
Instruction ID: 7b043e39ecf8e6ac741be421b684a3782b99510fab81b8c044a2ede448781776
Opcode Fuzzy Hash: 7e1246743093badff30fc743b560b20ba7e755a7fdb66b56fd1fd36f92e842c9
Instruction Fuzzy Hash: C50180B1A04208EFCB10DF59ED45B9ABBF8FB04750F10462AF801973A0D7759A08DA91

Uniqueness

Uniqueness Score: -1.00%

Function 6B351C60 Relevance: 6.0, APIs: 4, Instructions: 23COMMON

Download Yara Rule

APIs

??0QEventDispatcherWin32@@QAE@PAVQObject@@@Z.QT5CORE(00000000,?,00000000,6B30A733,00000000), ref: 6B351C68
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000,00000000), ref: 6B351C91
??1QString@@QAE@XZ.QT5CORE ref: 6B351C9B
?createInternalHwnd@QEventDispatcherWin32@@IAEXXZ.QT5CORE ref: 6B351CA3

Memory Dump Source

Source File: 00000007.00000002.3336124309.000000006B301000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6B300000, based on PE: true

Associated: 00000007.00000002.3336078379.000000006B300000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336232454.000000006B3D2000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336296015.000000006B416000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336342659.000000006B417000.00000008.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336389257.000000006B418000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336436882.000000006B41B000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336485192.000000006B41D000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6b300000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: DispatcherEventWin32@@$?create?setHwnd@InternalName@ObjectObject@@Object@@@String@@String@@@
String ID:
API String ID: 3260056415-0
Opcode ID: 9fff271e30b27ea8e41625e12ecd932e6700a712a51edb99dc54075ea11a6c05
Instruction ID: 6017ed3fe7288535446cb37453dc46c45fb5ce7ecc0f101e9b8082a1a8a1cc6e
Opcode Fuzzy Hash: 9fff271e30b27ea8e41625e12ecd932e6700a712a51edb99dc54075ea11a6c05
Instruction Fuzzy Hash: 8BE06D753047219FCB159F60C908A4FFBA8EB85612F00491EF88A82240CF34D915DBA2

Uniqueness

Uniqueness Score: -1.00%

Function 6B354AE0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 48COMMON

Download Yara Rule

APIs

?qErrnoWarning@@YAXPBDZZ.QT5CORE(DWriteCreateFactory failed), ref: 6B354B49
__Init_thread_footer.LIBCMT ref: 6B354B81

Strings

DWriteCreateFactory failed, xrefs: 6B354B44

Memory Dump Source

Source File: 00000007.00000002.3336124309.000000006B301000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6B300000, based on PE: true

Associated: 00000007.00000002.3336078379.000000006B300000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336232454.000000006B3D2000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336296015.000000006B416000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336342659.000000006B417000.00000008.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336389257.000000006B418000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336436882.000000006B41B000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336485192.000000006B41D000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6b300000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: ErrnoInit_thread_footerWarning@@
String ID: DWriteCreateFactory failed
API String ID: 1977386182-439803201
Opcode ID: 630893d518225b93f3c772008df4a54acb74efd73b7c27b7af3b51df9acd2775
Instruction ID: ecadc57838c8cebb4f061079100cf0d106a4475564396ccf57f751617bd6faad
Opcode Fuzzy Hash: 630893d518225b93f3c772008df4a54acb74efd73b7c27b7af3b51df9acd2775
Instruction Fuzzy Hash: D1117972A08211ABE604EF74D846F6A77F0EB45354F44445DF4E983340EB38E8618B66

Uniqueness

Uniqueness Score: -1.00%

Function 6B30E810 Relevance: 3.0, APIs: 2, Instructions: 33COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,000001F8,?,6B329AC0,?,00000000), ref: 6B30E81D
SystemParametersInfoW.USER32(00000029,000001F8,?,00000000), ref: 6B30E85B

Memory Dump Source

Source File: 00000007.00000002.3336124309.000000006B301000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6B300000, based on PE: true

Associated: 00000007.00000002.3336078379.000000006B300000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336232454.000000006B3D2000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336296015.000000006B416000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336342659.000000006B417000.00000008.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336389257.000000006B418000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336436882.000000006B41B000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336485192.000000006B41D000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6b300000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: InfoParametersSystemmemset
String ID:
API String ID: 1986754214-0
Opcode ID: 191ec4ab95d25645b03d877de90f9a80c8028761d035d1b7b0cd79c1ec752f7e
Instruction ID: 6ea0c1029b90028e7244e90cc79b2094aa65a73b1c311bd84e4080275bc7171c
Opcode Fuzzy Hash: 191ec4ab95d25645b03d877de90f9a80c8028761d035d1b7b0cd79c1ec752f7e
Instruction Fuzzy Hash: D4F09B72BE13223AFE141A108D4AFEA3754AF41F91F144418F2659E1C0CFF5E4408255

Uniqueness

Uniqueness Score: -1.00%

Function 6B305D50 Relevance: 3.0, APIs: 2, Instructions: 19COMMON

Download Yara Rule

APIs

GetForegroundWindow.USER32 ref: 6B305D53
IsChild.USER32(00000000,?), ref: 6B305D66

Memory Dump Source

Source File: 00000007.00000002.3336124309.000000006B301000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6B300000, based on PE: true

Associated: 00000007.00000002.3336078379.000000006B300000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336232454.000000006B3D2000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336296015.000000006B416000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336342659.000000006B417000.00000008.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336389257.000000006B418000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336436882.000000006B41B000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336485192.000000006B41D000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6b300000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: ChildForegroundWindow
String ID:
API String ID: 2801720684-0
Opcode ID: f9bc26f3c3284460eb02a6a47e75269b08ce52f02f2f40b5c98e85e4e18702c6
Instruction ID: 02b4a5cb6085d77818fe946a6e380f90253d3736748a749a6ca85ed706a95f4b
Opcode Fuzzy Hash: f9bc26f3c3284460eb02a6a47e75269b08ce52f02f2f40b5c98e85e4e18702c6
Instruction Fuzzy Hash: F5D0C73131462557AF245A35B48C5E733FC5E4215030605AAE512C7184EF6AEC89D770

Uniqueness

Uniqueness Score: -1.00%

Function 6B351DA0 Relevance: 1.5, APIs: 1, Instructions: 12COMMON

Download Yara Rule

APIs

?processEvents@QEventDispatcherWin32@@UAE_NV?$QFlags@W4ProcessEventsFlag@QEventLoop@@@@@Z.QT5CORE(?), ref: 6B351DAF

Memory Dump Source

Source File: 00000007.00000002.3336124309.000000006B301000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6B300000, based on PE: true

Associated: 00000007.00000002.3336078379.000000006B300000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336232454.000000006B3D2000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336296015.000000006B416000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336342659.000000006B417000.00000008.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336389257.000000006B418000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336436882.000000006B41B000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000007.00000002.3336485192.000000006B41D000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_6b300000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Event$?processDispatcherEventsEvents@Flag@Flags@Loop@@@@@ProcessWin32@@
String ID:
API String ID: 2620541275-0
Opcode ID: 53a67666a3f8c2bbd29e210ba9aaead3042de9316001002308bff32822debad8
Instruction ID: c9b9d94b01c689c95aeeb76a0a85fd5ef559700fc9bf18cb9a37a2ebfffd02c2
Opcode Fuzzy Hash: 53a67666a3f8c2bbd29e210ba9aaead3042de9316001002308bff32822debad8
Instruction Fuzzy Hash: 16D0C976604611BB86408B6AD448846FBA8FB99621311C92BB518C3600C770E8518BA0

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00C7DDB7 Relevance: 450.9, APIs: 224, Strings: 33, Instructions: 1121COMMON

Download Yara Rule

APIs

?text@QLineEdit@@QBE?AVQString@@XZ.QT5WIDGETS(?), ref: 00C7DDC2

Part of subcall function 00C62460: ?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,?,000000FF,676E6AEE,00CB35BE,?,?,00CAD27A,000000FF), ref: 00C6249B
Part of subcall function 00C62460: ?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE ref: 00C624B7

Part of subcall function 00C623D0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00CB35BE), ref: 00C62405
Part of subcall function 00C623D0: ?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(000000FF,00000000,000000FF), ref: 00C62422
Part of subcall function 00C623D0: ?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE(00000000), ref: 00C62435
Part of subcall function 00C623D0: ??1QString@@QAE@XZ.QT5CORE ref: 00C6243E

??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(00000000), ref: 00C7DDF5
??1QString@@QAE@XZ.QT5CORE ref: 00C7DDFE
??1QString@@QAE@XZ.QT5CORE ref: 00C7DE07
??1QString@@QAE@XZ.QT5CORE ref: 00C7DF90

Part of subcall function 00C7FB10: ?tr@QMetaObject@@QBE?AVQString@@PBD0H@Z.QT5CORE(00C7BAD1,00C7BAD1,00C7BAD1,00C7BAD1,?,00C7BAD1,?,Comments,00000000), ref: 00C7FB2E

?currentText@QComboBox@@QBE?AVQString@@XZ.QT5WIDGETS(?), ref: 00C7DFBB
??8@YA_NABVQString@@0@Z.QT5CORE(00000000,00000000), ref: 00C7DFC3
??1QString@@QAE@XZ.QT5CORE ref: 00C7DFD1
??1QString@@QAE@XZ.QT5CORE ref: 00C7DFDE
??4QString@@QAEAAV0@PBD@Z.QT5CORE(INSERT INTO testSearch SELECT * FROM tests WHERE comments GLOB :search), ref: 00C7DFF0
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C7E003
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C7E00C
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:search,00000007), ref: 00C7E01D
?currentText@QComboBox@@QBE?AVQString@@XZ.QT5WIDGETS(?), ref: 00C7E054
??8@YA_NABVQString@@0@Z.QT5CORE(00000000,00000000), ref: 00C7E05C
??1QString@@QAE@XZ.QT5CORE ref: 00C7E06A
??1QString@@QAE@XZ.QT5CORE ref: 00C7E077
??4QString@@QAEAAV0@PBD@Z.QT5CORE(INSERT INTO userSearch SELECT * FROM users WHERE DOB GLOB :search), ref: 00C7E08D
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C7E0A0
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C7E0A9
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:search,00000007), ref: 00C7E0BA
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C7E0DD
??1QString@@QAE@XZ.QT5CORE ref: 00C7E0E6
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7E0F3
?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C7E102
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C7E8E3
??1QString@@QAE@XZ.QT5CORE ref: 00C7E8EC
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7E8F9
?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C7E908
??4QString@@QAEAAV0@PBD@Z.QT5CORE(SELECT tests.* , userSearch.* FROM tests INNER JOIN userSearch ON tests.userID = userSearch.id), ref: 00C7E925
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C7E932
?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C7E937
?next@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C7E94D
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000000), ref: 00C7E970
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7E980
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7E989
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000002), ref: 00C7E994
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7E9A4
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7E9AD
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000003), ref: 00C7E9B8
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7E9C8
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7E9D1
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000004), ref: 00C7E9DF
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7E9EF
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7E9FB
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000006), ref: 00C7EA09
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7EA19
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7EA25
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000007), ref: 00C7EA33
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7EA43
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7EA4F
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000009), ref: 00C7EA5D
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7EA6D
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7EA79
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,0000000A), ref: 00C7EA87
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7EA97
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7EAA3
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,0000000B), ref: 00C7EAB1
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7EAC1
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7EACD
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,0000000C), ref: 00C7EADB
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7EAEB
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7EAF7
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,0000000D), ref: 00C7EB05
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7EB15
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7EB21
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,0000000E), ref: 00C7EB2F
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7EB3F
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7EB4B
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,0000000F), ref: 00C7EB59
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7EB69
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7EB75
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000010), ref: 00C7EB83
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7EB93
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7EB9F
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000011), ref: 00C7EBAD
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7EBBD
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7EBC9
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000012), ref: 00C7EBD7
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7EBE7
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7EBEF
??0QString@@QAE@ABV0@@Z.QT5CORE(?), ref: 00C7EBFE

Part of subcall function 00C8F560: new.LIBCMT ref: 00C8F58E

Part of subcall function 00C906F0: ?number@QString@@SA?AV1@HH@Z.QT5CORE(00CB3B11,?,0000000A,676E6AEE), ref: 00C9072D
Part of subcall function 00C906F0: ?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z.QT5SQL(?,00000000,00000001), ref: 00C90740
Part of subcall function 00C906F0: ??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL ref: 00C9074C
Part of subcall function 00C906F0: ??1QString@@QAE@XZ.QT5CORE ref: 00C90755
Part of subcall function 00C906F0: ??0QString@@QAE@XZ.QT5CORE ref: 00C9075E
Part of subcall function 00C906F0: ??4QString@@QAEAAV0@PBD@Z.QT5CORE(SELECT scores FROM tests WHERE id = :id), ref: 00C90770
Part of subcall function 00C906F0: ?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(000000FF), ref: 00C9077D
Part of subcall function 00C906F0: ??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C9078A
Part of subcall function 00C906F0: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:id,00000003), ref: 00C907A1
Part of subcall function 00C906F0: ?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C907C0
Part of subcall function 00C906F0: ??1QString@@QAE@XZ.QT5CORE ref: 00C907C9
Part of subcall function 00C906F0: ??1QVariant@@QAE@XZ.QT5CORE ref: 00C907D6
Part of subcall function 00C906F0: ?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C907DF
Part of subcall function 00C906F0: ?next@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C907E8
Part of subcall function 00C906F0: ?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000000), ref: 00C907FF
Part of subcall function 00C906F0: ?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C9080F
Part of subcall function 00C906F0: ??1QVariant@@QAE@XZ.QT5CORE ref: 00C9081C
Part of subcall function 00C906F0: ??0QChar@@QAE@H@Z.QT5CORE(00000022), ref: 00C90827
Part of subcall function 00C906F0: ?indexOf@QString@@QBEHVQChar@@HW4CaseSensitivity@Qt@@@Z.QT5CORE(00CB3B11,00000000,00000001), ref: 00C90837
Part of subcall function 00C906F0: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CB9364,00000000), ref: 00C90849

Part of subcall function 00C7B450: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CBA9B4,00000001,676E6AEE), ref: 00C7B4A4
Part of subcall function 00C7B450: ?split@QString@@QBE?AVQStringList@@ABV1@W4SplitBehavior@1@W4CaseSensitivity@Qt@@@Z.QT5CORE(?,000000FF,00000000,00000001,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B4C3
Part of subcall function 00C7B450: ?size@QListData@@QBEHXZ.QT5CORE(?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B4C7
Part of subcall function 00C7B450: ??1QString@@QAE@XZ.QT5CORE(00000000,?,?,?,?,?,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B515
Part of subcall function 00C7B450: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B520
Part of subcall function 00C7B450: ??1QString@@QAE@XZ.QT5CORE(?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B539
Part of subcall function 00C7B450: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CBA9B4,00000001,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B550
Part of subcall function 00C7B450: ?split@QString@@QBE?AVQStringList@@ABV1@W4SplitBehavior@1@W4CaseSensitivity@Qt@@@Z.QT5CORE(?,00000000,00000000,00000001,?,?,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B56F

Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE(?,0000002C,00C800BF), ref: 00C94608
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94611
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9461A
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94623
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9462C
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94635
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9463E
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94647
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94650
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94659
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94662
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9466B
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94674
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9467D
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94686
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9468F
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94698
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C946A1

??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?), ref: 00C7EC41
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7EC4A
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7EC53
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7EC5C
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7EC65
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7EC6E
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7EC77
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7EC80
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7EC89
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7EC92
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7EC9B
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7ECA4
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7ECAD
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7ECB6
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7ECBF
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7ECC8
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7ECD1

Part of subcall function 00C631D0: new.LIBCMT ref: 00C63242

Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(00CBC630,00C63A62,00000000,00CBC634,?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C62286
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C6228F
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C62298
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622A1
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622AA
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622B3
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622BC
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622C5
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622CE
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622D7
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622E0
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622E9
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622F2
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622FB
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C62304
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C6230D
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C62316

??1QString@@QAE@XZ.QT5CORE(?), ref: 00C7ECEA
??1QString@@QAE@XZ.QT5CORE ref: 00C7ECF3
??1QString@@QAE@XZ.QT5CORE ref: 00C7ECFC
??1QString@@QAE@XZ.QT5CORE ref: 00C7ED05
??1QString@@QAE@XZ.QT5CORE ref: 00C7ED0E
??1QString@@QAE@XZ.QT5CORE ref: 00C7ED17
??1QString@@QAE@XZ.QT5CORE ref: 00C7ED20
??1QString@@QAE@XZ.QT5CORE ref: 00C7ED29
??1QString@@QAE@XZ.QT5CORE ref: 00C7ED32
??1QString@@QAE@XZ.QT5CORE ref: 00C7ED3B
??1QString@@QAE@XZ.QT5CORE ref: 00C7ED44
??1QString@@QAE@XZ.QT5CORE ref: 00C7ED4D
??1QString@@QAE@XZ.QT5CORE ref: 00C7ED56
??1QString@@QAE@XZ.QT5CORE ref: 00C7ED5F
??1QString@@QAE@XZ.QT5CORE ref: 00C7ED68
??1QString@@QAE@XZ.QT5CORE ref: 00C7ED71
??1QString@@QAE@XZ.QT5CORE ref: 00C7ED7E
?next@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C7ED87
??1QString@@QAE@XZ.QT5CORE ref: 00C7ED9E
??1QString@@QAE@XZ.QT5CORE ref: 00C7EDA7
??1QSqlQuery@@QAE@XZ.QT5SQL ref: 00C7EDB0

Strings

Gender, xrefs: 00C7E242
:search, xrefs: 00C7E014, 00C7E0B1, 00C7E187, 00C7E220, 00C7E2B9, 00C7E352, 00C7E3EB, 00C7E484, 00C7E51D, 00C7E5B6, 00C7E64F, 00C7E6E8, 00C7E781, 00C7E81A, 00C7E8B7
Industry, xrefs: 00C7E374
Serial Number, xrefs: 00C7E70A
INSERT INTO userSearch SELECT * FROM users WHERE last GLOB :search, xrefs: 00C7E4F1
Comments, xrefs: 00C7DF9D
Illumination, xrefs: 00C7E2DB
INSERT INTO testSearch SELECT * FROM tests WHERE time GLOB :search, xrefs: 00C7E88B
INSERT INTO userSearch SELECT * FROM users WHERE first GLOB :search, xrefs: 00C7E1F4
SELECT testSearch.* , users.* FROM testSearch INNER JOIN users ON testSearch.userID = users.id, xrefs: 00C7E90A
INSERT INTO testSearch SELECT * FROM tests WHERE testDate GLOB :search, xrefs: 00C7E7EE
INSERT INTO userSearch SELECT * FROM users WHERE location GLOB :search, xrefs: 00C7E58A
INSERT INTO userSearch SELECT * FROM users WHERE industry GLOB :search, xrefs: 00C7E3BF
Location, xrefs: 00C7E53F
DOB, xrefs: 00C7E036
INSERT INTO testSearch SELECT * FROM tests WHERE serialNum GLOB :search, xrefs: 00C7E755
INSERT INTO testSearch SELECT * FROM tests WHERE illumination GLOB :search, xrefs: 00C7E326
SELECT tests.* , userSearch.* FROM tests INNER JOIN userSearch ON tests.userID = userSearch.id, xrefs: 00C7E91D
INSERT INTO userSearch SELECT * FROM users WHERE DOB GLOB :search, xrefs: 00C7E085
Last, xrefs: 00C7E4A6
Reference Number, xrefs: 00C7E671
Test Date, xrefs: 00C7E7A3
First, xrefs: 00C7E1A9
INSERT INTO testSearch SELECT * FROM tests WHERE comments GLOB :search, xrefs: 00C7DFE8
INSERT INTO userSearch SELECT * FROM users WHERE middle GLOB :search, xrefs: 00C7E623
Time, xrefs: 00C7E83C
Job, xrefs: 00C7E40D
INSERT INTO userSearch SELECT * FROM users WHERE job GLOB :search, xrefs: 00C7E458
Experience, xrefs: 00C7E110
INSERT INTO userSearch SELECT * FROM users WHERE gender GLOB :search, xrefs: 00C7E28D
INSERT INTO userSearch SELECT * FROM users WHERE refNum GLOB :search, xrefs: 00C7E6BC
Middle, xrefs: 00C7E5D8
INSERT INTO userSearch SELECT * FROM users WHERE experience GLOB :search, xrefs: 00C7E15B

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Variant@@$Query@@$V0@@$?value@String@$?from$String@@@$ArrayAscii_helper@Data@Typed$?exec@?prepare@$?bind?next@CaseFlag@Flags@ParamQt@@@Sensitivity@Sql@@@@@TypeValue@$??8@?append@?current?split@Behavior@1@Box@@Char@@ComboData@@ListList@@SplitStringString@@0@Text@Utf8@V1@@$?database@?dispose@?index?number@?size@?text@?tr@Data@1@@Database@@Database@@@Edit@@LineMetaObject@@String@@_
String ID: :search$Comments$DOB$Experience$First$Gender$INSERT INTO testSearch SELECT * FROM tests WHERE comments GLOB :search$INSERT INTO testSearch SELECT * FROM tests WHERE illumination GLOB :search$INSERT INTO testSearch SELECT * FROM tests WHERE serialNum GLOB :search$INSERT INTO testSearch SELECT * FROM tests WHERE testDate GLOB :search$INSERT INTO testSearch SELECT * FROM tests WHERE time GLOB :search$INSERT INTO userSearch SELECT * FROM users WHERE DOB GLOB :search$INSERT INTO userSearch SELECT * FROM users WHERE experience GLOB :search$INSERT INTO userSearch SELECT * FROM users WHERE first GLOB :search$INSERT INTO userSearch SELECT * FROM users WHERE gender GLOB :search$INSERT INTO userSearch SELECT * FROM users WHERE industry GLOB :search$INSERT INTO userSearch SELECT * FROM users WHERE job GLOB :search$INSERT INTO userSearch SELECT * FROM users WHERE last GLOB :search$INSERT INTO userSearch SELECT * FROM users WHERE location GLOB :search$INSERT INTO userSearch SELECT * FROM users WHERE middle GLOB :search$INSERT INTO userSearch SELECT * FROM users WHERE refNum GLOB :search$Illumination$Industry$Job$Last$Location$Middle$Reference Number$SELECT testSearch.* , users.* FROM testSearch INNER JOIN users ON testSearch.userID = users.id$SELECT tests.* , userSearch.* FROM tests INNER JOIN userSearch ON tests.userID = userSearch.id$Serial Number$Test Date$Time
API String ID: 3621237672-2285244992
Opcode ID: 9b68494d8624bda720200ec0b58fd99f87fc56d4ea677c649b22784171ff3c62
Instruction ID: e31a8ec1a7947077008cba4ab56f84175832a61e88083ee5c3c73a73261a6143
Opcode Fuzzy Hash: 9b68494d8624bda720200ec0b58fd99f87fc56d4ea677c649b22784171ff3c62
Instruction Fuzzy Hash: 8BA2087550024DEFCB04EFA4ED59BED3BA8AF25304F144259F906932A1EF74AA0DCB61

Uniqueness

Uniqueness Score: -1.00%

Function 00C8F800 Relevance: 401.5, APIs: 180, Strings: 49, Instructions: 795COMMON

Download Yara Rule

APIs

??8QString@@QBE_NPBD@Z.QT5CORE(00CB9364,676E6AEE,00000000,00000000,?,?,?,?,?,?,00000000,00CB397A,000000FF,?,00C6973E), ref: 00C8F83C
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(QSQLITE,00000007,?,?,?,?,?,?,00000000,00CB397A,000000FF,?,00C6973E), ref: 00C8F854
?number@QString@@SA?AV1@HH@Z.QT5CORE(?,00000000,0000000A,?,?,?,?,?,?,00000000,00CB397A,000000FF,?,00C6973E), ref: 00C8F86A
?addDatabase@QSqlDatabase@@SA?AV1@ABVQString@@0@Z.QT5SQL(00000000,?,00000000,?,?,?,?,?,?,00000000,00CB397A,000000FF,?,00C6973E), ref: 00C8F87D
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,000000FF), ref: 00C8F889
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,000000FF), ref: 00C8F896
?setDatabaseName@QSqlDatabase@@QAEXABVQString@@@Z.QT5SQL(00C6973E), ref: 00C8F8A9
?open@QSqlDatabase@@QAE_NXZ.QT5SQL(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,000000FF), ref: 00C8F8B2
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(00C6973E), ref: 00C8F8BF
??0QSqlDatabase@@QAE@ABV0@@Z.QT5SQL(?), ref: 00C8F8CB
??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL ref: 00C8F8D4
??0QString@@QAE@XZ.QT5CORE ref: 00C8F8DD
??4QString@@QAEAAV0@PBD@Z.QT5CORE(CREATE TABLE IF NOT EXISTS users (id INTEGER PRIMARY KEY AUTOINCREMENT, first TEXT, middle TEXT, last TEXT, refNum TEXT, DOB TEXT, gender TEXT, location TEXT, industry TEXT, experience TEXT, job TEXT)), ref: 00C8F8EF
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C8F902
?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C8F90D
??4QString@@QAEAAV0@PBD@Z.QT5CORE(CREATE TABLE IF NOT EXISTS tests (id INTEGER PRIMARY KEY AUTOINCREMENT, userID INTEGER, illumination TEXT, testDate TEXT, comments TEXT, scores TEXT, serialNum TEXT, time TEXT, FOREIGN KEY(userID) REFERENCES users(id))), ref: 00C8F917
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C8F924
?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C8F929
??4QString@@QAEAAV0@PBD@Z.QT5CORE(CREATE TABLE IF NOT EXISTS serialNums (id INTEGER PRIMARY KEY AUTOINCREMENT, serialNum TEXT, purchaseDate TEXT)), ref: 00C8F933
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C8F940
?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C8F945
??4QString@@QAEAAV0@PBD@Z.QT5CORE(CREATE TABLE IF NOT EXISTS settings (id INTEGER PRIMARY KEY AUTOINCREMENT, scoreMode INTEGER, testGui INTEGER, testReport INTEGER, tesGui INTEGER, tesReport INTEGER,), ref: 00C8F94F
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(sqrtTesGui INTEGER, sqrtTesReport INTEGER, vingrysGui INTEGER, vingrysReport INTEGER,), ref: 00C8F95D
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(classGui INTEGER, classReport INTEGER, percentFirstGui INTEGER, percentFirstReport INTEGER,), ref: 00C8F96B
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(percentSomeGui INTEGER, percentSomeReport INTEGER, percentExpGui INTEGER, percentExpReport INTEGER,), ref: 00C8F979
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(language INTEGER, illumination INTEGER, location INTEGER, industry INTEGER, job INTEGER, experience INTEGER, serialNum INTEGER,), ref: 00C8F987
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(footerImgPath TEXT, footerText TEXT)), ref: 00C8F995
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C8F9A2
?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C8F9A7
??4QString@@QAEAAV0@PBD@Z.QT5CORE(SELECT * FROM settings LIMIT 1), ref: 00C8F9B1
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C8F9BE
?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C8F9C3
?next@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C8F9C8
??4QString@@QAEAAV0@PBD@Z.QT5CORE(INSERT INTO settings (scoreMode, testGui, testReport, tesGui, tesReport,), ref: 00C8F9DE
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(sqrtTesGui, sqrtTesReport, vingrysGui, vingrysReport, classGui, classReport,), ref: 00C8F9EC
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(percentFirstGui, percentFirstReport, percentSomeGui, percentSomeReport,), ref: 00C8F9FA
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(percentExpGui, percentExpReport, language, illumination, location, industry, job,), ref: 00C8FA08
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(experience, serialNum, footerImgPath, footerText)), ref: 00C8FA16
?append@QString@@QAEAAV1@PBD@Z.QT5CORE( VALUES ), ref: 00C8FA24
?append@QString@@QAEAAV1@PBD@Z.QT5CORE((:scoreMode, :testGui, :testReport, :tesGui, :tesReport,), ref: 00C8FA32
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(:sqrtTesGui, :sqrtTesReport, :vingrysGui, :vingrysReport, :classGui, :classReport,), ref: 00C8FA40
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(:percentFirstGui, :percentFirstReport, :percentSomeGui, :percentSomeReport,), ref: 00C8FA4E
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(:percentExpGui, :percentExpReport, :language, :illumination, :location, :industry, :job,), ref: 00C8FA5C
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(:experience, :serialNum, :footerImgPath, :footerText)), ref: 00C8FA6A
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C8FA77
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C8FA84
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:scoreMode,0000000A), ref: 00C8FA91
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C8FABA
??1QString@@QAE@XZ.QT5CORE ref: 00C8FABF
??1QVariant@@QAE@XZ.QT5CORE ref: 00C8FAD2
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C8FAD9
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:testGui,00000008), ref: 00C8FAE6
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C8FB09
??1QString@@QAE@XZ.QT5CORE ref: 00C8FB0E
??1QVariant@@QAE@XZ.QT5CORE ref: 00C8FB1B
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C8FB22
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:tesReport,0000000A), ref: 00C8FB2F
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C8FB52
??1QString@@QAE@XZ.QT5CORE ref: 00C8FB57
??1QVariant@@QAE@XZ.QT5CORE ref: 00C8FB64
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C8FB6B
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:tesGui,00000007), ref: 00C8FB78
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C8FB9B
??1QString@@QAE@XZ.QT5CORE ref: 00C8FBA0
??1QVariant@@QAE@XZ.QT5CORE ref: 00C8FBAD
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C8FBB4
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:tesReport,0000000A), ref: 00C8FBC1
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C8FBE4
??1QString@@QAE@XZ.QT5CORE ref: 00C8FBE9
??1QVariant@@QAE@XZ.QT5CORE ref: 00C8FBF6
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C8FBFD
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:sqrtTesGui,0000000B), ref: 00C8FC0A
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C8FC2D
??1QString@@QAE@XZ.QT5CORE ref: 00C8FC32
??1QVariant@@QAE@XZ.QT5CORE ref: 00C8FC3F
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C8FC46
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:sqrtTesReport,0000000E), ref: 00C8FC53
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C8FC76
??1QString@@QAE@XZ.QT5CORE ref: 00C8FC7B
??1QVariant@@QAE@XZ.QT5CORE ref: 00C8FC88
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C8FC8F
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:vingrysGui,0000000B), ref: 00C8FC9C
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C8FCBF
??1QString@@QAE@XZ.QT5CORE ref: 00C8FCC4
??1QVariant@@QAE@XZ.QT5CORE ref: 00C8FCD1
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C8FCD8
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:vingrysReport,0000000E), ref: 00C8FCE5
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C8FD08
??1QString@@QAE@XZ.QT5CORE ref: 00C8FD0D
??1QVariant@@QAE@XZ.QT5CORE ref: 00C8FD1A
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C8FD21
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:classGui,00000009), ref: 00C8FD2E
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C8FD51
??1QString@@QAE@XZ.QT5CORE ref: 00C8FD56
??1QVariant@@QAE@XZ.QT5CORE ref: 00C8FD63
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C8FD6A
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:classReport,0000000C), ref: 00C8FD77
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C8FD9A
??1QString@@QAE@XZ.QT5CORE ref: 00C8FD9F
??1QVariant@@QAE@XZ.QT5CORE ref: 00C8FDAC
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C8FDB3
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:percentFirstGui,00000010), ref: 00C8FDC0
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C8FDE3
??1QString@@QAE@XZ.QT5CORE ref: 00C8FDE8
??1QVariant@@QAE@XZ.QT5CORE ref: 00C8FDF5
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C8FDFC
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:percentFirstReport,00000013), ref: 00C8FE09
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C8FE2C
??1QString@@QAE@XZ.QT5CORE ref: 00C8FE31
??1QVariant@@QAE@XZ.QT5CORE ref: 00C8FE3E
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C8FE45
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:percentSomeGui,0000000F), ref: 00C8FE52
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C8FE75
??1QString@@QAE@XZ.QT5CORE ref: 00C8FE7A
??1QVariant@@QAE@XZ.QT5CORE ref: 00C8FE87
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C8FE8E
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:percentSomeReport,00000012), ref: 00C8FE9B
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C8FEBE
??1QString@@QAE@XZ.QT5CORE ref: 00C8FEC3
??1QVariant@@QAE@XZ.QT5CORE ref: 00C8FED0
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C8FED7
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:percentExpGui,0000000E), ref: 00C8FEE4
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C8FF07
??1QString@@QAE@XZ.QT5CORE ref: 00C8FF0C
??1QVariant@@QAE@XZ.QT5CORE ref: 00C8FF19
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C8FF20
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:percentExpReport,00000011), ref: 00C8FF2D
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C8FF50
??1QString@@QAE@XZ.QT5CORE ref: 00C8FF55
??1QVariant@@QAE@XZ.QT5CORE ref: 00C8FF62
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C8FF69
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:language,00000009), ref: 00C8FF76
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C8FF99
??1QString@@QAE@XZ.QT5CORE ref: 00C8FF9E
??1QVariant@@QAE@XZ.QT5CORE ref: 00C8FFAB
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C8FFB2
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:illumination,0000000D), ref: 00C8FFBF
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C8FFE2
??1QString@@QAE@XZ.QT5CORE ref: 00C8FFE7
??1QVariant@@QAE@XZ.QT5CORE ref: 00C8FFF4
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C8FFFB
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:location,00000009), ref: 00C90008
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C9002B
??1QString@@QAE@XZ.QT5CORE ref: 00C90030
??1QVariant@@QAE@XZ.QT5CORE ref: 00C9003D
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C90044
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:industry,00000009), ref: 00C90051
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C90074
??1QString@@QAE@XZ.QT5CORE ref: 00C90079
??1QVariant@@QAE@XZ.QT5CORE ref: 00C90086
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C9008D
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:job,00000004), ref: 00C9009A
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C900BD
??1QString@@QAE@XZ.QT5CORE ref: 00C900C2
??1QVariant@@QAE@XZ.QT5CORE ref: 00C900CF
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C900D6
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:experience,0000000B), ref: 00C900E3
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C90106
??1QString@@QAE@XZ.QT5CORE ref: 00C9010B
??1QVariant@@QAE@XZ.QT5CORE ref: 00C90118
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C9011F
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:serialNum,0000000A), ref: 00C9012C
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C9014F
??1QString@@QAE@XZ.QT5CORE ref: 00C90154
??1QVariant@@QAE@XZ.QT5CORE ref: 00C90161
??0QVariant@@QAE@PBD@Z.QT5CORE(00CB9364), ref: 00C90171
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:footerImgPath,0000000E), ref: 00C9017E
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C901A1
??1QString@@QAE@XZ.QT5CORE ref: 00C901A6
??1QVariant@@QAE@XZ.QT5CORE ref: 00C901B3
??0QVariant@@QAE@PBD@Z.QT5CORE(00CB9364), ref: 00C901BD
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:footerText,0000000B), ref: 00C901CA
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C901ED
??1QString@@QAE@XZ.QT5CORE ref: 00C901F2
??1QVariant@@QAE@XZ.QT5CORE ref: 00C901FF
?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C90204
??1QString@@QAE@XZ.QT5CORE ref: 00C90217
??1QSqlQuery@@QAE@XZ.QT5SQL ref: 00C90220
??1QSqlDatabase@@QAE@XZ.QT5SQL ref: 00C90229
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,00000000,00CB397A,000000FF,?,00C6973E), ref: 00C90232

Strings

jng, xrefs: 00C8F817
:illumination, xrefs: 00C8FFB6
experience, serialNum, footerImgPath, footerText), xrefs: 00C8FA0E
;, xrefs: 00C901D6
percentFirstGui, percentFirstReport, percentSomeGui, percentSomeReport,, xrefs: 00C8F9F2
:classReport, xrefs: 00C8FD6E
VALUES , xrefs: 00C8FA1C
:percentFirstGui, xrefs: 00C8FDB7
:experience, :serialNum, :footerImgPath, :footerText), xrefs: 00C8FA62
:classGui, xrefs: 00C8FD25
CREATE TABLE IF NOT EXISTS settings (id INTEGER PRIMARY KEY AUTOINCREMENT, scoreMode INTEGER, testGui INTEGER, testReport INTEGER, tesGui INTEGER, tesReport INTEGER,, xrefs: 00C8F947
footerImgPath TEXT, footerText TEXT), xrefs: 00C8F98D
:tesGui, xrefs: 00C8FB6F
:vingrysReport, xrefs: 00C8FCDC
percentSomeGui INTEGER, percentSomeReport INTEGER, percentExpGui INTEGER, percentExpReport INTEGER,, xrefs: 00C8F971
language INTEGER, illumination INTEGER, location INTEGER, industry INTEGER, job INTEGER, experience INTEGER, serialNum INTEGER,, xrefs: 00C8F97F
:job, xrefs: 00C90091
:percentSomeReport, xrefs: 00C8FE92
:percentExpReport, xrefs: 00C8FF24
sqrtTesGui INTEGER, sqrtTesReport INTEGER, vingrysGui INTEGER, vingrysReport INTEGER,, xrefs: 00C8F955
sqrtTesGui, sqrtTesReport, vingrysGui, vingrysReport, classGui, classReport,, xrefs: 00C8F9E4
:serialNum, xrefs: 00C90123
:sqrtTesGui, xrefs: 00C8FC01
:location, xrefs: 00C8FFFF
:testGui, xrefs: 00C8FADD
:industry, xrefs: 00C90048
SELECT * FROM settings LIMIT 1, xrefs: 00C8F9A9
:experience, xrefs: 00C900DA
CREATE TABLE IF NOT EXISTS users (id INTEGER PRIMARY KEY AUTOINCREMENT, first TEXT, middle TEXT, last TEXT, refNum TEXT, DOB TEXT, gender TEXT, location TEXT, industry TEXT, experience TEXT, job TEXT), xrefs: 00C8F8E3
INSERT INTO settings (scoreMode, testGui, testReport, tesGui, tesReport,, xrefs: 00C8F9D6
:vingrysGui, xrefs: 00C8FC93
:scoreMode, xrefs: 00C8FA88
:footerImgPath, xrefs: 00C90179
:tesReport, xrefs: 00C8FB26, 00C8FBB8
classGui INTEGER, classReport INTEGER, percentFirstGui INTEGER, percentFirstReport INTEGER,, xrefs: 00C8F963
:percentExpGui, xrefs: 00C8FEDB
CREATE TABLE IF NOT EXISTS serialNums (id INTEGER PRIMARY KEY AUTOINCREMENT, serialNum TEXT, purchaseDate TEXT), xrefs: 00C8F92B
QSQLITE, xrefs: 00C8F84F
:percentFirstReport, xrefs: 00C8FE00
:footerText, xrefs: 00C901C1
percentExpGui, percentExpReport, language, illumination, location, industry, job,, xrefs: 00C8FA00
:percentFirstGui, :percentFirstReport, :percentSomeGui, :percentSomeReport,, xrefs: 00C8FA46
:language, xrefs: 00C8FF6D
CREATE TABLE IF NOT EXISTS tests (id INTEGER PRIMARY KEY AUTOINCREMENT, userID INTEGER, illumination TEXT, testDate TEXT, comments TEXT, scores TEXT, serialNum TEXT, time TEXT, FOREIGN KEY(userID) REFERENCES users(id)), xrefs: 00C8F90F
:percentExpGui, :percentExpReport, :language, :illumination, :location, :industry, :job,, xrefs: 00C8FA54
:sqrtTesReport, xrefs: 00C8FC4A
:sqrtTesGui, :sqrtTesReport, :vingrysGui, :vingrysReport, :classGui, :classReport,, xrefs: 00C8FA38
:percentSomeGui, xrefs: 00C8FE49
(:scoreMode, :testGui, :testReport, :tesGui, :tesReport,, xrefs: 00C8FA2A

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Variant@@$Query@@$?fromArrayAscii_helper@Data@Typed$?bindFlag@Flags@ParamSql@@@@@TypeValue@$?append@$String@@@$?exec@?prepare@$Database@@$V0@@$?add?next@?number@?open@?setDatabaseDatabase@Database@@@Name@String@@0@
String ID: VALUES $(:scoreMode, :testGui, :testReport, :tesGui, :tesReport,$:classGui$:classReport$:experience$:experience, :serialNum, :footerImgPath, :footerText)$:footerImgPath$:footerText$:illumination$:industry$:job$:language$:location$:percentExpGui$:percentExpGui, :percentExpReport, :language, :illumination, :location, :industry, :job,$:percentExpReport$:percentFirstGui$:percentFirstGui, :percentFirstReport, :percentSomeGui, :percentSomeReport,$:percentFirstReport$:percentSomeGui$:percentSomeReport$:scoreMode$:serialNum$:sqrtTesGui$:sqrtTesGui, :sqrtTesReport, :vingrysGui, :vingrysReport, :classGui, :classReport,$:sqrtTesReport$:tesGui$:tesReport$:testGui$:vingrysGui$:vingrysReport$;$CREATE TABLE IF NOT EXISTS serialNums (id INTEGER PRIMARY KEY AUTOINCREMENT, serialNum TEXT, purchaseDate TEXT)$CREATE TABLE IF NOT EXISTS settings (id INTEGER PRIMARY KEY AUTOINCREMENT, scoreMode INTEGER, testGui INTEGER, testReport INTEGER, tesGui INTEGER, tesReport INTEGER,$CREATE TABLE IF NOT EXISTS tests (id INTEGER PRIMARY KEY AUTOINCREMENT, userID INTEGER, illumination TEXT, testDate TEXT, comments TEXT, scores TEXT, serialNum TEXT, time TEXT, FOREIGN KEY(userID) REFERENCES users(id))$CREATE TABLE IF NOT EXISTS users (id INTEGER PRIMARY KEY AUTOINCREMENT, first TEXT, middle TEXT, last TEXT, refNum TEXT, DOB TEXT, gender TEXT, location TEXT, industry TEXT, experience TEXT, job TEXT)$INSERT INTO settings (scoreMode, testGui, testReport, tesGui, tesReport,$QSQLITE$SELECT * FROM settings LIMIT 1$classGui INTEGER, classReport INTEGER, percentFirstGui INTEGER, percentFirstReport INTEGER,$experience, serialNum, footerImgPath, footerText)$footerImgPath TEXT, footerText TEXT)$language INTEGER, illumination INTEGER, location INTEGER, industry INTEGER, job INTEGER, experience INTEGER, serialNum INTEGER,$percentExpGui, percentExpReport, language, illumination, location, industry, job,$percentFirstGui, percentFirstReport, percentSomeGui, percentSomeReport,$percentSomeGui INTEGER, percentSomeReport INTEGER, percentExpGui INTEGER, percentExpReport INTEGER,$sqrtTesGui INTEGER, sqrtTesReport INTEGER, vingrysGui INTEGER, vingrysReport INTEGER,$sqrtTesGui, sqrtTesReport, vingrysGui, vingrysReport, classGui, classReport,$jng
API String ID: 3426593283-3072644628
Opcode ID: c9fe459752c11ec1d1f7d4456af1f0827691eda339bf6753a8301a13b72a73f1
Instruction ID: 1b39f48d52b45247b075da77669915f32799305cb523fe91436768f7799281a3
Opcode Fuzzy Hash: c9fe459752c11ec1d1f7d4456af1f0827691eda339bf6753a8301a13b72a73f1
Instruction Fuzzy Hash: CF72E771D0024AEFDB05EBE4ED59BEEBF78EF14704F004165E506A7290EB785A09CB62

Uniqueness

Uniqueness Score: -1.00%

Function 00C91410 Relevance: 394.5, APIs: 177, Strings: 48, Instructions: 780COMMON

Download Yara Rule

APIs

?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(QSQLITE,00000007,676E6AEE,?,00000000,?,?,?,?,?,00000000,00CB3F21,000000FF,?,00C8F5BC,00000000), ref: 00C9144E
?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A,?,?,?,?,00000000,00CB3F21,000000FF,?,00C8F5BC), ref: 00C91463
?addDatabase@QSqlDatabase@@SA?AV1@ABVQString@@0@Z.QT5SQL(00000000,?,00000000,?,?,?,?,00000000,00CB3F21,000000FF,?,00C8F5BC), ref: 00C91476
??1QString@@QAE@XZ.QT5CORE ref: 00C91482
??1QString@@QAE@XZ.QT5CORE ref: 00C9148F
?setDatabaseName@QSqlDatabase@@QAEXABVQString@@@Z.QT5SQL(00000008), ref: 00C914A2
?open@QSqlDatabase@@QAE_NXZ.QT5SQL ref: 00C914AB
??0QSqlDatabase@@QAE@ABV0@@Z.QT5SQL(?), ref: 00C914B7
??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL ref: 00C914C0
??0QString@@QAE@XZ.QT5CORE ref: 00C914C9
??4QString@@QAEAAV0@PBD@Z.QT5CORE(CREATE TABLE IF NOT EXISTS users (id INTEGER PRIMARY KEY AUTOINCREMENT, first TEXT, middle TEXT, last TEXT, refNum TEXT, DOB TEXT, gender TEXT, location TEXT, industry TEXT, experience TEXT, job TEXT)), ref: 00C914DB
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C914EE
?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C914F9
??4QString@@QAEAAV0@PBD@Z.QT5CORE(CREATE TABLE IF NOT EXISTS tests (id INTEGER PRIMARY KEY AUTOINCREMENT, userID INTEGER, illumination TEXT, testDate TEXT, comments TEXT, scores TEXT, serialNum TEXT, time TEXT, FOREIGN KEY(userID) REFERENCES users(id))), ref: 00C91503
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C91510
?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C91515
??4QString@@QAEAAV0@PBD@Z.QT5CORE(CREATE TABLE IF NOT EXISTS serialNums (id INTEGER PRIMARY KEY AUTOINCREMENT, serialNum TEXT, purchaseDate TEXT)), ref: 00C9151F
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C9152C
?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C91531
??4QString@@QAEAAV0@PBD@Z.QT5CORE(CREATE TABLE IF NOT EXISTS settings (id INTEGER PRIMARY KEY AUTOINCREMENT, scoreMode INTEGER, testGui INTEGER, testReport INTEGER, tesGui INTEGER, tesReport INTEGER,), ref: 00C9153B
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(sqrtTesGui INTEGER, sqrtTesReport INTEGER, vingrysGui INTEGER, vingrysReport INTEGER,), ref: 00C91549
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(classGui INTEGER, classReport INTEGER, percentFirstGui INTEGER, percentFirstReport INTEGER,), ref: 00C91557
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(percentSomeGui INTEGER, percentSomeReport INTEGER, percentExpGui INTEGER, percentExpReport INTEGER,), ref: 00C91565
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(language INTEGER, illumination INTEGER, location INTEGER, industry INTEGER, job INTEGER, experience INTEGER, serialNum INTEGER,), ref: 00C91573
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(footerImgPath TEXT, footerText TEXT)), ref: 00C91581
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C9158E
?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C91593
??4QString@@QAEAAV0@PBD@Z.QT5CORE(SELECT * FROM settings), ref: 00C9159D
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C915AA
?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C915AF
?next@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C915B4
??4QString@@QAEAAV0@PBD@Z.QT5CORE(INSERT INTO settings (scoreMode, testGui, testReport, tesGui, tesReport,), ref: 00C915CA
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(sqrtTesGui, sqrtTesReport, vingrysGui, vingrysReport, classGui, classReport,), ref: 00C915D8
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(percentFirstGui, percentFirstReport, percentSomeGui, percentSomeReport,), ref: 00C915E6
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(percentExpGui, percentExpReport, language, illumination, location, industry, job,), ref: 00C915F4
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(experience, serialNum, footerImgPath, footerText)), ref: 00C91602
?append@QString@@QAEAAV1@PBD@Z.QT5CORE( VALUES ), ref: 00C91610
?append@QString@@QAEAAV1@PBD@Z.QT5CORE((:scoreMode, :testGui, :testReport, :tesGui, :tesReport,), ref: 00C9161E
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(:sqrtTesGui, :sqrtTesReport, :vingrysGui, :vingrysReport, :classGui, :classReport,), ref: 00C9162C
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(:percentFirstGui, :percentFirstReport, :percentSomeGui, :percentSomeReport,), ref: 00C9163A
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(:percentExpGui, :percentExpReport, :language, :illumination, :location, :industry, :job,), ref: 00C91648
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(:experience, :serialNum, :footerImgPath, :footerText)), ref: 00C91656
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C91663
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C91670
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:scoreMode,0000000A), ref: 00C9167D
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C916A2
??1QString@@QAE@XZ.QT5CORE ref: 00C916A7
??1QVariant@@QAE@XZ.QT5CORE ref: 00C916BA
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C916C1
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:testGui,00000008), ref: 00C916CE
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C916F1
??1QString@@QAE@XZ.QT5CORE ref: 00C916F6
??1QVariant@@QAE@XZ.QT5CORE ref: 00C91703
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C9170A
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:tesReport,0000000A), ref: 00C91717
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C9173A
??1QString@@QAE@XZ.QT5CORE ref: 00C9173F
??1QVariant@@QAE@XZ.QT5CORE ref: 00C9174C
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C91753
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:tesGui,00000007), ref: 00C91760
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C91783
??1QString@@QAE@XZ.QT5CORE ref: 00C91788
??1QVariant@@QAE@XZ.QT5CORE ref: 00C91795
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C9179C
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:tesReport,0000000A), ref: 00C917A9
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C917CC
??1QString@@QAE@XZ.QT5CORE ref: 00C917D1
??1QVariant@@QAE@XZ.QT5CORE ref: 00C917DE
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C917E5
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:sqrtTesGui,0000000B), ref: 00C917F2
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C91815
??1QString@@QAE@XZ.QT5CORE ref: 00C9181A
??1QVariant@@QAE@XZ.QT5CORE ref: 00C91827
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C9182E
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:sqrtTesReport,0000000E), ref: 00C9183B
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C9185E
??1QString@@QAE@XZ.QT5CORE ref: 00C91863
??1QVariant@@QAE@XZ.QT5CORE ref: 00C91870
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C91877
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:vingrysGui,0000000B), ref: 00C91884
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C918A7
??1QString@@QAE@XZ.QT5CORE ref: 00C918AC
??1QVariant@@QAE@XZ.QT5CORE ref: 00C918B9
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C918C0
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:vingrysReport,0000000E), ref: 00C918CD
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C918F0
??1QString@@QAE@XZ.QT5CORE ref: 00C918F5
??1QVariant@@QAE@XZ.QT5CORE ref: 00C91902
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C91909
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:classGui,00000009), ref: 00C91916
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C91939
??1QString@@QAE@XZ.QT5CORE ref: 00C9193E
??1QVariant@@QAE@XZ.QT5CORE ref: 00C9194B
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C91952
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:classReport,0000000C), ref: 00C9195F
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C91982
??1QString@@QAE@XZ.QT5CORE ref: 00C91987
??1QVariant@@QAE@XZ.QT5CORE ref: 00C91994
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C9199B
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:percentFirstGui,00000010), ref: 00C919A8
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C919CB
??1QString@@QAE@XZ.QT5CORE ref: 00C919D0
??1QVariant@@QAE@XZ.QT5CORE ref: 00C919DD
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C919E4
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:percentFirstReport,00000013), ref: 00C919F1
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C91A14
??1QString@@QAE@XZ.QT5CORE ref: 00C91A19
??1QVariant@@QAE@XZ.QT5CORE ref: 00C91A26
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C91A2D
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:percentSomeGui,0000000F), ref: 00C91A3A
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C91A5D
??1QString@@QAE@XZ.QT5CORE ref: 00C91A62
??1QVariant@@QAE@XZ.QT5CORE ref: 00C91A6F
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C91A76
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:percentSomeReport,00000012), ref: 00C91A83
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C91AA6
??1QString@@QAE@XZ.QT5CORE ref: 00C91AAB
??1QVariant@@QAE@XZ.QT5CORE ref: 00C91AB8
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C91ABF
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:percentExpGui,0000000E), ref: 00C91ACC
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C91AEF
??1QString@@QAE@XZ.QT5CORE ref: 00C91AF4
??1QVariant@@QAE@XZ.QT5CORE ref: 00C91B01
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C91B08
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:percentExpReport,00000011), ref: 00C91B15
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C91B38
??1QString@@QAE@XZ.QT5CORE ref: 00C91B3D
??1QVariant@@QAE@XZ.QT5CORE ref: 00C91B4A
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C91B51
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:language,00000009), ref: 00C91B5E
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C91B81
??1QString@@QAE@XZ.QT5CORE ref: 00C91B86
??1QVariant@@QAE@XZ.QT5CORE ref: 00C91B93
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C91B9A
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:illumination,0000000D), ref: 00C91BA7
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C91BCA
??1QString@@QAE@XZ.QT5CORE ref: 00C91BCF
??1QVariant@@QAE@XZ.QT5CORE ref: 00C91BDC
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C91BE3
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:location,00000009), ref: 00C91BF0
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C91C13
??1QString@@QAE@XZ.QT5CORE ref: 00C91C18
??1QVariant@@QAE@XZ.QT5CORE ref: 00C91C25
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C91C2C
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:industry,00000009), ref: 00C91C39
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C91C5C
??1QString@@QAE@XZ.QT5CORE ref: 00C91C61
??1QVariant@@QAE@XZ.QT5CORE ref: 00C91C6E
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C91C75
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:job,00000004), ref: 00C91C82
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C91CA5
??1QString@@QAE@XZ.QT5CORE ref: 00C91CAA
??1QVariant@@QAE@XZ.QT5CORE ref: 00C91CB7
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C91CBE
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:experience,0000000B), ref: 00C91CCB
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C91CEE
??1QString@@QAE@XZ.QT5CORE ref: 00C91CF3
??1QVariant@@QAE@XZ.QT5CORE ref: 00C91D00
??0QVariant@@QAE@H@Z.QT5CORE(00000000), ref: 00C91D07
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:serialNum,0000000A), ref: 00C91D14
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C91D37
??1QString@@QAE@XZ.QT5CORE ref: 00C91D3C
??1QVariant@@QAE@XZ.QT5CORE ref: 00C91D49
??0QVariant@@QAE@PBD@Z.QT5CORE(00CB9364), ref: 00C91D59
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:footerImgPath,0000000E), ref: 00C91D66
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C91D89
??1QString@@QAE@XZ.QT5CORE ref: 00C91D8E
??1QVariant@@QAE@XZ.QT5CORE ref: 00C91D9B
??0QVariant@@QAE@PBD@Z.QT5CORE(00CB9364), ref: 00C91DA5
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:footerText,0000000B), ref: 00C91DB2
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C91DD5
??1QString@@QAE@XZ.QT5CORE ref: 00C91DDA
??1QVariant@@QAE@XZ.QT5CORE ref: 00C91DE7
?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C91DEC
??1QString@@QAE@XZ.QT5CORE ref: 00C91DF5
??1QSqlQuery@@QAE@XZ.QT5SQL ref: 00C91DFE
??1QSqlDatabase@@QAE@XZ.QT5SQL ref: 00C91E07

Strings

:testGui, xrefs: 00C916C5
jng, xrefs: 00C91427
:illumination, xrefs: 00C91B9E
experience, serialNum, footerImgPath, footerText), xrefs: 00C915FA
:industry, xrefs: 00C91C30
:experience, xrefs: 00C91CC2
percentFirstGui, percentFirstReport, percentSomeGui, percentSomeReport,, xrefs: 00C915DE
CREATE TABLE IF NOT EXISTS users (id INTEGER PRIMARY KEY AUTOINCREMENT, first TEXT, middle TEXT, last TEXT, refNum TEXT, DOB TEXT, gender TEXT, location TEXT, industry TEXT, experience TEXT, job TEXT), xrefs: 00C914CF
:classReport, xrefs: 00C91956
INSERT INTO settings (scoreMode, testGui, testReport, tesGui, tesReport,, xrefs: 00C915C2
:vingrysGui, xrefs: 00C9187B
:scoreMode, xrefs: 00C91674
:footerImgPath, xrefs: 00C91D61
VALUES , xrefs: 00C91608
:tesReport, xrefs: 00C9170E, 00C917A0
classGui INTEGER, classReport INTEGER, percentFirstGui INTEGER, percentFirstReport INTEGER,, xrefs: 00C9154F
:percentFirstGui, xrefs: 00C9199F
:percentExpGui, xrefs: 00C91AC3
CREATE TABLE IF NOT EXISTS serialNums (id INTEGER PRIMARY KEY AUTOINCREMENT, serialNum TEXT, purchaseDate TEXT), xrefs: 00C91517
:experience, :serialNum, :footerImgPath, :footerText), xrefs: 00C9164E
QSQLITE, xrefs: 00C91442
:percentFirstReport, xrefs: 00C919E8
:classGui, xrefs: 00C9190D
CREATE TABLE IF NOT EXISTS settings (id INTEGER PRIMARY KEY AUTOINCREMENT, scoreMode INTEGER, testGui INTEGER, testReport INTEGER, tesGui INTEGER, tesReport INTEGER,, xrefs: 00C91533
:footerText, xrefs: 00C91DA9
percentExpGui, percentExpReport, language, illumination, location, industry, job,, xrefs: 00C915EC
footerImgPath TEXT, footerText TEXT), xrefs: 00C91579
:percentFirstGui, :percentFirstReport, :percentSomeGui, :percentSomeReport,, xrefs: 00C91632
:tesGui, xrefs: 00C91757
:vingrysReport, xrefs: 00C918C4
:language, xrefs: 00C91B55
percentSomeGui INTEGER, percentSomeReport INTEGER, percentExpGui INTEGER, percentExpReport INTEGER,, xrefs: 00C9155D
CREATE TABLE IF NOT EXISTS tests (id INTEGER PRIMARY KEY AUTOINCREMENT, userID INTEGER, illumination TEXT, testDate TEXT, comments TEXT, scores TEXT, serialNum TEXT, time TEXT, FOREIGN KEY(userID) REFERENCES users(id)), xrefs: 00C914FB
language INTEGER, illumination INTEGER, location INTEGER, industry INTEGER, job INTEGER, experience INTEGER, serialNum INTEGER,, xrefs: 00C9156B
:percentExpGui, :percentExpReport, :language, :illumination, :location, :industry, :job,, xrefs: 00C91640
:sqrtTesReport, xrefs: 00C91832
:job, xrefs: 00C91C79
:percentSomeReport, xrefs: 00C91A7A
:sqrtTesGui, :sqrtTesReport, :vingrysGui, :vingrysReport, :classGui, :classReport,, xrefs: 00C91624
SELECT * FROM settings, xrefs: 00C91595
:percentExpReport, xrefs: 00C91B0C
sqrtTesGui INTEGER, sqrtTesReport INTEGER, vingrysGui INTEGER, vingrysReport INTEGER,, xrefs: 00C91541
sqrtTesGui, sqrtTesReport, vingrysGui, vingrysReport, classGui, classReport,, xrefs: 00C915D0
:serialNum, xrefs: 00C91D0B
:percentSomeGui, xrefs: 00C91A31
(:scoreMode, :testGui, :testReport, :tesGui, :tesReport,, xrefs: 00C91616
:sqrtTesGui, xrefs: 00C917E9
:location, xrefs: 00C91BE7

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Variant@@$Query@@$?fromArrayAscii_helper@Data@Typed$?bindFlag@Flags@ParamSql@@@@@TypeValue@$?append@$String@@@$?exec@?prepare@$Database@@$?add?next@?number@?open@?setDatabaseDatabase@Database@@@Name@String@@0@V0@@
String ID: VALUES $(:scoreMode, :testGui, :testReport, :tesGui, :tesReport,$:classGui$:classReport$:experience$:experience, :serialNum, :footerImgPath, :footerText)$:footerImgPath$:footerText$:illumination$:industry$:job$:language$:location$:percentExpGui$:percentExpGui, :percentExpReport, :language, :illumination, :location, :industry, :job,$:percentExpReport$:percentFirstGui$:percentFirstGui, :percentFirstReport, :percentSomeGui, :percentSomeReport,$:percentFirstReport$:percentSomeGui$:percentSomeReport$:scoreMode$:serialNum$:sqrtTesGui$:sqrtTesGui, :sqrtTesReport, :vingrysGui, :vingrysReport, :classGui, :classReport,$:sqrtTesReport$:tesGui$:tesReport$:testGui$:vingrysGui$:vingrysReport$CREATE TABLE IF NOT EXISTS serialNums (id INTEGER PRIMARY KEY AUTOINCREMENT, serialNum TEXT, purchaseDate TEXT)$CREATE TABLE IF NOT EXISTS settings (id INTEGER PRIMARY KEY AUTOINCREMENT, scoreMode INTEGER, testGui INTEGER, testReport INTEGER, tesGui INTEGER, tesReport INTEGER,$CREATE TABLE IF NOT EXISTS tests (id INTEGER PRIMARY KEY AUTOINCREMENT, userID INTEGER, illumination TEXT, testDate TEXT, comments TEXT, scores TEXT, serialNum TEXT, time TEXT, FOREIGN KEY(userID) REFERENCES users(id))$CREATE TABLE IF NOT EXISTS users (id INTEGER PRIMARY KEY AUTOINCREMENT, first TEXT, middle TEXT, last TEXT, refNum TEXT, DOB TEXT, gender TEXT, location TEXT, industry TEXT, experience TEXT, job TEXT)$INSERT INTO settings (scoreMode, testGui, testReport, tesGui, tesReport,$QSQLITE$SELECT * FROM settings$classGui INTEGER, classReport INTEGER, percentFirstGui INTEGER, percentFirstReport INTEGER,$experience, serialNum, footerImgPath, footerText)$footerImgPath TEXT, footerText TEXT)$language INTEGER, illumination INTEGER, location INTEGER, industry INTEGER, job INTEGER, experience INTEGER, serialNum INTEGER,$percentExpGui, percentExpReport, language, illumination, location, industry, job,$percentFirstGui, percentFirstReport, percentSomeGui, percentSomeReport,$percentSomeGui INTEGER, percentSomeReport INTEGER, percentExpGui INTEGER, percentExpReport INTEGER,$sqrtTesGui INTEGER, sqrtTesReport INTEGER, vingrysGui INTEGER, vingrysReport INTEGER,$sqrtTesGui, sqrtTesReport, vingrysGui, vingrysReport, classGui, classReport,$jng
API String ID: 2740625846-1065573379
Opcode ID: 9a907d85193e4d52bec2471964b24f6cb70c9195008ffdf66440c8753ce072d6
Instruction ID: 8d0406fd215f797edf990b6dd06c5c23529127890e4deafae4aa3bc12e65e877
Opcode Fuzzy Hash: 9a907d85193e4d52bec2471964b24f6cb70c9195008ffdf66440c8753ce072d6
Instruction Fuzzy Hash: A872EB71D01249EFDB05EBE4ED59BEEBBB8EF14700F104165E502A7290EB785B09CB62

Uniqueness

Uniqueness Score: -1.00%

Function 00C76C50 Relevance: 341.3, APIs: 192, Strings: 2, Instructions: 1756COMMON

Download Yara Rule

APIs

?size@QListData@@QBEHXZ.QT5CORE(676E6AEE,?), ref: 00C76C8B

Part of subcall function 00C6FCE0: ?freeData@QMapDataBase@@SAXPAU1@@Z.QT5CORE(?,676E6AEE,?,?,00000000,?,00CB2E8C,000000FF,?,00C76CA7), ref: 00C6FD4B
Part of subcall function 00C6FCE0: ?freeData@QMapDataBase@@SAXPAU1@@Z.QT5CORE(6B94FA34), ref: 00C6FD8B

Part of subcall function 00C79B50: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,676E6AEE,?,?,?,00CB032C,000000FF,?,00C76CB4), ref: 00C79BA0
Part of subcall function 00C79B50: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(6B94A624), ref: 00C79BC8

Part of subcall function 00C6FB30: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(000000FF,?,?,000000FF,676E6AEE,?,?,?,00CAF136,000000FF,?,00C76CC1), ref: 00C6FBA5

Part of subcall function 00C6FC50: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(000000FF,?,?,000000FF,676E6AEE,?,?,?,00CAF136,000000FF,?,00C76CDB), ref: 00C6FCC5

?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C76CE6
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000054), ref: 00C76CF5
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C76D01
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001), ref: 00C76D13
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001), ref: 00C76D2E
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C76D3D
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001), ref: 00C76D4B
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C76D57
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C76D66
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000054), ref: 00C76D73
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?), ref: 00C76DA7
?at@QListData@@QBEPAPAXH@Z.QT5CORE(-000000FC,?,?,00000000), ref: 00C76DDF
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001), ref: 00C76DED
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001), ref: 00C76DFA
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C76E0A
?at@QListData@@QBEPAPAXH@Z.QT5CORE(000000FF), ref: 00C76E19
?at@QListData@@QBEPAPAXH@Z.QT5CORE(000000FF), ref: 00C76E2D
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001), ref: 00C76E3B
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001), ref: 00C76E49
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001), ref: 00C76E54
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C76E61
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C76E71
?at@QListData@@QBEPAPAXH@Z.QT5CORE(000000FF), ref: 00C76E7F
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?,00CB017C), ref: 00C76EB3
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000016,00CB017C,?,00000000), ref: 00C76EF3
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00CB017B), ref: 00C76F02
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00CB017C), ref: 00C76F12
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00CB017D), ref: 00C76F25
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00CB017C,?), ref: 00C76F59
?at@QListData@@QBEPAPAXH@Z.QT5CORE(0000002B,?,?,00000000), ref: 00C76F93
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00CB017B), ref: 00C76FA2
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00CB017C), ref: 00C76FB2
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00CB017D), ref: 00C76FC5
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00CB017C,?), ref: 00C76FF9
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000040,?,?,00000000), ref: 00C77033
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00CB017B), ref: 00C77042
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00CB017C), ref: 00C77052
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00CB017D), ref: 00C77065
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00CB017C,?), ref: 00C77099
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,?,00000000), ref: 00C770CB
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000054), ref: 00C770DA
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C770E6
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000054), ref: 00C770F5
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000053), ref: 00C77102
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000054), ref: 00C77126
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C77132
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000054), ref: 00C77141
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000053), ref: 00C7714E
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000054,?), ref: 00C77180
?size@QListData@@QBEHXZ.QT5CORE(?,?,00000000), ref: 00C771AF
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C771DE
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C771E8
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C771FA
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000054), ref: 00C77204
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C77213
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C7721D
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C7723A
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001), ref: 00C77244
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C77267
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?), ref: 00C77275

Part of subcall function 00C95C90: ?append@QListData@@QAEPAPAXXZ.QT5CORE(676E6AEE,6B62DA60,6B62B6F0,00000000,?,?,00CB4DD0,000000FF,?,00C8160E,?,676E6AEE,6B62DA60,6B62B6F0), ref: 00C95CF9

?at@QListData@@QBEPAPAXH@Z.QT5CORE(?,?,?,00000000), ref: 00C773F3
?at@QListData@@QBEPAPAXH@Z.QT5CORE(-000000FC), ref: 00C77409
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C77417
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001), ref: 00C77422
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C77433
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001), ref: 00C7743E
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C7744C
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C77457
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C77468
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C77473
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C77519
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001), ref: 00C77524
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C77535
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C77540
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C77571
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001,?), ref: 00C77580
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?,?,?,00000000), ref: 00C775B8
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000016), ref: 00C775C3
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C775D2
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000015), ref: 00C775DF
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C775F2
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000016), ref: 00C775FD
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C7760E
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000017), ref: 00C7761E
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C7764F
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000016,?), ref: 00C7765E
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?,?,?,00000000), ref: 00C77696
?at@QListData@@QBEPAPAXH@Z.QT5CORE(0000002B), ref: 00C776A1
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C776B0
?at@QListData@@QBEPAPAXH@Z.QT5CORE(0000002A), ref: 00C776BD
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C776D0
?at@QListData@@QBEPAPAXH@Z.QT5CORE(0000002B), ref: 00C776DB
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C776EC
?at@QListData@@QBEPAPAXH@Z.QT5CORE(0000002C), ref: 00C776FC
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C7772D
?at@QListData@@QBEPAPAXH@Z.QT5CORE(0000002B,?), ref: 00C7773C
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?,?,?,00000000), ref: 00C77774
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000040), ref: 00C7777F
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C7778E
?at@QListData@@QBEPAPAXH@Z.QT5CORE(0000003F), ref: 00C7779B
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C777AE
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000040), ref: 00C777B9
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C777CA
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000041), ref: 00C777DA
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C7780B
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000040,?), ref: 00C7781A
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?,?,?,00000000), ref: 00C7784B
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C77855
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C77867
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000054), ref: 00C77871
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C77880
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C7788A
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C7789D
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000054), ref: 00C778A7
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C778B8
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000053), ref: 00C778C2
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C778F1
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000054,?), ref: 00C778FF
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C7790E
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000054), ref: 00C77918
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C77927
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C77931
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C77944
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000054), ref: 00C7794E
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C7795F
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000053), ref: 00C77969
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C77999
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000054,?), ref: 00C779A7
?freeTree@QMapDataBase@@QAEXPAUQMapNodeBase@@H@Z.QT5CORE(FFBF19E8,00000004,000000FF,00CB017C,?,?,00000000), ref: 00C77A0A
?freeData@QMapDataBase@@SAXPAU1@@Z.QT5CORE(00CB017C,000000FF,00CB017C,?,?,00000000), ref: 00C77A11
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(000000FF), ref: 00C77A41
?size@QListData@@QBEHXZ.QT5CORE ref: 00C77A56
?size@QListData@@QBEHXZ.QT5CORE ref: 00C77A66
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(00000001), ref: 00C77AAC
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(6B94A624), ref: 00C77AD6
?createData@QMapDataBase@@SAPAU1@XZ.QT5CORE ref: 00C77B06
?freeTree@QMapDataBase@@QAEXPAUQMapNodeBase@@H@Z.QT5CORE(?,00000004), ref: 00C77BD2
?freeData@QMapDataBase@@SAXPAU1@@Z.QT5CORE(?), ref: 00C77BDC
?recalcMostLeftNode@QMapDataBase@@QAEXXZ.QT5CORE ref: 00C77BEC
?size@QListData@@QBEHXZ.QT5CORE(?,?,?,?), ref: 00C77C54
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C77C88
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,?,00000000), ref: 00C77D10
?size@QListData@@QBEHXZ.QT5CORE ref: 00C77D24
?number@QString@@SA?AV1@NDH@Z.QT5CORE ref: 00C77D64
?number@QString@@SA?AV1@NDH@Z.QT5CORE ref: 00C77D8A
?number@QString@@SA?AV1@NDH@Z.QT5CORE ref: 00C77DB4

Part of subcall function 00C704B0: ??0QString@@QAE@XZ.QT5CORE(676E6AEE,?,000000FF), ref: 00C704ED
Part of subcall function 00C704B0: ?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS ref: 00C70503
Part of subcall function 00C704B0: ?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE(00000000), ref: 00C70530
Part of subcall function 00C704B0: ??1QString@@QAE@XZ.QT5CORE ref: 00C7053D
Part of subcall function 00C704B0: ?append@QString@@QAEAAV1@PBD@Z.QT5CORE(00CBA9A0), ref: 00C7054A
Part of subcall function 00C704B0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001), ref: 00C70555
Part of subcall function 00C704B0: ?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE(00000000), ref: 00C7057C
Part of subcall function 00C704B0: ??1QString@@QAE@XZ.QT5CORE ref: 00C70589
Part of subcall function 00C704B0: ?number@QString@@SA?AV1@HH@Z.QT5CORE(?,00000001,0000000A), ref: 00C70598
Part of subcall function 00C704B0: ?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE(00000000), ref: 00C705A8
Part of subcall function 00C704B0: ??1QString@@QAE@XZ.QT5CORE ref: 00C705B5
Part of subcall function 00C704B0: ?append@QString@@QAEAAV1@PBD@Z.QT5CORE(00CBA9A0), ref: 00C705C2
Part of subcall function 00C704B0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000002), ref: 00C705CD
Part of subcall function 00C704B0: ?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE(00000000), ref: 00C705F4
Part of subcall function 00C704B0: ??1QString@@QAE@XZ.QT5CORE ref: 00C70601

??1QString@@QAE@XZ.QT5CORE(?,00C74568,?,45890000,BC8E89F0,00C74510), ref: 00C77DF5
?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS(?,45890000,BC8E89F0,00C74510), ref: 00C77E04
?text@QLineEdit@@QBE?AVQString@@XZ.QT5WIDGETS(?,?,45890000,BC8E89F0,00C74510), ref: 00C77E21
??9QString@@QBE_NPBD@Z.QT5CORE(00CB9364,?,45890000,BC8E89F0,00C74510), ref: 00C77E38
??1QString@@QAE@XZ.QT5CORE(?,45890000,BC8E89F0,00C74510), ref: 00C77E5A
?text@QLineEdit@@QBE?AVQString@@XZ.QT5WIDGETS(00000001,?,45890000,BC8E89F0,00C74510), ref: 00C77E73
?toInt@QString@@QBEHPA_NH@Z.QT5CORE(00000000,0000000A,?,45890000,BC8E89F0,00C74510), ref: 00C77E82
??1QString@@QAE@XZ.QT5CORE(?,45890000,BC8E89F0,00C74510), ref: 00C77E97
?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS(?,45890000,BC8E89F0,00C74510), ref: 00C77EAE
?size@QListData@@QBEHXZ.QT5CORE(?,45890000,BC8E89F0,00C74510), ref: 00C77EBB
?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS(?,45890000,BC8E89F0,00C74510), ref: 00C77F07
?size@QListData@@QBEHXZ.QT5CORE(?,45890000,BC8E89F0,00C74510), ref: 00C77F18

Part of subcall function 00C9B8C0: ?size@QListData@@QBEHXZ.QT5CORE(676E6AEE,00C744AC,6BABF570,00000000,00000000,00CB54EE,000000FF,?,00C77FA6,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C9B915
Part of subcall function 00C9B8C0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FA6,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C9B924
Part of subcall function 00C9B8C0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,00000000,?,00C77FA6,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C9B93B
Part of subcall function 00C9B8C0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FA6,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C9B95D
Part of subcall function 00C9B8C0: ?size@QListData@@QBEHXZ.QT5CORE(?,00C77FA6,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C9B973

Part of subcall function 00C6DE50: ?detach@QListData@@QAEPAUData@1@H@Z.QT5CORE(?,676E6AEE,?,00000001,00000001,00000001,00000001,?,?), ref: 00C6DE9C
Part of subcall function 00C6DE50: ?begin@QListData@@QBEPAPAXXZ.QT5CORE ref: 00C6DEAB
Part of subcall function 00C6DE50: ?end@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C6DEB4
Part of subcall function 00C6DE50: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C6DEBD

Part of subcall function 00C9B8C0: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(BC8E89F0,4D8BD783,?,?,?,00C77FA6,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C9BA24

Part of subcall function 00C95AD0: ?size@QListData@@QBEHXZ.QT5CORE(676E6AEE,00C744AC,00C744E4,00000000,00000000,00CB4DAE,000000FF,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC), ref: 00C95B01
Part of subcall function 00C95AD0: ?size@QListData@@QBEHXZ.QT5CORE(?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B14
Part of subcall function 00C95AD0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B34
Part of subcall function 00C95AD0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,00000000,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B48
Part of subcall function 00C95AD0: ?size@QListData@@QBEHXZ.QT5CORE(?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B50
Part of subcall function 00C95AD0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B64
Part of subcall function 00C95AD0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B6D
Part of subcall function 00C95AD0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B8F
Part of subcall function 00C95AD0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B98
Part of subcall function 00C95AD0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95BAF
Part of subcall function 00C95AD0: ?size@QListData@@QBEHXZ.QT5CORE(?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95BB7
Part of subcall function 00C95AD0: ?size@QListData@@QBEHXZ.QT5CORE(?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95BC5

Part of subcall function 00C6DFC0: ?detach@QListData@@QAEPAUData@1@H@Z.QT5CORE(?,676E6AEE,4D8BD6FF,00000000,4D8BD783,4D8BD783,?,?), ref: 00C6E00C
Part of subcall function 00C6DFC0: ?begin@QListData@@QBEPAPAXXZ.QT5CORE ref: 00C6E01B
Part of subcall function 00C6DFC0: ?end@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C6E024
Part of subcall function 00C6DFC0: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C6E02D

Part of subcall function 00C95AD0: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(BC8E89F0,?,?,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000), ref: 00C95C6D

?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS(?,45890000,BC8E89F0,00C74510), ref: 00C780B9

Strings

jng, xrefs: 00C76C66
@, xrefs: 00C7776A

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?at@$String@@$?size@$?dispose@Base@@Data@1@@$Data$?append@$?free$AbstractButton@@Checked@Data@$?begin@?number@U1@@V1@@$?detach@?end@?text@Data@1@Edit@@LineNodeTree@$?create?recalcInt@LeftMostNode@
String ID: @$jng
API String ID: 3960107449-2151177466
Opcode ID: 2ac62c57e0d5a24909f58c007ddb6cd7ae295ba4935eafb163ba1c50604a47f5
Instruction ID: ab05ceac9ffb956413556c60d1ee92847bdab760c44093ab1218edb771b35707
Opcode Fuzzy Hash: 2ac62c57e0d5a24909f58c007ddb6cd7ae295ba4935eafb163ba1c50604a47f5
Instruction Fuzzy Hash: 5AE23C75A10609DFCF08DFB5D859BADB7BAFF48310F144229E506A72A0DB31AD09CB51

Uniqueness

Uniqueness Score: -1.00%

Function 00C93320 Relevance: 317.5, APIs: 147, Strings: 34, Instructions: 711COMMON

Download Yara Rule

APIs

??0QString@@QAE@XZ.QT5CORE(676E6AEE), ref: 00C93357
?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A), ref: 00C9336A
?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z.QT5SQL(?,00000000,00000001), ref: 00C9337E
??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL ref: 00C9338A
??1QString@@QAE@XZ.QT5CORE ref: 00C93397
??4QString@@QAEAAV0@PBD@Z.QT5CORE(UPDATE settings SET scoreMode = :scoreMode, testGui = :testGui, testReport = :testReport, tesGui = :tesGui, tesReport = :tesReport,), ref: 00C933A5
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(sqrtTesGui = :sqrtTesGui, sqrtTesReport = :sqrtTesReport, vingrysGui = :vingrysGui, vingrysReport = :vingrysReport,), ref: 00C933B3
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(classgui = :classGui, classReport = :classReport, percentFirstGui = :percentFirstGui, percentFirstReport = :percentFirstReport,), ref: 00C933C1
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(percentSomeGui = :percentSomeGui, percentSomeReport = :percentSomeReport, percentExpGui = :percentExpGui, percentExpReport = :percentExpReport,), ref: 00C933CF
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(language = :language, illumination = :illumination, location = :location, industry = :industry, job = :job, experience = :experience, serialNum = :serialNum,), ref: 00C933DD
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(footerImgPath = :footerImgPath, footerText = :footerText), ref: 00C933EB
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C933F8
??0QVariant@@QAE@H@Z.QT5CORE(?), ref: 00C9340A
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:scoreMode,0000000A), ref: 00C9341D
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C9343D
??1QString@@QAE@XZ.QT5CORE ref: 00C93446
??1QVariant@@QAE@XZ.QT5CORE ref: 00C93459
??0QVariant@@QAE@H@Z.QT5CORE(?), ref: 00C93461
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:testGui,00000008), ref: 00C9346E
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C9348E
??1QString@@QAE@XZ.QT5CORE ref: 00C93497
??1QVariant@@QAE@XZ.QT5CORE ref: 00C934A4
??0QVariant@@QAE@H@Z.QT5CORE(?), ref: 00C934AC
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:testReport,0000000B), ref: 00C934B9
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C934D9
??1QString@@QAE@XZ.QT5CORE ref: 00C934E2
??1QVariant@@QAE@XZ.QT5CORE ref: 00C934EF
??0QVariant@@QAE@H@Z.QT5CORE(?), ref: 00C934F7
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:tesGui,00000007), ref: 00C93504
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C93524
??1QString@@QAE@XZ.QT5CORE ref: 00C9352D
??1QVariant@@QAE@XZ.QT5CORE ref: 00C9353A
??0QVariant@@QAE@H@Z.QT5CORE(?), ref: 00C93542
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:tesReport,0000000A), ref: 00C9354F
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C9356F
??1QString@@QAE@XZ.QT5CORE ref: 00C93578
??1QVariant@@QAE@XZ.QT5CORE ref: 00C93585
??0QVariant@@QAE@H@Z.QT5CORE(?), ref: 00C9358D
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:sqrtTesGui,0000000B), ref: 00C9359A
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C935BA
??1QString@@QAE@XZ.QT5CORE ref: 00C935C3
??1QVariant@@QAE@XZ.QT5CORE ref: 00C935D0
??0QVariant@@QAE@H@Z.QT5CORE(?), ref: 00C935D8
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:sqrtTesReport,0000000E), ref: 00C935E5
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C93605
??1QString@@QAE@XZ.QT5CORE ref: 00C9360E
??1QVariant@@QAE@XZ.QT5CORE ref: 00C9361B
??0QVariant@@QAE@H@Z.QT5CORE(?), ref: 00C93623
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:vingrysGui,0000000B), ref: 00C93630
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C93650
??1QString@@QAE@XZ.QT5CORE ref: 00C93659
??1QVariant@@QAE@XZ.QT5CORE ref: 00C93666
??0QVariant@@QAE@H@Z.QT5CORE(?), ref: 00C9366E
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:vingrysReport,0000000E), ref: 00C9367B
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C9369B
??1QString@@QAE@XZ.QT5CORE ref: 00C936A4
??1QVariant@@QAE@XZ.QT5CORE ref: 00C936B1
??0QVariant@@QAE@H@Z.QT5CORE(?), ref: 00C936B9
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:classGui,00000009), ref: 00C936C6
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C936E6
??1QString@@QAE@XZ.QT5CORE ref: 00C936EF
??1QVariant@@QAE@XZ.QT5CORE ref: 00C936FC
??0QVariant@@QAE@H@Z.QT5CORE(?), ref: 00C93704
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:classReport,0000000C), ref: 00C93711
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C93731
??1QString@@QAE@XZ.QT5CORE ref: 00C9373A
??1QVariant@@QAE@XZ.QT5CORE ref: 00C93747
??0QVariant@@QAE@H@Z.QT5CORE(?), ref: 00C9374F
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:percentFirstGui,00000010), ref: 00C9375C
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C9377C
??1QString@@QAE@XZ.QT5CORE ref: 00C93785
??1QVariant@@QAE@XZ.QT5CORE ref: 00C93792
??0QVariant@@QAE@H@Z.QT5CORE(?), ref: 00C9379A
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:percentFirstReport,00000013), ref: 00C937A7
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C937C7
??1QString@@QAE@XZ.QT5CORE ref: 00C937D0
??1QVariant@@QAE@XZ.QT5CORE ref: 00C937DD
??0QVariant@@QAE@H@Z.QT5CORE(?), ref: 00C937E5
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:percentSomeGui,0000000F), ref: 00C937F2
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C93812
??1QString@@QAE@XZ.QT5CORE ref: 00C9381B
??1QVariant@@QAE@XZ.QT5CORE ref: 00C93828
??0QVariant@@QAE@H@Z.QT5CORE(?), ref: 00C93830
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:percentSomeReport,00000012), ref: 00C9383D
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C9385D
??1QString@@QAE@XZ.QT5CORE ref: 00C93866
??1QVariant@@QAE@XZ.QT5CORE ref: 00C93873
??0QVariant@@QAE@H@Z.QT5CORE(?), ref: 00C9387B
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:percentExpGui,0000000E), ref: 00C93888
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C938A8
??1QString@@QAE@XZ.QT5CORE ref: 00C938B1
??1QVariant@@QAE@XZ.QT5CORE ref: 00C938BE
??0QVariant@@QAE@H@Z.QT5CORE(?), ref: 00C938C6
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:percentExpReport,00000011), ref: 00C938D3
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C938F3
??1QString@@QAE@XZ.QT5CORE ref: 00C938FC
??1QVariant@@QAE@XZ.QT5CORE ref: 00C93909
??0QVariant@@QAE@H@Z.QT5CORE(?), ref: 00C93911
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:language,00000009), ref: 00C9391E
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C9393E
??1QString@@QAE@XZ.QT5CORE ref: 00C93947
??1QVariant@@QAE@XZ.QT5CORE ref: 00C93954
??0QVariant@@QAE@H@Z.QT5CORE(?), ref: 00C9395C
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:illumination,0000000D), ref: 00C93969
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C93989
??1QString@@QAE@XZ.QT5CORE ref: 00C93992
??1QVariant@@QAE@XZ.QT5CORE ref: 00C9399F
??0QVariant@@QAE@H@Z.QT5CORE(?), ref: 00C939A7
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:location,00000009), ref: 00C939B4
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C939D4
??1QString@@QAE@XZ.QT5CORE ref: 00C939DD
??1QVariant@@QAE@XZ.QT5CORE ref: 00C939EA
??0QVariant@@QAE@H@Z.QT5CORE(?), ref: 00C939F2
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:industry,00000009), ref: 00C939FF
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C93A1F
??1QString@@QAE@XZ.QT5CORE ref: 00C93A28
??1QVariant@@QAE@XZ.QT5CORE ref: 00C93A35
??0QVariant@@QAE@H@Z.QT5CORE(?), ref: 00C93A3D
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:job,00000004), ref: 00C93A4A
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C93A6A
??1QString@@QAE@XZ.QT5CORE ref: 00C93A73
??1QVariant@@QAE@XZ.QT5CORE ref: 00C93A80
??0QVariant@@QAE@H@Z.QT5CORE(?), ref: 00C93A88
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:experience,0000000B), ref: 00C93A95
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C93AB5
??1QString@@QAE@XZ.QT5CORE ref: 00C93ABE
??1QVariant@@QAE@XZ.QT5CORE ref: 00C93ACB
??0QVariant@@QAE@H@Z.QT5CORE(?), ref: 00C93AD3
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:serialNum,0000000A), ref: 00C93AE0
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C93B06
??1QString@@QAE@XZ.QT5CORE ref: 00C93B0B
??1QVariant@@QAE@XZ.QT5CORE ref: 00C93B18
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C93B21
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:footerImgPath,0000000E), ref: 00C93B32
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C93B52
??1QString@@QAE@XZ.QT5CORE ref: 00C93B57
??1QVariant@@QAE@XZ.QT5CORE ref: 00C93B64
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C93B6D
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:footerText,0000000B), ref: 00C93B7E
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C93B9E
??1QString@@QAE@XZ.QT5CORE ref: 00C93BA3
??1QVariant@@QAE@XZ.QT5CORE ref: 00C93BB0
?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C93BB5
??1QSqlQuery@@QAE@XZ.QT5SQL ref: 00C93BBE
??1QString@@QAE@XZ.QT5CORE ref: 00C93BC7
??1QString@@QAE@XZ.QT5CORE ref: 00C93BD0
??1QString@@QAE@XZ.QT5CORE ref: 00C93BD9

Strings

sqrtTesGui = :sqrtTesGui, sqrtTesReport = :sqrtTesReport, vingrysGui = :vingrysGui, vingrysReport = :vingrysReport,, xrefs: 00C933AB
:testGui, xrefs: 00C93465
jng, xrefs: 00C93337
:illumination, xrefs: 00C93960
footerImgPath = :footerImgPath, footerText = :footerText, xrefs: 00C933E3
:industry, xrefs: 00C939F6
:experience, xrefs: 00C93A8C
language = :language, illumination = :illumination, location = :location, industry = :industry, job = :job, experience = :experience, serialNum = :serialNum,, xrefs: 00C933D5
:classReport, xrefs: 00C93708
UPDATE settings SET scoreMode = :scoreMode, testGui = :testGui, testReport = :testReport, tesGui = :tesGui, tesReport = :tesReport,, xrefs: 00C9339D
:vingrysGui, xrefs: 00C9362B
:scoreMode, xrefs: 00C93414
:footerImgPath, xrefs: 00C93B29
:tesReport, xrefs: 00C93546
:percentFirstGui, xrefs: 00C93753
:percentExpGui, xrefs: 00C9387F
:percentFirstReport, xrefs: 00C9379E
:classGui, xrefs: 00C936BD
classgui = :classGui, classReport = :classReport, percentFirstGui = :percentFirstGui, percentFirstReport = :percentFirstReport,, xrefs: 00C933B9
:footerText, xrefs: 00C93B75
percentSomeGui = :percentSomeGui, percentSomeReport = :percentSomeReport, percentExpGui = :percentExpGui, percentExpReport = :percentExpReport,, xrefs: 00C933C7
:, xrefs: 00C93B89
:tesGui, xrefs: 00C934FB
:vingrysReport, xrefs: 00C93672
:language, xrefs: 00C93915
:testReport, xrefs: 00C934B0
:sqrtTesReport, xrefs: 00C935DC
:job, xrefs: 00C93A41
:percentSomeReport, xrefs: 00C93834
:percentExpReport, xrefs: 00C938CA
:serialNum, xrefs: 00C93AD7
:percentSomeGui, xrefs: 00C937E9
:sqrtTesGui, xrefs: 00C93591
:location, xrefs: 00C939AB

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Variant@@$Query@@$?bind?fromArrayAscii_helper@Data@Flag@Flags@ParamSql@@@@@TypeTypedValue@$?append@$String@@@$?database@?exec@?number@?prepare@Database@@Database@@@String@@_
String ID: :$:classGui$:classReport$:experience$:footerImgPath$:footerText$:illumination$:industry$:job$:language$:location$:percentExpGui$:percentExpReport$:percentFirstGui$:percentFirstReport$:percentSomeGui$:percentSomeReport$:scoreMode$:serialNum$:sqrtTesGui$:sqrtTesReport$:tesGui$:tesReport$:testGui$:testReport$:vingrysGui$:vingrysReport$UPDATE settings SET scoreMode = :scoreMode, testGui = :testGui, testReport = :testReport, tesGui = :tesGui, tesReport = :tesReport,$classgui = :classGui, classReport = :classReport, percentFirstGui = :percentFirstGui, percentFirstReport = :percentFirstReport,$footerImgPath = :footerImgPath, footerText = :footerText$language = :language, illumination = :illumination, location = :location, industry = :industry, job = :job, experience = :experience, serialNum = :serialNum,$percentSomeGui = :percentSomeGui, percentSomeReport = :percentSomeReport, percentExpGui = :percentExpGui, percentExpReport = :percentExpReport,$sqrtTesGui = :sqrtTesGui, sqrtTesReport = :sqrtTesReport, vingrysGui = :vingrysGui, vingrysReport = :vingrysReport,$jng
API String ID: 1999264458-3471593067
Opcode ID: 4571922f5c5d10957afa9bff8ad5d33f7d6ffe9bca1c6270afc522bb91a3ea3c
Instruction ID: f1fd5c4283df29447a8f4a45d92cdb1ad7c48e2f6403cee541b5247ba853bd1a
Opcode Fuzzy Hash: 4571922f5c5d10957afa9bff8ad5d33f7d6ffe9bca1c6270afc522bb91a3ea3c
Instruction Fuzzy Hash: 9662C57090024DEEDF05DFA4ED98BDE7FB8AF15344F108159F505A72A0EB749A09CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 00C98E20 Relevance: 235.7, APIs: 133, Strings: 1, Instructions: 1208COMMON

Download Yara Rule

APIs

Part of subcall function 00C95E70: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(00C98E6B,00C98E6B,676E6AEE,?,?,?,?,00CB51B0,00CAF106,000000FF,?,00C98E6B,676E6AEE,6BF77020), ref: 00C95EF4

_libm_sse2_sin_precise.API-MS-WIN-CRT-MATH-L1-1-0(676E6AEE,6BF77020,?), ref: 00C98EAB
_libm_sse2_cos_precise.API-MS-WIN-CRT-MATH-L1-1-0(676E6AEE,6BF77020,?), ref: 00C98EBD
??0QColor@@QAE@W4GlobalColor@Qt@@@Z.QT5GUI(00000005,?,676E6AEE,6BF77020,?), ref: 00C98F90
??0QLineF@@QAE@ABVQLine@@@Z.QT5CORE(?), ref: 00C98FA3
??0QPen@@QAE@ABVQColor@@@Z.QT5GUI(?), ref: 00C98FB3
?addLine@QGraphicsScene@@QAEPAVQGraphicsLineItem@@ABVQLineF@@ABVQPen@@@Z.QT5WIDGETS(?,00000000), ref: 00C98FCB
??1QPen@@QAE@XZ.QT5GUI ref: 00C98FDE
new.LIBCMT ref: 00C98FE6
??0QGraphicsEllipseItem@@QAE@NNNNPAVQGraphicsItem@@@Z.QT5WIDGETS(?,?,?,?,?,?,?,00000000), ref: 00C99083
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?,?,?,?,?,?,?,?,?,00000000), ref: 00C990AB
??0QBrush@@QAE@ABVQColor@@W4BrushStyle@Qt@@@Z.QT5GUI(00000000,00000001,?,?,?,?,?,?,?,00000000), ref: 00C990BB
?setBrush@QAbstractGraphicsShapeItem@@QAEXABVQBrush@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,00000000), ref: 00C990CB
??1QBrush@@QAE@XZ.QT5GUI(?,?,?,?,?,?,?,00000000), ref: 00C990DE
?addItem@QGraphicsScene@@QAEXPAVQGraphicsItem@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,00000000), ref: 00C990E8
?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A,?,?,?,?,?,?,?,?,?,00000000), ref: 00C9914A
?setPlainText@QGraphicsTextItem@@QAEXABVQString@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00C9915D
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00C99170
?font@QGraphicsTextItem@@QBE?AVQFont@@XZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00C9917F
??0QFontMetrics@@QAE@ABVQFont@@@Z.QT5GUI(00000000,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00C99193
??1QFontMetrics@@QAE@XZ.QT5GUI(?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00C991A3
?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00C991B6
?width@QFontMetrics@@QBEHABVQString@@H@Z.QT5GUI(00000000,000000FF), ref: 00C991CC
?height@QFontMetrics@@QBEHXZ.QT5GUI(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00C991F5
_libm_sse2_sqrt_precise.API-MS-WIN-CRT-MATH-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00C9921D
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00C99235
?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A), ref: 00C99245
?width@QFontMetrics@@QBEHABVQString@@H@Z.QT5GUI(00000000,000000FF), ref: 00C992B3
?height@QFontMetrics@@QBEHXZ.QT5GUI ref: 00C9930C
?setPos@QGraphicsItem@@QAEXABVQPointF@@@Z.QT5WIDGETS(?), ref: 00C9934E
??1QString@@QAE@XZ.QT5CORE ref: 00C9935E
?addItem@QGraphicsScene@@QAEXPAVQGraphicsItem@@@Z.QT5WIDGETS(?), ref: 00C99368
??0QGraphicsEllipseItem@@QAE@NNNNPAVQGraphicsItem@@@Z.QT5WIDGETS(?,?,?,?,?,?,?,00000000,?), ref: 00C9955F
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C99587
??0QBrush@@QAE@ABVQColor@@W4BrushStyle@Qt@@@Z.QT5GUI(00000000,00000001,?,?,?,?,?,?,?,00000000,?), ref: 00C99597
?setBrush@QAbstractGraphicsShapeItem@@QAEXABVQBrush@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,00000000,?), ref: 00C995A7
??1QBrush@@QAE@XZ.QT5GUI(?,?,?,?,?,?,?,00000000,?), ref: 00C995BA
?addItem@QGraphicsScene@@QAEXPAVQGraphicsItem@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,00000000,?), ref: 00C995C4
??0QGraphicsTextItem@@QAE@PAVQGraphicsItem@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,00000000,?), ref: 00C995E7
?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C99626
?setPlainText@QGraphicsTextItem@@QAEXABVQString@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C99639
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C9964C
?font@QGraphicsTextItem@@QBE?AVQFont@@XZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C9965B
??0QFontMetrics@@QAE@ABVQFont@@@Z.QT5GUI(00000000,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C9966F
??1QFontMetrics@@QAE@XZ.QT5GUI(?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C9967F
?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C99692
?width@QFontMetrics@@QBEHABVQString@@H@Z.QT5GUI(00000000,000000FF), ref: 00C996A8
?height@QFontMetrics@@QBEHXZ.QT5GUI(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C996D1
_libm_sse2_sqrt_precise.API-MS-WIN-CRT-MATH-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C996F9
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C99711
?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A), ref: 00C99721
?width@QFontMetrics@@QBEHABVQString@@H@Z.QT5GUI(00000000,000000FF), ref: 00C9978F
?height@QFontMetrics@@QBEHXZ.QT5GUI ref: 00C997E0
?setPos@QGraphicsItem@@QAEXABVQPointF@@@Z.QT5WIDGETS(?), ref: 00C99822
??1QString@@QAE@XZ.QT5CORE ref: 00C99832
?addItem@QGraphicsScene@@QAEXPAVQGraphicsItem@@@Z.QT5WIDGETS(?), ref: 00C9983C
_libm_sse2_sin_precise.API-MS-WIN-CRT-MATH-L1-1-0(676E6AEE,6BF77020,?), ref: 00C9985E
_libm_sse2_cos_precise.API-MS-WIN-CRT-MATH-L1-1-0(676E6AEE,6BF77020,?), ref: 00C99873
??0QColor@@QAE@W4GlobalColor@Qt@@@Z.QT5GUI(00000005,676E6AEE,6BF77020,?), ref: 00C9993A
??0QLineF@@QAE@ABVQLine@@@Z.QT5CORE(?), ref: 00C9994D
??0QPen@@QAE@ABVQColor@@@Z.QT5GUI(?), ref: 00C9995D
?addLine@QGraphicsScene@@QAEPAVQGraphicsLineItem@@ABVQLineF@@ABVQPen@@@Z.QT5WIDGETS(?,00000000), ref: 00C99975
??1QPen@@QAE@XZ.QT5GUI ref: 00C99988
new.LIBCMT ref: 00C9999F
??0QGraphicsEllipseItem@@QAE@NNNNPAVQGraphicsItem@@@Z.QT5WIDGETS(?,?,?,?,?,?,?,00000000,?), ref: 00C99A3C
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C99A64
??0QBrush@@QAE@ABVQColor@@W4BrushStyle@Qt@@@Z.QT5GUI(00000000,00000001,?,?,?,?,?,?,?,00000000,?), ref: 00C99A74
?setBrush@QAbstractGraphicsShapeItem@@QAEXABVQBrush@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,00000000,?), ref: 00C99A84
??1QBrush@@QAE@XZ.QT5GUI(?,?,?,?,?,?,?,00000000,?), ref: 00C99A97
?addItem@QGraphicsScene@@QAEXPAVQGraphicsItem@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,00000000,?), ref: 00C99AA1
??0QGraphicsTextItem@@QAE@PAVQGraphicsItem@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,00000000,?), ref: 00C99AC4
?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C99B03
?setPlainText@QGraphicsTextItem@@QAEXABVQString@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C99B16
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C99B29
?font@QGraphicsTextItem@@QBE?AVQFont@@XZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C99B38
??0QFontMetrics@@QAE@ABVQFont@@@Z.QT5GUI(00000000,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C99B4C
??1QFontMetrics@@QAE@XZ.QT5GUI(?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C99B5C
?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C99B6F
?width@QFontMetrics@@QBEHABVQString@@H@Z.QT5GUI(00000000,000000FF), ref: 00C99B85
?height@QFontMetrics@@QBEHXZ.QT5GUI(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C99BAE
_libm_sse2_sqrt_precise.API-MS-WIN-CRT-MATH-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C99BD6
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C99BEE
?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A), ref: 00C99BFE
?width@QFontMetrics@@QBEHABVQString@@H@Z.QT5GUI(00000000,000000FF), ref: 00C99C6C
?height@QFontMetrics@@QBEHXZ.QT5GUI ref: 00C99CBD
?setPos@QGraphicsItem@@QAEXABVQPointF@@@Z.QT5WIDGETS(?), ref: 00C99CF7
??1QString@@QAE@XZ.QT5CORE ref: 00C99D07
?addItem@QGraphicsScene@@QAEXPAVQGraphicsItem@@@Z.QT5WIDGETS(?), ref: 00C99D11
new.LIBCMT ref: 00C99AA9

Part of subcall function 00CAC0B7: Concurrency::cancel_current_task.LIBCPMT ref: 00CAC0D6

_libm_sse2_sin_precise.API-MS-WIN-CRT-MATH-L1-1-0(676E6AEE,6BF77020,?), ref: 00C99D22
_libm_sse2_cos_precise.API-MS-WIN-CRT-MATH-L1-1-0(676E6AEE,6BF77020,?), ref: 00C99D37
??0QColor@@QAE@W4GlobalColor@Qt@@@Z.QT5GUI(00000005,676E6AEE,6BF77020,?), ref: 00C99DFB
??0QLineF@@QAE@ABVQLine@@@Z.QT5CORE(?), ref: 00C99E0E
??0QPen@@QAE@ABVQColor@@@Z.QT5GUI(?), ref: 00C99E1E
?addLine@QGraphicsScene@@QAEPAVQGraphicsLineItem@@ABVQLineF@@ABVQPen@@@Z.QT5WIDGETS(?,00000000), ref: 00C99E36
??1QPen@@QAE@XZ.QT5GUI ref: 00C99E49
new.LIBCMT ref: 00C995CC

Part of subcall function 00CAC0B7: _callnewh.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0BF

new.LIBCMT ref: 00C99E60
??0QGraphicsEllipseItem@@QAE@NNNNPAVQGraphicsItem@@@Z.QT5WIDGETS(?,?,?,?,?,?,?,00000000,?), ref: 00C99EFD
??0QGraphicsTextItem@@QAE@PAVQGraphicsItem@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,00000000), ref: 00C9910B

Part of subcall function 00C95C90: ?append@QListData@@QAEPAPAXXZ.QT5CORE(676E6AEE,6B62DA60,6B62B6F0,00000000,?,?,00CB4DD0,000000FF,?,00C8160E,?,676E6AEE,6B62DA60,6B62B6F0), ref: 00C95CF9

new.LIBCMT ref: 00C990F0

Part of subcall function 00CAC0B7: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0DE

_libm_sse2_sin_precise.API-MS-WIN-CRT-MATH-L1-1-0(676E6AEE,6BF77020,?), ref: 00C9938A
_libm_sse2_cos_precise.API-MS-WIN-CRT-MATH-L1-1-0(676E6AEE,6BF77020,?), ref: 00C9939C
??0QColor@@QAE@W4GlobalColor@Qt@@@Z.QT5GUI(00000005,676E6AEE,6BF77020,?), ref: 00C99463
??0QLineF@@QAE@ABVQLine@@@Z.QT5CORE(?), ref: 00C99476
??0QPen@@QAE@ABVQColor@@@Z.QT5GUI(?), ref: 00C99486
?addLine@QGraphicsScene@@QAEPAVQGraphicsLineItem@@ABVQLineF@@ABVQPen@@@Z.QT5WIDGETS(?,00000000), ref: 00C9949E
??1QPen@@QAE@XZ.QT5GUI ref: 00C994B1
new.LIBCMT ref: 00C994C8
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C99F25
??0QBrush@@QAE@ABVQColor@@W4BrushStyle@Qt@@@Z.QT5GUI(00000000,00000001,?,?,?,?,?,?,?,00000000,?), ref: 00C99F35
?setBrush@QAbstractGraphicsShapeItem@@QAEXABVQBrush@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,00000000,?), ref: 00C99F45
??1QBrush@@QAE@XZ.QT5GUI(?,?,?,?,?,?,?,00000000,?), ref: 00C99F58
?addItem@QGraphicsScene@@QAEXPAVQGraphicsItem@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,00000000,?), ref: 00C99F62
new.LIBCMT ref: 00C99F6A
??0QGraphicsTextItem@@QAE@PAVQGraphicsItem@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,00000000,?), ref: 00C99F85
?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C99FC4
?setPlainText@QGraphicsTextItem@@QAEXABVQString@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C99FD7
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C99FEA
?font@QGraphicsTextItem@@QBE?AVQFont@@XZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C99FF9
??0QFontMetrics@@QAE@ABVQFont@@@Z.QT5GUI(00000000,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C9A00D
??1QFontMetrics@@QAE@XZ.QT5GUI(?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C9A01D
?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C9A030
?width@QFontMetrics@@QBEHABVQString@@H@Z.QT5GUI(00000000,000000FF), ref: 00C9A046
?height@QFontMetrics@@QBEHXZ.QT5GUI(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C9A06F
_libm_sse2_sqrt_precise.API-MS-WIN-CRT-MATH-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C9A097
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00C9A0AF
?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A), ref: 00C9A0BF
?width@QFontMetrics@@QBEHABVQString@@H@Z.QT5GUI(00000000,000000FF), ref: 00C9A12D
?height@QFontMetrics@@QBEHXZ.QT5GUI ref: 00C9A186
?setPos@QGraphicsItem@@QAEXABVQPointF@@@Z.QT5WIDGETS(?), ref: 00C9A1C0
??1QString@@QAE@XZ.QT5CORE ref: 00C9A1D0
?addItem@QGraphicsScene@@QAEXPAVQGraphicsItem@@@Z.QT5WIDGETS(?), ref: 00C9A1DA
??1QFontMetrics@@QAE@XZ.QT5GUI ref: 00C9A1ED

Strings

jng, xrefs: 00C98E4B

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Graphics$String@@$Item@@$FontMetrics@@$Item@@@$?add?number@?setLineScene@@Text$?height@?width@Brush@@Color@@Item@Pen@@Qt@@@$Data@@List$?at@?font@AbstractBrushBrush@Brush@@@Color@Color@@@EllipseF@@@Font@@Font@@@GlobalLine@Line@@@Pen@@@PlainPointPos@ShapeString@@@Style@Text@_libm_sse2_cos_precise_libm_sse2_sin_precise_libm_sse2_sqrt_precise$?append@?dispose@Concurrency::cancel_current_taskData@1@@_callnewhmalloc
String ID: jng
API String ID: 3012506177-1186463058
Opcode ID: cdc477ffb5456902203c5971c402dc896c3c4ee2a815f7bd75ad347372fdf517
Instruction ID: c4b31652c38bce44ba7897791d70b7eb4e7b3654712bfbef90ceb3303f0f6fde
Opcode Fuzzy Hash: cdc477ffb5456902203c5971c402dc896c3c4ee2a815f7bd75ad347372fdf517
Instruction Fuzzy Hash: 52C26C31D10B599EDB13DF71C8557DDBB78BF6A380F10835AE41AB62A1EB30258ADB40

Uniqueness

Uniqueness Score: -1.00%

Function 00C7DE98 Relevance: 210.5, APIs: 115, Strings: 5, Instructions: 520COMMON

Download Yara Rule

APIs

?currentText@QComboBox@@QBE?AVQString@@XZ.QT5WIDGETS(?), ref: 00C7DEAE
??8@YA_NABVQString@@0@Z.QT5CORE(00000000), ref: 00C7DEB6
??1QString@@QAE@XZ.QT5CORE ref: 00C7DEC4
??1QString@@QAE@XZ.QT5CORE ref: 00C7DED1
?text@QLineEdit@@QBE?AVQString@@XZ.QT5WIDGETS(?), ref: 00C7DEE5

Part of subcall function 00C623D0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00CB35BE), ref: 00C62405
Part of subcall function 00C623D0: ?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(000000FF,00000000,000000FF), ref: 00C62422
Part of subcall function 00C623D0: ?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE(00000000), ref: 00C62435
Part of subcall function 00C623D0: ??1QString@@QAE@XZ.QT5CORE ref: 00C6243E

?currentText@QComboBox@@QBE?AVQString@@XZ.QT5WIDGETS(?), ref: 00C7DF22
??8@YA_NABVQString@@0@Z.QT5CORE(00000000,00000000), ref: 00C7DF2A
??1QString@@QAE@XZ.QT5CORE ref: 00C7DF38
??1QString@@QAE@XZ.QT5CORE ref: 00C7DF45
?text@QLineEdit@@QBE?AVQString@@XZ.QT5WIDGETS(?), ref: 00C7DF59
??1QString@@QAE@XZ.QT5CORE ref: 00C7DF83
??1QString@@QAE@XZ.QT5CORE ref: 00C7DF90
?currentText@QComboBox@@QBE?AVQString@@XZ.QT5WIDGETS(?), ref: 00C7DFBB
??8@YA_NABVQString@@0@Z.QT5CORE(00000000,00000000), ref: 00C7DFC3
??1QString@@QAE@XZ.QT5CORE ref: 00C7DFD1
??1QString@@QAE@XZ.QT5CORE ref: 00C7DFDE
??4QString@@QAEAAV0@PBD@Z.QT5CORE(INSERT INTO testSearch SELECT * FROM tests WHERE comments GLOB :search), ref: 00C7DFF0
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C7E003
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C7E00C
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:search,00000007), ref: 00C7E01D
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C7E8E3

Strings

Ends With, xrefs: 00C7DF04
SELECT testSearch.* , users.* FROM testSearch INNER JOIN users ON testSearch.userID = users.id, xrefs: 00C7E90A
:search, xrefs: 00C7E014
Comments, xrefs: 00C7DF9D
INSERT INTO testSearch SELECT * FROM tests WHERE comments GLOB :search, xrefs: 00C7DFE8

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$??8@?currentBox@@ComboString@@0@Text@$?from?text@Edit@@LineQuery@@String@@@Variant@@$?append@?bind?prepare@ArrayAscii_helper@Data@Flag@Flags@ParamSql@@@@@TypeTypedUtf8@V0@@V1@@Value@
String ID: :search$Comments$Ends With$INSERT INTO testSearch SELECT * FROM tests WHERE comments GLOB :search$SELECT testSearch.* , users.* FROM testSearch INNER JOIN users ON testSearch.userID = users.id
API String ID: 2882654252-904275258
Opcode ID: 7724a4375ac6b88a04e8f17af215148f97142eb6684bfa0b954932aba838298d
Instruction ID: 3b79e6639f07ce69e7a85c3c64c659210230b6920fc6764ea5b984f202069c34
Opcode Fuzzy Hash: 7724a4375ac6b88a04e8f17af215148f97142eb6684bfa0b954932aba838298d
Instruction Fuzzy Hash: 2222E57540024DDBDF15EFA4ED98BEE7BB8AF24304F004259E906931A1EE34AA4DCF61

Uniqueness

Uniqueness Score: -1.00%

Function 00C94080 Relevance: 194.7, APIs: 94, Strings: 17, Instructions: 425COMMON

Download Yara Rule

APIs

?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A,676E6AEE,6BA8CC60,6BABF570), ref: 00C940B8
?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z.QT5SQL(?,00000000,00000001), ref: 00C940CB
??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL ref: 00C940D7
??1QString@@QAE@XZ.QT5CORE ref: 00C940E0
??0QString@@QAE@XZ.QT5CORE ref: 00C940E9
??4QString@@QAEAAV0@PBD@Z.QT5CORE(UPDATE users SET first = :first, middle = :middle, last = :last, refNum = :refNum, DOB = :DOB, gender = :gender, location = :location, industry = :industry, experience = :experience, job = :job WHERE first = :oldFirst AND middle = :oldMiddle AND last = :oldLas), ref: 00C940FB
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C94108
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C94115
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:first,00000006), ref: 00C9412C
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C94151
??1QString@@QAE@XZ.QT5CORE ref: 00C94156
??1QVariant@@QAE@XZ.QT5CORE ref: 00C94169
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C94172
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:middle,00000007), ref: 00C94183
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C941A2
??1QString@@QAE@XZ.QT5CORE ref: 00C941A7
??1QVariant@@QAE@XZ.QT5CORE ref: 00C941B4
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C941BD
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:last,00000005), ref: 00C941CE
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C941ED
??1QString@@QAE@XZ.QT5CORE ref: 00C941F2
??1QVariant@@QAE@XZ.QT5CORE ref: 00C941FF
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C94208
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:refNum,00000007), ref: 00C94219
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C94238
??1QString@@QAE@XZ.QT5CORE ref: 00C9423D
??1QVariant@@QAE@XZ.QT5CORE ref: 00C9424A
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C94253
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:DOB,00000004), ref: 00C94264
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C94283
??1QString@@QAE@XZ.QT5CORE ref: 00C94288
??1QVariant@@QAE@XZ.QT5CORE ref: 00C94295
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C9429E
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:gender,00000007), ref: 00C942AF
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C942CE
??1QString@@QAE@XZ.QT5CORE ref: 00C942D3
??1QVariant@@QAE@XZ.QT5CORE ref: 00C942E0
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C942E9
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:location,00000009), ref: 00C942FA
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C94319
??1QString@@QAE@XZ.QT5CORE ref: 00C9431E
??1QVariant@@QAE@XZ.QT5CORE ref: 00C9432B
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C94334
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:industry,00000009), ref: 00C94345
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C94364
??1QString@@QAE@XZ.QT5CORE ref: 00C94369
??1QVariant@@QAE@XZ.QT5CORE ref: 00C94376
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C9437F
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:experience,0000000B), ref: 00C94390
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C943AF
??1QString@@QAE@XZ.QT5CORE ref: 00C943B4
??1QVariant@@QAE@XZ.QT5CORE ref: 00C943C1
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C943CA
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:job,00000004), ref: 00C943DB
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C943FA
??1QString@@QAE@XZ.QT5CORE ref: 00C943FF
??1QVariant@@QAE@XZ.QT5CORE ref: 00C9440C
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C94415
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:oldFirst,00000009), ref: 00C94426
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C94445
??1QString@@QAE@XZ.QT5CORE ref: 00C9444A
??1QVariant@@QAE@XZ.QT5CORE ref: 00C94457
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C94460
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:oldMiddle,0000000A), ref: 00C94471
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C94490
??1QString@@QAE@XZ.QT5CORE ref: 00C94495
??1QVariant@@QAE@XZ.QT5CORE ref: 00C944A2
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C944AB
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:oldLast,00000008), ref: 00C944BC
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C944DB
??1QString@@QAE@XZ.QT5CORE ref: 00C944E0
??1QVariant@@QAE@XZ.QT5CORE ref: 00C944ED
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C944F6
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:OLDDOB,00000007), ref: 00C94507
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C94526
??1QString@@QAE@XZ.QT5CORE ref: 00C9452B
??1QVariant@@QAE@XZ.QT5CORE ref: 00C94538
?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C9453D
??1QString@@QAE@XZ.QT5CORE ref: 00C94546
??1QSqlQuery@@QAE@XZ.QT5SQL ref: 00C9454F
??1QString@@QAE@XZ.QT5CORE ref: 00C94558
??1QString@@QAE@XZ.QT5CORE ref: 00C94561
??1QString@@QAE@XZ.QT5CORE ref: 00C9456A
??1QString@@QAE@XZ.QT5CORE ref: 00C94573
??1QString@@QAE@XZ.QT5CORE ref: 00C9457C
??1QString@@QAE@XZ.QT5CORE ref: 00C94585
??1QString@@QAE@XZ.QT5CORE ref: 00C9458E
??1QString@@QAE@XZ.QT5CORE ref: 00C94597
??1QString@@QAE@XZ.QT5CORE ref: 00C945A0
??1QString@@QAE@XZ.QT5CORE ref: 00C945A9
??1QString@@QAE@XZ.QT5CORE ref: 00C945B2
??1QString@@QAE@XZ.QT5CORE ref: 00C945BB
??1QString@@QAE@XZ.QT5CORE ref: 00C945C4
??1QString@@QAE@XZ.QT5CORE ref: 00C945CD

Strings

:middle, xrefs: 00C9417E
jng, xrefs: 00C94097
:industry, xrefs: 00C9433C
:experience, xrefs: 00C94387
:refNum, xrefs: 00C94210
:gender, xrefs: 00C942A6
:oldMiddle, xrefs: 00C94468
:OLDDOB, xrefs: 00C944FE
:last, xrefs: 00C941C5
UPDATE users SET first = :first, middle = :middle, last = :last, refNum = :refNum, DOB = :DOB, gender = :gender, location = :location, industry = :industry, experience = :experience, job = :job WHERE first = :oldFirst AND middle = :oldMiddle AND last = :oldLas, xrefs: 00C940EF
:oldFirst, xrefs: 00C9441D
:first, xrefs: 00C94123
:DOB, xrefs: 00C9425B
:job, xrefs: 00C943D2
-, xrefs: 00C9450F
:oldLast, xrefs: 00C944B3
:location, xrefs: 00C942F1

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Variant@@$Query@@$String@@@$?bind?fromArrayAscii_helper@Data@Flag@Flags@ParamSql@@@@@TypeTypedValue@$?database@?exec@?number@?prepare@Database@@Database@@@String@@_
String ID: -$:DOB$:OLDDOB$:experience$:first$:gender$:industry$:job$:last$:location$:middle$:oldFirst$:oldLast$:oldMiddle$:refNum$UPDATE users SET first = :first, middle = :middle, last = :last, refNum = :refNum, DOB = :DOB, gender = :gender, location = :location, industry = :industry, experience = :experience, job = :job WHERE first = :oldFirst AND middle = :oldMiddle AND last = :oldLas$jng
API String ID: 2937812176-1516360291
Opcode ID: 575b409bd6edec5239fb9a96e5e195e6becba2d5f4ae0c3346fc199b94f73337
Instruction ID: 7b6d8182ff033d617c215145180e8cb049eccaaab470ab35b6bfe14f33b95eb0
Opcode Fuzzy Hash: 575b409bd6edec5239fb9a96e5e195e6becba2d5f4ae0c3346fc199b94f73337
Instruction Fuzzy Hash: 1112A77580014EDFDF05DBA8EC99BEEBBB8FF18304F144169E502A3190EA74564DDBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00C7DE66 Relevance: 193.0, APIs: 106, Strings: 4, Instructions: 453COMMON

Download Yara Rule

APIs

?text@QLineEdit@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7DE71
??4QString@@QAEAAV0@$$QAV0@@Z.QT5CORE(00000000), ref: 00C7DE7B
??1QString@@QAE@XZ.QT5CORE ref: 00C7DF90

Part of subcall function 00C7FB10: ?tr@QMetaObject@@QBE?AVQString@@PBD0H@Z.QT5CORE(00C7BAD1,00C7BAD1,00C7BAD1,00C7BAD1,?,00C7BAD1,?,Comments,00000000), ref: 00C7FB2E

?currentText@QComboBox@@QBE?AVQString@@XZ.QT5WIDGETS(?), ref: 00C7DFBB
??8@YA_NABVQString@@0@Z.QT5CORE(00000000,00000000), ref: 00C7DFC3
??1QString@@QAE@XZ.QT5CORE ref: 00C7DFD1
??1QString@@QAE@XZ.QT5CORE ref: 00C7DFDE
??4QString@@QAEAAV0@PBD@Z.QT5CORE(INSERT INTO testSearch SELECT * FROM tests WHERE comments GLOB :search), ref: 00C7DFF0
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C7E003
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C7E00C
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:search,00000007), ref: 00C7E01D
?currentText@QComboBox@@QBE?AVQString@@XZ.QT5WIDGETS(?), ref: 00C7E054
??8@YA_NABVQString@@0@Z.QT5CORE(00000000,00000000), ref: 00C7E05C
??1QString@@QAE@XZ.QT5CORE ref: 00C7E06A
??1QString@@QAE@XZ.QT5CORE ref: 00C7E077
??4QString@@QAEAAV0@PBD@Z.QT5CORE(INSERT INTO userSearch SELECT * FROM users WHERE DOB GLOB :search), ref: 00C7E08D
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C7E0A0
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C7E0A9
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:search,00000007), ref: 00C7E0BA
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C7E0DD
??1QString@@QAE@XZ.QT5CORE ref: 00C7E0E6
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7E0F3
?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C7E102
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C7E8E3
??1QString@@QAE@XZ.QT5CORE ref: 00C7E8EC
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7E8F9
?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C7E908
??4QString@@QAEAAV0@PBD@Z.QT5CORE(SELECT tests.* , userSearch.* FROM tests INNER JOIN userSearch ON tests.userID = userSearch.id), ref: 00C7E925
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C7E932
?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C7E937
?next@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C7E94D
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000000), ref: 00C7E970
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7E980
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7E989
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000002), ref: 00C7E994
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7E9A4
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7E9AD
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000003), ref: 00C7E9B8
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7E9C8
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7E9D1
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000004), ref: 00C7E9DF
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7E9EF
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7E9FB
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000006), ref: 00C7EA09
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7EA19
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7EA25
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000007), ref: 00C7EA33
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7EA43
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7EA4F
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000009), ref: 00C7EA5D
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7EA6D
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7EA79
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,0000000A), ref: 00C7EA87
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7EA97
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7EAA3
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,0000000B), ref: 00C7EAB1
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7EAC1
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7EACD
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,0000000C), ref: 00C7EADB
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7EAEB
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7EAF7
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,0000000D), ref: 00C7EB05
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7EB15
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7EB21
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,0000000E), ref: 00C7EB2F
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7EB3F
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7EB4B
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,0000000F), ref: 00C7EB59
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7EB69
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7EB75
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000010), ref: 00C7EB83
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7EB93
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7EB9F
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000011), ref: 00C7EBAD
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7EBBD
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7EBC9
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000012), ref: 00C7EBD7
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C7EBE7
??1QVariant@@QAE@XZ.QT5CORE ref: 00C7EBEF
??0QString@@QAE@ABV0@@Z.QT5CORE(?), ref: 00C7EBFE

Part of subcall function 00C8F560: new.LIBCMT ref: 00C8F58E

Part of subcall function 00C906F0: ?number@QString@@SA?AV1@HH@Z.QT5CORE(00CB3B11,?,0000000A,676E6AEE), ref: 00C9072D
Part of subcall function 00C906F0: ?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z.QT5SQL(?,00000000,00000001), ref: 00C90740
Part of subcall function 00C906F0: ??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL ref: 00C9074C
Part of subcall function 00C906F0: ??1QString@@QAE@XZ.QT5CORE ref: 00C90755
Part of subcall function 00C906F0: ??0QString@@QAE@XZ.QT5CORE ref: 00C9075E
Part of subcall function 00C906F0: ??4QString@@QAEAAV0@PBD@Z.QT5CORE(SELECT scores FROM tests WHERE id = :id), ref: 00C90770
Part of subcall function 00C906F0: ?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(000000FF), ref: 00C9077D
Part of subcall function 00C906F0: ??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C9078A
Part of subcall function 00C906F0: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:id,00000003), ref: 00C907A1
Part of subcall function 00C906F0: ?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C907C0
Part of subcall function 00C906F0: ??1QString@@QAE@XZ.QT5CORE ref: 00C907C9
Part of subcall function 00C906F0: ??1QVariant@@QAE@XZ.QT5CORE ref: 00C907D6
Part of subcall function 00C906F0: ?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C907DF
Part of subcall function 00C906F0: ?next@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C907E8
Part of subcall function 00C906F0: ?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000000), ref: 00C907FF
Part of subcall function 00C906F0: ?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C9080F
Part of subcall function 00C906F0: ??1QVariant@@QAE@XZ.QT5CORE ref: 00C9081C
Part of subcall function 00C906F0: ??0QChar@@QAE@H@Z.QT5CORE(00000022), ref: 00C90827
Part of subcall function 00C906F0: ?indexOf@QString@@QBEHVQChar@@HW4CaseSensitivity@Qt@@@Z.QT5CORE(00CB3B11,00000000,00000001), ref: 00C90837
Part of subcall function 00C906F0: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CB9364,00000000), ref: 00C90849

Part of subcall function 00C7B450: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CBA9B4,00000001,676E6AEE), ref: 00C7B4A4
Part of subcall function 00C7B450: ?split@QString@@QBE?AVQStringList@@ABV1@W4SplitBehavior@1@W4CaseSensitivity@Qt@@@Z.QT5CORE(?,000000FF,00000000,00000001,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B4C3
Part of subcall function 00C7B450: ?size@QListData@@QBEHXZ.QT5CORE(?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B4C7
Part of subcall function 00C7B450: ??1QString@@QAE@XZ.QT5CORE(00000000,?,?,?,?,?,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B515
Part of subcall function 00C7B450: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B520
Part of subcall function 00C7B450: ??1QString@@QAE@XZ.QT5CORE(?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B539
Part of subcall function 00C7B450: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CBA9B4,00000001,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B550
Part of subcall function 00C7B450: ?split@QString@@QBE?AVQStringList@@ABV1@W4SplitBehavior@1@W4CaseSensitivity@Qt@@@Z.QT5CORE(?,00000000,00000000,00000001,?,?,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B56F

Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE(?,0000002C,00C800BF), ref: 00C94608
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94611
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9461A
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94623
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9462C
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94635
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9463E
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94647
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94650
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94659
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94662
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9466B
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94674
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9467D
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94686
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9468F
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94698
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C946A1

??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?), ref: 00C7EC41
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7EC4A
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7EC53
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7EC5C
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7EC65
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7EC6E
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7EC77
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7EC80
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7EC89
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7EC92
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7EC9B
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7ECA4
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7ECAD
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7ECB6
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7ECBF
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7ECC8
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7ECD1

Part of subcall function 00C631D0: new.LIBCMT ref: 00C63242

Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(00CBC630,00C63A62,00000000,00CBC634,?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C62286
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C6228F
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C62298
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622A1
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622AA
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622B3
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622BC
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622C5
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622CE
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622D7
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622E0
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622E9
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622F2
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622FB
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C62304
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C6230D
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C62316

??1QString@@QAE@XZ.QT5CORE(?), ref: 00C7ECEA
??1QString@@QAE@XZ.QT5CORE ref: 00C7ECF3
??1QString@@QAE@XZ.QT5CORE ref: 00C7ECFC
??1QString@@QAE@XZ.QT5CORE ref: 00C7ED05
??1QString@@QAE@XZ.QT5CORE ref: 00C7ED0E
??1QString@@QAE@XZ.QT5CORE ref: 00C7ED17
??1QString@@QAE@XZ.QT5CORE ref: 00C7ED20
??1QString@@QAE@XZ.QT5CORE ref: 00C7ED29
??1QString@@QAE@XZ.QT5CORE ref: 00C7ED32
??1QString@@QAE@XZ.QT5CORE ref: 00C7ED3B
??1QString@@QAE@XZ.QT5CORE ref: 00C7ED44
??1QString@@QAE@XZ.QT5CORE ref: 00C7ED4D
??1QString@@QAE@XZ.QT5CORE ref: 00C7ED56
??1QString@@QAE@XZ.QT5CORE ref: 00C7ED5F
??1QString@@QAE@XZ.QT5CORE ref: 00C7ED68
??1QString@@QAE@XZ.QT5CORE ref: 00C7ED71
??1QString@@QAE@XZ.QT5CORE ref: 00C7ED7E
?next@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C7ED87
??1QString@@QAE@XZ.QT5CORE ref: 00C7ED9E
??1QString@@QAE@XZ.QT5CORE ref: 00C7EDA7
??1QSqlQuery@@QAE@XZ.QT5SQL ref: 00C7EDB0

Strings

SELECT testSearch.* , users.* FROM testSearch INNER JOIN users ON testSearch.userID = users.id, xrefs: 00C7E90A
:search, xrefs: 00C7E014
Comments, xrefs: 00C7DF9D
INSERT INTO testSearch SELECT * FROM tests WHERE comments GLOB :search, xrefs: 00C7DFE8

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Variant@@$Query@@$V0@@$?value@String@$String@@@$?fromArrayAscii_helper@Data@Typed$?exec@?prepare@$?bind?next@CaseFlag@Flags@ParamQt@@@Sensitivity@Sql@@@@@TypeValue@$??8@?current?split@Behavior@1@Box@@Char@@ComboData@@ListList@@SplitStringString@@0@Text@$?database@?dispose@?index?number@?size@?text@?tr@Data@1@@Database@@Database@@@Edit@@LineMetaObject@@String@@_V0@$$
String ID: :search$Comments$INSERT INTO testSearch SELECT * FROM tests WHERE comments GLOB :search$SELECT testSearch.* , users.* FROM testSearch INNER JOIN users ON testSearch.userID = users.id
API String ID: 427954083-3088033821
Opcode ID: 1a298edf6a9210b4534408f82517c4a7ef9687fc120c4e716d5125ae8619ee1f
Instruction ID: 60d4da480cc1daac73083bc736c6661cc61dbac46c78f8aede85026765c96618
Opcode Fuzzy Hash: 1a298edf6a9210b4534408f82517c4a7ef9687fc120c4e716d5125ae8619ee1f
Instruction Fuzzy Hash: DD12C57550024DDBDF19EFA4ED98BED7BB8AF24304F004259E906931A0EE74AA4DCF61

Uniqueness

Uniqueness Score: -1.00%

Function 00C97E00 Relevance: 174.1, APIs: 87, Strings: 12, Instructions: 864COMMON

Download Yara Rule

APIs

Part of subcall function 00C9B590: ?size@QListData@@QBEHXZ.QT5CORE(676E6AEE,4D8BD6FF,00000000,4D8BD783,4D8BD6FF,00000000,00CB5488,000000FF,?,00C9B847,?), ref: 00C9B5C2
Part of subcall function 00C9B590: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C9B847,?), ref: 00C9B5D3
Part of subcall function 00C9B590: ?size@QListData@@QBEHXZ.QT5CORE(?,00C9B847,?), ref: 00C9B5E9
Part of subcall function 00C9B590: ?size@QListData@@QBEHXZ.QT5CORE(?,00C9B847,?), ref: 00C9B5FA
Part of subcall function 00C9B590: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C9B847,?), ref: 00C9B607
Part of subcall function 00C9B590: ?size@QListData@@QBEHXZ.QT5CORE(?,00C9B847,?), ref: 00C9B61C

??0QColor@@QAE@PBD@Z.QT5GUI(black,676E6AEE,4D8BD6FF,00000000), ref: 00C97E46
??0QColor@@QAE@PBD@Z.QT5GUI(cyan), ref: 00C97E57
??0QColor@@QAE@PBD@Z.QT5GUI(magenta), ref: 00C97E68
??0QColor@@QAE@PBD@Z.QT5GUI(red), ref: 00C97E79
??0QColor@@QAE@PBD@Z.QT5GUI(darkRed), ref: 00C97E87
??0QColor@@QAE@PBD@Z.QT5GUI(darkCyan), ref: 00C97E95
??0QColor@@QAE@PBD@Z.QT5GUI(darkMagenta), ref: 00C97EA3
??0QColor@@QAE@PBD@Z.QT5GUI(green), ref: 00C97EB1
??0QColor@@QAE@PBD@Z.QT5GUI(darkGreen), ref: 00C97EBF
??0QColor@@QAE@PBD@Z.QT5GUI(yellow), ref: 00C97ECD
??0QColor@@QAE@PBD@Z.QT5GUI(blue), ref: 00C97EDB
?size@QListData@@QBEHXZ.QT5CORE ref: 00C97EEC
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C97F04
?size@QListData@@QBEHXZ.QT5CORE ref: 00C97F0C
??0QPen@@QAE@XZ.QT5GUI ref: 00C97F2A
??0QBrush@@QAE@ABVQColor@@W4BrushStyle@Qt@@@Z.QT5GUI(?,00000001), ref: 00C97F63
?setBrush@QPen@@QAEXABVQBrush@@@Z.QT5GUI(00000000), ref: 00C97F74
??1QBrush@@QAE@XZ.QT5GUI ref: 00C97F84
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C97F9D
?size@QListData@@QBEHXZ.QT5CORE ref: 00C97FA5
_libm_sse2_cos_precise.API-MS-WIN-CRT-MATH-L1-1-0 ref: 00C9803D
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C98053
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C98061
_libm_sse2_sin_precise.API-MS-WIN-CRT-MATH-L1-1-0 ref: 00C980E3
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C980F9
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C98107
_libm_sse2_cos_precise.API-MS-WIN-CRT-MATH-L1-1-0 ref: 00C9818F
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C981A5
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C981B3
_libm_sse2_sin_precise.API-MS-WIN-CRT-MATH-L1-1-0 ref: 00C98235
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C9824B
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C98259
_libm_sse2_cos_precise.API-MS-WIN-CRT-MATH-L1-1-0 ref: 00C982E5
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C982FB
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C98309
_libm_sse2_sin_precise.API-MS-WIN-CRT-MATH-L1-1-0 ref: 00C9838B
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C983A1
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C983AF
_libm_sse2_cos_precise.API-MS-WIN-CRT-MATH-L1-1-0 ref: 00C983D6
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C983EC
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C983FA
_libm_sse2_sin_precise.API-MS-WIN-CRT-MATH-L1-1-0 ref: 00C9847C
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C98492
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C984A0
_libm_sse2_cos_precise.API-MS-WIN-CRT-MATH-L1-1-0 ref: 00C98553
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C98569
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C98577
_libm_sse2_sin_precise.API-MS-WIN-CRT-MATH-L1-1-0 ref: 00C985F9
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C9860F
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C9861D
_libm_sse2_cos_precise.API-MS-WIN-CRT-MATH-L1-1-0 ref: 00C9869D
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C986B3
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C986C1
_libm_sse2_sin_precise.API-MS-WIN-CRT-MATH-L1-1-0 ref: 00C98743
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C98759
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C98767
_libm_sse2_cos_precise.API-MS-WIN-CRT-MATH-L1-1-0 ref: 00C987EB
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C98801
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C9880F
_libm_sse2_sin_precise.API-MS-WIN-CRT-MATH-L1-1-0 ref: 00C98891
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C988A7
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C988B5
_libm_sse2_cos_precise.API-MS-WIN-CRT-MATH-L1-1-0 ref: 00C988D4
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C988EA
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C988F8
_libm_sse2_sin_precise.API-MS-WIN-CRT-MATH-L1-1-0 ref: 00C9897A
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C98990
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C9899E
?addLine@QGraphicsScene@@QAEPAVQGraphicsLineItem@@ABVQLineF@@ABVQPen@@@Z.QT5WIDGETS(?,?), ref: 00C98A72
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C98A8D
?size@QListData@@QBEHXZ.QT5CORE ref: 00C98A95
_libm_sse2_cos_precise.API-MS-WIN-CRT-MATH-L1-1-0 ref: 00C98AB0
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C98AC6
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000054), ref: 00C98AD0
_libm_sse2_sin_precise.API-MS-WIN-CRT-MATH-L1-1-0 ref: 00C98B4F
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C98B65
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000054), ref: 00C98B6F
_libm_sse2_cos_precise.API-MS-WIN-CRT-MATH-L1-1-0 ref: 00C98BE9
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C98BFF
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C98C09
_libm_sse2_sin_precise.API-MS-WIN-CRT-MATH-L1-1-0 ref: 00C98C83
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C98C99
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C98CA3
?addLine@QGraphicsScene@@QAEPAVQGraphicsLineItem@@ABVQLineF@@ABVQPen@@@Z.QT5WIDGETS(?,?), ref: 00C98D67
??1QPen@@QAE@XZ.QT5GUI ref: 00C98D77
?size@QListData@@QBEHXZ.QT5CORE ref: 00C98D8D
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(4D8BD783,?,?), ref: 00C98DDE

Strings

darkRed, xrefs: 00C97E7F
red, xrefs: 00C97E6E
green, xrefs: 00C97EA9
blue, xrefs: 00C97ED3
jng, xrefs: 00C97E17
darkCyan, xrefs: 00C97E8D
black, xrefs: 00C97E3B
cyan, xrefs: 00C97E4C
magenta, xrefs: 00C97E5D
yellow, xrefs: 00C97EC5
darkGreen, xrefs: 00C97EB7
darkMagenta, xrefs: 00C97E9B

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?at@$Color@@$_libm_sse2_cos_precise_libm_sse2_sin_precise$?size@$GraphicsLine$Pen@@$?addBrush@@Item@@Line@Pen@@@Scene@@$?dispose@?setBrushBrush@Brush@@@Data@1@@Qt@@@Style@
String ID: black$blue$cyan$darkCyan$darkGreen$darkMagenta$darkRed$green$magenta$red$yellow$jng
API String ID: 1990184122-1225400145
Opcode ID: 4ed69f62ad4eef28bf4042f1f9d8304600969bc2c181a37bfe02685123c76a97
Instruction ID: 61bddd871522be21526a02b69176b02a863caf3692f892f14ea77d01b0488fd5
Opcode Fuzzy Hash: 4ed69f62ad4eef28bf4042f1f9d8304600969bc2c181a37bfe02685123c76a97
Instruction Fuzzy Hash: BF922931921B599EDB17DB72C854B99F739BF6B381F108397A40A72151FB3029DADA00

Uniqueness

Uniqueness Score: -1.00%

Function 00C92140 Relevance: 159.6, APIs: 78, Strings: 13, Instructions: 356COMMON

Download Yara Rule

APIs

?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A,676E6AEE,?,00000011,6B5142D0), ref: 00C92178
?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z.QT5SQL(?,00000000,00000001), ref: 00C9218B
??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL ref: 00C92197
??1QString@@QAE@XZ.QT5CORE ref: 00C921A0
??0QString@@QAE@XZ.QT5CORE ref: 00C921A9
??4QString@@QAEAAV0@PBD@Z.QT5CORE(INSERT INTO users (first, middle, last, refNum, DOB, gender, location, industry, experience, job) VALUES (:first, :middle, :last, :refNum, :DOB, :gender, :location, :industry, :experience, :job)), ref: 00C921BB
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C921C8
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C921DB
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:first,00000006), ref: 00C921EE
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C92213
??1QString@@QAE@XZ.QT5CORE ref: 00C92218
??1QVariant@@QAE@XZ.QT5CORE ref: 00C92225
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C92232
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:middle,00000007), ref: 00C9223F
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C9225E
??1QString@@QAE@XZ.QT5CORE ref: 00C92263
??1QVariant@@QAE@XZ.QT5CORE ref: 00C92270
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C9227D
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:last,00000005), ref: 00C9228A
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C922A9
??1QString@@QAE@XZ.QT5CORE ref: 00C922AE
??1QVariant@@QAE@XZ.QT5CORE ref: 00C922BB
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C922C8
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:refNum,00000007), ref: 00C922D5
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C922F4
??1QString@@QAE@XZ.QT5CORE ref: 00C922F9
??1QVariant@@QAE@XZ.QT5CORE ref: 00C92306
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C92313
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:DOB,00000004), ref: 00C92320
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C9233F
??1QString@@QAE@XZ.QT5CORE ref: 00C92344
??1QVariant@@QAE@XZ.QT5CORE ref: 00C92351
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C9235E
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:gender,00000007), ref: 00C9236B
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C9238A
??1QString@@QAE@XZ.QT5CORE ref: 00C9238F
??1QVariant@@QAE@XZ.QT5CORE ref: 00C9239C
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C923A9
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:location,00000009), ref: 00C923B6
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C923D5
??1QString@@QAE@XZ.QT5CORE ref: 00C923DA
??1QVariant@@QAE@XZ.QT5CORE ref: 00C923E7
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C923F4
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:industry,00000009), ref: 00C92401
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C92420
??1QString@@QAE@XZ.QT5CORE ref: 00C92425
??1QVariant@@QAE@XZ.QT5CORE ref: 00C92432
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C9243F
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:experience,0000000B), ref: 00C9244C
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C9246B
??1QString@@QAE@XZ.QT5CORE ref: 00C92470
??1QVariant@@QAE@XZ.QT5CORE ref: 00C9247D
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C9248A
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:job,00000004), ref: 00C92497
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C924B6
??1QString@@QAE@XZ.QT5CORE ref: 00C924BB
??1QVariant@@QAE@XZ.QT5CORE ref: 00C924C8
?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C924D7
??4QString@@QAEAAV0@PBD@Z.QT5CORE(SELECT last_insert_rowid()), ref: 00C924E1
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C924EE
?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C924F7
?next@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C924FE
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000000), ref: 00C9251D
?toInt@QVariant@@QBEHPA_N@Z.QT5CORE(00000000), ref: 00C92527
??1QVariant@@QAE@XZ.QT5CORE ref: 00C92532
?next@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C9253B
??1QString@@QAE@XZ.QT5CORE ref: 00C92548
??1QSqlQuery@@QAE@XZ.QT5SQL ref: 00C92551
??1QString@@QAE@XZ.QT5CORE ref: 00C9255A
??1QString@@QAE@XZ.QT5CORE ref: 00C92563
??1QString@@QAE@XZ.QT5CORE ref: 00C9256C
??1QString@@QAE@XZ.QT5CORE ref: 00C92575
??1QString@@QAE@XZ.QT5CORE ref: 00C9257E
??1QString@@QAE@XZ.QT5CORE ref: 00C92587
??1QString@@QAE@XZ.QT5CORE ref: 00C92590
??1QString@@QAE@XZ.QT5CORE ref: 00C92599
??1QString@@QAE@XZ.QT5CORE ref: 00C925A2
??1QString@@QAE@XZ.QT5CORE ref: 00C925AB

Strings

:middle, xrefs: 00C92236
INSERT INTO users (first, middle, last, refNum, DOB, gender, location, industry, experience, job) VALUES (:first, :middle, :last, :refNum, :DOB, :gender, :location, :industry, :experience, :job), xrefs: 00C921AF
jng, xrefs: 00C92157
:industry, xrefs: 00C923F8
:experience, xrefs: 00C92443
:refNum, xrefs: 00C922CC
SELECT last_insert_rowid(), xrefs: 00C924D9
:gender, xrefs: 00C92362
:last, xrefs: 00C92281
:first, xrefs: 00C921E5
:DOB, xrefs: 00C92317
:job, xrefs: 00C9248E
:location, xrefs: 00C923AD

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Variant@@$Query@@$String@@@$?bind?fromArrayAscii_helper@Data@Flag@Flags@ParamSql@@@@@TypeTypedValue@$?exec@?next@?prepare@$?database@?number@?value@Database@@Database@@@Int@String@@_
String ID: :DOB$:experience$:first$:gender$:industry$:job$:last$:location$:middle$:refNum$INSERT INTO users (first, middle, last, refNum, DOB, gender, location, industry, experience, job) VALUES (:first, :middle, :last, :refNum, :DOB, :gender, :location, :industry, :experience, :job)$SELECT last_insert_rowid()$jng
API String ID: 104751151-4060879123
Opcode ID: 5ff2b4c5c03229bfd02e025a1b4dc2a602a1753005c1dada048c7609378873ab
Instruction ID: ffa67dacfb435a350d8af01babc66d89045d9aeb6e88ff7b7ab2e9dcbc198bc2
Opcode Fuzzy Hash: 5ff2b4c5c03229bfd02e025a1b4dc2a602a1753005c1dada048c7609378873ab
Instruction Fuzzy Hash: 21F1C67190014EDFDF05DBA4EC99BEEBBB8EF24304F144165E512A31A0EB746A4DCBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00C803F0 Relevance: 158.4, APIs: 89, Strings: 1, Instructions: 874COMMON

Download Yara Rule

APIs

?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS ref: 00C803FC
??0QString@@QAE@XZ.QT5CORE(676E6AEE), ref: 00C8B5A0
?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE(00000000,?), ref: 00C8B5CA
??1QString@@QAE@XZ.QT5CORE ref: 00C8B5D3
?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE(00000000,?), ref: 00C8B5F0
??1QString@@QAE@XZ.QT5CORE ref: 00C8B5F9
?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE(00000000,?), ref: 00C8B616
??1QString@@QAE@XZ.QT5CORE ref: 00C8B61F
?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE(00000000,?), ref: 00C8B63C
??1QString@@QAE@XZ.QT5CORE ref: 00C8B641
??0QChar@@QAE@H@Z.QT5CORE(0000002C,?,00000000,00000001), ref: 00C8B65C
?split@QString@@QBE?AVQStringList@@VQChar@@W4SplitBehavior@1@W4CaseSensitivity@Qt@@@Z.QT5CORE(?,?,00000000,00000001), ref: 00C8B669
?size@QListData@@QBEHXZ.QT5CORE(?,00000000,00000001), ref: 00C8B6A3

Part of subcall function 00C8C800: ?rowCount@QTableWidget@@QBEHXZ.QT5WIDGETS(?,?,?,?,?,00C80411), ref: 00C8C80F
Part of subcall function 00C8C800: ?item@QListWidget@@QBEPAVQListWidgetItem@@H@Z.QT5WIDGETS(00000000,?,?,?,?,?,00C80411), ref: 00C8C827
Part of subcall function 00C8C800: ?itemWidget@QListWidget@@QBEPAVQWidget@@PAVQListWidgetItem@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,00C80411), ref: 00C8C834
Part of subcall function 00C8C800: ?cast@QMetaObject@@QBEPAVQObject@@PAV2@@Z.QT5CORE(00000000,?,?,?,?,?,00C80411), ref: 00C8C840
Part of subcall function 00C8C800: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CB9364,00000000,?,?,?,?,?,?,00C80411), ref: 00C8C852
Part of subcall function 00C8C800: ?rowCount@QTableWidget@@QBEHXZ.QT5WIDGETS ref: 00C8C86B

Strings

jng, xrefs: 00C8B587

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$ListWidget@@$?append@V1@@$?rowChar@@Count@Object@@TableWidget$?cast@?from?item?item@?size@?split@AbstractArrayAscii_helper@Behavior@1@Button@@CaseChecked@Data@Data@@Item@@Item@@@List@@MetaQt@@@Sensitivity@SplitStringTypedV2@@Widget@
String ID: jng
API String ID: 4078877798-1186463058
Opcode ID: d64e2e1ef877223049ababdda17d3c19a8fb243381a8b142a09f42f477704733
Instruction ID: 5305bcd77e067207068c9a240112126be06a8e68bc07206c9f5ec40bbcdecef5
Opcode Fuzzy Hash: d64e2e1ef877223049ababdda17d3c19a8fb243381a8b142a09f42f477704733
Instruction Fuzzy Hash: F6728175A00208DFCF18DFA4D894BEDBB75BF59314F180669E912A7290DF34AD0ACB61

Uniqueness

Uniqueness Score: -1.00%

Function 00C93C10 Relevance: 156.1, APIs: 75, Strings: 14, Instructions: 344COMMON

Download Yara Rule

APIs

?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A,676E6AEE,6BA8CC60,?), ref: 00C93C48
?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z.QT5SQL(?,00000000,00000001), ref: 00C93C5B
??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL ref: 00C93C67
??1QString@@QAE@XZ.QT5CORE ref: 00C93C70
??0QString@@QAE@XZ.QT5CORE ref: 00C93C79
??4QString@@QAEAAV0@PBD@Z.QT5CORE(UPDATE tests SET illumination = :illumination, testDate = :testDate, comments = :comments, scores = :scores, serialNum = :serialNum, time = :time WHERE id = :testID AND scores = :oldScores AND illumination = :oldIll AND testDate = :oldTD AND serialNum = :oldS), ref: 00C93C8B
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C93C98
??0QVariant@@QAE@H@Z.QT5CORE(?), ref: 00C93CA4
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:testID,00000007), ref: 00C93CB5
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C93CDE
??1QString@@QAE@XZ.QT5CORE ref: 00C93CE3
??1QVariant@@QAE@XZ.QT5CORE ref: 00C93CF6
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C93D05
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:illumination,0000000D), ref: 00C93D12
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C93D35
??1QString@@QAE@XZ.QT5CORE ref: 00C93D3A
??1QVariant@@QAE@XZ.QT5CORE ref: 00C93D47
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C93D50
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:testDate,00000009), ref: 00C93D5D
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C93D80
??1QString@@QAE@XZ.QT5CORE ref: 00C93D85
??1QVariant@@QAE@XZ.QT5CORE ref: 00C93D92
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C93D9B
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:comments,00000009), ref: 00C93DA8
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C93DCB
??1QString@@QAE@XZ.QT5CORE ref: 00C93DD0
??1QVariant@@QAE@XZ.QT5CORE ref: 00C93DDD
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C93DE6
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:scores,00000007), ref: 00C93DF3
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C93E16
??1QString@@QAE@XZ.QT5CORE ref: 00C93E1B
??1QVariant@@QAE@XZ.QT5CORE ref: 00C93E28
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C93E31
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:oldIll,00000007), ref: 00C93E3E
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C93E61
??1QString@@QAE@XZ.QT5CORE ref: 00C93E66
??1QVariant@@QAE@XZ.QT5CORE ref: 00C93E73
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C93E7C
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:oldTD,00000006), ref: 00C93E89
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C93EAC
??1QString@@QAE@XZ.QT5CORE ref: 00C93EB1
??1QVariant@@QAE@XZ.QT5CORE ref: 00C93EBE
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C93EC7
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:oldScores,0000000A), ref: 00C93ED4
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C93EF7
??1QString@@QAE@XZ.QT5CORE ref: 00C93EFC
??1QVariant@@QAE@XZ.QT5CORE ref: 00C93F09
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C93F12
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:serialNum,0000000A), ref: 00C93F1F
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C93F42
??1QString@@QAE@XZ.QT5CORE ref: 00C93F47
??1QVariant@@QAE@XZ.QT5CORE ref: 00C93F54
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C93F5D
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:oldSerialNum,0000000D), ref: 00C93F6A
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C93F8D
??1QString@@QAE@XZ.QT5CORE ref: 00C93F92
??1QVariant@@QAE@XZ.QT5CORE ref: 00C93F9F
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C93FA8
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:time,00000005), ref: 00C93FB5
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C93FD8
??1QString@@QAE@XZ.QT5CORE ref: 00C93FDD
??1QVariant@@QAE@XZ.QT5CORE ref: 00C93FEA
?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C93FEF
??1QString@@QAE@XZ.QT5CORE ref: 00C93FF8
??1QSqlQuery@@QAE@XZ.QT5SQL ref: 00C94001
??1QString@@QAE@XZ.QT5CORE ref: 00C9400A
??1QString@@QAE@XZ.QT5CORE ref: 00C94013
??1QString@@QAE@XZ.QT5CORE ref: 00C9401C
??1QString@@QAE@XZ.QT5CORE ref: 00C94025
??1QString@@QAE@XZ.QT5CORE ref: 00C9402E
??1QString@@QAE@XZ.QT5CORE ref: 00C94037
??1QString@@QAE@XZ.QT5CORE ref: 00C94040
??1QString@@QAE@XZ.QT5CORE ref: 00C94049
??1QString@@QAE@XZ.QT5CORE ref: 00C94052
??1QString@@QAE@XZ.QT5CORE ref: 00C9405B

Strings

:scores, xrefs: 00C93DEA
:oldSerialNum, xrefs: 00C93F61
:oldIll, xrefs: 00C93E35
jng, xrefs: 00C93C27
:illumination, xrefs: 00C93D09
:time, xrefs: 00C93FAC
:testDate, xrefs: 00C93D54
UPDATE tests SET illumination = :illumination, testDate = :testDate, comments = :comments, scores = :scores, serialNum = :serialNum, time = :time WHERE id = :testID AND scores = :oldScores AND illumination = :oldIll AND testDate = :oldTD AND serialNum = :oldS, xrefs: 00C93C7F
:oldTD, xrefs: 00C93E80
:oldScores, xrefs: 00C93ECB
:comments, xrefs: 00C93D9F
#, xrefs: 00C93FC1
:testID, xrefs: 00C93CAC
:serialNum, xrefs: 00C93F16

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Variant@@$Query@@$?bind?fromArrayAscii_helper@Data@Flag@Flags@ParamSql@@@@@String@@@TypeTypedValue@$?database@?exec@?number@?prepare@Database@@Database@@@String@@_
String ID: #$:comments$:illumination$:oldIll$:oldScores$:oldSerialNum$:oldTD$:scores$:serialNum$:testDate$:testID$:time$UPDATE tests SET illumination = :illumination, testDate = :testDate, comments = :comments, scores = :scores, serialNum = :serialNum, time = :time WHERE id = :testID AND scores = :oldScores AND illumination = :oldIll AND testDate = :oldTD AND serialNum = :oldS$jng
API String ID: 4012086339-2283579193
Opcode ID: 3ef156bbc4e9345e5c6e79cedaed733015912b0b5b82a0589dae78f5c5235f98
Instruction ID: 3bd2c978bc66c180c2d4195f46ff9e17a537458f274d1b3389ef56ffb173a692
Opcode Fuzzy Hash: 3ef156bbc4e9345e5c6e79cedaed733015912b0b5b82a0589dae78f5c5235f98
Instruction Fuzzy Hash: 23E1D67580024DEFDB05EFA4EC98BDD7FB8EB25344F008165E906A7290EB74964DCBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00C81251 Relevance: 123.3, APIs: 69, Strings: 1, Instructions: 753COMMON

Download Yara Rule

APIs

??0QString@@QAE@XZ.QT5CORE(676E6AEE), ref: 00C8B5A0

Part of subcall function 00C8C710: ??0QString@@QAE@XZ.QT5CORE(676E6AEE), ref: 00C8C746
Part of subcall function 00C8C710: ?rowCount@QTableWidget@@QBEHXZ.QT5WIDGETS ref: 00C8C762
Part of subcall function 00C8C710: ?item@QListWidget@@QBEPAVQListWidgetItem@@H@Z.QT5WIDGETS(00000000), ref: 00C8C777
Part of subcall function 00C8C710: ?itemWidget@QListWidget@@QBEPAVQWidget@@PAVQListWidgetItem@@@Z.QT5WIDGETS(00000000), ref: 00C8C784
Part of subcall function 00C8C710: ?cast@QMetaObject@@QBEPAVQObject@@PAV2@@Z.QT5CORE(00000000), ref: 00C8C790
Part of subcall function 00C8C710: ?number@QString@@SA?AV1@HH@Z.QT5CORE(?,00000000,0000000A), ref: 00C8C7A4
Part of subcall function 00C8C710: ?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE(00000000), ref: 00C8C7B7
Part of subcall function 00C8C710: ??1QString@@QAE@XZ.QT5CORE ref: 00C8C7C4
Part of subcall function 00C8C710: ?append@QString@@QAEAAV1@PBD@Z.QT5CORE(00CBBD28), ref: 00C8C7D1
Part of subcall function 00C8C710: ?rowCount@QTableWidget@@QBEHXZ.QT5WIDGETS ref: 00C8C7DE

?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE(00000000,?), ref: 00C8B5CA
??1QString@@QAE@XZ.QT5CORE ref: 00C8B5D3
?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE(00000000,?), ref: 00C8B5F0
??1QString@@QAE@XZ.QT5CORE ref: 00C8B5F9
?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE(00000000,?), ref: 00C8B616
??1QString@@QAE@XZ.QT5CORE ref: 00C8B61F
?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE(00000000,?), ref: 00C8B63C
??1QString@@QAE@XZ.QT5CORE ref: 00C8B641
??0QChar@@QAE@H@Z.QT5CORE(0000002C,?,00000000,00000001), ref: 00C8B65C
?split@QString@@QBE?AVQStringList@@VQChar@@W4SplitBehavior@1@W4CaseSensitivity@Qt@@@Z.QT5CORE(?,?,00000000,00000001), ref: 00C8B669

Part of subcall function 00C61FD0: ??1QString@@QAE@XZ.QT5CORE(676E6AEE,?,6B520380,6B5175D0,00000000,00CAD200,000000FF,?,00C88DAB,?,00C6B410,?,?,676E6AEE), ref: 00C62035
Part of subcall function 00C61FD0: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(6B5175D0,676E6AEE,?,6B520380,6B5175D0,00000000,00CAD200,000000FF,?,00C88DAB,?,00C6B410,?,?,676E6AEE), ref: 00C62040

?size@QListData@@QBEHXZ.QT5CORE(?,00000000,00000001), ref: 00C8B6A3
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,00000000,0000000A,?,00000000,00000001), ref: 00C8B6BB
?toInt@QString@@QBEHPA_NH@Z.QT5CORE(?,00000000,00000001), ref: 00C8B6C3
?size@QListData@@QBEHXZ.QT5CORE(?,?,00000000,00000001), ref: 00C8B6D8
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00000000,00000001), ref: 00C8B6FC
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000054,?,00000000,00000001), ref: 00C8B70C
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00000000,00000001), ref: 00C8B719
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001,?,00000000,00000001), ref: 00C8B72C
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001,?,00000000,00000001), ref: 00C8B744
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00000000,00000001), ref: 00C8B754
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00000000,00000001), ref: 00C8B77E
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000054,?,00000000,00000001), ref: 00C8B78B
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,?,00000000,00000001), ref: 00C8B7D0
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001,?,00000000,00000001), ref: 00C8B7DF
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001,?,00000000,00000001), ref: 00C8B7EB
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00000000,00000001), ref: 00C8B7FA
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?,?,00000000,00000001), ref: 00C8B80B
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001,?,00000000,00000001), ref: 00C8B86D
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?,?,00000000,00000001), ref: 00C8B87C
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000016,?,?,00000000,00000001), ref: 00C8B8B9
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000015,?,00000000,00000001), ref: 00C8B8C8
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000016,?,00000000,00000001), ref: 00C8B8D6
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000017,?,00000000,00000001), ref: 00C8B8E3
?at@QListData@@QBEPAPAXH@Z.QT5CORE(0000002B,?,?,00000000,00000001), ref: 00C8B924
?at@QListData@@QBEPAPAXH@Z.QT5CORE(0000002A,?,00000000,00000001), ref: 00C8B933
?at@QListData@@QBEPAPAXH@Z.QT5CORE(0000002B,?,00000000,00000001), ref: 00C8B941
?at@QListData@@QBEPAPAXH@Z.QT5CORE(0000002C,?,00000000,00000001), ref: 00C8B94E

Strings

jng, xrefs: 00C8B587

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: List$Data@@$?at@$String@@$?append@$V1@@Widget@@$?row?size@Char@@Count@Object@@TableWidget$?cast@?dispose@?item?item@?number@?split@Behavior@1@CaseData@1@@Int@Item@@Item@@@List@@MetaQt@@@Sensitivity@SplitStringV2@@Widget@
String ID: jng
API String ID: 4158030161-1186463058
Opcode ID: bb3eb524b6df446cc4d342e9743acfc3cca21f5de6ce9de3c49190657b2970c0
Instruction ID: 33f0fa22301372c6b1e628bc9f09676ea1de4f1d74c3626b40e87a8ce72faac9
Opcode Fuzzy Hash: bb3eb524b6df446cc4d342e9743acfc3cca21f5de6ce9de3c49190657b2970c0
Instruction Fuzzy Hash: C4528275900208DFCF18DFA4D894BEDBB75BF59314F180269E912A7291DB34AE0ACB61

Uniqueness

Uniqueness Score: -1.00%

Function 00C7B450 Relevance: 110.8, APIs: 62, Strings: 1, Instructions: 536COMMON

Download Yara Rule

APIs

?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CBA9B4,00000001,676E6AEE), ref: 00C7B4A4
?split@QString@@QBE?AVQStringList@@ABV1@W4SplitBehavior@1@W4CaseSensitivity@Qt@@@Z.QT5CORE(?,000000FF,00000000,00000001,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B4C3
?size@QListData@@QBEHXZ.QT5CORE(?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B4C7
??1QString@@QAE@XZ.QT5CORE(00000000,?,?,?,?,?,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B515
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B520
??1QString@@QAE@XZ.QT5CORE(?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B539
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CBA9B4,00000001,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B550
?split@QString@@QBE?AVQStringList@@ABV1@W4SplitBehavior@1@W4CaseSensitivity@Qt@@@Z.QT5CORE(?,00000000,00000000,00000001,?,?,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B56F
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00CB07FD,00000000,0000000A,?,?,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B595
?toInt@QString@@QBEHPA_NH@Z.QT5CORE(?,?,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B59D
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,00000000,?,?,00CB07FD,000000FF), ref: 00C7B5F5
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,?,?,?,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B600
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B613
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B624
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000054,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B634
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B641
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B650
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B663
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B673
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B681
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B68E
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B69D
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000054,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B6AA
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B6E2
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B6F1
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B6FF
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00CB07FD,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B70E
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B734
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B745
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00CB07FD,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B756
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000002,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B778
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B787
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B795
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B7A3
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B7AE
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B7BC
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B7CA
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00CB07FD,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B7D9
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000016,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B817
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000015,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B826
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00CB07FD,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B836
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00CB07FE,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B849
?at@QListData@@QBEPAPAXH@Z.QT5CORE(0000002B,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B884
?at@QListData@@QBEPAPAXH@Z.QT5CORE(0000002A,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B893
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00CB07FD,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B8A3
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00CB07FE,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B8B6
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000040,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B8F4
?at@QListData@@QBEPAPAXH@Z.QT5CORE(0000003F,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B903
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00CB07FD,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B913
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00CB07FE,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B926
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B954
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000054,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B964
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B971
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000054,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B980
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000053,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B98D
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000054,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B9A0
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B9AD
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000054,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B9BC
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000053,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B9C9
?number@QString@@SA?AV1@HH@Z.QT5CORE(?,00CB06AA,0000000A,?,?,00000000,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7B9F2
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,?,?,?,?,?,?,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7BA1F
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,00CB07FD,000000FF,?,00C7CAD2,?), ref: 00C7BA2B

Strings

jng, xrefs: 00C7B467

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?at@$String@@$?dispose@Data@1@@$?from?split@ArrayAscii_helper@Behavior@1@CaseData@List@@Qt@@@Sensitivity@SplitStringTyped$?number@?size@Int@
String ID: jng
API String ID: 1396546296-1186463058
Opcode ID: 8729edcbc63c44ff14692cb9491a96ee6dd6d0f33315280fb2a4768fbb0a8c3f
Instruction ID: 73257b46c4d09c96e09b54087194bf6d4838dca8c993e11bd077153b279f0158
Opcode Fuzzy Hash: 8729edcbc63c44ff14692cb9491a96ee6dd6d0f33315280fb2a4768fbb0a8c3f
Instruction Fuzzy Hash: 43227E75A00505CFCF08DFB8D899BADB7B5FF58311F154228E516A72A0DB346E09CB62

Uniqueness

Uniqueness Score: -1.00%

Function 00C6FDB0 Relevance: 77.5, APIs: 43, Strings: 1, Instructions: 481COMMON

Download Yara Rule

APIs

?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS ref: 00C6FDB9
_libm_sse2_sin_precise.API-MS-WIN-CRT-MATH-L1-1-0(676E6AEE,00C744AC,6BABF570), ref: 00C973BA
_libm_sse2_cos_precise.API-MS-WIN-CRT-MATH-L1-1-0(676E6AEE,00C744AC,6BABF570), ref: 00C973CC
_libm_sse2_sin_precise.API-MS-WIN-CRT-MATH-L1-1-0(676E6AEE,00C744AC,6BABF570), ref: 00C97482
_libm_sse2_cos_precise.API-MS-WIN-CRT-MATH-L1-1-0(676E6AEE,00C744AC,6BABF570), ref: 00C97494

Part of subcall function 00C9B590: ?size@QListData@@QBEHXZ.QT5CORE(676E6AEE,4D8BD6FF,00000000,4D8BD783,4D8BD6FF,00000000,00CB5488,000000FF,?,00C9B847,?), ref: 00C9B5C2
Part of subcall function 00C9B590: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C9B847,?), ref: 00C9B5D3
Part of subcall function 00C9B590: ?size@QListData@@QBEHXZ.QT5CORE(?,00C9B847,?), ref: 00C9B5E9
Part of subcall function 00C9B590: ?size@QListData@@QBEHXZ.QT5CORE(?,00C9B847,?), ref: 00C9B5FA
Part of subcall function 00C9B590: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C9B847,?), ref: 00C9B607
Part of subcall function 00C9B590: ?size@QListData@@QBEHXZ.QT5CORE(?,00C9B847,?), ref: 00C9B61C

Part of subcall function 00C97E00: ??0QColor@@QAE@PBD@Z.QT5GUI(black,676E6AEE,4D8BD6FF,00000000), ref: 00C97E46
Part of subcall function 00C97E00: ??0QColor@@QAE@PBD@Z.QT5GUI(cyan), ref: 00C97E57
Part of subcall function 00C97E00: ??0QColor@@QAE@PBD@Z.QT5GUI(magenta), ref: 00C97E68
Part of subcall function 00C97E00: ??0QColor@@QAE@PBD@Z.QT5GUI(red), ref: 00C97E79
Part of subcall function 00C97E00: ??0QColor@@QAE@PBD@Z.QT5GUI(darkRed), ref: 00C97E87
Part of subcall function 00C97E00: ??0QColor@@QAE@PBD@Z.QT5GUI(darkCyan), ref: 00C97E95
Part of subcall function 00C97E00: ??0QColor@@QAE@PBD@Z.QT5GUI(darkMagenta), ref: 00C97EA3
Part of subcall function 00C97E00: ??0QColor@@QAE@PBD@Z.QT5GUI(green), ref: 00C97EB1
Part of subcall function 00C97E00: ??0QColor@@QAE@PBD@Z.QT5GUI(darkGreen), ref: 00C97EBF
Part of subcall function 00C97E00: ??0QColor@@QAE@PBD@Z.QT5GUI(yellow), ref: 00C97ECD
Part of subcall function 00C97E00: ??0QColor@@QAE@PBD@Z.QT5GUI(blue), ref: 00C97EDB
Part of subcall function 00C97E00: ?size@QListData@@QBEHXZ.QT5CORE ref: 00C97EEC
Part of subcall function 00C97E00: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C97F04
Part of subcall function 00C97E00: ?size@QListData@@QBEHXZ.QT5CORE ref: 00C97F0C
Part of subcall function 00C97E00: ??0QPen@@QAE@XZ.QT5GUI ref: 00C97F2A
Part of subcall function 00C97E00: ??0QBrush@@QAE@ABVQColor@@W4BrushStyle@Qt@@@Z.QT5GUI(?,00000001), ref: 00C97F63
Part of subcall function 00C97E00: ?setBrush@QPen@@QAEXABVQBrush@@@Z.QT5GUI(00000000), ref: 00C97F74
Part of subcall function 00C97E00: ??1QBrush@@QAE@XZ.QT5GUI ref: 00C97F84
Part of subcall function 00C97E00: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C97F9D
Part of subcall function 00C97E00: ?size@QListData@@QBEHXZ.QT5CORE ref: 00C97FA5

Strings

jng, xrefs: 00C97397

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Color@@$Data@@List$?size@$?at@$Brush@@Pen@@_libm_sse2_cos_precise_libm_sse2_sin_precise$?setAbstractBrushBrush@Brush@@@Button@@Checked@Qt@@@Style@
String ID: jng
API String ID: 3579751055-1186463058
Opcode ID: 166b3fbc5c573c672f671a78ff7e78c0edf7dd461966f03d1c8edd5edb093532
Instruction ID: 53c96d06896e82d60a2492527cc9e4bde036dc498bb9ec9aaf6c0b9cc4ee27c1
Opcode Fuzzy Hash: 166b3fbc5c573c672f671a78ff7e78c0edf7dd461966f03d1c8edd5edb093532
Instruction Fuzzy Hash: 1C12A071C21B5C9EDB13DB71D865ADAF778AFAA284F10C31BF81672561EB3024978B40

Uniqueness

Uniqueness Score: -1.00%

Function 00C97380 Relevance: 75.7, APIs: 42, Strings: 1, Instructions: 457COMMON

Download Yara Rule

APIs

_libm_sse2_sin_precise.API-MS-WIN-CRT-MATH-L1-1-0(676E6AEE,00C744AC,6BABF570), ref: 00C973BA
_libm_sse2_cos_precise.API-MS-WIN-CRT-MATH-L1-1-0(676E6AEE,00C744AC,6BABF570), ref: 00C973CC
_libm_sse2_sin_precise.API-MS-WIN-CRT-MATH-L1-1-0(676E6AEE,00C744AC,6BABF570), ref: 00C97482
_libm_sse2_cos_precise.API-MS-WIN-CRT-MATH-L1-1-0(676E6AEE,00C744AC,6BABF570), ref: 00C97494
_libm_sse2_sin_precise.API-MS-WIN-CRT-MATH-L1-1-0(676E6AEE,00C744AC,6BABF570), ref: 00C97556
_libm_sse2_cos_precise.API-MS-WIN-CRT-MATH-L1-1-0(676E6AEE,00C744AC,6BABF570), ref: 00C97568
_libm_sse2_sin_precise.API-MS-WIN-CRT-MATH-L1-1-0(676E6AEE,00C744AC,6BABF570), ref: 00C9761E
_libm_sse2_cos_precise.API-MS-WIN-CRT-MATH-L1-1-0(676E6AEE,00C744AC,6BABF570), ref: 00C97630
_libm_sse2_sin_precise.API-MS-WIN-CRT-MATH-L1-1-0(676E6AEE,00C744AC,6BABF570), ref: 00C976F2
_libm_sse2_cos_precise.API-MS-WIN-CRT-MATH-L1-1-0(676E6AEE,00C744AC,6BABF570), ref: 00C97704
_libm_sse2_sin_precise.API-MS-WIN-CRT-MATH-L1-1-0(676E6AEE,00C744AC,6BABF570), ref: 00C977C6
_libm_sse2_cos_precise.API-MS-WIN-CRT-MATH-L1-1-0(676E6AEE,00C744AC,6BABF570), ref: 00C977D8
??0QColor@@QAE@W4GlobalColor@Qt@@@Z.QT5GUI(00000009,676E6AEE,00C744AC,6BABF570), ref: 00C9789A
??0QLineF@@QAE@ABVQLine@@@Z.QT5CORE(?), ref: 00C978AA
??0QPen@@QAE@ABVQColor@@@Z.QT5GUI(00CB4F06), ref: 00C978B7
?addLine@QGraphicsScene@@QAEPAVQGraphicsLineItem@@ABVQLineF@@ABVQPen@@@Z.QT5WIDGETS(?,00000000), ref: 00C978D5
??1QPen@@QAE@XZ.QT5GUI ref: 00C978E7
??0QColor@@QAE@W4GlobalColor@Qt@@@Z.QT5GUI(00000009), ref: 00C978EE
??0QLineF@@QAE@ABVQLine@@@Z.QT5CORE(?), ref: 00C978FE
??0QPen@@QAE@ABVQColor@@@Z.QT5GUI(00CB4F06), ref: 00C9790B
?addLine@QGraphicsScene@@QAEPAVQGraphicsLineItem@@ABVQLineF@@ABVQPen@@@Z.QT5WIDGETS(?,00000000), ref: 00C97926
??1QPen@@QAE@XZ.QT5GUI ref: 00C97932
??0QColor@@QAE@W4GlobalColor@Qt@@@Z.QT5GUI(00000007), ref: 00C97939
??0QLineF@@QAE@ABVQLine@@@Z.QT5CORE(?), ref: 00C97949
??0QPen@@QAE@ABVQColor@@@Z.QT5GUI(00CB4F06), ref: 00C97956
?addLine@QGraphicsScene@@QAEPAVQGraphicsLineItem@@ABVQLineF@@ABVQPen@@@Z.QT5WIDGETS(?,00000000), ref: 00C97971
??1QPen@@QAE@XZ.QT5GUI ref: 00C9797D
??0QColor@@QAE@W4GlobalColor@Qt@@@Z.QT5GUI(00000007), ref: 00C97984
??0QLineF@@QAE@ABVQLine@@@Z.QT5CORE(?), ref: 00C97994
??0QPen@@QAE@ABVQColor@@@Z.QT5GUI(00CB4F06), ref: 00C979A1
?addLine@QGraphicsScene@@QAEPAVQGraphicsLineItem@@ABVQLineF@@ABVQPen@@@Z.QT5WIDGETS(?,00000000), ref: 00C979BC
??1QPen@@QAE@XZ.QT5GUI ref: 00C979C8
??0QColor@@QAE@W4GlobalColor@Qt@@@Z.QT5GUI(00000008), ref: 00C979CF
??0QLineF@@QAE@ABVQLine@@@Z.QT5CORE(?), ref: 00C979E2
??0QPen@@QAE@ABVQColor@@@Z.QT5GUI(00CB4F06), ref: 00C979EF
?addLine@QGraphicsScene@@QAEPAVQGraphicsLineItem@@ABVQLineF@@ABVQPen@@@Z.QT5WIDGETS(?,00000000), ref: 00C97A0A
??1QPen@@QAE@XZ.QT5GUI ref: 00C97A16
??0QColor@@QAE@W4GlobalColor@Qt@@@Z.QT5GUI(00000008), ref: 00C97A1D
??0QLineF@@QAE@ABVQLine@@@Z.QT5CORE(?), ref: 00C97A30
??0QPen@@QAE@ABVQColor@@@Z.QT5GUI(?), ref: 00C97A3D
?addLine@QGraphicsScene@@QAEPAVQGraphicsLineItem@@ABVQLineF@@ABVQPen@@@Z.QT5WIDGETS(?,00000000), ref: 00C97A58
??1QPen@@QAE@XZ.QT5GUI ref: 00C97A5D

Strings

jng, xrefs: 00C97397

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Line$GraphicsPen@@$?addColor@Color@@Color@@@GlobalItem@@Line@Line@@@Pen@@@Qt@@@Scene@@_libm_sse2_cos_precise_libm_sse2_sin_precise
String ID: jng
API String ID: 3044554345-1186463058
Opcode ID: f513671c20f7b3364f9929c9c6ad33cae9ae7ec4d9d7b5740837062ac58bca2a
Instruction ID: 7fd7905155da4d7e59b25fd6d518d7ec9ae0290af3662def83eecfefbb696794
Opcode Fuzzy Hash: f513671c20f7b3364f9929c9c6ad33cae9ae7ec4d9d7b5740837062ac58bca2a
Instruction Fuzzy Hash: 99128E71C21B5C9EDB13DB71D861ADAF7786FAA284F10C31BF81A72561EB3025978B40

Uniqueness

Uniqueness Score: -1.00%

Function 00C90360 Relevance: 70.2, APIs: 34, Strings: 6, Instructions: 165COMMON

Download Yara Rule

APIs

?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A,676E6AEE,00000000,?,00000000,00C79FA1), ref: 00C90398
?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z.QT5SQL(?,00000000,00000001,?,?,00C79FA1), ref: 00C903AB
??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL(?,?,?,?,?,00C79FA1), ref: 00C903B7
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,00C79FA1), ref: 00C903C0
??0QString@@QAE@XZ.QT5CORE(?,?,?,?,?,00C79FA1), ref: 00C903C9
??4QString@@QAEAAV0@PBD@Z.QT5CORE(DELETE FROM users WHERE first = :first AND middle = :middle AND last = :last AND DOB = :DOB,?,?,?,?,?,00C79FA1), ref: 00C903DB
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?,?,?,?,?,?,00C79FA1), ref: 00C903E8
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?,?,?,?,?,?,00C79FA1), ref: 00C903F5
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:first,00000006,?,?,?,?,?,00C79FA1), ref: 00C9040C
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?,?,?,?,?,?,?,00C79FA1), ref: 00C90431
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,00C79FA1), ref: 00C90436
??1QVariant@@QAE@XZ.QT5CORE(?,?,?,?,?,?,00C79FA1), ref: 00C90449
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?,?,?,?,?,?,?,00C79FA1), ref: 00C90452
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:middle,00000007,?,?,?,?,?,?,00C79FA1), ref: 00C90463
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?,?,?,?,?,?,?,?,00C79FA1), ref: 00C90482
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,00C79FA1), ref: 00C90487
??1QVariant@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,00C79FA1), ref: 00C90494
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?,?,?,?,?,?,?,?,00C79FA1), ref: 00C9049D
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:last,00000005,?,?,?,?,?,?,?,00C79FA1), ref: 00C904AE
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?,?,?,?,?,?,?,?,?,00C79FA1), ref: 00C904CD
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,00C79FA1), ref: 00C904D2
??1QVariant@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,00C79FA1), ref: 00C904DF
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?,?,?,?,?,?,?,?,?,00C79FA1), ref: 00C904E8
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:DOB,00000004,?,?,?,?,?,?,?,?,00C79FA1), ref: 00C904F9
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?,?,?,?,?,?,?,?,?,?,00C79FA1), ref: 00C90518
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,00C79FA1), ref: 00C9051D
??1QVariant@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,00C79FA1), ref: 00C9052A
?exec@QSqlQuery@@QAE_NXZ.QT5SQL(?,?,?,?,?,?,?,?,?,00C79FA1), ref: 00C9052F
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,00C79FA1), ref: 00C90538
??1QSqlQuery@@QAE@XZ.QT5SQL(?,?,?,?,?,?,?,?,?,00C79FA1), ref: 00C90541
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,00C79FA1), ref: 00C9054A
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,00C79FA1), ref: 00C90553
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,00C79FA1), ref: 00C9055C
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,00C79FA1), ref: 00C90565

Strings

:last, xrefs: 00C904A5
:middle, xrefs: 00C9045A
:first, xrefs: 00C90403
jng, xrefs: 00C90377
:DOB, xrefs: 00C904F0
DELETE FROM users WHERE first = :first AND middle = :middle AND last = :last AND DOB = :DOB, xrefs: 00C903CF

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Variant@@$Query@@$String@@@$?bind?fromArrayAscii_helper@Data@Flag@Flags@ParamSql@@@@@TypeTypedValue@$?database@?exec@?number@?prepare@Database@@Database@@@String@@_
String ID: :DOB$:first$:last$:middle$DELETE FROM users WHERE first = :first AND middle = :middle AND last = :last AND DOB = :DOB$jng
API String ID: 2937812176-283790469
Opcode ID: d29da42cc15296efd8b7debfa6bf3cbdb94ee5d3dd1f767341f44479ec459ebb
Instruction ID: 56d20c662d6b22833032c2ff89fb23ce02832d37e6863915495ea08436b2d5c3
Opcode Fuzzy Hash: d29da42cc15296efd8b7debfa6bf3cbdb94ee5d3dd1f767341f44479ec459ebb
Instruction Fuzzy Hash: C261E87190014EDFDF05DBA4EC99BEEBBB8FB14304F144269E506A3290DB74660DCBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00C906F0 Relevance: 61.4, APIs: 32, Strings: 3, Instructions: 152COMMON

Download Yara Rule

APIs

?number@QString@@SA?AV1@HH@Z.QT5CORE(00CB3B11,?,0000000A,676E6AEE), ref: 00C9072D
?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z.QT5SQL(?,00000000,00000001), ref: 00C90740
??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL ref: 00C9074C
??1QString@@QAE@XZ.QT5CORE ref: 00C90755
??0QString@@QAE@XZ.QT5CORE ref: 00C9075E
??4QString@@QAEAAV0@PBD@Z.QT5CORE(SELECT scores FROM tests WHERE id = :id), ref: 00C90770
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(000000FF), ref: 00C9077D
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C9078A
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:id,00000003), ref: 00C907A1
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C907C0
??1QString@@QAE@XZ.QT5CORE ref: 00C907C9
??1QVariant@@QAE@XZ.QT5CORE ref: 00C907D6
?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C907DF
?next@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C907E8
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000000), ref: 00C907FF
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C9080F
??1QVariant@@QAE@XZ.QT5CORE ref: 00C9081C
??0QChar@@QAE@H@Z.QT5CORE(00000022), ref: 00C90827
?indexOf@QString@@QBEHVQChar@@HW4CaseSensitivity@Qt@@@Z.QT5CORE(00CB3B11,00000000,00000001), ref: 00C90837
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CB9364,00000000), ref: 00C90849
??0QChar@@QAE@H@Z.QT5CORE(00000022,?,00CB3B11,00000001), ref: 00C90860
?replace@QString@@QAEAAV1@VQChar@@ABV1@W4CaseSensitivity@Qt@@@Z.QT5CORE(?,00CB3B11,00000001), ref: 00C90869
??1QString@@QAE@XZ.QT5CORE(?,00CB3B11,00000001), ref: 00C90872
??0QString@@QAE@$$QAV0@@Z.QT5CORE(?), ref: 00C9087F
??1QString@@QAE@XZ.QT5CORE(?,00CB3B11,00000001), ref: 00C90888
??1QString@@QAE@XZ.QT5CORE(?,00CB3B11,00000001), ref: 00C90891
??1QSqlQuery@@QAE@XZ.QT5SQL(?,00CB3B11,00000001), ref: 00C9089A
??1QString@@QAE@XZ.QT5CORE(?,00CB3B11,00000001), ref: 00C908A3
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CB9364,00000000), ref: 00C908C3
??1QString@@QAE@XZ.QT5CORE ref: 00C908D0
??1QSqlQuery@@QAE@XZ.QT5SQL ref: 00C908D9
??1QString@@QAE@XZ.QT5CORE ref: 00C908E2

Strings

jng, xrefs: 00C90705
:id, xrefs: 00C90798
SELECT scores FROM tests WHERE id = :id, xrefs: 00C90764

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Query@@$Variant@@$Char@@$?fromArrayAscii_helper@Data@Typed$CaseQt@@@Sensitivity@String@@@$?bind?database@?exec@?index?next@?number@?prepare@?replace@?value@Database@@Database@@@E@$$Flag@Flags@ParamSql@@@@@String@String@@_TypeV0@@Value@
String ID: :id$SELECT scores FROM tests WHERE id = :id$jng
API String ID: 2204045760-3812803900
Opcode ID: 87ce107f9c871af556181cbdaf4b32d59105ad587c237742e119f7936f5853f9
Instruction ID: 170c55ad065c8ed945707b189295301b8bc3da8e21116a9a08c8ef16f2e5fbbb
Opcode Fuzzy Hash: 87ce107f9c871af556181cbdaf4b32d59105ad587c237742e119f7936f5853f9
Instruction Fuzzy Hash: B461C67190024AEFDF04DBA4ED59BEEBB78FB24305F104219E516A32E0EB756A09CB51

Uniqueness

Uniqueness Score: -1.00%

Function 00C93140 Relevance: 57.9, APIs: 28, Strings: 5, Instructions: 141COMMON

Download Yara Rule

APIs

??0QString@@QAE@XZ.QT5CORE(676E6AEE), ref: 00C93174
?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A), ref: 00C93187
?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z.QT5SQL(?,00000000,00000001), ref: 00C9319A
??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL ref: 00C931A6
??1QString@@QAE@XZ.QT5CORE ref: 00C931B3
??4QString@@QAEAAV0@PBD@Z.QT5CORE(UPDATE serialNums SET serialNum = :serialNum, purchaseDate = :purchaseDate WHERE serialNum = :oldSerialNum), ref: 00C931C1
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C931CE
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C931DB
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:serialNum,0000000A), ref: 00C931F2
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C93217
??1QString@@QAE@XZ.QT5CORE ref: 00C9321C
??1QVariant@@QAE@XZ.QT5CORE ref: 00C9322F
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C93238
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:purchaseDate,0000000D), ref: 00C93249
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C93268
??1QString@@QAE@XZ.QT5CORE ref: 00C9326D
??1QVariant@@QAE@XZ.QT5CORE ref: 00C9327A
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C93283
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:oldSerialNum,0000000D), ref: 00C93294
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C932B3
??1QString@@QAE@XZ.QT5CORE ref: 00C932B8
??1QVariant@@QAE@XZ.QT5CORE ref: 00C932C5
?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C932CA
??1QSqlQuery@@QAE@XZ.QT5SQL ref: 00C932D3
??1QString@@QAE@XZ.QT5CORE ref: 00C932DC
??1QString@@QAE@XZ.QT5CORE ref: 00C932E5
??1QString@@QAE@XZ.QT5CORE ref: 00C932EE
??1QString@@QAE@XZ.QT5CORE ref: 00C932F7

Strings

:oldSerialNum, xrefs: 00C9328B
jng, xrefs: 00C93157
UPDATE serialNums SET serialNum = :serialNum, purchaseDate = :purchaseDate WHERE serialNum = :oldSerialNum, xrefs: 00C931B9
:purchaseDate, xrefs: 00C93240
:serialNum, xrefs: 00C931E9

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Variant@@$Query@@$String@@@$?bind?fromArrayAscii_helper@Data@Flag@Flags@ParamSql@@@@@TypeTypedValue@$?database@?exec@?number@?prepare@Database@@Database@@@String@@_
String ID: :oldSerialNum$:purchaseDate$:serialNum$UPDATE serialNums SET serialNum = :serialNum, purchaseDate = :purchaseDate WHERE serialNum = :oldSerialNum$jng
API String ID: 2937812176-822950563
Opcode ID: 934cf8a68f5ead34fa50c22275f042fe6b317bb68ec2190be1daf87aa30c0e5b
Instruction ID: c4d3c9e031469407b29db90daba2433c5d57c3d285d676d17fb31edd592d057d
Opcode Fuzzy Hash: 934cf8a68f5ead34fa50c22275f042fe6b317bb68ec2190be1daf87aa30c0e5b
Instruction Fuzzy Hash: C851FC7191024EEFDB04DBA4ED59BEEBB78FF24305F044269E506A3290DB745A0DCBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00C8F5D0 Relevance: 45.6, APIs: 22, Strings: 4, Instructions: 109COMMON

Download Yara Rule

APIs

??0QString@@QAE@XZ.QT5CORE(676E6AEE,6B94FA34,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F602
?number@QString@@SA?AV1@HH@Z.QT5CORE(00000000,?,0000000A,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F615
?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z.QT5SQL(?,00000000,00000001,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F628
??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL(?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F634
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F641
??4QString@@QAEAAV0@PBD@Z.QT5CORE(INSERT INTO serialNums (serialNum, purchaseDate) VALUES (:serialNum, :purchaseDate),?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F64F
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(000000FF,?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F65C
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?,?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F669
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:serialNum,0000000A,?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F67A
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(00CB3731,?,?,?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F69D
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F6A6
??1QVariant@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F6B9
??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(00C68445,?,?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F6C2
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:purchaseDate,0000000D,?,?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F6D3
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(00CB3731,?,?,?,?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F6F6
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F6FF
??1QVariant@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F70C
?exec@QSqlQuery@@QAE_NXZ.QT5SQL(?,?,?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F711
??1QSqlQuery@@QAE@XZ.QT5SQL(?,?,?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F71A
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F723
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F72C
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F735

Strings

INSERT INTO serialNums (serialNum, purchaseDate) VALUES (:serialNum, :purchaseDate), xrefs: 00C8F647
jng, xrefs: 00C8F5E5
:purchaseDate, xrefs: 00C8F6CA
:serialNum, xrefs: 00C8F671

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Query@@Variant@@$String@@@$?bind?fromArrayAscii_helper@Data@Flag@Flags@ParamSql@@@@@TypeTypedValue@$?database@?exec@?number@?prepare@Database@@Database@@@String@@_
String ID: :purchaseDate$:serialNum$INSERT INTO serialNums (serialNum, purchaseDate) VALUES (:serialNum, :purchaseDate)$jng
API String ID: 3411544613-2196297814
Opcode ID: ee05a7bebaf7aef52d15db35bddb57ad8e5e1ce95214fbe4321aed70ba4f86e1
Instruction ID: b5f389ca3b290eddfd440a267319356ce975cdec3246e075364523ac96a6fbeb
Opcode Fuzzy Hash: ee05a7bebaf7aef52d15db35bddb57ad8e5e1ce95214fbe4321aed70ba4f86e1
Instruction Fuzzy Hash: CA41F77191424AEFCB04DBA4ED59BEEBB78FB14305F044269E506A32A0DF745A0DCB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C90250 Relevance: 31.6, APIs: 15, Strings: 3, Instructions: 74COMMON

Download Yara Rule

APIs

?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A,676E6AEE,00CB39CD,000000FF,?,00C79DD2,00000000), ref: 00C9027E
?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z.QT5SQL(?,00000000,00000001,?,?,?,?,?,?,00000000), ref: 00C90294
??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL(?,?,?,?,?,?,?,?,?,00000000), ref: 00C902A0
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,00000000), ref: 00C902A9
??0QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,00000000), ref: 00C902B2
??4QString@@QAEAAV0@PBD@Z.QT5CORE(DELETE FROM tests WHERE id = :testID,?,?,?,?,?,?,?,?,?,00000000), ref: 00C902C4
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?,?,?,?,?,?,?,?,?,?,00000000), ref: 00C902D1
??0QVariant@@QAE@H@Z.QT5CORE(?,?,?,?,?,?,?,?,?,?,00000000), ref: 00C902DD
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:testID,00000007,?,?,?,?,?,?,?,?,?,00000000), ref: 00C902EE
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00C90311
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,00000000), ref: 00C9031A
??1QVariant@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,00000000), ref: 00C90327
?exec@QSqlQuery@@QAE_NXZ.QT5SQL(?,?,?,?,?,?,?,?,?,?,00000000), ref: 00C90330
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,00000000), ref: 00C90339
??1QSqlQuery@@QAE@XZ.QT5SQL(?,?,?,?,?,?,?,?,?,?,00000000), ref: 00C90342

Strings

DELETE FROM tests WHERE id = :testID, xrefs: 00C902B8
jng, xrefs: 00C90264
:testID, xrefs: 00C902E5

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Query@@$Variant@@$?bind?database@?exec@?from?number@?prepare@ArrayAscii_helper@Data@Database@@Database@@@Flag@Flags@ParamSql@@@@@String@@@String@@_TypeTypedValue@
String ID: :testID$DELETE FROM tests WHERE id = :testID$jng
API String ID: 3066189069-233250503
Opcode ID: 68da207250d1fa37a4629263020cf8a89210e6e7c4f5a1c8f64ea84b352eedf4
Instruction ID: 2c0c02c62d30745456896af00a8eb13bd9df9997774abafb9664cf9d8690b4f8
Opcode Fuzzy Hash: 68da207250d1fa37a4629263020cf8a89210e6e7c4f5a1c8f64ea84b352eedf4
Instruction Fuzzy Hash: BF31037190014AEFCB04DFA4ED59BEEBB78FB24705F004228E516A22A0DB755A0DCFA1

Uniqueness

Uniqueness Score: -1.00%

Function 00CAC89D Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 132COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(0000000A), ref: 00CAC8B6

Strings

, xrefs: 00CACA13

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: FeaturePresentProcessor
String ID:
API String ID: 2325560087-3916222277
Opcode ID: 161eb8bde47dcf2ac07b2f6419592a596dc1ea90d297c2f78dbb56c0ad2108ce
Instruction ID: a2e5895df17fdb6e633508b18ad7442dec34946f71cd98bb52d9393cc3e28520
Opcode Fuzzy Hash: 161eb8bde47dcf2ac07b2f6419592a596dc1ea90d297c2f78dbb56c0ad2108ce
Instruction Fuzzy Hash: EF41A3B1A0430A9FEB24CF69D9C57AABBF4FB08324F10846AD815E7350D7749A80DB90

Uniqueness

Uniqueness Score: -1.00%

Function 00CACBDC Relevance: 1.5, APIs: 1, Instructions: 3COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32(00CACBE8,00CAC4F1), ref: 00CACBE1

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: dc901df439c201dbf8667eadfe5456ab2917544acc75b8cbf9c3bc843a946c95
Instruction ID: 213d7aadaed6c08d5fb7a4f38695770e27c2eba8ec76dec9080caac7cb7b26bc
Opcode Fuzzy Hash: dc901df439c201dbf8667eadfe5456ab2917544acc75b8cbf9c3bc843a946c95
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 00C87ED0 Relevance: 200.0, APIs: 90, Strings: 24, Instructions: 498COMMON

Download Yara Rule

APIs

?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(00000000,HueTestFormWidget,Form,00000000,000000FF,676E6AEE,?,00000000,00CB9AA8,?,00C8B49F,00CB9AA8), ref: 00C87F15
?setWindowTitle@QWidget@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C87F25
??1QString@@QAE@XZ.QT5CORE ref: 00C87F35
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,HueTestFormWidget, User Information,00000000,000000FF), ref: 00C87F4D
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C87F63
??1QString@@QAE@XZ.QT5CORE ref: 00C87F6F
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,HueTestFormWidget,First,00000000,000000FF), ref: 00C87F87
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C87F97
??1QString@@QAE@XZ.QT5CORE ref: 00C87FA3
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,HueTestFormWidget,Middle,00000000,000000FF), ref: 00C87FBB
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C87FCB
??1QString@@QAE@XZ.QT5CORE ref: 00C87FD7
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,HueTestFormWidget,Last,00000000,000000FF), ref: 00C87FEF
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C87FFF
??1QString@@QAE@XZ.QT5CORE ref: 00C8800B
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,HueTestFormWidget,Enter...,00000000,000000FF), ref: 00C88023
?setPlaceholderText@QLineEdit@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C88039
??1QString@@QAE@XZ.QT5CORE ref: 00C88045
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,HueTestFormWidget,Enter...,00000000,000000FF), ref: 00C8805D
?setPlaceholderText@QLineEdit@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C88070
??1QString@@QAE@XZ.QT5CORE ref: 00C8807C
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,HueTestFormWidget,Enter...,00000000,000000FF), ref: 00C88094
?setPlaceholderText@QLineEdit@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C880A7
??1QString@@QAE@XZ.QT5CORE ref: 00C880B3
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,HueTestFormWidget,Reference Number,00000000,000000FF), ref: 00C880CB
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C880DE
??1QString@@QAE@XZ.QT5CORE ref: 00C880EA
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,HueTestFormWidget,Gender,00000000,000000FF), ref: 00C88102
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C88115
??1QString@@QAE@XZ.QT5CORE ref: 00C88121
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,HueTestFormWidget,Date of Birth,00000000,000000FF), ref: 00C88139
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C8814C
??1QString@@QAE@XZ.QT5CORE ref: 00C88158
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,HueTestFormWidget,Enter...,00000000,000000FF), ref: 00C88170
?setPlaceholderText@QLineEdit@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C88183
??1QString@@QAE@XZ.QT5CORE ref: 00C8818F
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,HueTestFormWidget,Enter...,00000000,000000FF), ref: 00C881A7
?setPlaceholderText@QLineEdit@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C881BA
??1QString@@QAE@XZ.QT5CORE ref: 00C881C6
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,HueTestFormWidget,Enter...,00000000,000000FF), ref: 00C881DE
?setPlaceholderText@QLineEdit@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C881F1
??1QString@@QAE@XZ.QT5CORE ref: 00C881FD
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,HueTestFormWidget,Experience,00000000,000000FF), ref: 00C88215
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C88228
??1QString@@QAE@XZ.QT5CORE ref: 00C88234
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,HueTestFormWidget,Job Function,00000000,000000FF), ref: 00C8824C
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C8825F
??1QString@@QAE@XZ.QT5CORE ref: 00C8826B
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,HueTestFormWidget,Industry,00000000,000000FF), ref: 00C88283
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C88299
??1QString@@QAE@XZ.QT5CORE ref: 00C882A5
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,HueTestFormWidget,Test Information,00000000,000000FF), ref: 00C882BD
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C882D3
??1QString@@QAE@XZ.QT5CORE ref: 00C882DF
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,HueTestFormWidget,Test Date,00000000,000000FF), ref: 00C882F7
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C8830D
??1QString@@QAE@XZ.QT5CORE ref: 00C88319
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,HueTestFormWidget,Time (mins),00000000,000000FF), ref: 00C88331
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C88347
??1QString@@QAE@XZ.QT5CORE ref: 00C88353
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,HueTestFormWidget,Illumination,00000000,000000FF), ref: 00C8836B
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C88381
??1QString@@QAE@XZ.QT5CORE ref: 00C8838D
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,HueTestFormWidget,Enter...,00000000,000000FF), ref: 00C883A5
?setPlaceholderText@QLineEdit@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C883BB
??1QString@@QAE@XZ.QT5CORE ref: 00C883C7
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,HueTestFormWidget,Enter...,00000000,000000FF), ref: 00C883DF
?setPlaceholderText@QLineEdit@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C883F5
??1QString@@QAE@XZ.QT5CORE ref: 00C88401
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,HueTestFormWidget,Location,00000000,000000FF), ref: 00C88419
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C8842F
??1QString@@QAE@XZ.QT5CORE ref: 00C8843B
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,HueTestFormWidget,Serial Number,00000000,000000FF), ref: 00C88453
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C88466
??1QString@@QAE@XZ.QT5CORE ref: 00C88472
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,HueTestFormWidget,Comments,00000000,000000FF), ref: 00C8848A
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C8849D
??1QString@@QAE@XZ.QT5CORE ref: 00C884A9
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,HueTestFormWidget,Enter...,00000000,000000FF), ref: 00C884C1
?setPlaceholderText@QPlainTextEdit@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C884D4
??1QString@@QAE@XZ.QT5CORE ref: 00C884E4
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,HueTestFormWidget,Reset Test,00000000,000000FF), ref: 00C884FC
?setText@QAbstractButton@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C88515
??1QString@@QAE@XZ.QT5CORE ref: 00C88521
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,HueTestFormWidget,Show Scores,00000000,000000FF), ref: 00C88539
?setText@QAbstractButton@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C8854F
??1QString@@QAE@XZ.QT5CORE ref: 00C8855B
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,HueTestFormWidget,Save,00000000,000000FF), ref: 00C88573
?setText@QAbstractButton@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C88586
??1QString@@QAE@XZ.QT5CORE ref: 00C8858B

Strings

Date of Birth, xrefs: 00C8812B
jng, xrefs: 00C87EE7
Last, xrefs: 00C87FE1
Gender, xrefs: 00C880F4
Reference Number, xrefs: 00C880BD
Test Date, xrefs: 00C882E9
First, xrefs: 00C87F79
Form, xrefs: 00C87F0A
User Information, xrefs: 00C87F3F
Industry, xrefs: 00C88275
Serial Number, xrefs: 00C88445
Time (mins), xrefs: 00C88323
Comments, xrefs: 00C8847C
Illumination, xrefs: 00C8835D
Job Function, xrefs: 00C8823E
Save, xrefs: 00C88565
Experience, xrefs: 00C88207
HueTestFormWidget, xrefs: 00C87F0F, 00C87F47, 00C87F81, 00C87FB5, 00C87FE9, 00C8801D, 00C88057, 00C8808E, 00C880C5, 00C880FC, 00C88133, 00C8816A, 00C881A1, 00C881D8, 00C8820F, 00C88246, 00C8827D, 00C882B7, 00C882F1, 00C88328, 00C88365, 00C8839F, 00C883D9, 00C88413, 00C8844D, 00C88484, 00C884BB, 00C884F6, 00C88533, 00C8856D
Enter..., xrefs: 00C88015, 00C8804F, 00C88086, 00C88162, 00C88199, 00C881D0, 00C88397, 00C883D1, 00C884B3
Test Information, xrefs: 00C882AF
Location, xrefs: 00C8840B
Show Scores, xrefs: 00C8852B
Reset Test, xrefs: 00C884EE
Middle, xrefs: 00C87FAD

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$?set?translate@Application@@CoreString@@@$Text@$Label@@$Edit@@Placeholder$Line$AbstractButton@@$PlainTextTitle@Widget@@Window
String ID: User Information$Comments$Date of Birth$Enter...$Experience$First$Form$Gender$HueTestFormWidget$Illumination$Industry$Job Function$Last$Location$Middle$Reference Number$Reset Test$Save$Serial Number$Show Scores$Test Date$Test Information$Time (mins)$jng
API String ID: 2068450239-2710468785
Opcode ID: 09ab63c14d757d50c0a4d4ee1a0522818e35c6d2a1f38407bf93361331e5e2e6
Instruction ID: d887cedff239c50fe4ee0abcfb6b650fcec5387adc4d499a040c5eda43b9a238
Opcode Fuzzy Hash: 09ab63c14d757d50c0a4d4ee1a0522818e35c6d2a1f38407bf93361331e5e2e6
Instruction Fuzzy Hash: FE122AB5540209BBCB00EFA4DC45FDD7B68BB04330F244368B936A72D1DB74AA09DBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00C7F430 Relevance: 177.2, APIs: 88, Strings: 13, Instructions: 469COMMON

Download Yara Rule

APIs

?objectName@QObject@@QBE?AVQString@@XZ.QT5CORE(6BB0CEB0,676E6AEE,6B9DED70,6BB0CEB0,00000000,000000FF,?,00C79704,00000000), ref: 00C7F466
??1QString@@QAE@XZ.QT5CORE(?,00C79704,00000000), ref: 00C7F474
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,DatabaseFormWidget,000000FF,?,00C79704,00000000), ref: 00C7F489
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C7F498
??1QString@@QAE@XZ.QT5CORE ref: 00C7F4A8
?resize@QWidget@@QAEXHH@Z.QT5WIDGETS(000002BE,00000239,?,00C79704,00000000), ref: 00C7F4BA
new.LIBCMT ref: 00C7F4C2
??0QVBoxLayout@@QAE@PAVQWidget@@@Z.QT5WIDGETS(00C79704,?,?,?,00C79704), ref: 00C7F4D9
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(000000FF,verticalLayout_2,000000FF,?,?,?,00C79704), ref: 00C7F500
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000,?,?,?,?,?,?,00C79704), ref: 00C7F513
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,00C79704), ref: 00C7F523
new.LIBCMT ref: 00C7F52B
??0QVBoxLayout@@QAE@XZ.QT5WIDGETS(?,?,?,?,?,?,?,00C79704), ref: 00C7F541
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,verticalLayout,000000FF,?,?,?,?,?,?,?,00C79704), ref: 00C7F569
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000,?,?,?,?,?,?,?,?,?,?,00C79704), ref: 00C7F57D
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,00C79704), ref: 00C7F58D
new.LIBCMT ref: 00C7F595
??0QHBoxLayout@@QAE@XZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,00C79704), ref: 00C7F5AB
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,horizontalLayout,000000FF,?,?,?,?,?,?,?,?,?,?,?,00C79704), ref: 00C7F5D3
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00C79704), ref: 00C7F5E7
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00C79704), ref: 00C7F5F7
new.LIBCMT ref: 00C7F5FF
??0QComboBox@@QAE@PAVQWidget@@@Z.QT5WIDGETS(00C79704), ref: 00C7F61C
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,searchCriteria,000000FF), ref: 00C7F640
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C7F654
??1QString@@QAE@XZ.QT5CORE ref: 00C7F664
?addWidget@QBoxLayout@@QAEXPAVQWidget@@HV?$QFlags@W4AlignmentFlag@Qt@@@@@Z.QT5WIDGETS(?,00000000,00000000), ref: 00C7F674
new.LIBCMT ref: 00C7F67C

Part of subcall function 00CAC0B7: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0DE

??0QComboBox@@QAE@PAVQWidget@@@Z.QT5WIDGETS(00C79704), ref: 00C7F696
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,searchMethod,000000FF), ref: 00C7F6BA
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C7F6CE
??1QString@@QAE@XZ.QT5CORE ref: 00C7F6DE
?addWidget@QBoxLayout@@QAEXPAVQWidget@@HV?$QFlags@W4AlignmentFlag@Qt@@@@@Z.QT5WIDGETS(?,00000000,00000000), ref: 00C7F6EE
new.LIBCMT ref: 00C7F6F6

Part of subcall function 00CAC0B7: _callnewh.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0BF

??0QLineEdit@@QAE@PAVQWidget@@@Z.QT5WIDGETS(00C79704), ref: 00C7F710
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,dbSearch,000000FF), ref: 00C7F738
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C7F74C
??1QString@@QAE@XZ.QT5CORE ref: 00C7F75C
?addWidget@QBoxLayout@@QAEXPAVQWidget@@HV?$QFlags@W4AlignmentFlag@Qt@@@@@Z.QT5WIDGETS(?,00000000,00000000), ref: 00C7F76C
new.LIBCMT ref: 00C7F774

Part of subcall function 00CAC0B7: Concurrency::cancel_current_task.LIBCPMT ref: 00CAC0D6

??0QPushButton@@QAE@PAVQWidget@@@Z.QT5WIDGETS(00C79704), ref: 00C7F78B
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,clearSearch,000000FF), ref: 00C7F7B3
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C7F7C7
??1QString@@QAE@XZ.QT5CORE ref: 00C7F7D7
?addWidget@QBoxLayout@@QAEXPAVQWidget@@HV?$QFlags@W4AlignmentFlag@Qt@@@@@Z.QT5WIDGETS(?,00000000,00000000), ref: 00C7F7E7
?addLayout@QBoxLayout@@QAEXPAVQLayout@@H@Z.QT5WIDGETS(00CB9AA8,00000000), ref: 00C7F7F5
new.LIBCMT ref: 00C7F7FD
??0QTableWidget@@QAE@PAVQWidget@@@Z.QT5WIDGETS(00C79704), ref: 00C7F814
?columnCount@QTableWidget@@QBEHXZ.QT5WIDGETS ref: 00C7F833
?setColumnCount@QTableWidget@@QAEXH@Z.QT5WIDGETS(00000011), ref: 00C7F849
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,tableDisplay,000000FF), ref: 00C7F856
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C7F86A
??1QString@@QAE@XZ.QT5CORE ref: 00C7F87A
?setColumnCount@QTableWidget@@QAEXH@Z.QT5WIDGETS(00000011), ref: 00C7F885
?addWidget@QBoxLayout@@QAEXPAVQWidget@@HV?$QFlags@W4AlignmentFlag@Qt@@@@@Z.QT5WIDGETS(?,00000000,00000000), ref: 00C7F891
new.LIBCMT ref: 00C7F899
??0QHBoxLayout@@QAE@XZ.QT5WIDGETS ref: 00C7F8AF
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,horizontalLayout_2,000000FF), ref: 00C7F8D7
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C7F8EB
??1QString@@QAE@XZ.QT5CORE ref: 00C7F8FB
new.LIBCMT ref: 00C7F903
??0QPushButton@@QAE@PAVQWidget@@@Z.QT5WIDGETS(00C79704), ref: 00C7F91A
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,selectTest,000000FF), ref: 00C7F942
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C7F956
??1QString@@QAE@XZ.QT5CORE ref: 00C7F966
??0QSizePolicy@@QAE@W4Policy@0@0W4ControlType@0@@Z.QT5WIDGETS(00000004,00000000,00000001), ref: 00C7F975
?setHorizontalStretch@QSizePolicy@@QAEXH@Z.QT5WIDGETS(00000000), ref: 00C7F980
?setVerticalStretch@QSizePolicy@@QAEXH@Z.QT5WIDGETS(00000000), ref: 00C7F98B
?sizePolicy@QWidget@@QBE?AVQSizePolicy@@XZ.QT5WIDGETS(?), ref: 00C7F99E
?hasHeightForWidth@QSizePolicy@@QBE_NXZ.QT5WIDGETS ref: 00C7F9A2
?setHeightForWidth@QSizePolicy@@QAEX_N@Z.QT5WIDGETS(?), ref: 00C7F9AF
?setSizePolicy@QWidget@@QAEXVQSizePolicy@@@Z.QT5WIDGETS(?), ref: 00C7F9C4
?addWidget@QBoxLayout@@QAEXPAVQWidget@@HV?$QFlags@W4AlignmentFlag@Qt@@@@@Z.QT5WIDGETS(?,00000000,00000000), ref: 00C7F9D0
new.LIBCMT ref: 00C7F9D8
??0QSpacerItem@@QAE@HHW4Policy@QSizePolicy@@0@Z.QT5WIDGETS(00000028,00000014,00000007,00000001), ref: 00C7F9F6
new.LIBCMT ref: 00C7FA1A
??0QPushButton@@QAE@PAVQWidget@@@Z.QT5WIDGETS(00C79704), ref: 00C7FA34
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,deleteButton,000000FF), ref: 00C7FA5F
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C7FA76
??1QString@@QAE@XZ.QT5CORE ref: 00C7FA86
?sizePolicy@QWidget@@QBE?AVQSizePolicy@@XZ.QT5WIDGETS(?), ref: 00C7FA93
?hasHeightForWidth@QSizePolicy@@QBE_NXZ.QT5WIDGETS ref: 00C7FA97
?setHeightForWidth@QSizePolicy@@QAEX_N@Z.QT5WIDGETS(?), ref: 00C7FAA4
?setSizePolicy@QWidget@@QAEXVQSizePolicy@@@Z.QT5WIDGETS(?), ref: 00C7FAB0
?addWidget@QBoxLayout@@QAEXPAVQWidget@@HV?$QFlags@W4AlignmentFlag@Qt@@@@@Z.QT5WIDGETS(?,00000000,00000000), ref: 00C7FABC
?addLayout@QBoxLayout@@QAEXPAVQLayout@@H@Z.QT5WIDGETS(?,00000000), ref: 00C7FAD0
?addLayout@QBoxLayout@@QAEXPAVQLayout@@H@Z.QT5WIDGETS(00000008,00000000), ref: 00C7FAD9

Part of subcall function 00C7DAF0: ?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,DatabaseFormWidget,Form,00000000,000000FF,676E6AEE,6B9DED70,?,00C79704,00C7FAE6,00C79704), ref: 00C7DB32
Part of subcall function 00C7DAF0: ?setWindowTitle@QWidget@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C7DB42
Part of subcall function 00C7DAF0: ??1QString@@QAE@XZ.QT5CORE ref: 00C7DB52
Part of subcall function 00C7DAF0: ?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,DatabaseFormWidget,Enter...,00000000,000000FF), ref: 00C7DB6A
Part of subcall function 00C7DAF0: ?setPlaceholderText@QLineEdit@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C7DB7A
Part of subcall function 00C7DAF0: ??1QString@@QAE@XZ.QT5CORE ref: 00C7DB8A
Part of subcall function 00C7DAF0: ?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,DatabaseFormWidget,Clear Search,00000000,000000FF), ref: 00C7DBA2
Part of subcall function 00C7DAF0: ?setText@QAbstractButton@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C7DBB8
Part of subcall function 00C7DAF0: ??1QString@@QAE@XZ.QT5CORE ref: 00C7DBC4
Part of subcall function 00C7DAF0: ?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,DatabaseFormWidget,Select Test,00000000,000000FF), ref: 00C7DBDC
Part of subcall function 00C7DAF0: ?setText@QAbstractButton@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C7DBEC
Part of subcall function 00C7DAF0: ??1QString@@QAE@XZ.QT5CORE ref: 00C7DBF8
Part of subcall function 00C7DAF0: ?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,DatabaseFormWidget,Delete,00000000,000000FF), ref: 00C7DC10
Part of subcall function 00C7DAF0: ?setText@QAbstractButton@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C7DC20
Part of subcall function 00C7DAF0: ??1QString@@QAE@XZ.QT5CORE ref: 00C7DC25

?connectSlotsByName@QMetaObject@@SAXPAVQObject@@@Z.QT5CORE(00C79704,00C79704), ref: 00C7FAE7

Strings

jng, xrefs: 00C7F447
dbSearch, xrefs: 00C7F721
horizontalLayout_2, xrefs: 00C7F8C0
DatabaseFormWidget, xrefs: 00C7F483
selectTest, xrefs: 00C7F92B
clearSearch, xrefs: 00C7F79C
searchMethod, xrefs: 00C7F6A3
verticalLayout, xrefs: 00C7F552
tableDisplay, xrefs: 00C7F850
verticalLayout_2, xrefs: 00C7F4EA
searchCriteria, xrefs: 00C7F629
deleteButton, xrefs: 00C7FA52
horizontalLayout, xrefs: 00C7F5BC

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$?set$Layout@@String@@@Widget@@$Name@Object@@Size$?fromObjectUtf8@$?add$Policy@@$Widget@@@$AlignmentFlag@Flags@Qt@@@@@Widget@$Button@@$?translate@Application@@CorePolicy@$HeightTableText@Width@$AbstractCount@Layout@Push$?has?sizeBox@@ColumnComboEdit@@LinePolicy@@@Stretch@$?column?connect?object?resize@Concurrency::cancel_current_taskControlHorizontalItem@@MetaObject@@@PlaceholderPolicy@0@0Policy@@0@SlotsSpacerTitle@Type@0@@VerticalWindow_callnewhmalloc
String ID: DatabaseFormWidget$clearSearch$dbSearch$deleteButton$horizontalLayout$horizontalLayout_2$searchCriteria$searchMethod$selectTest$tableDisplay$verticalLayout$verticalLayout_2$jng
API String ID: 1964865766-608614904
Opcode ID: 981e96ddeeaba08c6b1d0bd33c237b92becd4e8896fbba1025ea55bcabca5f2c
Instruction ID: 341bce0a6e3c3ba69050ff9d0134f0a199e72c5db386b5d9978907d7482a5313
Opcode Fuzzy Hash: 981e96ddeeaba08c6b1d0bd33c237b92becd4e8896fbba1025ea55bcabca5f2c
Instruction Fuzzy Hash: FF121BB190060ADFCB10DF94DC89B9EBBB8FF08724F204359E625A72E1DB705A45DB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C92BC0 Relevance: 170.2, APIs: 95, Strings: 2, Instructions: 413COMMON

Download Yara Rule

APIs

?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A,676E6AEE,?,00000000,?), ref: 00C92C0A
?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z.QT5SQL(?,00000000,00000001), ref: 00C92C20
??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL ref: 00C92C2C
??1QString@@QAE@XZ.QT5CORE ref: 00C92C35
??0QString@@QAE@XZ.QT5CORE ref: 00C92C3E
??4QString@@QAEAAV0@PBD@Z.QT5CORE(SELECT tests.* , users.* FROM tests INNER JOIN users ON tests.userID = users.id), ref: 00C92C50
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C92C5D
?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C92C66
?next@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C92C80
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000000), ref: 00C92CA9
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C92CB9
??1QVariant@@QAE@XZ.QT5CORE ref: 00C92CC2
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000002), ref: 00C92CD1
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C92CE1
??1QVariant@@QAE@XZ.QT5CORE ref: 00C92CEA
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000003), ref: 00C92CFC
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C92D0C
??1QVariant@@QAE@XZ.QT5CORE ref: 00C92D18
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000004), ref: 00C92D2A
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C92D3A
??1QVariant@@QAE@XZ.QT5CORE ref: 00C92D46
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000006), ref: 00C92D58
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C92D68
??1QVariant@@QAE@XZ.QT5CORE ref: 00C92D74
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000007), ref: 00C92D86
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C92D96
??1QVariant@@QAE@XZ.QT5CORE ref: 00C92DA2
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000009), ref: 00C92DB4
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C92DC4
??1QVariant@@QAE@XZ.QT5CORE ref: 00C92DD0
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,0000000A), ref: 00C92DE2
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C92DF2
??1QVariant@@QAE@XZ.QT5CORE ref: 00C92DFE
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,0000000B), ref: 00C92E10
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C92E20
??1QVariant@@QAE@XZ.QT5CORE ref: 00C92E2C
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,0000000C), ref: 00C92E3E
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C92E4E
??1QVariant@@QAE@XZ.QT5CORE ref: 00C92E5A
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,0000000D), ref: 00C92E6C
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C92E7C
??1QVariant@@QAE@XZ.QT5CORE ref: 00C92E88
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,0000000E), ref: 00C92E9A
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C92EAA
??1QVariant@@QAE@XZ.QT5CORE ref: 00C92EB6
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,0000000F), ref: 00C92EC8
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C92ED8
??1QVariant@@QAE@XZ.QT5CORE ref: 00C92EE4
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000010), ref: 00C92EF6
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C92F06
??1QVariant@@QAE@XZ.QT5CORE ref: 00C92F12
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000011), ref: 00C92F24
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C92F34
??1QVariant@@QAE@XZ.QT5CORE ref: 00C92F40
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000012), ref: 00C92F52
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C92F62
??1QVariant@@QAE@XZ.QT5CORE ref: 00C92F6E
??0QString@@QAE@ABV0@@Z.QT5CORE(?), ref: 00C92F7E

Part of subcall function 00C906F0: ?number@QString@@SA?AV1@HH@Z.QT5CORE(00CB3B11,?,0000000A,676E6AEE), ref: 00C9072D
Part of subcall function 00C906F0: ?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z.QT5SQL(?,00000000,00000001), ref: 00C90740
Part of subcall function 00C906F0: ??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL ref: 00C9074C
Part of subcall function 00C906F0: ??1QString@@QAE@XZ.QT5CORE ref: 00C90755
Part of subcall function 00C906F0: ??0QString@@QAE@XZ.QT5CORE ref: 00C9075E
Part of subcall function 00C906F0: ??4QString@@QAEAAV0@PBD@Z.QT5CORE(SELECT scores FROM tests WHERE id = :id), ref: 00C90770
Part of subcall function 00C906F0: ?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(000000FF), ref: 00C9077D
Part of subcall function 00C906F0: ??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C9078A
Part of subcall function 00C906F0: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:id,00000003), ref: 00C907A1
Part of subcall function 00C906F0: ?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C907C0
Part of subcall function 00C906F0: ??1QString@@QAE@XZ.QT5CORE ref: 00C907C9
Part of subcall function 00C906F0: ??1QVariant@@QAE@XZ.QT5CORE ref: 00C907D6
Part of subcall function 00C906F0: ?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C907DF
Part of subcall function 00C906F0: ?next@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C907E8
Part of subcall function 00C906F0: ?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000000), ref: 00C907FF
Part of subcall function 00C906F0: ?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C9080F
Part of subcall function 00C906F0: ??1QVariant@@QAE@XZ.QT5CORE ref: 00C9081C
Part of subcall function 00C906F0: ??0QChar@@QAE@H@Z.QT5CORE(00000022), ref: 00C90827
Part of subcall function 00C906F0: ?indexOf@QString@@QBEHVQChar@@HW4CaseSensitivity@Qt@@@Z.QT5CORE(00CB3B11,00000000,00000001), ref: 00C90837
Part of subcall function 00C906F0: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CB9364,00000000), ref: 00C90849

Part of subcall function 00C90FA0: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CBA9B4,00000001,676E6AEE), ref: 00C90FF8
Part of subcall function 00C90FA0: ?split@QString@@QBE?AVQStringList@@ABV1@W4SplitBehavior@1@W4CaseSensitivity@Qt@@@Z.QT5CORE(00CB3CFD,?,00000000,00000001,?,6B5136D0,?,?,00CB3CFD), ref: 00C91017
Part of subcall function 00C90FA0: ?size@QListData@@QBEHXZ.QT5CORE(?,6B5136D0,?,?,00CB3CFD), ref: 00C9101F
Part of subcall function 00C90FA0: ??1QString@@QAE@XZ.QT5CORE(00000000,?,?,?,?,?,?,?,6B5136D0,?,?,00CB3CFD), ref: 00C91068
Part of subcall function 00C90FA0: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(00CB3CFD,?,?,6B5136D0,?,?,00CB3CFD), ref: 00C91073
Part of subcall function 00C90FA0: ??1QString@@QAE@XZ.QT5CORE(?,?,6B5136D0,?,?,00CB3CFD), ref: 00C91086
Part of subcall function 00C90FA0: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CBA9B4,00000001,?,?,6B5136D0,?,?,00CB3CFD), ref: 00C9109D
Part of subcall function 00C90FA0: ?split@QString@@QBE?AVQStringList@@ABV1@W4SplitBehavior@1@W4CaseSensitivity@Qt@@@Z.QT5CORE(?,6B5136D0,00000000,00000001,?,?,?,?,6B5136D0,?,?,00CB3CFD), ref: 00C910BC

Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE(?,0000002C,00C800BF), ref: 00C94608
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94611
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9461A
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94623
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9462C
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94635
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9463E
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94647
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94650
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94659
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94662
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9466B
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94674
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9467D
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94686
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9468F
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94698
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C946A1

??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?), ref: 00C92FB0
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C92FB9
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C92FC2
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C92FCB
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C92FD4
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C92FDD
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C92FE6
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C92FEF
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C92FF8
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C93001
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C9300A
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C93013
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C9301C
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C93025
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C9302E
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C93037
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C93040

Part of subcall function 00C631D0: new.LIBCMT ref: 00C63242

Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(00CBC630,00C63A62,00000000,00CBC634,?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C62286
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C6228F
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C62298
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622A1
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622AA
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622B3
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622BC
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622C5
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622CE
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622D7
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622E0
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622E9
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622F2
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622FB
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C62304
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C6230D
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C62316

??1QString@@QAE@XZ.QT5CORE(?), ref: 00C93058
??1QString@@QAE@XZ.QT5CORE ref: 00C93061
??1QString@@QAE@XZ.QT5CORE ref: 00C9306A
??1QString@@QAE@XZ.QT5CORE ref: 00C93073
??1QString@@QAE@XZ.QT5CORE ref: 00C9307C
??1QString@@QAE@XZ.QT5CORE ref: 00C93085
??1QString@@QAE@XZ.QT5CORE ref: 00C9308E
??1QString@@QAE@XZ.QT5CORE ref: 00C93097
??1QString@@QAE@XZ.QT5CORE ref: 00C930A0
??1QString@@QAE@XZ.QT5CORE ref: 00C930A9
??1QString@@QAE@XZ.QT5CORE ref: 00C930B2
??1QString@@QAE@XZ.QT5CORE ref: 00C930BB
??1QString@@QAE@XZ.QT5CORE ref: 00C930C4
??1QString@@QAE@XZ.QT5CORE ref: 00C930CD
??1QString@@QAE@XZ.QT5CORE ref: 00C930D6
??1QString@@QAE@XZ.QT5CORE ref: 00C930DF
??1QString@@QAE@XZ.QT5CORE ref: 00C930EC
?next@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C930F5
??1QString@@QAE@XZ.QT5CORE ref: 00C9310C
??1QSqlQuery@@QAE@XZ.QT5SQL ref: 00C93115

Strings

jng, xrefs: 00C92BDF
SELECT tests.* , users.* FROM tests INNER JOIN users ON tests.userID = users.id, xrefs: 00C92C44

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Variant@@$Query@@$V0@@$?value@String@$?fromArrayAscii_helper@Data@Typed$?next@CaseQt@@@Sensitivity@String@@@$?database@?exec@?number@?prepare@?split@Behavior@1@Char@@Data@@Database@@Database@@@ListList@@SplitStringString@@_$?bind?dispose@?index?size@Data@1@@Flag@Flags@ParamSql@@@@@TypeValue@
String ID: SELECT tests.* , users.* FROM tests INNER JOIN users ON tests.userID = users.id$jng
API String ID: 798479346-1157985519
Opcode ID: 2a26542c43b2d9eca15add40d5ae162881920c513af2cd47d1549bce9f37111c
Instruction ID: 892d086b0a7b59e655caebe918b1fff1594e6608f9c90024373d4eacfcf42f6f
Opcode Fuzzy Hash: 2a26542c43b2d9eca15add40d5ae162881920c513af2cd47d1549bce9f37111c
Instruction Fuzzy Hash: 1402B375801149EBDF09DFA4ED98BDD7BB8AF28304F004259A906931A0EE74AA4DCF61

Uniqueness

Uniqueness Score: -1.00%

Function 00C90AC0 Relevance: 164.9, APIs: 92, Strings: 2, Instructions: 406COMMON

Download Yara Rule

APIs

?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(SELECT * FROM settings,00000016,676E6AEE,6B5136D0,?,?), ref: 00C90B05
?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A), ref: 00C90B1E
?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z.QT5SQL(?,00000000,00000001), ref: 00C90B32
??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL ref: 00C90B3E
??1QString@@QAE@XZ.QT5CORE ref: 00C90B4B
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(00000000), ref: 00C90B58
?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C90B61
?next@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C90B6A
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000001), ref: 00C90B87
?toBool@QVariant@@QBE_NXZ.QT5CORE ref: 00C90B8F
??1QVariant@@QAE@XZ.QT5CORE ref: 00C90BA5
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000002), ref: 00C90BB0
?toBool@QVariant@@QBE_NXZ.QT5CORE ref: 00C90BB8
??1QVariant@@QAE@XZ.QT5CORE ref: 00C90BC8
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000003), ref: 00C90BD3
?toBool@QVariant@@QBE_NXZ.QT5CORE ref: 00C90BDB
??1QVariant@@QAE@XZ.QT5CORE ref: 00C90BEB
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000004), ref: 00C90BF6
?toBool@QVariant@@QBE_NXZ.QT5CORE ref: 00C90BFE
??1QVariant@@QAE@XZ.QT5CORE ref: 00C90C0E
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000005), ref: 00C90C19
?toBool@QVariant@@QBE_NXZ.QT5CORE ref: 00C90C21
??1QVariant@@QAE@XZ.QT5CORE ref: 00C90C31
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000006), ref: 00C90C3C
?toBool@QVariant@@QBE_NXZ.QT5CORE ref: 00C90C44
??1QVariant@@QAE@XZ.QT5CORE ref: 00C90C54
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000007), ref: 00C90C5F
?toBool@QVariant@@QBE_NXZ.QT5CORE ref: 00C90C67
??1QVariant@@QAE@XZ.QT5CORE ref: 00C90C77
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000008), ref: 00C90C82
?toBool@QVariant@@QBE_NXZ.QT5CORE ref: 00C90C8A
??1QVariant@@QAE@XZ.QT5CORE ref: 00C90C9A
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000009), ref: 00C90CA5
?toBool@QVariant@@QBE_NXZ.QT5CORE ref: 00C90CAD
??1QVariant@@QAE@XZ.QT5CORE ref: 00C90CBD
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,0000000A), ref: 00C90CC8
?toBool@QVariant@@QBE_NXZ.QT5CORE ref: 00C90CD0
??1QVariant@@QAE@XZ.QT5CORE ref: 00C90CE0
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,0000000B), ref: 00C90CEB
?toBool@QVariant@@QBE_NXZ.QT5CORE ref: 00C90CF3
??1QVariant@@QAE@XZ.QT5CORE ref: 00C90D03
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,0000000C), ref: 00C90D0E
?toBool@QVariant@@QBE_NXZ.QT5CORE ref: 00C90D16
??1QVariant@@QAE@XZ.QT5CORE ref: 00C90D26
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,0000000D), ref: 00C90D31
?toBool@QVariant@@QBE_NXZ.QT5CORE ref: 00C90D39
??1QVariant@@QAE@XZ.QT5CORE ref: 00C90D49
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,0000000E), ref: 00C90D54
?toBool@QVariant@@QBE_NXZ.QT5CORE ref: 00C90D5C
??1QVariant@@QAE@XZ.QT5CORE ref: 00C90D6C
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,0000000F), ref: 00C90D77
?toBool@QVariant@@QBE_NXZ.QT5CORE ref: 00C90D7F
??1QVariant@@QAE@XZ.QT5CORE ref: 00C90D8F
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000010), ref: 00C90D9A
?toBool@QVariant@@QBE_NXZ.QT5CORE ref: 00C90DA2
??1QVariant@@QAE@XZ.QT5CORE ref: 00C90DB2
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000011), ref: 00C90DBD
?toBool@QVariant@@QBE_NXZ.QT5CORE ref: 00C90DC5
??1QVariant@@QAE@XZ.QT5CORE ref: 00C90DD5
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000012), ref: 00C90DE0
?toInt@QVariant@@QBEHPA_N@Z.QT5CORE(00000000), ref: 00C90DEA
??1QVariant@@QAE@XZ.QT5CORE ref: 00C90DFA
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000013), ref: 00C90E05
?toInt@QVariant@@QBEHPA_N@Z.QT5CORE(00000000), ref: 00C90E0F
??1QVariant@@QAE@XZ.QT5CORE ref: 00C90E1F
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000014), ref: 00C90E2A
?toInt@QVariant@@QBEHPA_N@Z.QT5CORE(00000000), ref: 00C90E34
??1QVariant@@QAE@XZ.QT5CORE ref: 00C90E44
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000015), ref: 00C90E4F
?toInt@QVariant@@QBEHPA_N@Z.QT5CORE(00000000), ref: 00C90E59
??1QVariant@@QAE@XZ.QT5CORE ref: 00C90E69
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000016), ref: 00C90E74
?toInt@QVariant@@QBEHPA_N@Z.QT5CORE(00000000), ref: 00C90E7E
??1QVariant@@QAE@XZ.QT5CORE ref: 00C90E8E
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000017), ref: 00C90E99
?toInt@QVariant@@QBEHPA_N@Z.QT5CORE(00000000), ref: 00C90EA3
??1QVariant@@QAE@XZ.QT5CORE ref: 00C90EB3
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000018), ref: 00C90EBE
?toInt@QVariant@@QBEHPA_N@Z.QT5CORE(00000000), ref: 00C90EC8
??1QVariant@@QAE@XZ.QT5CORE ref: 00C90ED8
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000019), ref: 00C90EE3
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C90EEF
??4QString@@QAEAAV0@$$QAV0@@Z.QT5CORE(00000000), ref: 00C90EF9
??1QString@@QAE@XZ.QT5CORE ref: 00C90F02
??1QVariant@@QAE@XZ.QT5CORE ref: 00C90F0F
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,0000001A), ref: 00C90F1A
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C90F26
??4QString@@QAEAAV0@$$QAV0@@Z.QT5CORE(00000000), ref: 00C90F30
??1QString@@QAE@XZ.QT5CORE ref: 00C90F39
??1QVariant@@QAE@XZ.QT5CORE ref: 00C90F42
??1QSqlQuery@@QAE@XZ.QT5SQL ref: 00C90F47
??1QString@@QAE@XZ.QT5CORE ref: 00C90F50

Strings

jng, xrefs: 00C90AD7
SELECT * FROM settings, xrefs: 00C90AF2

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Variant@@$Query@@$?value@$Bool@$String@@$Int@$String@V0@$$V0@@$?database@?exec@?from?next@?number@?prepare@ArrayAscii_helper@Data@Database@@Database@@@String@@@String@@_Typed
String ID: SELECT * FROM settings$jng
API String ID: 2643450318-4151881706
Opcode ID: 1e118a1b534e0ee3d685598a041e67343c34afd8d7e1787a1bc1c8d867ece3ff
Instruction ID: 6620e10bb99a4444613173249fe390e1460dd9a002b11fbdd41f228923bf6537
Opcode Fuzzy Hash: 1e118a1b534e0ee3d685598a041e67343c34afd8d7e1787a1bc1c8d867ece3ff
Instruction Fuzzy Hash: 28022B3190428DDEDB05EBE4DA58BEEBBB8AF24305F204159D146A32D1DE706F0DDB62

Uniqueness

Uniqueness Score: -1.00%

Function 00C65390 Relevance: 145.7, APIs: 81, Strings: 2, Instructions: 430COMMON

Download Yara Rule

APIs

??0QString@@QAE@XZ.QT5CORE(676E6AEE,?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C653C6
??0QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C653D8
??0QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C653E3
??0QFileDialog@@QAE@PAVQWidget@@ABVQString@@11@Z.QT5WIDGETS(00000000,00000000,00000000,00000000,?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C653F5
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C653FE
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C65407
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C65414
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(*.txt, *.csv,0000000C,?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C65421
?setNameFilter@QFileDialog@@QAEXABVQString@@@Z.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C65438
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C65445
?setFileMode@QFileDialog@@QAEXW4FileMode@1@@Z.QT5WIDGETS(00000001,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C65450
?exec@QDialog@@UAEHXZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C65459
?selectedFiles@QFileDialog@@QBE?AVQStringList@@XZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C6546C
?size@QListData@@QBEHXZ.QT5CORE(?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C65470

Part of subcall function 00C61FD0: ??1QString@@QAE@XZ.QT5CORE(676E6AEE,?,6B520380,6B5175D0,00000000,00CAD200,000000FF,?,00C88DAB,?,00C6B410,?,?,676E6AEE), ref: 00C62035
Part of subcall function 00C61FD0: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(6B5175D0,676E6AEE,?,6B520380,6B5175D0,00000000,00CAD200,000000FF,?,00C88DAB,?,00C6B410,?,?,676E6AEE), ref: 00C62040

?selectedFiles@QFileDialog@@QBE?AVQStringList@@XZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C65492
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C65498
??0QString@@QAE@ABV0@@Z.QT5CORE(00000000,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C654A2
??0QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C654B3
??0QFile@@QAE@ABVQString@@@Z.QT5CORE(?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C654C4
?open@QFile@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z.QT5CORE(?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C654DA
?readLine@QIODevice@@QAE?AVQByteArray@@_J@Z.QT5CORE(?,00000000,00000000,?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C654F9
??4QString@@QAEAAV0@ABVQByteArray@@@Z.QT5CORE(00000000,?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C65503
??1QByteArray@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C65510
?atEnd@QFileDevice@@UBE_NXZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C65519
?readLine@QIODevice@@QAE?AVQByteArray@@_J@Z.QT5CORE(?,00000000,00000000,?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C6553B
??4QString@@QAEAAV0@ABVQByteArray@@@Z.QT5CORE(00000000,?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C65545
??1QByteArray@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C6554E
??0QChar@@QAE@H@Z.QT5CORE(0000002C,?,00000000,00000001,?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C65569
?split@QString@@QBE?AVQStringList@@VQChar@@W4SplitBehavior@1@W4CaseSensitivity@Qt@@@Z.QT5CORE(?,?,00000000,00000001,?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C65576
??0QString@@QAE@XZ.QT5CORE(?,00000000,00000001,?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C655A2
?size@QListData@@QBEHXZ.QT5CORE(?,00000000,00000001,?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C655B4
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000010,00CBA9B4,?,00000000,00000001), ref: 00C655C9

Part of subcall function 00C623D0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00CB35BE), ref: 00C62405
Part of subcall function 00C623D0: ?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(000000FF,00000000,000000FF), ref: 00C62422
Part of subcall function 00C623D0: ?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE(00000000), ref: 00C62435
Part of subcall function 00C623D0: ??1QString@@QAE@XZ.QT5CORE ref: 00C6243E

?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE(00000000,?,00000000,00000001), ref: 00C655E4
??1QString@@QAE@XZ.QT5CORE(?,00000000,00000001,?,?,?,?,?,?,?,?,?,?,?,?,00CAD882), ref: 00C655ED
?size@QListData@@QBEHXZ.QT5CORE(?,00000000,00000001,?,?,?,?,?,?,?,?,?,?,?,?,00CAD882), ref: 00C655F7
?toStdString@QString@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ.QT5CORE(?,?,00000000,00000001,?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C65608
?fromStdString@QString@@SA?AV1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z.QT5CORE(?,00000000,?,00000000,00000001,?,?,?,?,?,?,?,?,?,?,00CAD882), ref: 00C65617
??4QString@@QAEAAV0@$$QAV0@@Z.QT5CORE(00000000,00000001,?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C65624
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C6562D
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(00CBA9B4,?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C65685
?size@QListData@@QBEHXZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C6568E
?at@QListData@@QBEPAPAXH@Z.QT5CORE(0000000C,?,?,?,?,?,00000001), ref: 00C656A2
??0QString@@QAE@ABV0@@Z.QT5CORE(00000000,?,?,?,?,?,?,00000001), ref: 00C656AF
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000009,?,?,?,?,?,?,00000001), ref: 00C656BA
??0QString@@QAE@ABV0@@Z.QT5CORE(00000000,?,?,?,?,?,?,?,00000001), ref: 00C656C7
?at@QListData@@QBEPAPAXH@Z.QT5CORE(0000000B,?,?,?,?,?,?,?,00000001), ref: 00C656D2
??0QString@@QAE@ABV0@@Z.QT5CORE(00000000,?,?,?,?,?,?,?,?,00000001), ref: 00C656DF
?at@QListData@@QBEPAPAXH@Z.QT5CORE(0000000D,?,?,?,?,?,?,?,?,00000001), ref: 00C656EA
??0QString@@QAE@ABV0@@Z.QT5CORE(00000000,?,?,?,?,?,?,?,?,?,00000001), ref: 00C656F7
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000008,?,?,?,?,?,?,?,?,?,00000001), ref: 00C65702
??0QString@@QAE@ABV0@@Z.QT5CORE(00000000,?,?,?,?,?,?,?,?,?,?,00000001), ref: 00C6570F
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000004,?,?,?,?,?,?,?,?,?,?,00000001), ref: 00C6571A
??0QString@@QAE@ABV0@@Z.QT5CORE(00000000,?,?,?,?,?,?,?,?,?,?,?,00000001), ref: 00C65727
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000003,?,?,?,?,?,?,?,?,?,?,?,00000001), ref: 00C65732
??0QString@@QAE@ABV0@@Z.QT5CORE(00000000,?,?,?,?,?,?,?,?,?,?,?,?,00000001), ref: 00C6573F
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000002,?,?,?,?,?,?,?,?,?,?,?,?,00000001), ref: 00C6574A
??0QString@@QAE@ABV0@@Z.QT5CORE(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,00000001), ref: 00C65757
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001,?,?,?,?,?,?,?,?,?,?,?,?,?,00000001), ref: 00C65762
??0QString@@QAE@ABV0@@Z.QT5CORE(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000001), ref: 00C6576F
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000001), ref: 00C6577A
??0QString@@QAE@ABV0@@Z.QT5CORE(00000000), ref: 00C65787
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000006), ref: 00C657A8
??0QString@@QAE@ABV0@@Z.QT5CORE(00000000), ref: 00C657B5
?at@QListData@@QBEPAPAXH@Z.QT5CORE(0000000E), ref: 00C657C0
??0QString@@QAE@ABV0@@Z.QT5CORE(00000000), ref: 00C657CD
??0QString@@QAE@ABV0@@Z.QT5CORE(?), ref: 00C657DD
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000007), ref: 00C657E8
??0QString@@QAE@ABV0@@Z.QT5CORE(00000000), ref: 00C657F5
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000005), ref: 00C65800
??0QString@@QAE@ABV0@@Z.QT5CORE(00000000), ref: 00C6580D
?at@QListData@@QBEPAPAXH@Z.QT5CORE(0000000A), ref: 00C65818
??0QString@@QAE@ABV0@@Z.QT5CORE(00000000), ref: 00C65825
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C65843
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C65887
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C65892
?atEnd@QFileDevice@@UBE_NXZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C658A8
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,00000001), ref: 00C658BD
??1QFile@@UAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C658D7
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C658E0
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C658E9
??1QFileDialog@@UAE@XZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,00CAD882,000000FF), ref: 00C658F2

Strings

*.txt, *.csv, xrefs: 00C6541C
jng, xrefs: 00C653A9

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Data@@List$V0@@$?at@$File$Dialog@@$Byte$?size@Device@@$?append@?fromFile@@List@@String$?dispose@?read?selected?setArray@@Array@@@Array@@_Char@@D@std@@Data@1@@End@Files@Line@String@String@@@U?$char_traits@V1@@V?$allocator@V?$basic_string@$?exec@?open@?split@ArrayAscii_helper@Behavior@1@CaseD@2@@std@@D@2@@std@@@Data@Device@@@@@Filter@Flag@Flags@ModeMode@Mode@1@@NameOpenQt@@@Sensitivity@SplitString@@11@TypedUtf8@V0@$$Widget@@_invalid_parameter_noinfo_noreturn
String ID: *.txt, *.csv$jng
API String ID: 2181207819-3579762897
Opcode ID: 144407c64ac9e2572c1039031865f95b62ca6cffae5c359e64e191c79b6b7eab
Instruction ID: d5330fead7e8c1507f1251334922d4e240dbccb5e1f413ba6e1f596c70efbefc
Opcode Fuzzy Hash: 144407c64ac9e2572c1039031865f95b62ca6cffae5c359e64e191c79b6b7eab
Instruction Fuzzy Hash: 4B020671500648EFDF08EF64ED99BED3B68FB18305F044219F906932A0DF71AA49CB92

Uniqueness

Uniqueness Score: -1.00%

Function 00C629C0 Relevance: 143.9, APIs: 76, Strings: 6, Instructions: 363windowCOMMON

Download Yara Rule

APIs

??0QMessageBox@@QAE@PAVQWidget@@@Z.QT5WIDGETS(00000000,676E6AEE), ref: 00C629F1
?setStandardButtons@QMessageBox@@QAEXV?$QFlags@W4StandardButton@QMessageBox@@@@@Z.QT5WIDGETS ref: 00C62A0A
??0QGraphicsView@@QAE@PAVQWidget@@@Z.QT5WIDGETS(00000000), ref: 00C62A15
?setAlignment@QGraphicsView@@QAEXV?$QFlags@W4AlignmentFlag@Qt@@@@@Z.QT5WIDGETS ref: 00C62A2B
??0QGraphicsScene@@QAE@PAVQObject@@@Z.QT5WIDGETS(00000000), ref: 00C62A36
??0QRectF@@QAE@NNNN@Z.QT5CORE ref: 00C62A5C
?setSceneRect@QGraphicsScene@@QAEXABVQRectF@@@Z.QT5WIDGETS(00000000), ref: 00C62A66

Part of subcall function 00C6D860: ?tr@QMetaObject@@QBE?AVQString@@PBD0H@Z.QT5CORE(?,?,?,?,?,00C61B0A,?,Save,00000000,000000FF), ref: 00C6D87E

??0QLabel@@QAE@ABVQString@@PAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z.QT5WIDGETS(00000000,00000000,00000000), ref: 00C62A93
??1QString@@QAE@XZ.QT5CORE ref: 00C62A9C
?setAlignment@QLabel@@QAEXV?$QFlags@W4AlignmentFlag@Qt@@@@@Z.QT5WIDGETS ref: 00C62AAE
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(times,00000005), ref: 00C62AC1
??0QFont@@QAE@ABVQString@@HH_N@Z.QT5GUI(?,0000000A,000000FF,00000000), ref: 00C62ADA
?setFont@QWidget@@QAEXABVQFont@@@Z.QT5WIDGETS(00000000), ref: 00C62AE8
??1QFontMetrics@@QAE@XZ.QT5GUI ref: 00C62AF1
??1QString@@QAE@XZ.QT5CORE ref: 00C62AFE
?addWidget@QGraphicsScene@@QAEPAVQGraphicsProxyWidget@@PAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z.QT5WIDGETS(?,00000000), ref: 00C62B0D
?height@QGraphicsScene@@QBENXZ.QT5WIDGETS ref: 00C62B16
?width@QGraphicsScene@@QBENXZ.QT5WIDGETS(00000000), ref: 00C62B2E
??0QRect@@QAE@HHHH@Z.QT5CORE(00000000,00000000,00000000), ref: 00C62B41
?setGeometry@QWidget@@QAEXABVQRect@@@Z.QT5WIDGETS(00000000), ref: 00C62B4B
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:/Images/aboutImage.png,00000017), ref: 00C62B58
??0QImage@@QAE@ABVQString@@PBD@Z.QT5GUI(?,00000000), ref: 00C62B6D
??1QString@@QAE@XZ.QT5CORE ref: 00C62B7A
?fromImage@QPixmap@@SA?AV1@ABVQImage@@V?$QFlags@W4ImageConversionFlag@Qt@@@@@Z.QT5GUI(?), ref: 00C62B91
??0QGraphicsPixmapItem@@QAE@ABVQPixmap@@PAVQGraphicsItem@@@Z.QT5WIDGETS(00000000,00000000), ref: 00C62BA4
??1QPixmap@@UAE@XZ.QT5GUI ref: 00C62BB1
?width@QGraphicsScene@@QBENXZ.QT5WIDGETS ref: 00C62BBA
?width@QImage@@QBEHXZ.QT5GUI ref: 00C62BCC
?setX@QGraphicsItem@@QAEXN@Z.QT5WIDGETS ref: 00C62BF3
?height@QGraphicsScene@@QBENXZ.QT5WIDGETS ref: 00C62BFC
?setY@QGraphicsItem@@QAEXN@Z.QT5WIDGETS ref: 00C62C11
?addItem@QGraphicsScene@@QAEXPAVQGraphicsItem@@@Z.QT5WIDGETS(?), ref: 00C62C1E
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(4.0.7,00000005), ref: 00C62C2B
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CBA7B4,00000002), ref: 00C62C3B
??0QChar@@QAE@UQLatin1Char@@@Z.QT5CORE(?), ref: 00C62C50
?arg@QString@@QBE?AV1@ABV1@HVQChar@@@Z.QT5CORE(?,?,00000000), ref: 00C62C63

Part of subcall function 00C62360: ??0QString@@QAE@ABV0@@Z.QT5CORE(?,676E6AEE,00000000,?,00000001,00CAD27A,000000FF,?,00C71141,00000001,00000000,00000000), ref: 00C62393
Part of subcall function 00C62360: ?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE(00000000,?,00000001,00CAD27A,000000FF,?,00C71141,00000001,00000000,00000000), ref: 00C623AC

??0QLabel@@QAE@ABVQString@@PAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z.QT5WIDGETS(00000000,00000000,00000000), ref: 00C62C9F
??1QString@@QAE@XZ.QT5CORE ref: 00C62CA4
??1QString@@QAE@XZ.QT5CORE ref: 00C62CAD
??1QString@@QAE@XZ.QT5CORE ref: 00C62CB6
??1QString@@QAE@XZ.QT5CORE ref: 00C62CBF
??1QString@@QAE@XZ.QT5CORE ref: 00C62CCC
?setAlignment@QLabel@@QAEXV?$QFlags@W4AlignmentFlag@Qt@@@@@Z.QT5WIDGETS ref: 00C62CDE
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(times,00000005), ref: 00C62CEB
??0QFont@@QAE@ABVQString@@HH_N@Z.QT5GUI(?,00000006,000000FF,00000000), ref: 00C62D08
?setFont@QWidget@@QAEXABVQFont@@@Z.QT5WIDGETS(00000000), ref: 00C62D16
??1QFontMetrics@@QAE@XZ.QT5GUI ref: 00C62D1F
??1QString@@QAE@XZ.QT5CORE ref: 00C62D2C
?addWidget@QGraphicsScene@@QAEPAVQGraphicsProxyWidget@@PAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z.QT5WIDGETS(?,00000000), ref: 00C62D3B
?height@QGraphicsScene@@QBENXZ.QT5WIDGETS ref: 00C62D44
?width@QGraphicsScene@@QBENXZ.QT5WIDGETS(00000000), ref: 00C62D5C
?height@QGraphicsScene@@QBENXZ.QT5WIDGETS(00000000), ref: 00C62D6B
??0QRect@@QAE@HHHH@Z.QT5CORE(00000000,00000000), ref: 00C62D85
?setGeometry@QWidget@@QAEXABVQRect@@@Z.QT5WIDGETS(00000000), ref: 00C62D8F
??0QBrush@@QAE@W4GlobalColor@Qt@@W4BrushStyle@2@@Z.QT5GUI(00000003,00000001), ref: 00C62DA2
?setBackgroundBrush@QGraphicsScene@@QAEXABVQBrush@@@Z.QT5WIDGETS(00000000), ref: 00C62DAC
??1QBrush@@QAE@XZ.QT5GUI ref: 00C62DBF
?setScene@QGraphicsView@@QAEXPAVQGraphicsScene@@@Z.QT5WIDGETS(?), ref: 00C62DC8
?setHorizontalScrollBarPolicy@QAbstractScrollArea@@QAEXW4ScrollBarPolicy@Qt@@@Z.QT5WIDGETS(00000001), ref: 00C62DD3
?setVerticalScrollBarPolicy@QAbstractScrollArea@@QAEXW4ScrollBarPolicy@Qt@@@Z.QT5WIDGETS(00000001), ref: 00C62DDE
??0QBrush@@QAE@W4GlobalColor@Qt@@W4BrushStyle@2@@Z.QT5GUI(00000003,00000001), ref: 00C62DEB
?setBackgroundBrush@QGraphicsView@@QAEXABVQBrush@@@Z.QT5WIDGETS(00000000), ref: 00C62DF5
??1QBrush@@QAE@XZ.QT5GUI ref: 00C62E02
??0QSize@@QAE@HH@Z.QT5CORE(000000FF,000000FF), ref: 00C62E19
??0QRect@@QAE@ABVQPoint@@ABVQSize@@@Z.QT5CORE(?,00000000), ref: 00C62E27
?grab@QWidget@@QAE?AVQPixmap@@ABVQRect@@@Z.QT5WIDGETS(?,00000000), ref: 00C62E35
?setIconPixmap@QMessageBox@@QAEXABVQPixmap@@@Z.QT5WIDGETS(?), ref: 00C62E46
?exec@QDialog@@UAEHXZ.QT5WIDGETS ref: 00C62E4F
??1QPixmap@@UAE@XZ.QT5GUI ref: 00C62E58
??1QLabel@@UAE@XZ.QT5WIDGETS ref: 00C62E67
??1QGraphicsPixmapItem@@UAE@XZ.QT5WIDGETS ref: 00C62E6C
??1QImage@@UAE@XZ.QT5GUI ref: 00C62E75
??1QLabel@@UAE@XZ.QT5WIDGETS ref: 00C62E7E
??1QGraphicsScene@@UAE@XZ.QT5WIDGETS ref: 00C62E83
??1QGraphicsView@@UAE@XZ.QT5WIDGETS ref: 00C62E8C
??1QMessageBox@@UAE@XZ.QT5WIDGETS ref: 00C62E95

Strings

:/Images/aboutImage.png, xrefs: 00C62B53
Software produced by:Munsell Color Services Laboratory X-Rite Kentwood, MI Version: , xrefs: 00C62C76
times, xrefs: 00C62ABC, 00C62CE6
Farnsworth-Munsell Test Scoring Software, xrefs: 00C62A73
jng, xrefs: 00C629DB
4.0.7, xrefs: 00C62C26

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Graphics$String@@$?set$Scene@@$Widget@@$Flags@$Qt@@@@@$?fromLabel@@Scroll$ArrayAscii_helper@Data@MessagePixmap@@TypedView@@$?height@?width@Box@@Brush@@Flag@Image@@Item@@Policy@Type@Window$?addAlignmentAlignment@Rect@@Rect@@@$AbstractArea@@BackgroundBrushBrush@Brush@@@Char@@@Color@FontFont@Font@@Font@@@Geometry@GlobalItem@@@Metrics@@PixmapProxyQt@@Qt@@@RectStandardStyle@2@@Widget@Widget@@@$?append@?arg@?exec@?grab@?tr@Box@@@@@Button@Buttons@Char@@ConversionDialog@@F@@@HorizontalIconImageImage@Item@Latin1MetaObject@@Object@@@Pixmap@Pixmap@@@Point@@Rect@SceneScene@Scene@@@Size@@Size@@@V0@@V1@@Vertical
String ID: 4.0.7$:/Images/aboutImage.png$Farnsworth-Munsell Test Scoring Software$Software produced by:Munsell Color Services Laboratory X-Rite Kentwood, MI Version: $times$jng
API String ID: 3089619764-2831201478
Opcode ID: c328148d5f0f37dc8e45caa8e0dd3f587e32f2cf1aa2effb6bc9cc37df08808f
Instruction ID: ede699329f3ea0aad2a8c317e5dc68f0f2a858c8f01a76810bc22ce36ab05a56
Opcode Fuzzy Hash: c328148d5f0f37dc8e45caa8e0dd3f587e32f2cf1aa2effb6bc9cc37df08808f
Instruction Fuzzy Hash: CCF1087140024AEBDB05EFA4ED59BDD7B78FF15305F104259FA02A21E0EF70AA49DBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00C7AD70 Relevance: 128.2, APIs: 72, Strings: 1, Instructions: 407COMMON

Download Yara Rule

APIs

?size@QListData@@QBEHXZ.QT5CORE(676E6AEE), ref: 00C7EE1A
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C7EE33
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,00000011,?), ref: 00C7EE4B
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7EE53
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,00000001,?), ref: 00C7EE6C
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7EE74
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,00000002,?), ref: 00C7EE8D
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7EE95
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,00000003,?), ref: 00C7EEAE
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7EEB6
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,00000004,?), ref: 00C7EECF
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7EED7
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,00000005,?), ref: 00C7EEF0
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7EEF8
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,00000006,?), ref: 00C7EF11
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7EF19
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,00000007,?), ref: 00C7EF32
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7EF3A
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,00000008,?), ref: 00C7EF53
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7EF5B
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,00000009,?), ref: 00C7EF74
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7EF7C
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,0000000A,?), ref: 00C7EF95
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7EF9D
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,0000000B,?), ref: 00C7EFB6
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7EFBE
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,0000000C,?), ref: 00C7EFD7
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7EFDF
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,0000000D,?), ref: 00C7EFF8
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7F000
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,0000000E,?), ref: 00C7F019
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7F021
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,0000000F,?), ref: 00C7F03A
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7F042
??0QString@@QAE@ABV0@@Z.QT5CORE(?), ref: 00C7F052

Part of subcall function 00C8F560: new.LIBCMT ref: 00C8F58E

Part of subcall function 00C906F0: ?number@QString@@SA?AV1@HH@Z.QT5CORE(00CB3B11,?,0000000A,676E6AEE), ref: 00C9072D
Part of subcall function 00C906F0: ?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z.QT5SQL(?,00000000,00000001), ref: 00C90740
Part of subcall function 00C906F0: ??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL ref: 00C9074C
Part of subcall function 00C906F0: ??1QString@@QAE@XZ.QT5CORE ref: 00C90755
Part of subcall function 00C906F0: ??0QString@@QAE@XZ.QT5CORE ref: 00C9075E
Part of subcall function 00C906F0: ??4QString@@QAEAAV0@PBD@Z.QT5CORE(SELECT scores FROM tests WHERE id = :id), ref: 00C90770
Part of subcall function 00C906F0: ?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(000000FF), ref: 00C9077D
Part of subcall function 00C906F0: ??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C9078A
Part of subcall function 00C906F0: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:id,00000003), ref: 00C907A1
Part of subcall function 00C906F0: ?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C907C0
Part of subcall function 00C906F0: ??1QString@@QAE@XZ.QT5CORE ref: 00C907C9
Part of subcall function 00C906F0: ??1QVariant@@QAE@XZ.QT5CORE ref: 00C907D6
Part of subcall function 00C906F0: ?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C907DF
Part of subcall function 00C906F0: ?next@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C907E8
Part of subcall function 00C906F0: ?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000000), ref: 00C907FF
Part of subcall function 00C906F0: ?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C9080F
Part of subcall function 00C906F0: ??1QVariant@@QAE@XZ.QT5CORE ref: 00C9081C
Part of subcall function 00C906F0: ??0QChar@@QAE@H@Z.QT5CORE(00000022), ref: 00C90827
Part of subcall function 00C906F0: ?indexOf@QString@@QBEHVQChar@@HW4CaseSensitivity@Qt@@@Z.QT5CORE(00CB3B11,00000000,00000001), ref: 00C90837
Part of subcall function 00C906F0: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CB9364,00000000), ref: 00C90849

Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE(?,0000002C,00C800BF), ref: 00C94608
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94611
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9461A
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94623
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9462C
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94635
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9463E
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94647
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94650
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94659
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94662
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9466B
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94674
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9467D
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94686
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9468F
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94698
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C946A1

??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?), ref: 00C7F087
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7F090
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7F099
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7F0A2
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7F0AB
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7F0B4
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7F0BD
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7F0C6
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7F0CF
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7F0D8
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7F0E1
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7F0EA
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7F0F3
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7F0FC
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7F105
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7F10E
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7F117

Part of subcall function 00C631D0: new.LIBCMT ref: 00C63242

Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(00CBC630,00C63A62,00000000,00CBC634,?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C62286
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C6228F
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C62298
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622A1
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622AA
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622B3
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622BC
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622C5
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622CE
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622D7
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622E0
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622E9
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622F2
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622FB
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C62304
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C6230D
Part of subcall function 00C62280: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C62316

??1QString@@QAE@XZ.QT5CORE(?), ref: 00C7F130
??1QString@@QAE@XZ.QT5CORE ref: 00C7F139
??1QString@@QAE@XZ.QT5CORE ref: 00C7F142
??1QString@@QAE@XZ.QT5CORE ref: 00C7F14B
??1QString@@QAE@XZ.QT5CORE ref: 00C7F154
??1QString@@QAE@XZ.QT5CORE ref: 00C7F15D
??1QString@@QAE@XZ.QT5CORE ref: 00C7F166
??1QString@@QAE@XZ.QT5CORE ref: 00C7F16F
??1QString@@QAE@XZ.QT5CORE ref: 00C7F178
??1QString@@QAE@XZ.QT5CORE ref: 00C7F181
??1QString@@QAE@XZ.QT5CORE ref: 00C7F18A
??1QString@@QAE@XZ.QT5CORE ref: 00C7F193
??1QString@@QAE@XZ.QT5CORE ref: 00C7F19C
??1QString@@QAE@XZ.QT5CORE ref: 00C7F1A5
??1QString@@QAE@XZ.QT5CORE ref: 00C7F1AE
??1QString@@QAE@XZ.QT5CORE ref: 00C7F1B7
??1QString@@QAE@XZ.QT5CORE ref: 00C7F1C4
?size@QListData@@QBEHXZ.QT5CORE ref: 00C7F1CF
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,?), ref: 00C7F21E
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,?), ref: 00C7F2A4

Strings

jng, xrefs: 00C7EDEC

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Table$Item@@Widget$V0@@$?item@?text@Widget@@$Query@@Variant@@$Data@@List$?dispose@?from?size@ArrayAscii_helper@Char@@Data@Data@1@@String@@@Typed$?at@?bind?database@?exec@?index?next@?number@?prepare@?value@CaseDatabase@@Database@@@Flag@Flags@ParamQt@@@Sensitivity@Sql@@@@@String@String@@_TypeValue@
String ID: jng
API String ID: 3237351475-1186463058
Opcode ID: 8f1f4e0d43a61f7bd2f344702d691f365d722b8ea72f21995b0cd269e8cedb1d
Instruction ID: d360ff99e5c9af620f317f0ded5e8e0794b5eab7a889979f82f0d443b96d311f
Opcode Fuzzy Hash: 8f1f4e0d43a61f7bd2f344702d691f365d722b8ea72f21995b0cd269e8cedb1d
Instruction Fuzzy Hash: CF02F975500209DFCF18EF64D898BEE7BB9FF58304F104659F946932A1DE30AA0ACB61

Uniqueness

Uniqueness Score: -1.00%

Function 00C7FB40 Relevance: 128.2, APIs: 72, Strings: 1, Instructions: 405COMMON

Download Yara Rule

APIs

?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,?,676E6AEE), ref: 00C7FBB7
?size@QListData@@QBEHXZ.QT5CORE(676E6AEE), ref: 00C7FBD9
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C7FBF4
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,00000011,?), ref: 00C7FC0C
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7FC14
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,00000001,?), ref: 00C7FC2D
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7FC35
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,00000002,?), ref: 00C7FC4E
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7FC56
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,00000003,?), ref: 00C7FC6F
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7FC77
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,00000004,?), ref: 00C7FC90
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7FC98
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,00000005,?), ref: 00C7FCB1
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7FCB9
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,00000006,?), ref: 00C7FCD2
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7FCDA
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,00000007,?), ref: 00C7FCF3
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7FCFB
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,00000008,?), ref: 00C7FD14
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7FD1C
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,00000009,?), ref: 00C7FD35
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7FD3D
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,0000000A,?), ref: 00C7FD56
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7FD5E
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,0000000B,?), ref: 00C7FD77
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7FD7F
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,0000000C,?), ref: 00C7FD98
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7FDA0
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,0000000D,?), ref: 00C7FDB9
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7FDC1
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,0000000E,?), ref: 00C7FDDA
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7FDE2
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,0000000F,?), ref: 00C7FDFB
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7FE03
??0QString@@QAE@ABV0@@Z.QT5CORE(?), ref: 00C7FE13
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?), ref: 00C7FE48
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7FE51
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7FE5A
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7FE63
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7FE6C
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7FE75
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7FE7E
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7FE87
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7FE90
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7FE99
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7FEA2
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7FEAB
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7FEB4
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7FEBD
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7FEC6
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7FECF
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C7FED8
??1QString@@QAE@XZ.QT5CORE(00000000), ref: 00C7FEF1
??1QString@@QAE@XZ.QT5CORE ref: 00C7FEFA
??1QString@@QAE@XZ.QT5CORE ref: 00C7FF03
??1QString@@QAE@XZ.QT5CORE ref: 00C7FF0C
??1QString@@QAE@XZ.QT5CORE ref: 00C7FF15
??1QString@@QAE@XZ.QT5CORE ref: 00C7FF1E
??1QString@@QAE@XZ.QT5CORE ref: 00C7FF27
??1QString@@QAE@XZ.QT5CORE ref: 00C7FF30
??1QString@@QAE@XZ.QT5CORE ref: 00C7FF39
??1QString@@QAE@XZ.QT5CORE ref: 00C7FF42
??1QString@@QAE@XZ.QT5CORE ref: 00C7FF4B
??1QString@@QAE@XZ.QT5CORE ref: 00C7FF54
??1QString@@QAE@XZ.QT5CORE ref: 00C7FF5D
??1QString@@QAE@XZ.QT5CORE ref: 00C7FF66
??1QString@@QAE@XZ.QT5CORE ref: 00C7FF6F
??1QString@@QAE@XZ.QT5CORE ref: 00C7FF78
??1QString@@QAE@XZ.QT5CORE ref: 00C7FF85
?size@QListData@@QBEHXZ.QT5CORE ref: 00C7FF91
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,?), ref: 00C80018

Strings

jng, xrefs: 00C7FB5C

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Table$Item@@Widget$V0@@$?item@?text@Widget@@$Data@@List$?dispose@?size@Data@1@@$?at@
String ID: jng
API String ID: 166169377-1186463058
Opcode ID: fd7c7c1b683c87d89bacfd5e68ff7fc5c2520573a40de9294fa7be7b7801ddc7
Instruction ID: b4fecc03ac2f90e3620cb0810cdcf8d4cbb1920ab3f428e07767862fb3ae7fdd
Opcode Fuzzy Hash: fd7c7c1b683c87d89bacfd5e68ff7fc5c2520573a40de9294fa7be7b7801ddc7
Instruction Fuzzy Hash: 1602DA75500209DBCF19DFA4D998BEE7BB9FF18304F104619F946932A1EF30AA4ACB51

Uniqueness

Uniqueness Score: -1.00%

Function 00C73BB0 Relevance: 110.5, APIs: 48, Strings: 15, Instructions: 256COMMON

Download Yara Rule

APIs

?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,AnalysisFormWidget,Form,00000000,000000FF,676E6AEE,6B9DEE70,?,00CBB264,?,00C767B5,00CBB264), ref: 00C73BF5
?setWindowTitle@QWidget@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C73C05
??1QString@@QAE@XZ.QT5CORE ref: 00C73C15
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,AnalysisFormWidget,User Analysis Info,00000000,000000FF), ref: 00C73C2D
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C73C43
??1QString@@QAE@XZ.QT5CORE ref: 00C73C48
??0QString@@QAE@XZ.QT5CORE ref: 00C73C51
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C73C62
??1QString@@QAE@XZ.QT5CORE ref: 00C73C67
??0QString@@QAE@XZ.QT5CORE ref: 00C73C70
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C73C81
??1QString@@QAE@XZ.QT5CORE ref: 00C73C8D
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,AnalysisFormWidget,Graph Style,00000000,000000FF), ref: 00C73CA5
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C73CB5
??1QString@@QAE@XZ.QT5CORE ref: 00C73CC1
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,AnalysisFormWidget,Polar,00000000,000000FF), ref: 00C73CD9
?setText@QAbstractButton@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C73CEF
??1QString@@QAE@XZ.QT5CORE ref: 00C73CFB
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,AnalysisFormWidget,Show Confusion Axis,00000000,000000FF), ref: 00C73D13
?setText@QAbstractButton@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C73D26
??1QString@@QAE@XZ.QT5CORE ref: 00C73D32
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,AnalysisFormWidget,Linear,00000000,000000FF), ref: 00C73D4A
?setText@QAbstractButton@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C73D5D
??1QString@@QAE@XZ.QT5CORE ref: 00C73D69
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,AnalysisFormWidget,Graph Scaling - Number of Steps,00000000,000000FF), ref: 00C73D81
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C73D97
??1QString@@QAE@XZ.QT5CORE ref: 00C73DA3
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,AnalysisFormWidget,Manual,00000000,000000FF), ref: 00C73DBB
?setText@QAbstractButton@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C73DD1
??1QString@@QAE@XZ.QT5CORE ref: 00C73DDD
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,AnalysisFormWidget,Auto,00000000,000000FF), ref: 00C73DF5
?setText@QAbstractButton@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C73E0B
??1QString@@QAE@XZ.QT5CORE ref: 00C73E17
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,AnalysisFormWidget,Current Value,00000000,000000FF), ref: 00C73E2F
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C73E45
??1QString@@QAE@XZ.QT5CORE ref: 00C73E51
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,AnalysisFormWidget,Graph Mode,00000000,000000FF), ref: 00C73E69
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C73E7F
??1QString@@QAE@XZ.QT5CORE ref: 00C73E8B
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,AnalysisFormWidget,Filter,00000000,000000FF), ref: 00C73EA3
?setText@QAbstractButton@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C73EB9
??1QString@@QAE@XZ.QT5CORE ref: 00C73EC5
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,AnalysisFormWidget,Average,00000000,000000FF), ref: 00C73EDD
?setText@QAbstractButton@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C73EF3
??1QString@@QAE@XZ.QT5CORE ref: 00C73EF8
??0QString@@QAE@XZ.QT5CORE ref: 00C73F01
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C73F15
??1QString@@QAE@XZ.QT5CORE ref: 00C73F1A

Strings

Graph Scaling - Number of Steps, xrefs: 00C73D73
jng, xrefs: 00C73BC7
Current Value, xrefs: 00C73E21
Form, xrefs: 00C73BEA
Graph Mode, xrefs: 00C73E5B
Manual, xrefs: 00C73DAD
Average, xrefs: 00C73ECF
Graph Style, xrefs: 00C73C97
Show Confusion Axis, xrefs: 00C73D05
Polar, xrefs: 00C73CCB
Auto, xrefs: 00C73DE7
AnalysisFormWidget, xrefs: 00C73BEF, 00C73C27, 00C73C9F, 00C73CD3, 00C73D0D, 00C73D44, 00C73D7B, 00C73DB5, 00C73DEF, 00C73E29, 00C73E63, 00C73E9D, 00C73ED7
Linear, xrefs: 00C73D3C
Filter, xrefs: 00C73E95
User Analysis Info, xrefs: 00C73C1F

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$?setString@@@$Text@$?translate@Application@@Core$Label@@$AbstractButton@@$Title@Widget@@Window
String ID: AnalysisFormWidget$Auto$Average$Current Value$Filter$Form$Graph Mode$Graph Scaling - Number of Steps$Graph Style$Linear$Manual$Polar$Show Confusion Axis$User Analysis Info$jng
API String ID: 3264292088-2218879976
Opcode ID: 74cdee775530d1ba368899d86264e10fb271b54fc4775b6571389338f3348e94
Instruction ID: 4afaea3552f1150640478bd9963805daf6d8d0dac54685ed44cb84674b2927c5
Opcode Fuzzy Hash: 74cdee775530d1ba368899d86264e10fb271b54fc4775b6571389338f3348e94
Instruction Fuzzy Hash: 14A11175540309ABCB10EFA4EC45FDE7B78FB14360F144358E926A72D1DBB5AA09CB50

Uniqueness

Uniqueness Score: -1.00%

Function 00C92820 Relevance: 107.1, APIs: 57, Strings: 4, Instructions: 310COMMON

Download Yara Rule

APIs

Part of subcall function 00C92BC0: ?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A,676E6AEE,?,00000000,?), ref: 00C92C0A
Part of subcall function 00C92BC0: ?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z.QT5SQL(?,00000000,00000001), ref: 00C92C20
Part of subcall function 00C92BC0: ??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL ref: 00C92C2C
Part of subcall function 00C92BC0: ??1QString@@QAE@XZ.QT5CORE ref: 00C92C35
Part of subcall function 00C92BC0: ??0QString@@QAE@XZ.QT5CORE ref: 00C92C3E
Part of subcall function 00C92BC0: ??4QString@@QAEAAV0@PBD@Z.QT5CORE(SELECT tests.* , users.* FROM tests INNER JOIN users ON tests.userID = users.id), ref: 00C92C50
Part of subcall function 00C92BC0: ?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C92C5D
Part of subcall function 00C92BC0: ?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C92C66
Part of subcall function 00C92BC0: ?next@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C92C80
Part of subcall function 00C92BC0: ?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000000), ref: 00C92CA9
Part of subcall function 00C92BC0: ?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C92CB9
Part of subcall function 00C92BC0: ??1QVariant@@QAE@XZ.QT5CORE ref: 00C92CC2
Part of subcall function 00C92BC0: ?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000002), ref: 00C92CD1
Part of subcall function 00C92BC0: ?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C92CE1
Part of subcall function 00C92BC0: ??1QVariant@@QAE@XZ.QT5CORE ref: 00C92CEA
Part of subcall function 00C92BC0: ?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000003), ref: 00C92CFC
Part of subcall function 00C92BC0: ?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C92D0C
Part of subcall function 00C92BC0: ??1QVariant@@QAE@XZ.QT5CORE ref: 00C92D18

?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(QSQLITE,00000007,000000FF,676E6AEE,00000000,00000000,?,?,00000000,00CB426D,000000FF,?,00C6B2DE), ref: 00C92868
?number@QString@@SA?AV1@HH@Z.QT5CORE(?,00000000,0000000A,?,?,00000000,00CB426D,000000FF,?,00C6B2DE), ref: 00C92884
?addDatabase@QSqlDatabase@@SA?AV1@ABVQString@@0@Z.QT5SQL(?,?,00000000,?,?,00000000,00CB426D,000000FF,?,00C6B2DE), ref: 00C92893
??1QString@@QAE@XZ.QT5CORE ref: 00C9289F
??1QString@@QAE@XZ.QT5CORE ref: 00C928AC
?setDatabaseName@QSqlDatabase@@QAEXABVQString@@@Z.QT5SQL(?), ref: 00C928BF
?open@QSqlDatabase@@QAE_NXZ.QT5SQL ref: 00C928C8
?number@QString@@SA?AV1@HH@Z.QT5CORE(?,00000000,0000000A), ref: 00C928D7
?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z.QT5SQL(?,00000000,00000001), ref: 00C928E6
??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL ref: 00C928F2
??1QString@@QAE@XZ.QT5CORE ref: 00C928FB
??0QString@@QAE@XZ.QT5CORE ref: 00C92904
??4QString@@QAEAAV0@PBD@Z.QT5CORE(CREATE TABLE IF NOT EXISTS users (id INTEGER PRIMARY KEY AUTOINCREMENT, first TEXT, middle TEXT, last TEXT, refNum TEXT, DOB TEXT, gender TEXT, location TEXT, industry TEXT, experience TEXT, job TEXT)), ref: 00C92916
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C92929
?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C92934
??4QString@@QAEAAV0@PBD@Z.QT5CORE(CREATE TABLE IF NOT EXISTS tests (id INTEGER PRIMARY KEY AUTOINCREMENT, userID INTEGER, illumination TEXT, testDate TEXT, comments TEXT, scores TEXT, serialNum TEXT, time TEXT, FOREIGN KEY(userID) REFERENCES users(id))), ref: 00C9293E
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C9294B
?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C92950
?size@QListData@@QBEHXZ.QT5CORE ref: 00C92957
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C92969
??0QString@@QAE@ABV0@@Z.QT5CORE(?), ref: 00C92978
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C92982
??0QString@@QAE@ABV0@@Z.QT5CORE(?), ref: 00C92991
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C9299B
??0QString@@QAE@ABV0@@Z.QT5CORE(?), ref: 00C929AA
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C929B4
??0QString@@QAE@ABV0@@Z.QT5CORE(?), ref: 00C929C3
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C929CD
??0QString@@QAE@ABV0@@Z.QT5CORE(?), ref: 00C929DC
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C929E6
??0QString@@QAE@ABV0@@Z.QT5CORE(?), ref: 00C929F5
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C929FF
??0QString@@QAE@ABV0@@Z.QT5CORE(?), ref: 00C92A0E
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C92A18
??0QString@@QAE@ABV0@@Z.QT5CORE(?), ref: 00C92A27
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C92A31
??0QString@@QAE@ABV0@@Z.QT5CORE(?), ref: 00C92A40
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C92A4A
??0QString@@QAE@ABV0@@Z.QT5CORE(?), ref: 00C92A59

Part of subcall function 00C92140: ?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A,676E6AEE,?,00000011,6B5142D0), ref: 00C92178
Part of subcall function 00C92140: ?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z.QT5SQL(?,00000000,00000001), ref: 00C9218B
Part of subcall function 00C92140: ??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL ref: 00C92197
Part of subcall function 00C92140: ??1QString@@QAE@XZ.QT5CORE ref: 00C921A0
Part of subcall function 00C92140: ??0QString@@QAE@XZ.QT5CORE ref: 00C921A9
Part of subcall function 00C92140: ??4QString@@QAEAAV0@PBD@Z.QT5CORE(INSERT INTO users (first, middle, last, refNum, DOB, gender, location, industry, experience, job) VALUES (:first, :middle, :last, :refNum, :DOB, :gender, :location, :industry, :experience, :job)), ref: 00C921BB
Part of subcall function 00C92140: ?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C921C8
Part of subcall function 00C92140: ??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C921DB
Part of subcall function 00C92140: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:first,00000006), ref: 00C921EE
Part of subcall function 00C92140: ?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C92213
Part of subcall function 00C92140: ??1QString@@QAE@XZ.QT5CORE ref: 00C92218
Part of subcall function 00C92140: ??1QVariant@@QAE@XZ.QT5CORE ref: 00C92225
Part of subcall function 00C92140: ??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C92232
Part of subcall function 00C92140: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:middle,00000007), ref: 00C9223F
Part of subcall function 00C92140: ?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C9225E
Part of subcall function 00C92140: ??1QString@@QAE@XZ.QT5CORE ref: 00C92263
Part of subcall function 00C92140: ??1QVariant@@QAE@XZ.QT5CORE ref: 00C92270
Part of subcall function 00C92140: ??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C9227D

?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C92A6C
??0QString@@QAE@ABV0@@Z.QT5CORE ref: 00C92A7B
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C92A85
??0QString@@QAE@ABV0@@Z.QT5CORE(?), ref: 00C92A94
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C92A9E
??0QString@@QAE@ABV0@@Z.QT5CORE(?), ref: 00C92AAD
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C92AB7
??0QString@@QAE@ABV0@@Z.QT5CORE(?), ref: 00C92AC6
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C92AD0
??0QString@@QAE@ABV0@@Z.QT5CORE(?), ref: 00C92ADF
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C92AE9
??0QString@@QAE@ABV0@@Z.QT5CORE(?), ref: 00C92AF8

Part of subcall function 00C91E20: ?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A,676E6AEE,?,00000000,6B5142D0), ref: 00C91E58
Part of subcall function 00C91E20: ?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z.QT5SQL(?,00000000,00000001), ref: 00C91E6B
Part of subcall function 00C91E20: ??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL ref: 00C91E77
Part of subcall function 00C91E20: ??1QString@@QAE@XZ.QT5CORE ref: 00C91E80
Part of subcall function 00C91E20: ??0QString@@QAE@XZ.QT5CORE ref: 00C91E89
Part of subcall function 00C91E20: ??4QString@@QAEAAV0@PBD@Z.QT5CORE(INSERT INTO tests (userID, illumination, testDate, comments, scores, serialNum, time) VALUES (:userID, :illumination, :testDate, :comments, :scores, :serialNum, :time)), ref: 00C91E9B
Part of subcall function 00C91E20: ?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C91EA8
Part of subcall function 00C91E20: ??0QVariant@@QAE@H@Z.QT5CORE(?), ref: 00C91EB4
Part of subcall function 00C91E20: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:userID,00000007), ref: 00C91EC5
Part of subcall function 00C91E20: ?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C91EEE
Part of subcall function 00C91E20: ??1QString@@QAE@XZ.QT5CORE ref: 00C91EF3
Part of subcall function 00C91E20: ??1QVariant@@QAE@XZ.QT5CORE ref: 00C91F06
Part of subcall function 00C91E20: ??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C91F15
Part of subcall function 00C91E20: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:illumination,0000000D), ref: 00C91F22
Part of subcall function 00C91E20: ?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C91F45
Part of subcall function 00C91E20: ??1QString@@QAE@XZ.QT5CORE ref: 00C91F4A
Part of subcall function 00C91E20: ??1QVariant@@QAE@XZ.QT5CORE ref: 00C91F57
Part of subcall function 00C91E20: ??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C91F60

?size@QListData@@QBEHXZ.QT5CORE(00000000), ref: 00C92B0A
??1QString@@QAE@XZ.QT5CORE ref: 00C92B1B
??1QSqlQuery@@QAE@XZ.QT5SQL ref: 00C92B24
??1QSqlDatabase@@QAE@XZ.QT5SQL ref: 00C92B2D
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?), ref: 00C92B94
??1QString@@QAE@XZ.QT5CORE ref: 00C92BA0

Strings

QSQLITE, xrefs: 00C9285F
jng, xrefs: 00C92837
CREATE TABLE IF NOT EXISTS users (id INTEGER PRIMARY KEY AUTOINCREMENT, first TEXT, middle TEXT, last TEXT, refNum TEXT, DOB TEXT, gender TEXT, location TEXT, industry TEXT, experience TEXT, job TEXT), xrefs: 00C9290A
CREATE TABLE IF NOT EXISTS tests (id INTEGER PRIMARY KEY AUTOINCREMENT, userID INTEGER, illumination TEXT, testDate TEXT, comments TEXT, scores TEXT, serialNum TEXT, time TEXT, FOREIGN KEY(userID) REFERENCES users(id)), xrefs: 00C92936

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Variant@@$Query@@$Data@@List$?at@V0@@$String@@@$Database@@$?from?number@?prepare@ArrayAscii_helper@Data@Typed$?bind?database@Database@@@Flag@Flags@ParamSql@@@@@String@@_TypeValue@$?exec@?value@String@$?size@$?add?dispose@?next@?open@?setData@1@@DatabaseDatabase@Name@String@@0@
String ID: CREATE TABLE IF NOT EXISTS tests (id INTEGER PRIMARY KEY AUTOINCREMENT, userID INTEGER, illumination TEXT, testDate TEXT, comments TEXT, scores TEXT, serialNum TEXT, time TEXT, FOREIGN KEY(userID) REFERENCES users(id))$CREATE TABLE IF NOT EXISTS users (id INTEGER PRIMARY KEY AUTOINCREMENT, first TEXT, middle TEXT, last TEXT, refNum TEXT, DOB TEXT, gender TEXT, location TEXT, industry TEXT, experience TEXT, job TEXT)$QSQLITE$jng
API String ID: 3734598018-1399842129
Opcode ID: d127ba09fb75bafa65e4d9ad45b57406e693589ef612a7949e7d0e1ac3c8bc80
Instruction ID: 4af3da628abdf9da87599cf37903a0504b91332ac6e5e02e435d702b7183a102
Opcode Fuzzy Hash: d127ba09fb75bafa65e4d9ad45b57406e693589ef612a7949e7d0e1ac3c8bc80
Instruction Fuzzy Hash: 84C10B769105159FCF08DFA8EC99BAE7BBCBF59705F040618F502E32A1DE34A909CB61

Uniqueness

Uniqueness Score: -1.00%

Function 00C94B70 Relevance: 96.5, APIs: 48, Strings: 7, Instructions: 266COMMON

Download Yara Rule

APIs

?objectName@QObject@@QBE?AVQString@@XZ.QT5CORE(00CB4BFA,676E6AEE,6B62DA60,00000000,00000000,00CB4BFA,000000FF,?,00C94724,00000000), ref: 00C94BA6
??1QString@@QAE@XZ.QT5CORE(?,00C94724,00000000), ref: 00C94BB4
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,ScoreWidget,000000FF,?,00C94724,00000000), ref: 00C94BC9
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C94BD8
??1QString@@QAE@XZ.QT5CORE ref: 00C94BE8
?resize@QWidget@@QAEXHH@Z.QT5WIDGETS(00000064,00000084,?,00C94724,00000000), ref: 00C94BF7
new.LIBCMT ref: 00C94BFF
??0QVBoxLayout@@QAE@PAVQWidget@@@Z.QT5WIDGETS(00C94724,?,?,?,?,00C94724), ref: 00C94C16
?setSpacing@QBoxLayout@@QAEXH@Z.QT5WIDGETS(00000000,?,?,?,?,00C94724), ref: 00C94C3C
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,verticalLayout_2,000000FF,?,?,?,?,00C94724), ref: 00C94C49
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000,?,?,?,?,?,?,?,00C94724), ref: 00C94C5F
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,00C94724), ref: 00C94C6F
?setContentsMargins@QLayout@@QAEXHHHH@Z.QT5WIDGETS(00000000,00000000,00000000,00000000,?,?,?,?,?,?,?,00C94724), ref: 00C94C7F
new.LIBCMT ref: 00C94C87
??0QVBoxLayout@@QAE@XZ.QT5WIDGETS(?,?,?,?,?,?,?,?,00C94724), ref: 00C94C9D
?setSpacing@QBoxLayout@@QAEXH@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,00C94724), ref: 00C94CC1
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,verticalLayout,000000FF,?,?,?,?,?,?,?,?,00C94724), ref: 00C94CCE
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000,?,?,?,?,?,?,?,?,?,?,?,00C94724), ref: 00C94CE5
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,00C94724), ref: 00C94CF5
new.LIBCMT ref: 00C94CFD
??0QLabel@@QAE@PAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z.QT5WIDGETS(00C94724,00000000,?,?,?,?,?,?,?,?,?,?,?,?,00C94724), ref: 00C94D16
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,score,000000FF,?,?,?,?,?,?,?,?,?,?,?,?,00C94724), ref: 00C94D3E
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C94D52
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00C94724), ref: 00C94D62
??0QFont@@QAE@XZ.QT5GUI(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00C94724), ref: 00C94D6B
?setPointSize@QFont@@QAEXH@Z.QT5GUI(0000000C), ref: 00C94D7D
?setFont@QWidget@@QAEXABVQFont@@@Z.QT5WIDGETS(?), ref: 00C94D8A
?setScaledContents@QLabel@@QAEX_N@Z.QT5WIDGETS(00000000), ref: 00C94D95
?setAlignment@QLabel@@QAEXV?$QFlags@W4AlignmentFlag@Qt@@@@@Z.QT5WIDGETS ref: 00C94DAD
?addWidget@QBoxLayout@@QAEXPAVQWidget@@HV?$QFlags@W4AlignmentFlag@Qt@@@@@Z.QT5WIDGETS(00CBB264,00000000,00000000), ref: 00C94DBF
new.LIBCMT ref: 00C94DC3

Part of subcall function 00CAC0B7: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0DE

??0QLabel@@QAE@PAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z.QT5WIDGETS(00C94724,00000000), ref: 00C94DDB
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,label,000000FF), ref: 00C94E03
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C94E17
??1QString@@QAE@XZ.QT5CORE ref: 00C94E24
?addWidget@QBoxLayout@@QAEXPAVQWidget@@HV?$QFlags@W4AlignmentFlag@Qt@@@@@Z.QT5WIDGETS(?,00000000,00000000), ref: 00C94E34
new.LIBCMT ref: 00C94E38

Part of subcall function 00CAC0B7: _callnewh.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0BF

??0QLabel@@QAE@PAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z.QT5WIDGETS(00C94724,00000000), ref: 00C94E50
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,number,000000FF), ref: 00C94E78
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C94E8C
??1QString@@QAE@XZ.QT5CORE ref: 00C94E99
?setFont@QWidget@@QAEXABVQFont@@@Z.QT5WIDGETS(?), ref: 00C94EA6
?setScaledContents@QLabel@@QAEX_N@Z.QT5WIDGETS(00000001), ref: 00C94EB1
?setAlignment@QLabel@@QAEXV?$QFlags@W4AlignmentFlag@Qt@@@@@Z.QT5WIDGETS ref: 00C94EC3
?addWidget@QBoxLayout@@QAEXPAVQWidget@@HV?$QFlags@W4AlignmentFlag@Qt@@@@@Z.QT5WIDGETS(?,00000000,00000000), ref: 00C94ECF
?addLayout@QBoxLayout@@QAEXPAVQLayout@@H@Z.QT5WIDGETS(00000008,00000000), ref: 00C94ED8

Part of subcall function 00C94860: ?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,ScoreWidget,Form,00000000,000000FF,676E6AEE,6B9DEE70,?,?,00000000,00CB4A94,000000FF,?,00C94EE9,00C94724), ref: 00C94899
Part of subcall function 00C94860: ?setWindowTitle@QWidget@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C948AD
Part of subcall function 00C94860: ??1QString@@QAE@XZ.QT5CORE ref: 00C948B6
Part of subcall function 00C94860: ??0QString@@QAE@XZ.QT5CORE ref: 00C948BF
Part of subcall function 00C94860: ?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C948D6
Part of subcall function 00C94860: ??1QString@@QAE@XZ.QT5CORE ref: 00C948DB
Part of subcall function 00C94860: ??0QString@@QAE@XZ.QT5CORE ref: 00C948E4
Part of subcall function 00C94860: ?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C948F5
Part of subcall function 00C94860: ??1QString@@QAE@XZ.QT5CORE ref: 00C948FA
Part of subcall function 00C94860: ??0QString@@QAE@XZ.QT5CORE ref: 00C94903
Part of subcall function 00C94860: ?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C94914
Part of subcall function 00C94860: ??1QString@@QAE@XZ.QT5CORE ref: 00C94919

?connectSlotsByName@QMetaObject@@SAXPAVQObject@@@Z.QT5CORE(00C94724,00C94724), ref: 00C94EEA
??1QFontMetrics@@QAE@XZ.QT5GUI ref: 00C94EF6

Strings

label, xrefs: 00C94DF9
ScoreWidget, xrefs: 00C94BC3
verticalLayout, xrefs: 00C94CC8
number, xrefs: 00C94E6E
verticalLayout_2, xrefs: 00C94C43
jng, xrefs: 00C94B87
score, xrefs: 00C94D27

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$?set$Label@@Layout@@String@@@Widget@@$Flags@Name@Object@@Qt@@@@@$?fromObjectUtf8@$AlignmentFlag@$?addWindow$Text@Type@Widget@$Alignment@Contents@Font@Font@@Font@@@ScaledSpacing@$?connect?object?resize@?translate@Application@@ContentsCoreFontLayout@Margins@MetaMetrics@@Object@@@PointSize@SlotsTitle@Widget@@@_callnewhmalloc
String ID: ScoreWidget$label$number$score$verticalLayout$verticalLayout_2$jng
API String ID: 1390774212-4193996859
Opcode ID: 9c0eff25398a1902835eba54dff296d9a131c062d586d32927af994257848db9
Instruction ID: 21f3a9d1f4c0f6f0d97ec87e628336ee6adb336d9431bd33de1ee3f75bf9c2a6
Opcode Fuzzy Hash: 9c0eff25398a1902835eba54dff296d9a131c062d586d32927af994257848db9
Instruction Fuzzy Hash: 96B141B190060AEFCF10DF94DC59B9EBBB8FF48714F104219E556A72E0CB706A08CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00C8ED60 Relevance: 93.0, APIs: 46, Strings: 7, Instructions: 227COMMON

Download Yara Rule

APIs

?objectName@QObject@@QBE?AVQString@@XZ.QT5CORE(00CB3643,676E6AEE,6B9E0300,?,00000000,?,6B94A624,00CB3643,000000FF,?,00C8C01C,00000000), ref: 00C8ED96
??1QString@@QAE@XZ.QT5CORE(?,6B94A624,00CB3643,000000FF,?,00C8C01C,00000000), ref: 00C8EDA4
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(00CB3643,HueSwatchLineWidget,000000FF,?,6B94A624,00CB3643,000000FF,?,00C8C01C,00000000), ref: 00C8EDB9
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000,?,?,?,?,?,?,000000FF,?,00C8C01C,00000000), ref: 00C8EDC8
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,000000FF,?,00C8C01C), ref: 00C8EDD8
?resize@QWidget@@QAEXHH@Z.QT5WIDGETS(00000190,00000060,?,6B94A624,00CB3643,000000FF,?,00C8C01C,00000000), ref: 00C8EDE7
new.LIBCMT ref: 00C8EDEF
??0QHBoxLayout@@QAE@PAVQWidget@@@Z.QT5WIDGETS(00C8C01C,?,?,6B94A624,00CB3643,000000FF,?,00C8C01C), ref: 00C8EE06
?setSpacing@QBoxLayout@@QAEXH@Z.QT5WIDGETS(00000000,?,?,6B94A624,00CB3643,000000FF,?,00C8C01C), ref: 00C8EE2C
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(00CB3643,horizontalLayout_2,000000FF,?,?,6B94A624,00CB3643,000000FF,?,00C8C01C), ref: 00C8EE39
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000,?,?,?,?,?,?,00CB3643,000000FF,?,00C8C01C), ref: 00C8EE4F
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,00CB3643,000000FF,?,00C8C01C), ref: 00C8EE5F
?setContentsMargins@QLayout@@QAEXHHHH@Z.QT5WIDGETS(00000000,00000000,00000000,00000000,?,?,?,?,?,?,00CB3643,000000FF,?,00C8C01C), ref: 00C8EE6F
new.LIBCMT ref: 00C8EE77
??0QHBoxLayout@@QAE@XZ.QT5WIDGETS(?,?,?,?,?,?,?,00CB3643,000000FF,?,00C8C01C), ref: 00C8EE8D
?setSpacing@QBoxLayout@@QAEXH@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,00CB3643,000000FF,?,00C8C01C), ref: 00C8EEB1
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(00CB3643,horizontalLayout,000000FF,?,?,?,?,?,?,?,00CB3643,000000FF,?,00C8C01C), ref: 00C8EEBE
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000,?,?,?,?,?,?,?,?,?,?,00CB3643,000000FF,?,00C8C01C), ref: 00C8EED5
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,00CB3643,000000FF,?,00C8C01C), ref: 00C8EEE5
new.LIBCMT ref: 00C8EEED
??0QListWidget@@QAE@PAVQWidget@@@Z.QT5WIDGETS(00C8C01C,?,?,?,?,?,?,?,?,?,?,?,00CB3643,000000FF,?,00C8C01C), ref: 00C8EF04
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(00CB3643,listWidget,000000FF,?,?,?,?,?,?,?,?,?,?,?,00CB3643,000000FF), ref: 00C8EF2C
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00CB3643), ref: 00C8EF40
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00CB3643,000000FF), ref: 00C8EF50
??0QSizePolicy@@QAE@W4Policy@0@0W4ControlType@0@@Z.QT5WIDGETS(00000007,00000005,00000001), ref: 00C8EF5F
?setHorizontalStretch@QSizePolicy@@QAEXH@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00CB3643), ref: 00C8EF6A
?setVerticalStretch@QSizePolicy@@QAEXH@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00CB3643), ref: 00C8EF75
?sizePolicy@QWidget@@QBE?AVQSizePolicy@@XZ.QT5WIDGETS(00CB3643,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00CB3643), ref: 00C8EF82
?hasHeightForWidth@QSizePolicy@@QBE_NXZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00CB3643,000000FF), ref: 00C8EF8A
?setHeightForWidth@QSizePolicy@@QAEX_N@Z.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00CB3643), ref: 00C8EF97
?setSizePolicy@QWidget@@QAEXVQSizePolicy@@@Z.QT5WIDGETS(00C8C01C,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00CB3643), ref: 00C8EFA3
??0QVariant@@QAE@_N@Z.QT5CORE(00000001,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00CB3643), ref: 00C8EFAE
?setProperty@QObject@@QAE_NPBDABVQVariant@@@Z.QT5CORE(showDropIndicator,00000000), ref: 00C8EFC4
??1QVariant@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00CB3643,000000FF), ref: 00C8EFD4
?setDragEnabled@QAbstractItemView@@QAEX_N@Z.QT5WIDGETS(00000001,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00CB3643), ref: 00C8EFDF
?setDragDropMode@QAbstractItemView@@QAEXW4DragDropMode@1@@Z.QT5WIDGETS(00000003,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00CB3643), ref: 00C8EFEA
?setDefaultDropAction@QAbstractItemView@@QAEXW4DropAction@Qt@@@Z.QT5WIDGETS(00000002,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00CB3643), ref: 00C8EFF5
?setTextElideMode@QAbstractItemView@@QAEXW4TextElideMode@Qt@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00CB3643), ref: 00C8F000
?setFlow@QListView@@QAEXW4Flow@1@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00CB3643), ref: 00C8F00B
?setSpacing@QListView@@QAEXH@Z.QT5WIDGETS(00000005,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00CB3643), ref: 00C8F016
?addWidget@QBoxLayout@@QAEXPAVQWidget@@HV?$QFlags@W4AlignmentFlag@Qt@@@@@Z.QT5WIDGETS(?,00000000,00000000), ref: 00C8F026
?addLayout@QBoxLayout@@QAEXPAVQLayout@@H@Z.QT5WIDGETS(?,00000000), ref: 00C8F033
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,HueSwatchLineWidget,Form,00000000,000000FF), ref: 00C8F04B
?setWindowTitle@QWidget@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C8F05E
??1QString@@QAE@XZ.QT5CORE ref: 00C8F06E
?connectSlotsByName@QMetaObject@@SAXPAVQObject@@@Z.QT5CORE(00C8C01C), ref: 00C8F075

Strings

HueSwatchLineWidget, xrefs: 00C8EDB3, 00C8F045
listWidget, xrefs: 00C8EF15
jng, xrefs: 00C8ED77
Form, xrefs: 00C8F03D
horizontalLayout, xrefs: 00C8EEB8
horizontalLayout_2, xrefs: 00C8EE33
showDropIndicator, xrefs: 00C8EFB8

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: ?set$String@@$Layout@@Size$Object@@$Name@Policy@@View@@Widget@@$String@@@$?fromAbstractDropItemObjectUtf8@$DragListMode@Spacing@$?addAction@ElideHeightPolicy@Qt@@@Stretch@TextVariant@@Widget@@@Width@$?connect?has?object?resize@?size?translate@AlignmentApplication@@ContentsControlCoreDefaultEnabled@Flag@Flags@Flow@Flow@1@@HorizontalLayout@Margins@MetaMode@1@@Object@@@Policy@0@0Policy@@@Property@Qt@@@@@SlotsTitle@Type@0@@Variant@@@VerticalWidget@Window
String ID: Form$HueSwatchLineWidget$horizontalLayout$horizontalLayout_2$listWidget$showDropIndicator$jng
API String ID: 1030561779-3357193515
Opcode ID: e0500ca87b7f8027f6e80f2829ceeabeff7a5eaa33da148ec6317543ef9f8d12
Instruction ID: 35a6dc5651da4c7033b40263243e1ead53e05253820564efaa522dcc37e788e4
Opcode Fuzzy Hash: e0500ca87b7f8027f6e80f2829ceeabeff7a5eaa33da148ec6317543ef9f8d12
Instruction Fuzzy Hash: 24A14F75940606EFCB00DF94DD49B9DBBB8FF08725F104319E626A72E0DB706A49CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00C81340 Relevance: 89.5, APIs: 32, Strings: 19, Instructions: 205COMMON

Download Yara Rule

APIs

?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(00000000,?,2selectionChanged(),00000000,1firstChanged(),00000000,6B62DA60,6B62B6F0,00000000,00000000,00C8016A), ref: 00C81364
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C81373
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2selectionChanged(),00000000,1middleChanged(),00000000), ref: 00C8138D
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C81396
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2selectionChanged(),00000000,1lastChanged(),00000000), ref: 00C813B0
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C813B9
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2selectionChanged(),00000000,1DOBChanged(),00000000), ref: 00C813D3
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C813DC
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2selectionChanged(),00000000,1refChanged(),00000000), ref: 00C813F6
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C813FF
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2selectionChanged(),00000000,1dateChanged(),00000000), ref: 00C8141C
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C81425
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2selectionChanged(),00000000,1timeChanged(),00000000), ref: 00C81442
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C8144B
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2selectionChanged(),00000000,1commentsChanged(),00000000), ref: 00C81468
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C81471
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2selectionChanged(),00000000,1genderChanged(),00000000), ref: 00C8148B
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C81494
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2currentIndexChanged(int),00000000,1illuminationChanged(),00000000), ref: 00C814B1
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C814BA
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2currentIndexChanged(int),00000000,1jobChanged(),00000000), ref: 00C814D7
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C814E0
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2currentIndexChanged(int),00000000,1industryChanged(),00000000), ref: 00C814FD
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C81506
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2currentIndexChanged(int),00000000,1locationChanged(),00000000), ref: 00C81523
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C8152C
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2currentIndexChanged(int),00000000,1serialChanged(),00000000), ref: 00C81549
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C81552
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,00000003,2currentIndexChanged(int),00000000,1experienceChanged(),00000000), ref: 00C8156F
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C81578

Part of subcall function 00C9BC50: new.LIBCMT ref: 00C9BC80
Part of subcall function 00C9BC50: ??0QObject@@QAE@PAV0@@Z.QT5CORE(00000000), ref: 00C9BC98
Part of subcall function 00C9BC50: ??0QString@@QAE@XZ.QT5CORE ref: 00C9BCA7
Part of subcall function 00C9BC50: ??4QString@@QAEAAV0@PBD@Z.QT5CORE(00CB9364), ref: 00C9BCD0

?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2focusChanged(QWidget*,QWidget*),00000000,1focusChanged(QWidget*, QWidget*),00000000), ref: 00C81595
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C8159E

Strings

2focusChanged(QWidget*,QWidget*), xrefs: 00C81582
1dateChanged(), xrefs: 00C81406
1refChanged(), xrefs: 00C813E3
1locationChanged(), xrefs: 00C8150D
1timeChanged(), xrefs: 00C81429
1jobChanged(), xrefs: 00C814C1
2selectionChanged(), xrefs: 00C81357, 00C81380, 00C813A3, 00C813C6, 00C813E9, 00C8140C, 00C81432, 00C81458, 00C8147E
1experienceChanged(), xrefs: 00C81559
2currentIndexChanged(int), xrefs: 00C814A1, 00C814C7, 00C814ED, 00C81513, 00C81539, 00C8155F
1middleChanged(), xrefs: 00C8137A
1serialChanged(), xrefs: 00C81533
1lastChanged(), xrefs: 00C8139D
1commentsChanged(), xrefs: 00C81452
1focusChanged(QWidget*, QWidget*), xrefs: 00C8157C
1illuminationChanged(), xrefs: 00C8149B
1firstChanged(), xrefs: 00C8134E
1genderChanged(), xrefs: 00C81478
1industryChanged(), xrefs: 00C814E7
1DOBChanged(), xrefs: 00C813C0

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Object@@$Connection@Meta$?connect@ConnectionQt@@@Type@$String@@$V0@@
String ID: 1DOBChanged()$1commentsChanged()$1dateChanged()$1experienceChanged()$1firstChanged()$1focusChanged(QWidget*, QWidget*)$1genderChanged()$1illuminationChanged()$1industryChanged()$1jobChanged()$1lastChanged()$1locationChanged()$1middleChanged()$1refChanged()$1serialChanged()$1timeChanged()$2currentIndexChanged(int)$2focusChanged(QWidget*,QWidget*)$2selectionChanged()
API String ID: 1396003552-1325837038
Opcode ID: 3934e3ad7d2b8b564e5694c09eba0a4b1e410cffcdd1e250b126461befe946a4
Instruction ID: 18c9596879f4adbeb03c8bc7b0fc7db268fbd5a13115a2fb7b98dd95136bfb12
Opcode Fuzzy Hash: 3934e3ad7d2b8b564e5694c09eba0a4b1e410cffcdd1e250b126461befe946a4
Instruction Fuzzy Hash: 23618030640209BFDB00EF58CCC2FDA77ACBF4870CF154969F189A7191EAB5E9158B91

Uniqueness

Uniqueness Score: -1.00%

Function 00C9D170 Relevance: 77.3, APIs: 41, Strings: 3, Instructions: 328windowCOMMON

Download Yara Rule

APIs

?setRowCount@QTableWidget@@QAEXH@Z.QT5WIDGETS(00000000,676E6AEE,6B5136D0,?,?,?,?,?,?,?,?,?,?,00000000,00CB5889,000000FF), ref: 00C9D1A8
?setSelectionMode@QAbstractItemView@@QAEXW4SelectionMode@1@@Z.QT5WIDGETS(00000001,?,?,?,?,?,?,?,?,00000000,00CB5889,000000FF,?,00C9F83F), ref: 00C9D1B9

Part of subcall function 00C61FD0: ??1QString@@QAE@XZ.QT5CORE(676E6AEE,?,6B520380,6B5175D0,00000000,00CAD200,000000FF,?,00C88DAB,?,00C6B410,?,?,676E6AEE), ref: 00C62035
Part of subcall function 00C61FD0: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(6B5175D0,676E6AEE,?,6B520380,6B5175D0,00000000,00CAD200,000000FF,?,00C88DAB,?,00C6B410,?,?,676E6AEE), ref: 00C62040

Part of subcall function 00CA73C0: ?tr@QMetaObject@@QBE?AVQString@@PBD0H@Z.QT5CORE(00C9D8DE,00C9D8DE,00C9D8DE,00C9D8DE,?,00C9D8DE,?,00CB9364,00000000), ref: 00CA73DE

Part of subcall function 00C63120: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C7C58A,7FFFFFFF,00000001,676E6AEE,00000000,00000000,00000000,?,00000000,00CAD3B0,000000FF,?,00C7C58A,00000000), ref: 00C6316D

Part of subcall function 00C63120: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C7C58A,676E6AEE,00000000,00000000,00000000,?,00000000,00CAD3B0,000000FF,?,00C7C58A,00000000), ref: 00C6318D
Part of subcall function 00C63120: ?append@QListData@@QAEPAPAXXZ.QT5CORE ref: 00C6319C

??1QString@@QAE@XZ.QT5CORE(00000000,00000000), ref: 00C9D23B
??1QString@@QAE@XZ.QT5CORE ref: 00C9D248
?setHorizontalHeaderLabels@QTableWidget@@QAEXABVQStringList@@@Z.QT5WIDGETS(00000000), ref: 00C9D25B
??0QVariant@@QAE@XZ.QT5CORE ref: 00C9D264
?count@QComboBox@@QBEHXZ.QT5WIDGETS ref: 00C9D297
??0QIcon@@QAE@XZ.QT5GUI ref: 00C9D2A2
?insertItem@QComboBox@@QAEXHABVQIcon@@ABVQString@@ABVQVariant@@@Z.QT5WIDGETS(00000000,00000000,00000000,?), ref: 00C9D2B4
??1QIcon@@QAE@XZ.QT5GUI ref: 00C9D2BD
??1QString@@QAE@XZ.QT5CORE ref: 00C9D2C6
??1QVariant@@QAE@XZ.QT5CORE ref: 00C9D2D3

Part of subcall function 00C8F560: new.LIBCMT ref: 00C8F58E

Part of subcall function 00C90900: ??0QString@@QAE@XZ.QT5CORE(676E6AEE,?,00000000,00000000), ref: 00C9094F
Part of subcall function 00C90900: ?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A), ref: 00C90962
Part of subcall function 00C90900: ?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z.QT5SQL(?,00000000,00000001,00000000), ref: 00C90978
Part of subcall function 00C90900: ??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL(?,?,00000000), ref: 00C90984
Part of subcall function 00C90900: ??1QString@@QAE@XZ.QT5CORE(?,?,00000000), ref: 00C90991
Part of subcall function 00C90900: ??4QString@@QAEAAV0@PBD@Z.QT5CORE(SELECT * FROM serialNums,?,?,00000000), ref: 00C9099F
Part of subcall function 00C90900: ?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(00000000,?,?,00000000), ref: 00C909AC
Part of subcall function 00C90900: ?exec@QSqlQuery@@QAE_NXZ.QT5SQL(?,?,00000000), ref: 00C909B5
Part of subcall function 00C90900: ?next@QSqlQuery@@QAE_NXZ.QT5SQL(?,?,00000000), ref: 00C909CA
Part of subcall function 00C90900: ?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000001,?,?,00000000), ref: 00C909ED
Part of subcall function 00C90900: ?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?,?,?,00000000), ref: 00C909F9
Part of subcall function 00C90900: ??4QString@@QAEAAV0@$$QAV0@@Z.QT5CORE(00000000,?,?,00000000), ref: 00C909FF
Part of subcall function 00C90900: ??1QString@@QAE@XZ.QT5CORE(?,?,00000000), ref: 00C90A08
Part of subcall function 00C90900: ??1QVariant@@QAE@XZ.QT5CORE(?,?,00000000), ref: 00C90A15
Part of subcall function 00C90900: ?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000002,?,?,00000000), ref: 00C90A24
Part of subcall function 00C90900: ?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?,?,?,00000000), ref: 00C90A30
Part of subcall function 00C90900: ??4QString@@QAEAAV0@$$QAV0@@Z.QT5CORE(00000000,?,?,00000000), ref: 00C90A36
Part of subcall function 00C90900: ??1QString@@QAE@XZ.QT5CORE(?,?,00000000), ref: 00C90A3F
Part of subcall function 00C90900: ??1QVariant@@QAE@XZ.QT5CORE(?,?,00000000), ref: 00C90A4C

?size@QListData@@QBEHXZ.QT5CORE(000000FF), ref: 00C9D2F2
?setRowCount@QTableWidget@@QAEXH@Z.QT5WIDGETS(00000001), ref: 00C9D320
new.LIBCMT ref: 00C9D328

Part of subcall function 00CAC0B7: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0DE

?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C9D33D
??0QTableWidgetItem@@QAE@ABVQString@@H@Z.QT5WIDGETS(?,00000000), ref: 00C9D34D
new.LIBCMT ref: 00C9D362

Part of subcall function 00CAC0B7: _callnewh.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0BF

?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,00000000), ref: 00C9D377
??0QTableWidgetItem@@QAE@ABVQString@@H@Z.QT5WIDGETS(00000000,00000000), ref: 00C9D383

Part of subcall function 00C95C90: ?append@QListData@@QAEPAPAXXZ.QT5CORE(676E6AEE,6B62DA60,6B62B6F0,00000000,?,?,00CB4DD0,000000FF,?,00C8160E,?,676E6AEE,6B62DA60,6B62B6F0), ref: 00C95CF9

?setFlags@QTableWidgetItem@@QAEXV?$QFlags@W4ItemFlag@Qt@@@@@Z.QT5WIDGETS(?,?,?), ref: 00C9D3B7
?setFlags@QTableWidgetItem@@QAEXV?$QFlags@W4ItemFlag@Qt@@@@@Z.QT5WIDGETS(?), ref: 00C9D3C6
?setItem@QTableWidget@@QAEXHHPAVQTableWidgetItem@@@Z.QT5WIDGETS(00000000,00000000,00000000), ref: 00C9D3E2
?setItem@QTableWidget@@QAEXHHPAVQTableWidgetItem@@@Z.QT5WIDGETS(00000000,00000001,00000000), ref: 00C9D3F4
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C9D3FA
??0QVariant@@QAE@XZ.QT5CORE(?), ref: 00C9D414
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C9D425
?count@QComboBox@@QBEHXZ.QT5WIDGETS ref: 00C9D438
??0QIcon@@QAE@XZ.QT5GUI ref: 00C9D443
?insertItem@QComboBox@@QAEXHABVQIcon@@ABVQString@@ABVQVariant@@@Z.QT5WIDGETS(00000000,00000000,6BBDF054,?), ref: 00C9D458
??1QIcon@@QAE@XZ.QT5GUI ref: 00C9D461
??1QVariant@@QAE@XZ.QT5CORE ref: 00C9D46E
?count@QComboBox@@QBEHXZ.QT5WIDGETS ref: 00C9D483
?setCurrentIndex@QComboBox@@QAEXH@Z.QT5WIDGETS(FF644D8D), ref: 00C9D497
?size@QListData@@QBEHXZ.QT5CORE ref: 00C9D4A3
?setCurrentCell@QTableWidget@@QAEXHH@Z.QT5WIDGETS(00000000,00000000), ref: 00C9D4BE
??1QString@@QAE@XZ.QT5CORE ref: 00C9D50D
??1QString@@QAE@XZ.QT5CORE ref: 00C9D515
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(000000FF), ref: 00C9D52E
??1QString@@QAE@XZ.QT5CORE ref: 00C9D579
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(00000000), ref: 00C9D584

Strings

jng, xrefs: 00C9D187
Serial Number, xrefs: 00C9D214
Purchase Date, xrefs: 00C9D1FC

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Table$Data@@List$?setVariant@@$Box@@ComboIcon@@Query@@WidgetWidget@@$?at@Flags@Item@Item@@V0@@$?count@?dispose@Data@1@@Item$?append@?insert?size@?value@Count@CurrentFlag@Item@@@Qt@@@@@SelectionString@V0@$$Variant@@@$?database@?exec@?next@?number@?prepare@?tr@AbstractCell@Database@@Database@@@HeaderHorizontalIndex@Labels@List@@@MetaMode@Mode@1@@Object@@StringString@@@String@@_View@@_callnewhmalloc
String ID: Purchase Date$Serial Number$jng
API String ID: 2313872304-1860295477
Opcode ID: d46f79e3b63ef00b69d1f0ee2aaf9d5ae844b20641c016956e5212ec9b6fb0f7
Instruction ID: 6d186574a48388170a7521b1dc754ac0ea065f9c878f19cf039e6a17ba4bad6d
Opcode Fuzzy Hash: d46f79e3b63ef00b69d1f0ee2aaf9d5ae844b20641c016956e5212ec9b6fb0f7
Instruction Fuzzy Hash: 8DD17E75900209DFDF04DFA4D898BEEBBB9FF58314F140268E812A7291DF356A09CB61

Uniqueness

Uniqueness Score: -1.00%

Function 00C79C70 Relevance: 77.3, APIs: 43, Strings: 1, Instructions: 275COMMON

Download Yara Rule

APIs

?size@QListData@@QBEHXZ.QT5CORE(676E6AEE), ref: 00C79CA2
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C79CB0
?rowCount@QTableWidget@@QBEHXZ.QT5WIDGETS ref: 00C79CD4
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(000000FF,00000011,?), ref: 00C79CF1
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C79CF9
?toInt@QString@@QBEHPA_NH@Z.QT5CORE(00000000,0000000A), ref: 00C79D0C
??1QString@@QAE@XZ.QT5CORE ref: 00C79D1E
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(000000FF,00000001,?), ref: 00C79D33
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C79D3B
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(000000FF,00000002,000000FF), ref: 00C79D57
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C79D5F
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(000000FF,00000003,?), ref: 00C79D78
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C79D80
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(000000FF,00000005,?), ref: 00C79D99
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C79DA1
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C79DB0
?removeRow@QTableWidget@@QAEXH@Z.QT5WIDGETS(?), ref: 00C79DBF
?rowCount@QTableWidget@@QBEHXZ.QT5WIDGETS(00000000), ref: 00C79DDE
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(00000000,00000001,?), ref: 00C79DFD
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C79E05
??8@YA_NABVQString@@0@Z.QT5CORE(00000000,?), ref: 00C79E1A
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(00000000,00000002,?), ref: 00C79E38
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C79E40
??8@YA_NABVQString@@0@Z.QT5CORE(00000000,000000FF), ref: 00C79E58
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(00000000,00000003,?), ref: 00C79E72
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C79E7A
??8@YA_NABVQString@@0@Z.QT5CORE(00000000,?), ref: 00C79E92
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(00000000,00000005,?), ref: 00C79EAC
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C79EB4
??8@YA_NABVQString@@0@Z.QT5CORE(00000000,?), ref: 00C79EC2
??1QString@@QAE@XZ.QT5CORE ref: 00C79EE7
??1QString@@QAE@XZ.QT5CORE ref: 00C79EF8
??1QString@@QAE@XZ.QT5CORE ref: 00C79F09
??1QString@@QAE@XZ.QT5CORE ref: 00C79F1C
?rowCount@QTableWidget@@QBEHXZ.QT5WIDGETS ref: 00C79F38
??0QString@@QAE@ABV0@@Z.QT5CORE(?), ref: 00C79F57
??0QString@@QAE@ABV0@@Z.QT5CORE(?), ref: 00C79F67
??0QString@@QAE@ABV0@@Z.QT5CORE(000000FF), ref: 00C79F77
??0QString@@QAE@ABV0@@Z.QT5CORE(?), ref: 00C79F87
??1QString@@QAE@XZ.QT5CORE ref: 00C79FA4
??1QString@@QAE@XZ.QT5CORE ref: 00C79FAD
??1QString@@QAE@XZ.QT5CORE ref: 00C79FB6
??1QString@@QAE@XZ.QT5CORE ref: 00C79FC6

Strings

jng, xrefs: 00C79C87

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Table$String@@$Item@@Widget$Widget@@$?item@?text@$??8@String@@0@V0@@$?rowCount@Data@@List$?at@$?remove?size@Int@Row@
String ID: jng
API String ID: 361823801-1186463058
Opcode ID: 67ab1ff3437e87fa9ef975234e47159684abc7cb4d7f2a129584710609963717
Instruction ID: 3c99dc25c07d718ff3c0cd863367cd814abcb09f5360a7f7bcf4be8763c323e6
Opcode Fuzzy Hash: 67ab1ff3437e87fa9ef975234e47159684abc7cb4d7f2a129584710609963717
Instruction Fuzzy Hash: DBB150749002099FCF14DFA4D899BAEBBB9FF19305F20465CE556A32E1DF30990ACB21

Uniqueness

Uniqueness Score: -1.00%

Function 00C97A80 Relevance: 66.7, APIs: 26, Strings: 12, Instructions: 221COMMON

Download Yara Rule

APIs

Part of subcall function 00C9B2A0: ?size@QListData@@QBEHXZ.QT5CORE(676E6AEE,4D8BD6FF,00000000,4D8BD783), ref: 00C9B2D4
Part of subcall function 00C9B2A0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C9B2E3
Part of subcall function 00C9B2A0: ?size@QListData@@QBEHXZ.QT5CORE ref: 00C9B2F9
Part of subcall function 00C9B2A0: ?size@QListData@@QBEHXZ.QT5CORE ref: 00C9B30D
Part of subcall function 00C9B2A0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C9B31A
Part of subcall function 00C9B2A0: ?size@QListData@@QBEHXZ.QT5CORE ref: 00C9B330
Part of subcall function 00C9B2A0: ?size@QListData@@QBEHXZ.QT5CORE ref: 00C9B347
Part of subcall function 00C9B2A0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C9B357
Part of subcall function 00C9B2A0: ?size@QListData@@QBEHXZ.QT5CORE ref: 00C9B36C

??0QColor@@QAE@PBD@Z.QT5GUI(black,676E6AEE,4D8BD6FF,00000000,4D8BD783), ref: 00C97ACF
??0QColor@@QAE@PBD@Z.QT5GUI(cyan,?,?,?,?,?,?,?,?,?,?,?,00000000,00CB4F53,000000FF), ref: 00C97ADD
??0QColor@@QAE@PBD@Z.QT5GUI(magenta,?,?,?,?,?,?,?,?,?,?,?,00000000,00CB4F53,000000FF), ref: 00C97AEB
??0QColor@@QAE@PBD@Z.QT5GUI(red,?,?,?,?,?,?,?,?,?,?,?,00000000,00CB4F53,000000FF), ref: 00C97AF9
??0QColor@@QAE@PBD@Z.QT5GUI(darkRed,?,?,?,?,?,?,?,?,?,?,?,00000000,00CB4F53,000000FF), ref: 00C97B07
??0QColor@@QAE@PBD@Z.QT5GUI(darkCyan,?,?,?,?,?,?,?,?,?,?,?,00000000,00CB4F53,000000FF), ref: 00C97B15
??0QColor@@QAE@PBD@Z.QT5GUI(darkMagenta,?,?,?,?,?,?,?,?,?,?,?,00000000,00CB4F53,000000FF), ref: 00C97B23
??0QColor@@QAE@PBD@Z.QT5GUI(green,?,?,?,?,?,?,?,?,?,?,?,00000000,00CB4F53,000000FF), ref: 00C97B31
??0QColor@@QAE@PBD@Z.QT5GUI(darkGreen,?,?,?,?,?,?,?,?,?,?,?,00000000,00CB4F53,000000FF), ref: 00C97B42
??0QColor@@QAE@PBD@Z.QT5GUI(yellow,?,?,?,?,?,?,?,?,?,?,?,00000000,00CB4F53,000000FF), ref: 00C97B53
??0QColor@@QAE@PBD@Z.QT5GUI(blue,?,?,?,?,?,?,?,?,?,?,?,00000000,00CB4F53,000000FF), ref: 00C97B64
?size@QListData@@QBEHXZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,00000000,00CB4F53,000000FF), ref: 00C97B72
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,?,?,?,?,?,?,?,?,?,?,00000000,00CB4F53,000000FF), ref: 00C97B87
?size@QListData@@QBEHXZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,00000000,00CB4F53,000000FF), ref: 00C97B8F
??0QPen@@QAE@XZ.QT5GUI(?,?,?,?,?,?,?,?,?,?,?,00000000,00CB4F53,000000FF), ref: 00C97BA1
??0QBrush@@QAE@ABVQColor@@W4BrushStyle@Qt@@@Z.QT5GUI(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00CB4F53,000000FF), ref: 00C97BD0
?setBrush@QPen@@QAEXABVQBrush@@@Z.QT5GUI(00000000,?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00CB4F53), ref: 00C97BDE
??1QBrush@@QAE@XZ.QT5GUI(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00CB4F53,000000FF), ref: 00C97BEB
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00CB4F53), ref: 00C97C26
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00CB4F53), ref: 00C97C32
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00CB4F53), ref: 00C97CB4
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?,?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00CB4F53), ref: 00C97CBF
?addLine@QGraphicsScene@@QAEPAVQGraphicsLineItem@@ABVQLineF@@ABVQPen@@@Z.QT5WIDGETS(?,?,?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00C97D41
??1QPen@@QAE@XZ.QT5GUI(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00CB4F53,000000FF), ref: 00C97D60
?size@QListData@@QBEHXZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,00000000,00CB4F53,000000FF), ref: 00C97D6D
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00CB4F53), ref: 00C97DC7

Strings

darkRed, xrefs: 00C97AFF
red, xrefs: 00C97AF1
green, xrefs: 00C97B29
blue, xrefs: 00C97B59
jng, xrefs: 00C97A9F
darkCyan, xrefs: 00C97B0D
black, xrefs: 00C97AC7
cyan, xrefs: 00C97AD5
magenta, xrefs: 00C97AE3
yellow, xrefs: 00C97B48
darkGreen, xrefs: 00C97B37
darkMagenta, xrefs: 00C97B1B

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$Color@@$?size@$?at@$Pen@@$Brush@@GraphicsLine$?add?dispose@?setBrushBrush@Brush@@@Data@1@@Item@@Line@Pen@@@Qt@@@Scene@@Style@
String ID: black$blue$cyan$darkCyan$darkGreen$darkMagenta$darkRed$green$magenta$red$yellow$jng
API String ID: 3224690998-1225400145
Opcode ID: 9635d5945cd3cc2916a00512a219bdf3d377dc0a766a222e03ef2cce5fd34d58
Instruction ID: 5d850601dd6d4db45cfbebef6447bbb75105999ec34e16e21ef70e2abd6cc7eb
Opcode Fuzzy Hash: 9635d5945cd3cc2916a00512a219bdf3d377dc0a766a222e03ef2cce5fd34d58
Instruction Fuzzy Hash: B8A18D31910649CFDB15DFB5CC45BEEB778BF59740F04872AE806A71A1EB346A89CB10

Uniqueness

Uniqueness Score: -1.00%

Function 00CA73F0 Relevance: 66.7, APIs: 29, Strings: 9, Instructions: 187windowCOMMON

Download Yara Rule

APIs

??0QDialog@@QAE@PAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z.QT5WIDGETS(00C9BFD6,00000000,676E6AEE,?,00000000), ref: 00CA7429
new.LIBCMT ref: 00CA7445

Part of subcall function 00CAC0B7: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0DE

??0QString@@QAE@XZ.QT5CORE ref: 00CA7453
??0QString@@QAE@XZ.QT5CORE ref: 00CA745E

Part of subcall function 00CA7AB0: ?objectName@QObject@@QBE?AVQString@@XZ.QT5CORE(?,676E6AEE,?,00000064,00000084,?,?,?,?,?,00000000,00CB7125,000000FF,?,00CA7471,00000064), ref: 00CA7AE4
Part of subcall function 00CA7AB0: ??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,00000000,00CB7125,000000FF,?,00CA7471,00000064), ref: 00CA7AF2
Part of subcall function 00CA7AB0: ?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,serialNumDialog,000000FF,?,?,?,?,?,00000000,00CB7125,000000FF,?,00CA7471,00000064), ref: 00CA7B07
Part of subcall function 00CA7AB0: ?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000,?,?,?,?,?,?,?,?,00000000,00CB7125,000000FF,?,00CA7471,00000064), ref: 00CA7B16
Part of subcall function 00CA7AB0: ??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,00000000,00CB7125,000000FF,?,00CA7471), ref: 00CA7B26
Part of subcall function 00CA7AB0: ?resize@QWidget@@QAEXHH@Z.QT5WIDGETS(00000199,000000EB,?,?,?,?,?,00000000,00CB7125,000000FF,?,00CA7471,00000064), ref: 00CA7B38
Part of subcall function 00CA7AB0: ??0QSizePolicy@@QAE@W4Policy@0@0W4ControlType@0@@Z.QT5WIDGETS(00000000,00000000,00000001,?,?,?,?,?,00000000,00CB7125,000000FF,?,00CA7471,00000064), ref: 00CA7B47
Part of subcall function 00CA7AB0: ?setHorizontalStretch@QSizePolicy@@QAEXH@Z.QT5WIDGETS(00000000,?,?,?,?,?,00000000,00CB7125,000000FF,?,00CA7471,00000064), ref: 00CA7B52
Part of subcall function 00CA7AB0: ?setVerticalStretch@QSizePolicy@@QAEXH@Z.QT5WIDGETS(00000000,?,?,?,?,?,00000000,00CB7125,000000FF,?,00CA7471,00000064), ref: 00CA7B5D
Part of subcall function 00CA7AB0: ?sizePolicy@QWidget@@QBE?AVQSizePolicy@@XZ.QT5WIDGETS(?,?,?,?,?,?,00000000,00CB7125,000000FF,?,00CA7471,00000064), ref: 00CA7B69
Part of subcall function 00CA7AB0: ?hasHeightForWidth@QSizePolicy@@QBE_NXZ.QT5WIDGETS(?,?,?,?,?,00000000,00CB7125,000000FF,?,00CA7471,00000064), ref: 00CA7B71
Part of subcall function 00CA7AB0: ?setHeightForWidth@QSizePolicy@@QAEX_N@Z.QT5WIDGETS(?,?,?,?,?,?,00000000,00CB7125,000000FF,?,00CA7471,00000064), ref: 00CA7B7E
Part of subcall function 00CA7AB0: ?setSizePolicy@QWidget@@QAEXVQSizePolicy@@@Z.QT5WIDGETS(00CB7125,?,?,?,?,?,00000000,00CB7125,000000FF,?,00CA7471,00000064), ref: 00CA7B8F
Part of subcall function 00CA7AB0: new.LIBCMT ref: 00CA7B93
Part of subcall function 00CA7AB0: ??0QWidget@@QAE@PAV0@V?$QFlags@W4WindowType@Qt@@@@@Z.QT5WIDGETS(00CA7471,00000000,?,?,?,?,?,?,00000000,00CB7125,000000FF,?,00CA7471), ref: 00CA7BAC
Part of subcall function 00CA7AB0: ?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,verticalLayoutWidget,000000FF,?,?,?,?,?,?,00000000,00CB7125,000000FF,?,00CA7471), ref: 00CA7BD6
Part of subcall function 00CA7AB0: ?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000,?,?,?,?,?,?,?,?,?,00000000,00CB7125,000000FF,?,00CA7471), ref: 00CA7BE9
Part of subcall function 00CA7AB0: ??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,00000000,00CB7125,000000FF,?,00CA7471), ref: 00CA7BF9

?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(00C9BFD6,?,2textChanged(QString),00000064,1serialChanged(),00000000,00000064), ref: 00CA748E
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00CA749C
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2textChanged(QString),?,1purchaseChanged(),00000000), ref: 00CA74B8
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00CA74C0
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2clicked(bool),?,1okClicked(),00000000), ref: 00CA74DC
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00CA74E4
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2clicked(bool),?,1cancelClicked(),00000000), ref: 00CA7500
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00CA7508
??4QString@@QAEAAV0@PBD@Z.QT5CORE(00CB9364), ref: 00CA7515
??4QString@@QAEAAV0@PBD@Z.QT5CORE(00CB9364), ref: 00CA7522
new.LIBCMT ref: 00CA752E

Part of subcall function 00CAC0B7: _callnewh.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0BF

?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE([0-9_]{1,20},0000000C,0000000C), ref: 00CA7543
??0QRegExp@@QAE@ABVQString@@W4CaseSensitivity@Qt@@W4PatternSyntax@0@@Z.QT5CORE(?,00000001,00000000), ref: 00CA7565
??0QRegExpValidator@@QAE@ABVQRegExp@@PAVQObject@@@Z.QT5GUI(00000000,?), ref: 00CA7583
??1QRegExp@@QAE@XZ.QT5CORE ref: 00CA7597
??1QString@@QAE@XZ.QT5CORE ref: 00CA75A3
new.LIBCMT ref: 00CA75AB

Part of subcall function 00CAC0B7: Concurrency::cancel_current_task.LIBCPMT ref: 00CAC0D6

?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE([0-9_//]{1,20},0000000E,0000000C), ref: 00CA75C0
??0QRegExp@@QAE@ABVQString@@W4CaseSensitivity@Qt@@W4PatternSyntax@0@@Z.QT5CORE(?,00000001,00000000), ref: 00CA75E2
??0QRegExpValidator@@QAE@ABVQRegExp@@PAVQObject@@@Z.QT5GUI(00000000,?), ref: 00CA75FD
??1QRegExp@@QAE@XZ.QT5CORE ref: 00CA760E
??1QString@@QAE@XZ.QT5CORE ref: 00CA761A
?setValidator@QLineEdit@@QAEXPBVQValidator@@@Z.QT5WIDGETS(?), ref: 00CA762F
?setValidator@QLineEdit@@QAEXPBVQValidator@@@Z.QT5WIDGETS(?), ref: 00CA763A
?setFocus@QWidget@@QAEXW4FocusReason@Qt@@@Z.QT5WIDGETS(00000007), ref: 00CA7644

Strings

1serialChanged(), xrefs: 00CA747C
[0-9_]{1,20}, xrefs: 00CA753A
2clicked(bool), xrefs: 00CA74D0, 00CA74F4
jng, xrefs: 00CA7407
[0-9_//]{1,20}, xrefs: 00CA75B7
1purchaseChanged(), xrefs: 00CA74A3
2textChanged(QString), xrefs: 00CA7482, 00CA74AC
1okClicked(), xrefs: 00CA74C7
1cancelClicked(), xrefs: 00CA74EB

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Object@@$?set$Connection@MetaSize$Exp@@Policy@@Type@Widget@@$Qt@@@$?connect@?fromConnection$Name@$ArrayAscii_helper@CaseData@Edit@@Flags@HeightLineObjectObject@@@PatternPolicy@Qt@@Qt@@@@@Sensitivity@Stretch@String@@@Syntax@0@@TypedUtf8@Validator@Validator@@Validator@@@Width@Window$?has?object?resize@?sizeConcurrency::cancel_current_taskControlDialog@@FocusFocus@HorizontalPolicy@0@0Policy@@@Reason@Type@0@@Vertical_callnewhmalloc
String ID: 1cancelClicked()$1okClicked()$1purchaseChanged()$1serialChanged()$2clicked(bool)$2textChanged(QString)$[0-9_//]{1,20}$[0-9_]{1,20}$jng
API String ID: 336741879-656808605
Opcode ID: b75f47113c93940b68708b25b3e655d7abb1ffebaa68a6bea60e15404c18c251
Instruction ID: fb7dbe06cdce8b8fb269a295456bd7d92874fe611727be915ac7cfc3c6a69fce
Opcode Fuzzy Hash: b75f47113c93940b68708b25b3e655d7abb1ffebaa68a6bea60e15404c18c251
Instruction Fuzzy Hash: 26714BB1A00209EFDB10DF98DC45F9E7BB8FF18714F104159E909AB291DB71AA49CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00CA8BA0 Relevance: 63.2, APIs: 35, Strings: 1, Instructions: 229COMMON

Download Yara Rule

APIs

??0QWidget@@QAE@PAV0@V?$QFlags@W4WindowType@Qt@@@@@Z.QT5WIDGETS(00CB975C,00000000,676E6AEE,6BEC1DC0,?,6BEC5B20), ref: 00CA8BE1
??0QString@@QAE@XZ.QT5CORE ref: 00CA8BFE
new.LIBCMT ref: 00CA8C0A

Part of subcall function 00CAC0B7: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0DE

new.LIBCMT ref: 00CA8C14

Part of subcall function 00CAC0B7: _callnewh.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0BF

??0QGraphicsTextItem@@QAE@PAVQGraphicsItem@@@Z.QT5WIDGETS(00000000), ref: 00CA8C2F
new.LIBCMT ref: 00CA8C47

Part of subcall function 00CAC0B7: Concurrency::cancel_current_task.LIBCPMT ref: 00CAC0D6

??0QGraphicsTextItem@@QAE@PAVQGraphicsItem@@@Z.QT5WIDGETS(00000000), ref: 00CA8C5C
new.LIBCMT ref: 00CA8C74
??0QGraphicsTextItem@@QAE@PAVQGraphicsItem@@@Z.QT5WIDGETS(00000000), ref: 00CA8C89

Part of subcall function 00CA9580: ?objectName@QObject@@QBE?AVQString@@XZ.QT5CORE(00CB742A,676E6AEE,6BBFC1F0,00000000,00000000,00CB742A,000000FF,?,00CA8CA8,00000000), ref: 00CA95B3
Part of subcall function 00CA9580: ??1QString@@QAE@XZ.QT5CORE ref: 00CA95C1
Part of subcall function 00CA9580: ?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,analysisDisplay,000000FF), ref: 00CA95D6
Part of subcall function 00CA9580: ?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00CA95E5
Part of subcall function 00CA9580: ??1QString@@QAE@XZ.QT5CORE ref: 00CA95F5
Part of subcall function 00CA9580: ?resize@QWidget@@QAEXHH@Z.QT5WIDGETS(00000064,00000064), ref: 00CA9601
Part of subcall function 00CA9580: ??0QSizePolicy@@QAE@W4Policy@0@0W4ControlType@0@@Z.QT5WIDGETS(00000007,00000007,00000001), ref: 00CA9610
Part of subcall function 00CA9580: ?setHorizontalStretch@QSizePolicy@@QAEXH@Z.QT5WIDGETS(00000000), ref: 00CA961B
Part of subcall function 00CA9580: ?setVerticalStretch@QSizePolicy@@QAEXH@Z.QT5WIDGETS(00000000), ref: 00CA9626
Part of subcall function 00CA9580: ?sizePolicy@QWidget@@QBE?AVQSizePolicy@@XZ.QT5WIDGETS(?), ref: 00CA9632
Part of subcall function 00CA9580: ?hasHeightForWidth@QSizePolicy@@QBE_NXZ.QT5WIDGETS ref: 00CA963A
Part of subcall function 00CA9580: ?setHeightForWidth@QSizePolicy@@QAEX_N@Z.QT5WIDGETS(?), ref: 00CA9647
Part of subcall function 00CA9580: ?setSizePolicy@QWidget@@QAEXVQSizePolicy@@@Z.QT5WIDGETS(?), ref: 00CA9652
Part of subcall function 00CA9580: new.LIBCMT ref: 00CA965A
Part of subcall function 00CA9580: ??0QGraphicsView@@QAE@PAVQWidget@@@Z.QT5WIDGETS(00CA8CA8), ref: 00CA9671
Part of subcall function 00CA9580: ?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,graphicsView,000000FF), ref: 00CA969B
Part of subcall function 00CA9580: ?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00CA96B1
Part of subcall function 00CA9580: ??1QString@@QAE@XZ.QT5CORE ref: 00CA96C1

new.LIBCMT ref: 00CA8CAA
??0QGraphicsScene@@QAE@PAVQObject@@@Z.QT5WIDGETS(00000000,00000000), ref: 00CA8CBF
?height@QWidget@@QBEHXZ.QT5WIDGETS ref: 00CA8CD4
?width@QWidget@@QBEHXZ.QT5WIDGETS ref: 00CA8CF4
?setSceneRect@QGraphicsScene@@QAEXNNNN@Z.QT5WIDGETS ref: 00CA8D1D
?setScene@QGraphicsView@@QAEXPAVQGraphicsScene@@@Z.QT5WIDGETS(?), ref: 00CA8D2B
?sceneRect@QGraphicsScene@@QBE?AVQRectF@@XZ.QT5WIDGETS(?), ref: 00CA8D3E
?width@QRectF@@QBENXZ.QT5CORE ref: 00CA8D42
?sceneRect@QGraphicsScene@@QBE?AVQRectF@@XZ.QT5WIDGETS(?), ref: 00CA8D5E
?width@QRectF@@QBENXZ.QT5CORE ref: 00CA8D62
?sceneRect@QGraphicsScene@@QBE?AVQRectF@@XZ.QT5WIDGETS(?), ref: 00CA8D7B
?width@QRectF@@QBENXZ.QT5CORE ref: 00CA8D7F
?sceneRect@QGraphicsScene@@QBE?AVQRectF@@XZ.QT5WIDGETS(?), ref: 00CA8D98
?width@QRectF@@QBENXZ.QT5CORE ref: 00CA8D9C
??0QRectF@@QAE@NNNN@Z.QT5CORE ref: 00CA8DB1
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(00000014,0000008A,000000D4,000000FF), ref: 00CA8DD1
??0QPen@@QAE@ABVQColor@@@Z.QT5GUI(?), ref: 00CA8DDA
?setRgb@QColor@@QAEXHHHH@Z.QT5GUI(00000014,0000008A,000000D4,000000FF), ref: 00CA8DF8
??0QBrush@@QAE@ABVQColor@@W4BrushStyle@Qt@@@Z.QT5GUI(?,00000001), ref: 00CA8E03
?addEllipse@QGraphicsScene@@QAEPAVQGraphicsEllipseItem@@ABVQRectF@@ABVQPen@@ABVQBrush@@@Z.QT5WIDGETS(?,?,?), ref: 00CA8E1C
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CB9364,00000000), ref: 00CA8E35
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CB9364,00000000), ref: 00CA8E49

Part of subcall function 00CA8FB0: new.LIBCMT ref: 00CA8FFC
Part of subcall function 00CA8FB0: ??0QGraphicsTextItem@@QAE@PAVQGraphicsItem@@@Z.QT5WIDGETS(00000000,6BC2A210), ref: 00CA9017
Part of subcall function 00CA8FB0: new.LIBCMT ref: 00CA902F
Part of subcall function 00CA8FB0: ??0QGraphicsTextItem@@QAE@PAVQGraphicsItem@@@Z.QT5WIDGETS(00000000), ref: 00CA9044
Part of subcall function 00CA8FB0: new.LIBCMT ref: 00CA905C
Part of subcall function 00CA8FB0: ??0QGraphicsTextItem@@QAE@PAVQGraphicsItem@@@Z.QT5WIDGETS(00000000), ref: 00CA9071
Part of subcall function 00CA8FB0: ?clear@QGraphicsScene@@QAEXXZ.QT5WIDGETS ref: 00CA908D
Part of subcall function 00CA8FB0: ?sceneRect@QGraphicsScene@@QBE?AVQRectF@@XZ.QT5WIDGETS(?), ref: 00CA90A0
Part of subcall function 00CA8FB0: ?width@QRectF@@QBENXZ.QT5CORE ref: 00CA90A4
Part of subcall function 00CA8FB0: ?sceneRect@QGraphicsScene@@QBE?AVQRectF@@XZ.QT5WIDGETS(?), ref: 00CA90BD
Part of subcall function 00CA8FB0: ?width@QRectF@@QBENXZ.QT5CORE ref: 00CA90C1
Part of subcall function 00CA8FB0: ?sceneRect@QGraphicsScene@@QBE?AVQRectF@@XZ.QT5WIDGETS(?), ref: 00CA90DA
Part of subcall function 00CA8FB0: ?width@QRectF@@QBENXZ.QT5CORE ref: 00CA90DE

?sceneRect@QGraphicsScene@@QBE?AVQRectF@@XZ.QT5WIDGETS(?,00000001), ref: 00CA8E67
?fitInView@QGraphicsView@@QAEXABVQRectF@@W4AspectRatioMode@Qt@@@Z.QT5WIDGETS(00000000), ref: 00CA8E6F
??1QBrush@@QAE@XZ.QT5GUI ref: 00CA8E78
??1QPen@@QAE@XZ.QT5GUI ref: 00CA8E81

Strings

jng, xrefs: 00CA8BB9

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Graphics$Rect$Scene@@$?set$Rect@String@@$?scene?width@Size$Item@@$Item@@@Policy@@TextWidget@@$?from$Color@@Name@Object@@Pen@@View@@$ArrayAscii_helper@Brush@@Data@HeightObjectPolicy@Qt@@@Rgb@Stretch@String@@@TypedUtf8@Width@$?add?clear@?fit?has?height@?object?resize@?sizeAspectBrushBrush@@@Color@@@Concurrency::cancel_current_taskControlEllipseEllipse@Flags@HorizontalMode@Object@@@Policy@0@0Policy@@@Qt@@@@@RatioSceneScene@Scene@@@Style@Type@Type@0@@VerticalView@Widget@@@Window_callnewhmalloc
String ID: jng
API String ID: 4031237801-1186463058
Opcode ID: d2f4caf1bbde007cc25eee66fe90fd6ac12592adce29abf8ee59faeda5276493
Instruction ID: aaa2227bc34a6505762811e0aac0f48426b515577d41edc89cc9f208a52b3368
Opcode Fuzzy Hash: d2f4caf1bbde007cc25eee66fe90fd6ac12592adce29abf8ee59faeda5276493
Instruction Fuzzy Hash: CF919371900249DFCB04EFA8DC89B9EBBB8FF18714F104259F946AB390DB749548CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00C79680 Relevance: 61.4, APIs: 21, Strings: 14, Instructions: 198COMMON

Download Yara Rule

APIs

??0QWidget@@QAE@PAV0@V?$QFlags@W4WindowType@Qt@@@@@Z.QT5WIDGETS(00C6D091,00000000,676E6AEE,6B9DED70,6BB0CEB0,6B9DEE70,00000000,00000000,00CB02A1,000000FF,?,00C6D091,00000000), ref: 00C796B0
new.LIBCMT ref: 00C796CC

Part of subcall function 00CAC0B7: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0DE

Part of subcall function 00C7F430: ?objectName@QObject@@QBE?AVQString@@XZ.QT5CORE(6BB0CEB0,676E6AEE,6B9DED70,6BB0CEB0,00000000,000000FF,?,00C79704,00000000), ref: 00C7F466
Part of subcall function 00C7F430: ??1QString@@QAE@XZ.QT5CORE(?,00C79704,00000000), ref: 00C7F474
Part of subcall function 00C7F430: ?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,DatabaseFormWidget,000000FF,?,00C79704,00000000), ref: 00C7F489
Part of subcall function 00C7F430: ?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C7F498
Part of subcall function 00C7F430: ??1QString@@QAE@XZ.QT5CORE ref: 00C7F4A8
Part of subcall function 00C7F430: ?resize@QWidget@@QAEXHH@Z.QT5WIDGETS(000002BE,00000239,?,00C79704,00000000), ref: 00C7F4BA
Part of subcall function 00C7F430: new.LIBCMT ref: 00C7F4C2
Part of subcall function 00C7F430: ??0QVBoxLayout@@QAE@PAVQWidget@@@Z.QT5WIDGETS(00C79704,?,?,?,00C79704), ref: 00C7F4D9
Part of subcall function 00C7F430: ?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(000000FF,verticalLayout_2,000000FF,?,?,?,00C79704), ref: 00C7F500
Part of subcall function 00C7F430: ?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000,?,?,?,?,?,?,00C79704), ref: 00C7F513
Part of subcall function 00C7F430: ??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,00C79704), ref: 00C7F523
Part of subcall function 00C7F430: new.LIBCMT ref: 00C7F52B
Part of subcall function 00C7F430: ??0QVBoxLayout@@QAE@XZ.QT5WIDGETS(?,?,?,?,?,?,?,00C79704), ref: 00C7F541
Part of subcall function 00C7F430: ?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,verticalLayout,000000FF,?,?,?,?,?,?,?,00C79704), ref: 00C7F569
Part of subcall function 00C7F430: ?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000,?,?,?,?,?,?,?,?,?,?,00C79704), ref: 00C7F57D
Part of subcall function 00C7F430: ??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,00C79704), ref: 00C7F58D
Part of subcall function 00C7F430: new.LIBCMT ref: 00C7F595

?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(00000000,?,2clicked(bool),00000000,1clearSearchClick(),00000000,00000000), ref: 00C79721
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C7972F
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2clicked(bool),00000000,1deleteClick(),00000000), ref: 00C79748
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C79750
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2clicked(bool),00000000,1selectTestClick(),00000000), ref: 00C79769
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C79771
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2itemSelectionChanged(),00000000,1selectionChanged(),00000000), ref: 00C7978A
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C79792
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2textChanged(QString),00000000,1displaySearchResults(),00000000), ref: 00C797AB
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C797B3
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2currentIndexChanged(int),00000000,1displaySearchResults(),00000000), ref: 00C797CC
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C797D4
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2currentIndexChanged(int),00000000,1displaySearchResults(),00000000), ref: 00C797ED
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C797F5
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2doubleClicked(QModelIndex),00000000,1doubleClick(),00000000), ref: 00C7980E
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C79816
?horizontalHeader@QTableView@@QBEPAVQHeaderView@@XZ.QT5WIDGETS(2sectionClicked(int),00000000,1columnClicked(int),00000000), ref: 00C7982B
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,00000000), ref: 00C79836
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C7983E

Part of subcall function 00C7BA50: ?setAlternatingRowColors@QAbstractItemView@@QAEX_N@Z.QT5WIDGETS(00000001,676E6AEE,6B62DA60,6B62B6F0,00000000), ref: 00C7BA92
Part of subcall function 00C7BA50: ?verticalHeader@QTableView@@QBEPAVQHeaderView@@XZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00C7BA9E
Part of subcall function 00C7BA50: ?hide@QWidget@@QAEXXZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00C7BAA6
Part of subcall function 00C7BA50: ??0QVariant@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00C7BAAF
Part of subcall function 00C7BA50: ?count@QComboBox@@QBEHXZ.QT5WIDGETS ref: 00C7BAE2
Part of subcall function 00C7BA50: ??0QIcon@@QAE@XZ.QT5GUI ref: 00C7BAED
Part of subcall function 00C7BA50: ?insertItem@QComboBox@@QAEXHABVQIcon@@ABVQString@@ABVQVariant@@@Z.QT5WIDGETS(00000000,00000000,00000000,?), ref: 00C7BAFF
Part of subcall function 00C7BA50: ??1QIcon@@QAE@XZ.QT5GUI ref: 00C7BB08
Part of subcall function 00C7BA50: ??1QString@@QAE@XZ.QT5CORE ref: 00C7BB11
Part of subcall function 00C7BA50: ??1QVariant@@QAE@XZ.QT5CORE ref: 00C7BB1A
Part of subcall function 00C7BA50: ??0QVariant@@QAE@XZ.QT5CORE ref: 00C7BB23
Part of subcall function 00C7BA50: ?count@QComboBox@@QBEHXZ.QT5WIDGETS ref: 00C7BB59
Part of subcall function 00C7BA50: ??0QIcon@@QAE@XZ.QT5GUI ref: 00C7BB64
Part of subcall function 00C7BA50: ?insertItem@QComboBox@@QAEXHABVQIcon@@ABVQString@@ABVQVariant@@@Z.QT5WIDGETS(00000000,00000000,00000000,?), ref: 00C7BB76
Part of subcall function 00C7BA50: ??1QIcon@@QAE@XZ.QT5GUI ref: 00C7BB7F
Part of subcall function 00C7BA50: ??1QString@@QAE@XZ.QT5CORE ref: 00C7BB88
Part of subcall function 00C7BA50: ??1QVariant@@QAE@XZ.QT5CORE ref: 00C7BB91
Part of subcall function 00C7BA50: ??0QVariant@@QAE@XZ.QT5CORE ref: 00C7BB9A

Strings

2clicked(bool), xrefs: 00C79715, 00C7973C, 00C7975D
jng, xrefs: 00C79695
1selectTestClick(), xrefs: 00C79757
2currentIndexChanged(int), xrefs: 00C797C0, 00C797E1
2textChanged(QString), xrefs: 00C7979C
2sectionClicked(int), xrefs: 00C79826
2doubleClicked(QModelIndex), xrefs: 00C79802
1selectionChanged(), xrefs: 00C79778
1displaySearchResults(), xrefs: 00C79796, 00C797BA, 00C797DB
1columnClicked(int), xrefs: 00C7981D
2itemSelectionChanged(), xrefs: 00C7977E
1clearSearchClick(), xrefs: 00C7970F
1deleteClick(), xrefs: 00C79736
1doubleClick(), xrefs: 00C797FC

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Object@@$Connection@Meta$String@@$Type@$?connect@ConnectionQt@@@$Icon@@$Variant@@View@@$?setBox@@ComboName@$?fromObjectString@@@Utf8@Widget@@$?count@?insertHeaderHeader@Item@Layout@@TableVariant@@@$?hide@?horizontal?object?resize@?verticalAbstractAlternatingColors@Flags@ItemQt@@@@@Widget@@@Windowmalloc
String ID: 1clearSearchClick()$1columnClicked(int)$1deleteClick()$1displaySearchResults()$1doubleClick()$1selectTestClick()$1selectionChanged()$2clicked(bool)$2currentIndexChanged(int)$2doubleClicked(QModelIndex)$2itemSelectionChanged()$2sectionClicked(int)$2textChanged(QString)$jng
API String ID: 956217893-3776237475
Opcode ID: 7544a4b80666d07798ef7f8d08c78d1be5806d985f72dc5e6907ac7b30d5c046
Instruction ID: 4613c1a80e5dd37b1d8223ae3e30b6f4d4679f9d7ee5089e1f9ffbf2ec40a43d
Opcode Fuzzy Hash: 7544a4b80666d07798ef7f8d08c78d1be5806d985f72dc5e6907ac7b30d5c046
Instruction Fuzzy Hash: F0616E71640208ABDF04DF68CCC2FDA3BA8EF58754F014266F9089B291DB71EA56CBD1

Uniqueness

Uniqueness Score: -1.00%

Function 00C64520 Relevance: 59.7, APIs: 31, Strings: 3, Instructions: 190COMMON

Download Yara Rule

APIs

??0QString@@QAE@XZ.QT5CORE(676E6AEE), ref: 00C6454D
??0QString@@QAE@XZ.QT5CORE ref: 00C6455F
??0QString@@QAE@XZ.QT5CORE ref: 00C6456A
??0QFileDialog@@QAE@PAVQWidget@@ABVQString@@11@Z.QT5WIDGETS(00000000,00000000,00000000,00000000), ref: 00C6457C
??1QString@@QAE@XZ.QT5CORE ref: 00C64585
??1QString@@QAE@XZ.QT5CORE ref: 00C6458E
??1QString@@QAE@XZ.QT5CORE ref: 00C64597
??0QString@@QAE@XZ.QT5CORE ref: 00C645A0
??0QString@@QAE@XZ.QT5CORE ref: 00C645AB

Part of subcall function 00C6D860: ?tr@QMetaObject@@QBE?AVQString@@PBD0H@Z.QT5CORE(?,?,?,?,?,00C61B0A,?,Save,00000000,000000FF), ref: 00C6D87E

?getSaveFileName@QFileDialog@@SA?AVQString@@PAVQWidget@@ABV2@11PAV2@V?$QFlags@W4Option@QFileDialog@@@@@Z.QT5WIDGETS(?,?,00000000,00000000,00000000,00000000,00000000,?,Save File,00000000,000000FF), ref: 00C645D9
??1QString@@QAE@XZ.QT5CORE ref: 00C645E5
??1QString@@QAE@XZ.QT5CORE ref: 00C645EE
??1QString@@QAE@XZ.QT5CORE ref: 00C645FB

Part of subcall function 00C623D0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00CB35BE), ref: 00C62405
Part of subcall function 00C623D0: ?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(000000FF,00000000,000000FF), ref: 00C62422
Part of subcall function 00C623D0: ?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE(00000000), ref: 00C62435
Part of subcall function 00C623D0: ??1QString@@QAE@XZ.QT5CORE ref: 00C6243E

??0QFile@@QAE@ABVQString@@@Z.QT5CORE(00000000), ref: 00C6461E
??1QString@@QAE@XZ.QT5CORE ref: 00C6462B
?open@QFile@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z.QT5CORE ref: 00C6463D
??0QTextStream@@QAE@PAVQIODevice@@@Z.QT5CORE(?), ref: 00C64652

Part of subcall function 00C7AD80: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(First,Middle,Last,Reference,DOB,Date,Time (mins),Comments,Gender,Experience,Illumination,Industry,JobFunction,Location,Serial Number,TES,Cap Order,00000092,676E6AEE,00000000,00000000,?,?,?,?,?,?,?,00CB079D,000000FF), ref: 00C7ADD8
Part of subcall function 00C7AD80: ??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,00CB079D,000000FF), ref: 00C7ADFD
Part of subcall function 00C7AD80: ?size@QListData@@QBEHXZ.QT5CORE(?,?,?,?,?,?,?,?,00CB079D,000000FF), ref: 00C7AE08
Part of subcall function 00C7AD80: ??0QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,00CB079D,000000FF), ref: 00C7AE19
Part of subcall function 00C7AD80: ?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(00000000,00000011,?,?,?,?,?,?,?,?,?,00CB079D,000000FF), ref: 00C7AE33
Part of subcall function 00C7AD80: ?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS(?,?,?,?,?,?,?,?,00CB079D,000000FF), ref: 00C7AE3B
Part of subcall function 00C7AD80: ?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(00000000,00000001,?,?,?,?,?,?,?,?,?,00CB079D,000000FF), ref: 00C7AE52
Part of subcall function 00C7AD80: ?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS(?,?,?,?,?,?,?,?,00CB079D,000000FF), ref: 00C7AE5A
Part of subcall function 00C7AD80: ?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(00000000,00000002,?,?,?,?,?,?,?,?,?,00CB079D,000000FF), ref: 00C7AE71
Part of subcall function 00C7AD80: ?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS(?,?,?,?,?,?,?,?,00CB079D,000000FF), ref: 00C7AE79
Part of subcall function 00C7AD80: ?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(00000000,00000003,?,?,?,?,?,?,?,?,?,00CB079D,000000FF), ref: 00C7AE90
Part of subcall function 00C7AD80: ?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS(?,?,?,?,?,?,?,?,00CB079D,000000FF), ref: 00C7AE98
Part of subcall function 00C7AD80: ?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(00000000,00000004,?,?,?,?,?,?,?,?,?,00CB079D,000000FF), ref: 00C7AEAF
Part of subcall function 00C7AD80: ?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS(?,?,?,?,?,?,?,?,00CB079D,000000FF), ref: 00C7AEB7

?size@QListData@@QBEHXZ.QT5CORE(?), ref: 00C64677
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C646AD
??0QString@@QAE@ABV0@@Z.QT5CORE(00000000), ref: 00C646B7
??6QTextStream@@QAEAAV0@ABVQString@@@Z.QT5CORE(?,00CBA9A0), ref: 00C646CD
??6QTextStream@@QAEAAV0@PBD@Z.QT5CORE ref: 00C646D1
??1QString@@QAE@XZ.QT5CORE ref: 00C646DA
?size@QListData@@QBEHXZ.QT5CORE ref: 00C646E4

Part of subcall function 00C63AC0: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(676E6AEE,00CB3CFD,00000000,?,00C910DF,00000008), ref: 00C63AF0
Part of subcall function 00C63AC0: ?detach@QListData@@QAEPAUData@1@H@Z.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,6B5136D0,?,?,00CB3CFD), ref: 00C63AFD
Part of subcall function 00C63AC0: ?end@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C63B12
Part of subcall function 00C63AC0: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C63B1B
Part of subcall function 00C63AC0: ??1QString@@QAE@XZ.QT5CORE(00000000), ref: 00C63B65
Part of subcall function 00C63AC0: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(00000000,00000000), ref: 00C63B70

??1QString@@QAE@XZ.QT5CORE ref: 00C64735
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?), ref: 00C64740
??1QTextStream@@UAE@XZ.QT5CORE ref: 00C64750
?close@QFileDevice@@UAEXXZ.QT5CORE ref: 00C64759
??1QFile@@UAE@XZ.QT5CORE ref: 00C64762
??1QString@@QAE@XZ.QT5CORE ref: 00C6476B
??1QFileDialog@@UAE@XZ.QT5WIDGETS ref: 00C64774

Strings

jng, xrefs: 00C64537
Save File, xrefs: 00C645BE
.txt, xrefs: 00C64601

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Table$Data@@Item@@ListWidget$Widget@@$File$?item@?text@$Stream@@Text$?size@Dialog@@File@@$?begin@?dispose@?fromData@1@@Flags@String@@@V0@@$?append@?at@?close@?detach@?end@?get?open@?tr@ArrayAscii_helper@Data@Data@1@Device@@Device@@@Device@@@@@Dialog@@@@@Flag@MetaModeName@Object@@OpenOption@SaveString@@11@TypedUtf8@V1@@V2@11
String ID: .txt$Save File$jng
API String ID: 2023491999-2498264982
Opcode ID: d86793c8c759984acddb5d1b98d377e0516b8efdbfe87e9477da10ba2cd0873e
Instruction ID: 738b9f14c548d604a2f8548d90d830e8510595c44af87214172524c4598134c8
Opcode Fuzzy Hash: d86793c8c759984acddb5d1b98d377e0516b8efdbfe87e9477da10ba2cd0873e
Instruction Fuzzy Hash: D771197590014ADFCF15EBA4EC98BEEBB78FF15315F144269E412A32A0DF306A09DB61

Uniqueness

Uniqueness Score: -1.00%

Function 00C63510 Relevance: 59.7, APIs: 32, Strings: 2, Instructions: 166clipboardCOMMON

Download Yara Rule

APIs

??0QBuffer@@QAE@PAVQObject@@@Z.QT5CORE(00000000,676E6AEE), ref: 00C6356B
??0QSvgGenerator@@QAE@XZ.QT5SVG ref: 00C6357B
?setOutputDevice@QSvgGenerator@@QAEXPAVQIODevice@@@Z.QT5SVG(?), ref: 00C6358C
??0QSize@@QAE@HH@Z.QT5CORE(000000C8,000000C8), ref: 00C6359F
?setSize@QSvgGenerator@@QAEXABVQSize@@@Z.QT5SVG(00000000), ref: 00C635A9
??0QRect@@QAE@HHHH@Z.QT5CORE(00000000,00000000,000000C8,000000C8), ref: 00C635C0
?setViewBox@QSvgGenerator@@QAEXABVQRect@@@Z.QT5SVG(00000000), ref: 00C635CA
??0QPainter@@QAE@XZ.QT5GUI ref: 00C635D3
?begin@QPainter@@QAE_NPAVQPaintDevice@@@Z.QT5GUI(?), ref: 00C635E4
??0QGraphicsScene@@QAE@PAVQObject@@@Z.QT5WIDGETS(00000000), ref: 00C635EF
??0QColor@@QAE@W4GlobalColor@Qt@@@Z.QT5GUI(00000007), ref: 00C635FE
??0QBrush@@QAE@W4GlobalColor@Qt@@W4BrushStyle@2@@Z.QT5GUI(00000002,00000001), ref: 00C6360B
??0QPen@@QAE@ABVQColor@@@Z.QT5GUI(?), ref: 00C6361E
?addRect@QGraphicsScene@@QAEPAVQGraphicsRectItem@@NNNNABVQPen@@ABVQBrush@@@Z.QT5WIDGETS ref: 00C63643
??1QPen@@QAE@XZ.QT5GUI ref: 00C6364C
??1QBrush@@QAE@XZ.QT5GUI ref: 00C63659
??0QRectF@@QAE@XZ.QT5CORE(00000001), ref: 00C63664
??0QRectF@@QAE@XZ.QT5CORE(00000000), ref: 00C6366E
?render@QGraphicsScene@@QAEXPAVQPainter@@ABVQRectF@@1W4AspectRatioMode@Qt@@@Z.QT5WIDGETS(?,00000000), ref: 00C6367B
?end@QPainter@@QAE_NXZ.QT5GUI ref: 00C63684
new.LIBCMT ref: 00C6369A
??0QMimeData@@QAE@XZ.QT5CORE ref: 00C636AD
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(image/svg+xml,0000000D), ref: 00C636C7
?buffer@QBuffer@@QAEAAVQByteArray@@XZ.QT5CORE ref: 00C636DD
?setData@QMimeData@@QAEXABVQString@@ABVQByteArray@@@Z.QT5CORE(?,00000000), ref: 00C636EA
??1QString@@QAE@XZ.QT5CORE ref: 00C636F7
?clipboard@QGuiApplication@@SAPAVQClipboard@@XZ.QT5GUI(?,00000000), ref: 00C63702
?setMimeData@QClipboard@@QAEXPAVQMimeData@@W4Mode@1@@Z.QT5GUI ref: 00C6370A
??1QGraphicsScene@@UAE@XZ.QT5WIDGETS ref: 00C63713
??1QPainter@@QAE@XZ.QT5GUI ref: 00C6371C
??1QSvgGenerator@@UAE@XZ.QT5SVG ref: 00C63725
??1QBuffer@@UAE@XZ.QT5CORE ref: 00C6372E

Strings

image/svg+xml, xrefs: 00C636BB
jng, xrefs: 00C63524

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: ?setGenerator@@GraphicsPainter@@$MimeRectScene@@$Buffer@@Data@Data@@Pen@@String@@$Brush@@ByteClipboard@@Color@Device@@@GlobalObject@@@Qt@@@$?add?begin@?buffer@?clipboard@?end@?from?render@Application@@ArrayArray@@Array@@@Ascii_helper@AspectBox@BrushBrush@@@Color@@Color@@@Device@F@@1Item@@Mode@Mode@1@@OutputPaintQt@@RatioRect@Rect@@Rect@@@Size@Size@@Size@@@Style@2@@TypedView
String ID: image/svg+xml$jng
API String ID: 745073767-912825287
Opcode ID: 595b3ca17a287f260234c4364322e18944941ab61c19894561547244313c3873
Instruction ID: b6c27821fb41f36440776cad73e847c1f37ffb56c6afd4d76d9cd6d6b73a7c84
Opcode Fuzzy Hash: 595b3ca17a287f260234c4364322e18944941ab61c19894561547244313c3873
Instruction Fuzzy Hash: C771257190024AEFDB04DBA4ED59BEDBBB8FF14705F004269F506A72A0DF702A49CB61

Uniqueness

Uniqueness Score: -1.00%

Function 00C9F8E0 Relevance: 56.2, APIs: 29, Strings: 3, Instructions: 206COMMON

Download Yara Rule

APIs

?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS(676E6AEE), ref: 00C9F919
??4QString@@QAEAAV0@PBD@Z.QT5CORE(Kinnear), ref: 00C9F92E
?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS ref: 00C9F93D
?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS ref: 00C9F94B
?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS ref: 00C9F959
?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS ref: 00C9F967
?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS ref: 00C9F975
?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS ref: 00C9F983
?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS ref: 00C9F98E
?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS ref: 00C9F99C
?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS ref: 00C9F9AA
?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS ref: 00C9F9B8
?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS ref: 00C9F9C6
?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS ref: 00C9F9D1
?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS ref: 00C9F9DF
?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS ref: 00C9F9ED
?currentIndex@QComboBox@@QBEHXZ.QT5WIDGETS ref: 00C9FA01
?currentIndex@QComboBox@@QBEHXZ.QT5WIDGETS ref: 00C9FA0F
?currentIndex@QComboBox@@QBEHXZ.QT5WIDGETS ref: 00C9FA1D
?currentIndex@QComboBox@@QBEHXZ.QT5WIDGETS ref: 00C9FA2B
?currentIndex@QComboBox@@QBEHXZ.QT5WIDGETS ref: 00C9FA39
?currentIndex@QComboBox@@QBEHXZ.QT5WIDGETS ref: 00C9FA47
?toPlainText@QPlainTextEdit@@QBE?AVQString@@XZ.QT5WIDGETS(?), ref: 00C9FA59
??4QString@@QAEAAV0@$$QAV0@@Z.QT5CORE(00000000), ref: 00C9FA65
??1QString@@QAE@XZ.QT5CORE ref: 00C9FA6E
?currentIndex@QComboBox@@QBEHXZ.QT5WIDGETS ref: 00C9FA7D
??8QString@@QBE_NPBD@Z.QT5CORE(Standard), ref: 00C9FA91
??0QString@@QAE@ABV0@@Z.QT5CORE(?), ref: 00C9FAA5

Part of subcall function 00CA8750: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C9FACA,?,00C9FACA), ref: 00CA8760

Part of subcall function 00C8F560: new.LIBCMT ref: 00C8F58E

Part of subcall function 00C93320: ??0QString@@QAE@XZ.QT5CORE(676E6AEE), ref: 00C93357
Part of subcall function 00C93320: ?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A), ref: 00C9336A
Part of subcall function 00C93320: ?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z.QT5SQL(?,00000000,00000001), ref: 00C9337E
Part of subcall function 00C93320: ??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL ref: 00C9338A
Part of subcall function 00C93320: ??1QString@@QAE@XZ.QT5CORE ref: 00C93397
Part of subcall function 00C93320: ??4QString@@QAEAAV0@PBD@Z.QT5CORE(UPDATE settings SET scoreMode = :scoreMode, testGui = :testGui, testReport = :testReport, tesGui = :tesGui, tesReport = :tesReport,), ref: 00C933A5
Part of subcall function 00C93320: ?append@QString@@QAEAAV1@PBD@Z.QT5CORE(sqrtTesGui = :sqrtTesGui, sqrtTesReport = :sqrtTesReport, vingrysGui = :vingrysGui, vingrysReport = :vingrysReport,), ref: 00C933B3
Part of subcall function 00C93320: ?append@QString@@QAEAAV1@PBD@Z.QT5CORE(classgui = :classGui, classReport = :classReport, percentFirstGui = :percentFirstGui, percentFirstReport = :percentFirstReport,), ref: 00C933C1
Part of subcall function 00C93320: ?append@QString@@QAEAAV1@PBD@Z.QT5CORE(percentSomeGui = :percentSomeGui, percentSomeReport = :percentSomeReport, percentExpGui = :percentExpGui, percentExpReport = :percentExpReport,), ref: 00C933CF
Part of subcall function 00C93320: ?append@QString@@QAEAAV1@PBD@Z.QT5CORE(language = :language, illumination = :illumination, location = :location, industry = :industry, job = :job, experience = :experience, serialNum = :serialNum,), ref: 00C933DD
Part of subcall function 00C93320: ?append@QString@@QAEAAV1@PBD@Z.QT5CORE(footerImgPath = :footerImgPath, footerText = :footerText), ref: 00C933EB
Part of subcall function 00C93320: ?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C933F8
Part of subcall function 00C93320: ??0QVariant@@QAE@H@Z.QT5CORE(?), ref: 00C9340A
Part of subcall function 00C93320: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:scoreMode,0000000A), ref: 00C9341D
Part of subcall function 00C93320: ?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C9343D
Part of subcall function 00C93320: ??1QString@@QAE@XZ.QT5CORE ref: 00C93446
Part of subcall function 00C93320: ??1QVariant@@QAE@XZ.QT5CORE ref: 00C93459
Part of subcall function 00C93320: ??0QVariant@@QAE@H@Z.QT5CORE(?), ref: 00C93461
Part of subcall function 00C93320: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:testGui,00000008), ref: 00C9346E

Part of subcall function 00CAAE50: ?activate@QMetaObject@@SAXPAVQObject@@PBU1@HPAPAX@Z.QT5CORE(?,00F370D8,00000001,00000000,00C9C748), ref: 00CAAE5A

Part of subcall function 00CAAE10: ?activate@QMetaObject@@SAXPAVQObject@@PBU1@HPAPAX@Z.QT5CORE(?,00F370D8,00000000,00000000,00C9FB55), ref: 00CAAE1A

?close@QWidget@@QAE_NXZ.QT5WIDGETS ref: 00C9FB57

Strings

Standard, xrefs: 00C9F922, 00C9FA89
jng, xrefs: 00C9F8F7
Kinnear, xrefs: 00C9F929

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$AbstractButton@@Checked@$?currentBox@@ComboIndex@$?append@$Object@@Variant@@$Query@@V0@@$?activate@?fromArrayAscii_helper@Data@MetaPlainTyped$?bind?close@?database@?number@?prepare@Database@@Database@@@Edit@@Flag@Flags@ParamSql@@@@@String@@@String@@_TextText@TypeV0@$$Value@Widget@@
String ID: Kinnear$Standard$jng
API String ID: 499340925-2750802801
Opcode ID: fb962cf5056663ea4da7914db15245a3e469ce81f03ed4016208c01f728842c8
Instruction ID: 4d628e15d658ae6dbf2db5667961d6fcb381df7a62ad254e61bf111ba984f45d
Opcode Fuzzy Hash: fb962cf5056663ea4da7914db15245a3e469ce81f03ed4016208c01f728842c8
Instruction Fuzzy Hash: 679182716042509FCB59DF68C8D1AAA7FB9AF5C210F1401AEE8468B397CE35ED45CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 00CA9580 Relevance: 56.1, APIs: 28, Strings: 4, Instructions: 143COMMON

Download Yara Rule

APIs

?objectName@QObject@@QBE?AVQString@@XZ.QT5CORE(00CB742A,676E6AEE,6BBFC1F0,00000000,00000000,00CB742A,000000FF,?,00CA8CA8,00000000), ref: 00CA95B3
??1QString@@QAE@XZ.QT5CORE ref: 00CA95C1
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,analysisDisplay,000000FF), ref: 00CA95D6
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00CA95E5
??1QString@@QAE@XZ.QT5CORE ref: 00CA95F5
?resize@QWidget@@QAEXHH@Z.QT5WIDGETS(00000064,00000064), ref: 00CA9601
??0QSizePolicy@@QAE@W4Policy@0@0W4ControlType@0@@Z.QT5WIDGETS(00000007,00000007,00000001), ref: 00CA9610
?setHorizontalStretch@QSizePolicy@@QAEXH@Z.QT5WIDGETS(00000000), ref: 00CA961B
?setVerticalStretch@QSizePolicy@@QAEXH@Z.QT5WIDGETS(00000000), ref: 00CA9626
?sizePolicy@QWidget@@QBE?AVQSizePolicy@@XZ.QT5WIDGETS(?), ref: 00CA9632
?hasHeightForWidth@QSizePolicy@@QBE_NXZ.QT5WIDGETS ref: 00CA963A
?setHeightForWidth@QSizePolicy@@QAEX_N@Z.QT5WIDGETS(?), ref: 00CA9647
?setSizePolicy@QWidget@@QAEXVQSizePolicy@@@Z.QT5WIDGETS(?), ref: 00CA9652
new.LIBCMT ref: 00CA965A
??0QGraphicsView@@QAE@PAVQWidget@@@Z.QT5WIDGETS(00CA8CA8), ref: 00CA9671
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,graphicsView,000000FF), ref: 00CA969B
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00CA96B1
??1QString@@QAE@XZ.QT5CORE ref: 00CA96C1
??0QRect@@QAE@HHHH@Z.QT5CORE(00000000,00000000,00000064,00000064), ref: 00CA96D2
?setGeometry@QWidget@@QAEXABVQRect@@@Z.QT5WIDGETS(00000000), ref: 00CA96DB
??0QSize@@QAE@HH@Z.QT5CORE(00000001,00000001), ref: 00CA96E8
?setSizeIncrement@QWidget@@QAEXABVQSize@@@Z.QT5WIDGETS(00000000), ref: 00CA96F1
?setVerticalScrollBarPolicy@QAbstractScrollArea@@QAEXW4ScrollBarPolicy@Qt@@@Z.QT5WIDGETS(00000001), ref: 00CA96FB
?setHorizontalScrollBarPolicy@QAbstractScrollArea@@QAEXW4ScrollBarPolicy@Qt@@@Z.QT5WIDGETS(00000001), ref: 00CA9705
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,analysisDisplay,Form,00000000,000000FF), ref: 00CA971D
?setWindowTitle@QWidget@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00CA9730
??1QString@@QAE@XZ.QT5CORE ref: 00CA9740
?connectSlotsByName@QMetaObject@@SAXPAVQObject@@@Z.QT5CORE(00CA8CA8), ref: 00CA9747

Strings

jng, xrefs: 00CA9596
Form, xrefs: 00CA970F
analysisDisplay, xrefs: 00CA95D0, 00CA9717
graphicsView, xrefs: 00CA968E

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: ?set$Size$String@@$Policy@Policy@@ScrollWidget@@$Name@Object@@$String@@@$?fromAbstractArea@@HeightHorizontalObjectQt@@@Stretch@Utf8@VerticalWidth@$?connect?has?object?resize@?size?translate@Application@@ControlCoreGeometry@GraphicsIncrement@MetaObject@@@Policy@0@0Policy@@@Rect@@Rect@@@Size@@Size@@@SlotsTitle@Type@0@@View@@Widget@@@Window
String ID: Form$analysisDisplay$graphicsView$jng
API String ID: 1062983978-3841822156
Opcode ID: 287b5edec6938f928848f1c153af4a1d42248df0f57205593f7cf26fc3042bc5
Instruction ID: d8d9816359cf8655699dbd680b4e87d6efbc51755960c852e921fb40a6d72ced
Opcode Fuzzy Hash: 287b5edec6938f928848f1c153af4a1d42248df0f57205593f7cf26fc3042bc5
Instruction Fuzzy Hash: 32514C71A0020AEFCB00DF98DC4DBAD7BB9FB48711F104219FA16A72E0DB715A09DB61

Uniqueness

Uniqueness Score: -1.00%

Function 00C9F5F0 Relevance: 54.4, APIs: 26, Strings: 5, Instructions: 189COMMON

Download Yara Rule

APIs

?setWindowModality@QWidget@@QAEXW4WindowModality@Qt@@@Z.QT5WIDGETS(00000001,676E6AEE,?,00000000,6BEAC180), ref: 00C9F61C
?setAlternatingRowColors@QAbstractItemView@@QAEX_N@Z.QT5WIDGETS(00000001,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00CB5FB3), ref: 00C9F62D
?verticalHeader@QTableView@@QBEPAVQHeaderView@@XZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00CB5FB3,000000FF), ref: 00C9F63C
?hide@QWidget@@QAEXXZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00CB5FB3,000000FF), ref: 00C9F644
?addButton@QButtonGroup@@QAEXPAVQAbstractButton@@H@Z.QT5WIDGETS(?,000000FF,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00C9F65E
?addButton@QButtonGroup@@QAEXPAVQAbstractButton@@H@Z.QT5WIDGETS(?,000000FF,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00C9F66E
?applicationDirPath@QCoreApplication@@SA?AVQString@@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00CB5FB3), ref: 00C9F67C

Part of subcall function 00C623D0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00CB35BE), ref: 00C62405
Part of subcall function 00C623D0: ?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(000000FF,00000000,000000FF), ref: 00C62422
Part of subcall function 00C623D0: ?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE(00000000), ref: 00C62435
Part of subcall function 00C623D0: ??1QString@@QAE@XZ.QT5CORE ref: 00C6243E

??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(00000000), ref: 00C9F6A7
??1QString@@QAE@XZ.QT5CORE ref: 00C9F6AC
??1QString@@QAE@XZ.QT5CORE ref: 00C9F6BC

Part of subcall function 00C8F560: new.LIBCMT ref: 00C8F58E

Part of subcall function 00C90AC0: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(SELECT * FROM settings,00000016,676E6AEE,6B5136D0,?,?), ref: 00C90B05
Part of subcall function 00C90AC0: ?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A), ref: 00C90B1E
Part of subcall function 00C90AC0: ?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z.QT5SQL(?,00000000,00000001), ref: 00C90B32
Part of subcall function 00C90AC0: ??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL ref: 00C90B3E
Part of subcall function 00C90AC0: ??1QString@@QAE@XZ.QT5CORE ref: 00C90B4B
Part of subcall function 00C90AC0: ?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(00000000), ref: 00C90B58
Part of subcall function 00C90AC0: ?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C90B61
Part of subcall function 00C90AC0: ?next@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C90B6A
Part of subcall function 00C90AC0: ?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000001), ref: 00C90B87
Part of subcall function 00C90AC0: ?toBool@QVariant@@QBE_NXZ.QT5CORE ref: 00C90B8F
Part of subcall function 00C90AC0: ??1QVariant@@QAE@XZ.QT5CORE ref: 00C90BA5
Part of subcall function 00C90AC0: ?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000002), ref: 00C90BB0
Part of subcall function 00C90AC0: ?toBool@QVariant@@QBE_NXZ.QT5CORE ref: 00C90BB8
Part of subcall function 00C90AC0: ??1QVariant@@QAE@XZ.QT5CORE ref: 00C90BC8
Part of subcall function 00C90AC0: ?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000003), ref: 00C90BD3
Part of subcall function 00C90AC0: ?toBool@QVariant@@QBE_NXZ.QT5CORE ref: 00C90BDB
Part of subcall function 00C90AC0: ??1QVariant@@QAE@XZ.QT5CORE ref: 00C90BEB
Part of subcall function 00C90AC0: ?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000004), ref: 00C90BF6

??4QString@@QAEAAV0@PBD@Z.QT5CORE(Standard,?), ref: 00C9F6EE
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C9F789
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?), ref: 00C9F791
?setCurrentIndex@QComboBox@@QAEXH@Z.QT5WIDGETS(?), ref: 00C9F79F
??0QString@@QAE@ABV0@@Z.QT5CORE(?), ref: 00C9F7A9
??0QFileInfo@@QAE@ABVQString@@@Z.QT5CORE(00000000), ref: 00C9F7BA
?exists@QFileInfo@@QBE_NXZ.QT5CORE ref: 00C9F7C7
?isFile@QFileInfo@@QBE_NXZ.QT5CORE ref: 00C9F7D4
??1QFileInfo@@QAE@XZ.QT5CORE ref: 00C9F7E1
??1QString@@QAE@XZ.QT5CORE ref: 00C9F7EE
??1QFileInfo@@QAE@XZ.QT5CORE ref: 00C9F7F9
??1QString@@QAE@XZ.QT5CORE ref: 00C9F806
??4QString@@QAEAAV0@PBD@Z.QT5CORE(:/Images/edit.png), ref: 00C9F813
??0QString@@QAE@ABV0@@Z.QT5CORE(?), ref: 00C9F81D

Part of subcall function 00CA8960: ??0QImage@@QAE@ABVQString@@PBD@Z.QT5GUI(00C9F831,00000000,676E6AEE,6B5136D0,?,?,?,?,00000000,00CB7252,000000FF,?,00C9F831), ref: 00CA8999
Part of subcall function 00CA8960: ??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(00C9F831,?,?,?,00000000,00CB7252,000000FF,?,00C9F831), ref: 00CA89AA
Part of subcall function 00CA8960: ?fromImage@QPixmap@@SA?AV1@ABVQImage@@V?$QFlags@W4ImageConversionFlag@Qt@@@@@Z.QT5GUI(?,?,?,?,?,?,00000000,00CB7252,000000FF,?,00C9F831), ref: 00CA89C1
Part of subcall function 00CA8960: ??4QPixmap@@QAEAAV0@$$QAV0@@Z.QT5GUI(00000000,?,?,?,?,?,?,00000000,00CB7252,000000FF,?,00C9F831), ref: 00CA89D0
Part of subcall function 00CA8960: ??1QPixmap@@UAE@XZ.QT5GUI(?,?,?,?,?,?,00000000,00CB7252,000000FF,?,00C9F831), ref: 00CA89D9
Part of subcall function 00CA8960: ?setScaledContents@QLabel@@QAEX_N@Z.QT5WIDGETS(00000001,?,?,?,?,?,?,00000000,00CB7252,000000FF,?,00C9F831), ref: 00CA89E6
Part of subcall function 00CA8960: ?setPixmap@QLabel@@QAEXABVQPixmap@@@Z.QT5WIDGETS(?,?,?,?,?,?,?,00000000,00CB7252,000000FF,?,00C9F831), ref: 00CA89F2
Part of subcall function 00CA8960: ??1QImage@@UAE@XZ.QT5GUI(?,?,?,?,?,?,00000000,00CB7252,000000FF,?,00C9F831), ref: 00CA89FB
Part of subcall function 00CA8960: ??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,00000000,00CB7252,000000FF,?,00C9F831), ref: 00CA8A04

??1QString@@QAE@XZ.QT5CORE ref: 00C9F849
??1QString@@QAE@XZ.QT5CORE ref: 00C9F852

Strings

:/Images/edit.png, xrefs: 00C9F80C
Standard, xrefs: 00C9F6E9
jng, xrefs: 00C9F607
Kinnear, xrefs: 00C9F6E2
/Images/edit.png, xrefs: 00C9F682

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Variant@@$Query@@V0@@$?setFileInfo@@$?value@$?fromAbstractBool@Image@@Pixmap@@View@@$?addButtonButton@Button@@Group@@Label@@Modality@String@@@Widget@@Window$?append@?application?database@?exec@?exists@?hide@?next@?number@?prepare@?verticalAlternatingApplication@@ArrayAscii_helper@Box@@Colors@ComboContents@ConversionCoreCurrentData@Database@@Database@@@File@Flag@Flags@HeaderHeader@ImageImage@Index@ItemPath@Pixmap@Pixmap@@@Qt@@@Qt@@@@@ScaledString@@_TableTypedUtf8@V0@$$V1@@
String ID: /Images/edit.png$:/Images/edit.png$Kinnear$Standard$jng
API String ID: 2605627514-3098334130
Opcode ID: b6a46f495d5258af54838637ffe5e7707afda69f73c4762340043de7db07f5f7
Instruction ID: ad284c93399576301c77c5cd269595358b65f6029bcea0bd0bd0224a62e60d31
Opcode Fuzzy Hash: b6a46f495d5258af54838637ffe5e7707afda69f73c4762340043de7db07f5f7
Instruction Fuzzy Hash: D8818375905288DFCF05DFA4D898BED7F78AF19310F1402A9E841A7397DA309A4ACF61

Uniqueness

Uniqueness Score: -1.00%

Function 00C63810 Relevance: 52.7, APIs: 25, Strings: 5, Instructions: 157windowCOMMON

Download Yara Rule

APIs

?setChecked@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(00000001), ref: 00C6381E

Part of subcall function 00C64250: ?currentIndex@QStackedWidget@@QBEHXZ.QT5WIDGETS(676E6AEE,00000000,000000FF,?,00C62F3B,676E6AEE), ref: 00C64281
Part of subcall function 00C64250: ??0QMessageBox@@QAE@PAVQWidget@@@Z.QT5WIDGETS(00000000,?,00C62F3B,676E6AEE), ref: 00C642AB
Part of subcall function 00C64250: ?setWindowTitle@QMessageBox@@QAEXABVQString@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,00C62F3B,676E6AEE), ref: 00C642D5
Part of subcall function 00C64250: ??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,00C62F3B,676E6AEE), ref: 00C642E2
Part of subcall function 00C64250: ?setText@QMessageBox@@QAEXABVQString@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,?,?,00C62F3B,676E6AEE), ref: 00C64305
Part of subcall function 00C64250: ??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,00C62F3B,676E6AEE), ref: 00C64312
Part of subcall function 00C64250: ?setInformativeText@QMessageBox@@QAEXABVQString@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00C62F3B), ref: 00C64335
Part of subcall function 00C64250: ??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00C62F3B,676E6AEE), ref: 00C64342
Part of subcall function 00C64250: ?setStandardButtons@QMessageBox@@QAEXV?$QFlags@W4StandardButton@QMessageBox@@@@@Z.QT5WIDGETS(00C00800,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00C62F3B), ref: 00C64350
Part of subcall function 00C64250: ?setDefaultButton@QMessageBox@@QAEXW4StandardButton@1@@Z.QT5WIDGETS(00000800,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00C62F3B), ref: 00C6435E
Part of subcall function 00C64250: ?exec@QDialog@@UAEHXZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00C62F3B,676E6AEE), ref: 00C64367
Part of subcall function 00C64250: ??1QMessageBox@@UAE@XZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00C62F3B,676E6AEE), ref: 00C64385

?setChecked@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(00000001,676E6AEE), ref: 00C6DA86
?setCurrentIndex@QStackedWidget@@QAEXH@Z.QT5WIDGETS(00000001,676E6AEE), ref: 00C6DAA9
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:/Images/add.png,00000010), ref: 00C6DAB6
??0QIcon@@QAE@ABVQString@@@Z.QT5GUI(?), ref: 00C6DAD6
?setIcon@QAbstractButton@@QAEXABVQIcon@@@Z.QT5WIDGETS(00000000), ref: 00C6DAEC
??1QIcon@@QAE@XZ.QT5GUI ref: 00C6DAF7
??1QString@@QAE@XZ.QT5CORE ref: 00C6DB03
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:/Images/view-selected.png,0000001A), ref: 00C6DB10
??0QIcon@@QAE@ABVQString@@@Z.QT5GUI(?), ref: 00C6DB2A
?setIcon@QAbstractButton@@QAEXABVQIcon@@@Z.QT5WIDGETS(00000000), ref: 00C6DB3D
??1QIcon@@QAE@XZ.QT5GUI ref: 00C6DB42
??1QString@@QAE@XZ.QT5CORE ref: 00C6DB4E
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:/Images/analysis.png,00000015), ref: 00C6DB5B
??0QIcon@@QAE@ABVQString@@@Z.QT5GUI(?), ref: 00C6DB75
?setIcon@QAbstractButton@@QAEXABVQIcon@@@Z.QT5WIDGETS(00000000), ref: 00C6DB88
??1QIcon@@QAE@XZ.QT5GUI ref: 00C6DB8D
??1QString@@QAE@XZ.QT5CORE ref: 00C6DB99
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:/Images/database.png,00000015), ref: 00C6DBA6
??0QIcon@@QAE@ABVQString@@@Z.QT5GUI(?), ref: 00C6DBC0
?setIcon@QAbstractButton@@QAEXABVQIcon@@@Z.QT5WIDGETS(00000000), ref: 00C6DBD3
??1QIcon@@QAE@XZ.QT5GUI ref: 00C6DBD8
??1QString@@QAE@XZ.QT5CORE ref: 00C6DBE4
?width@QWidget@@QBEHXZ.QT5WIDGETS ref: 00C6DBEC
?width@QWidget@@QBEHXZ.QT5WIDGETS(-00000001), ref: 00C6DC04

Strings

jng, xrefs: 00C6DA57
:/Images/database.png, xrefs: 00C6DBA1
:/Images/view-selected.png, xrefs: 00C6DB0B
:/Images/analysis.png, xrefs: 00C6DB56
:/Images/add.png, xrefs: 00C6DAB1

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: ?set$String@@$Icon@@Message$Box@@String@@@$AbstractButton@@$?fromArrayAscii_helper@Data@Icon@Icon@@@TypedWidget@@$Standard$?width@Button@Checked@Index@StackedText@$?current?exec@Box@@@@@Button@1@@Buttons@CurrentDefaultDialog@@Flags@InformativeTitle@Widget@@@Window
String ID: :/Images/add.png$:/Images/analysis.png$:/Images/database.png$:/Images/view-selected.png$jng
API String ID: 3816623429-168572454
Opcode ID: 27a37ee65546b8741ea807e784a5fcf590723c83551146e95e4db47c23478fbd
Instruction ID: 4454c3ae7a4c85efff513b59559aba594586057ad067052e11d79eca0db83350
Opcode Fuzzy Hash: 27a37ee65546b8741ea807e784a5fcf590723c83551146e95e4db47c23478fbd
Instruction Fuzzy Hash: 86514E71900209DFCB14EF94EC95BEEB7B9FB59314F100269D916A72D1DF316A09CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00C9A6B0 Relevance: 51.0, APIs: 27, Strings: 2, Instructions: 271COMMON

Download Yara Rule

APIs

??0QLineF@@QAE@ABVQLine@@@Z.QT5CORE(?,676E6AEE,6BC1BB50,6C017DB0,00000000), ref: 00C9A7A8
??0QPen@@QAE@XZ.QT5GUI ref: 00C9A7B1
?addLine@QGraphicsScene@@QAEPAVQGraphicsLineItem@@ABVQLineF@@ABVQPen@@@Z.QT5WIDGETS(?,00000000), ref: 00C9A7C9
??1QPen@@QAE@XZ.QT5GUI ref: 00C9A7D9
new.LIBCMT ref: 00C9A7E1
??0QGraphicsTextItem@@QAE@PAVQGraphicsItem@@@Z.QT5WIDGETS(00000000), ref: 00C9A7F9
?font@QGraphicsTextItem@@QBE?AVQFont@@XZ.QT5WIDGETS(?,?), ref: 00C9A82E
??0QFontMetrics@@QAE@ABVQFont@@@Z.QT5GUI(00000000), ref: 00C9A83F
??1QFontMetrics@@QAE@XZ.QT5GUI ref: 00C9A84C
?width@QFontMetrics@@QBEHABVQString@@H@Z.QT5GUI(00000000,000000FF), ref: 00C9A876
?height@QFontMetrics@@QBEHXZ.QT5GUI ref: 00C9A8A1
?setPos@QGraphicsItem@@QAEXABVQPointF@@@Z.QT5WIDGETS(?), ref: 00C9A8DE
?width@QFontMetrics@@QBEHABVQString@@H@Z.QT5GUI(00000000,000000FF), ref: 00C9A915
?height@QFontMetrics@@QBEHXZ.QT5GUI ref: 00C9A954
?setPos@QGraphicsItem@@QAEXABVQPointF@@@Z.QT5WIDGETS(?), ref: 00C9A988
??1QString@@QAE@XZ.QT5CORE ref: 00C9A995
?number@QString@@SA?AV1@HH@Z.QT5CORE(?,00000000,0000000A), ref: 00C9A9A2
?setPlainText@QGraphicsTextItem@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C9A9B3
??1QString@@QAE@XZ.QT5CORE ref: 00C9A9C0
?addItem@QGraphicsScene@@QAEXPAVQGraphicsItem@@@Z.QT5WIDGETS(-00000008), ref: 00C9A9CA
??1QFontMetrics@@QAE@XZ.QT5GUI ref: 00C9A9DA
new.LIBCMT ref: 00C9A9F6
??0QGraphicsTextItem@@QAE@PAVQGraphicsItem@@@Z.QT5WIDGETS(00000000,00000000), ref: 00C9AA0E
?setPos@QGraphicsItem@@QAEXABVQPointF@@@Z.QT5WIDGETS(?,?), ref: 00C9AA6D
?setPlainText@QGraphicsTextItem@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C9AA92
??1QString@@QAE@XZ.QT5CORE ref: 00C9AAA2
?addItem@QGraphicsScene@@QAEXPAVQGraphicsItem@@@Z.QT5WIDGETS(00000008), ref: 00C9AAAC

Strings

Error Scores, xrefs: 00C9AA7A
jng, xrefs: 00C9A6CA

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Graphics$Item@@$FontMetrics@@$String@@$?setText$Item@@@$?addF@@@LinePointPos@Scene@@$?height@?width@Item@Pen@@PlainString@@@Text@$?font@?number@Font@@Font@@@Line@Line@@@Pen@@@
String ID: Error Scores$jng
API String ID: 4239256453-588984608
Opcode ID: 6926a32b39d6841ac28e5b547a561037d7105c9557414b1f79a4b6938bebac5c
Instruction ID: d5b89dbcf6faaa2fcef8353ac446235667313675c20b0dcfcb47f331dc387b1f
Opcode Fuzzy Hash: 6926a32b39d6841ac28e5b547a561037d7105c9557414b1f79a4b6938bebac5c
Instruction Fuzzy Hash: 9DC16B7191064ADFCB02DFB4C854BDEBBB8BF59350F14832AE816B7291EB302585CB61

Uniqueness

Uniqueness Score: -1.00%

Function 00C69420 Relevance: 50.9, APIs: 24, Strings: 5, Instructions: 148windowCOMMON

Download Yara Rule

APIs

Part of subcall function 00C640B0: ?currentIndex@QStackedWidget@@QBEHXZ.QT5WIDGETS(676E6AEE,?,000000FF,?,00C62F32,676E6AEE), ref: 00C640E1
Part of subcall function 00C640B0: ??0QMessageBox@@QAE@PAVQWidget@@@Z.QT5WIDGETS(00000000,?,000000FF,?,00C62F32,676E6AEE), ref: 00C6410A
Part of subcall function 00C640B0: ?setWindowTitle@QMessageBox@@QAEXABVQString@@@Z.QT5WIDGETS(00000000,?,?,?,?,000000FF,?,00C62F32,676E6AEE), ref: 00C64134
Part of subcall function 00C640B0: ??1QString@@QAE@XZ.QT5CORE(?,?,?,?,000000FF,?,00C62F32,676E6AEE), ref: 00C64141
Part of subcall function 00C640B0: ?setText@QMessageBox@@QAEXABVQString@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,000000FF,?,00C62F32,676E6AEE), ref: 00C64164
Part of subcall function 00C640B0: ??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,000000FF,?,00C62F32,676E6AEE), ref: 00C64171
Part of subcall function 00C640B0: ?setInformativeText@QMessageBox@@QAEXABVQString@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,?,?,?,?,000000FF,?,00C62F32), ref: 00C64194
Part of subcall function 00C640B0: ??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,?,000000FF,?,00C62F32,676E6AEE), ref: 00C641A1
Part of subcall function 00C640B0: ?setStandardButtons@QMessageBox@@QAEXV?$QFlags@W4StandardButton@QMessageBox@@@@@Z.QT5WIDGETS(00C00800,?,?,?,?,?,?,?,?,?,?,?,?,000000FF,?,00C62F32), ref: 00C641AF
Part of subcall function 00C640B0: ?setDefaultButton@QMessageBox@@QAEXW4StandardButton@1@@Z.QT5WIDGETS(00000800,?,?,?,?,?,?,?,?,?,?,?,?,000000FF,?,00C62F32), ref: 00C641BD
Part of subcall function 00C640B0: ?exec@QDialog@@UAEHXZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,?,000000FF,?,00C62F32,676E6AEE), ref: 00C641C6
Part of subcall function 00C640B0: ??1QMessageBox@@UAE@XZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,?,000000FF,?,00C62F32,676E6AEE), ref: 00C641E4

?setChecked@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(00000001,676E6AEE), ref: 00C69466
?setCurrentIndex@QStackedWidget@@QAEXH@Z.QT5WIDGETS(00000000,676E6AEE), ref: 00C69489
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:/Images/add-selected.png,00000019), ref: 00C69496
??0QIcon@@QAE@ABVQString@@@Z.QT5GUI(?), ref: 00C694B6
?setIcon@QAbstractButton@@QAEXABVQIcon@@@Z.QT5WIDGETS(00000000), ref: 00C694CC
??1QIcon@@QAE@XZ.QT5GUI ref: 00C694D7
??1QString@@QAE@XZ.QT5CORE ref: 00C694E3
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:/Images/view.png,00000011), ref: 00C694F0
??0QIcon@@QAE@ABVQString@@@Z.QT5GUI(?), ref: 00C6950A
?setIcon@QAbstractButton@@QAEXABVQIcon@@@Z.QT5WIDGETS(00000000), ref: 00C6951D
??1QIcon@@QAE@XZ.QT5GUI ref: 00C69522
??1QString@@QAE@XZ.QT5CORE ref: 00C6952E
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:/Images/analysis.png,00000015), ref: 00C6953B
??0QIcon@@QAE@ABVQString@@@Z.QT5GUI(?), ref: 00C69555
?setIcon@QAbstractButton@@QAEXABVQIcon@@@Z.QT5WIDGETS(00000000), ref: 00C69568
??1QIcon@@QAE@XZ.QT5GUI ref: 00C6956D
??1QString@@QAE@XZ.QT5CORE ref: 00C69579
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:/Images/database.png,00000015), ref: 00C69586
??0QIcon@@QAE@ABVQString@@@Z.QT5GUI(?), ref: 00C695A0
?setIcon@QAbstractButton@@QAEXABVQIcon@@@Z.QT5WIDGETS(00000000), ref: 00C695B3
??1QIcon@@QAE@XZ.QT5GUI ref: 00C695B8
??1QString@@QAE@XZ.QT5CORE ref: 00C695C4
?width@QWidget@@QBEHXZ.QT5WIDGETS ref: 00C695CC
?width@QWidget@@QBEHXZ.QT5WIDGETS(-00000001), ref: 00C695E4

Strings

:/Images/view.png, xrefs: 00C694EB
jng, xrefs: 00C69437
:/Images/database.png, xrefs: 00C69581
:/Images/add-selected.png, xrefs: 00C69491
:/Images/analysis.png, xrefs: 00C69536

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: ?setString@@$Icon@@Message$Box@@String@@@$AbstractButton@@$?fromArrayAscii_helper@Data@Icon@Icon@@@TypedWidget@@$Standard$?width@Button@Index@StackedText@$?current?exec@Box@@@@@Button@1@@Buttons@Checked@CurrentDefaultDialog@@Flags@InformativeTitle@Widget@@@Window
String ID: :/Images/add-selected.png$:/Images/analysis.png$:/Images/database.png$:/Images/view.png$jng
API String ID: 2480396703-497880062
Opcode ID: 67af005f58533d2bb8ac518d8495f097c40afefa95412e85604831338d008c0c
Instruction ID: 0ba922e0b3294504d5264f25716a2b0f350adf4584daf91e41a2c9daafaf6660
Opcode Fuzzy Hash: 67af005f58533d2bb8ac518d8495f097c40afefa95412e85604831338d008c0c
Instruction Fuzzy Hash: AD513D71900209DFCB14EF94ED95BEEB7B9FB48314F100269D916A72E1DB316A09CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00C9FD70 Relevance: 50.9, APIs: 28, Strings: 1, Instructions: 141COMMON

Download Yara Rule

APIs

??8QString@@QBE_NPBD@Z.QT5CORE(Standard,?,?,00C9F575), ref: 00C9FD7C
?setChecked@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(00000001), ref: 00C9FD94
?setChecked@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(00000000), ref: 00C9FD9C
?setChecked@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(00000001), ref: 00C9FDA6
?setChecked@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(?), ref: 00C9FDB6
?setChecked@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(?), ref: 00C9FDC6
?setChecked@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(?), ref: 00C9FDD6
?setChecked@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(?), ref: 00C9FDE6
?setChecked@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(?), ref: 00C9FDF6
?setChecked@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(?), ref: 00C9FE06
?setChecked@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(?), ref: 00C9FE16
?setChecked@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(?), ref: 00C9FE23
?setChecked@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(?), ref: 00C9FE33
?setChecked@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(?), ref: 00C9FE43
?setChecked@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(?), ref: 00C9FE53
?setChecked@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(?), ref: 00C9FE63
?setChecked@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(?), ref: 00C9FE70
?setChecked@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(?), ref: 00C9FE7D
?setChecked@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(?), ref: 00C9FE8D
?setChecked@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(?), ref: 00C9FE9D
?setCurrentIndex@QComboBox@@QAEXH@Z.QT5WIDGETS(?), ref: 00C9FEB1
?setCurrentIndex@QComboBox@@QAEXH@Z.QT5WIDGETS(?), ref: 00C9FEBF
?setCurrentIndex@QComboBox@@QAEXH@Z.QT5WIDGETS(?), ref: 00C9FECD
?setCurrentIndex@QComboBox@@QAEXH@Z.QT5WIDGETS(?), ref: 00C9FEDB
?setCurrentIndex@QComboBox@@QAEXH@Z.QT5WIDGETS(?), ref: 00C9FEE9
?setCurrentIndex@QComboBox@@QAEXH@Z.QT5WIDGETS(?), ref: 00C9FEF7
?setCurrentIndex@QComboBox@@QAEXH@Z.QT5WIDGETS(?), ref: 00C9FF05
?setPlainText@QPlainTextEdit@@QAEXABVQString@@@Z.QT5WIDGETS(?), ref: 00C9FF14

Strings

Standard, xrefs: 00C9FD74

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: ?set$AbstractButton@@Checked@$Box@@ComboCurrentIndex@$Plain$Edit@@String@@String@@@TextText@
String ID: Standard
API String ID: 3501160737-3917592017
Opcode ID: 4790b99d58919c7a73b1f928a21a9fdb2d6cbfae07f69f688e4e03a47005ecfa
Instruction ID: d0b537ea6deb9cc14355d6b69f16040a06a396c7b103334a0337581c49309214
Opcode Fuzzy Hash: 4790b99d58919c7a73b1f928a21a9fdb2d6cbfae07f69f688e4e03a47005ecfa
Instruction Fuzzy Hash: 9B512171610556AFC348DF55CC64EB47BBABF8C214F14016AD54A87A91CF62BCA2CFE0

Uniqueness

Uniqueness Score: -1.00%

Function 00C8EAA0 Relevance: 49.2, APIs: 25, Strings: 3, Instructions: 218windowCOMMON

Download Yara Rule

APIs

new.LIBCMT ref: 00C8EACF

Part of subcall function 00CAC0B7: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0DE

?size@QListData@@QBEHXZ.QT5CORE(00000000,?,?,?,?,?,?,?,?,?,?,00000000,00CB35BE,000000FF,?,00C8CE97), ref: 00C8EAE5
?size@QListData@@QBEHXZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,00000000,00CB35BE,000000FF,?,00C8CE97,?), ref: 00C8EAF5
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,?,?,?,?,?,?,?,?,?,00000000,00CB35BE,000000FF,?,00C8CE97), ref: 00C8EB03
?size@QListData@@QBEHXZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,00000000,00CB35BE,000000FF,?,00C8CE97,?), ref: 00C8EB19
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,00000000,00CB35BE,000000FF,?,00C8CE97), ref: 00C8EB55
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(6B94A624,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00CB35BE,000000FF), ref: 00C8EB79
new.LIBCMT ref: 00C8EBA2
??0QListWidgetItem@@QAE@PAVQListWidget@@H@Z.QT5WIDGETS(00000000,00000000), ref: 00C8EBBC
new.LIBCMT ref: 00C8EBD4
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00000000), ref: 00C8EC0D
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C8EC1E
??0QIcon@@QAE@XZ.QT5GUI(?), ref: 00C8EC31
?number@QString@@SA?AV1@HH@Z.QT5CORE(?,00CB35BD,0000000A), ref: 00C8EC48
??0QSize@@QAE@XZ.QT5CORE(00000000,00000001), ref: 00C8EC84
?addFile@QIcon@@QAEXABVQString@@ABVQSize@@W4Mode@1@W4State@1@@Z.QT5GUI(00000000,00000000), ref: 00C8EC8F
??1QString@@QAE@XZ.QT5CORE ref: 00C8EC98
??1QString@@QAE@XZ.QT5CORE ref: 00C8ECA1
??1QString@@QAE@XZ.QT5CORE ref: 00C8ECAE
??0QSize@@QAE@HH@Z.QT5CORE(00000034,00000035), ref: 00C8ECBB
??0QIcon@@QAE@ABV0@@Z.QT5GUI(00000000,?,?,?), ref: 00C8ECCE
?rowCount@QTableWidget@@QBEHXZ.QT5WIDGETS(00000000,?,00000000,?,?,?,?), ref: 00C8ECFB
?insertItem@QListWidget@@QAEXHPAVQListWidgetItem@@@Z.QT5WIDGETS(00000000,?,?,?), ref: 00C8ED04
?setItemWidget@QListWidget@@QAEXPAVQListWidgetItem@@PAVQWidget@@@Z.QT5WIDGETS(00000000,00000000,?,?,?), ref: 00C8ED15
??1QIcon@@QAE@XZ.QT5GUI(?,?,?), ref: 00C8ED25

Strings

jng, xrefs: 00C8EAB7
.png, xrefs: 00C8EC61
:/HueSwatches/FM, xrefs: 00C8EC56

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: List$Data@@$String@@$Icon@@Widget@@$?at@?size@Size@@Widget$?dispose@Data@1@@Item@@$?add?insert?number@?row?setCount@File@ItemItem@Item@@@Mode@1@State@1@@TableV0@@Widget@Widget@@@malloc
String ID: .png$:/HueSwatches/FM$jng
API String ID: 2182892106-1749195470
Opcode ID: b9135e833d76524ff3e7febb97c5397d69e025187d6716ddefc02648bc767b03
Instruction ID: b11df9137f24477bafcac32d16246216b4a80ba7b1d6b2e95c46189a50e64264
Opcode Fuzzy Hash: b9135e833d76524ff3e7febb97c5397d69e025187d6716ddefc02648bc767b03
Instruction Fuzzy Hash: 41816075900209DFDF14DFA4DC89BAEBBB8FF09314F140269E512A72A0DB356E09CB95

Uniqueness

Uniqueness Score: -1.00%

Function 00C95150 Relevance: 47.7, APIs: 26, Strings: 1, Instructions: 431COMMON

Download Yara Rule

APIs

?size@QListData@@QBEHXZ.QT5CORE ref: 00C951E8
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C9520C
?size@QListData@@QBEHXZ.QT5CORE ref: 00C95222
?size@QListData@@QBEHXZ.QT5CORE ref: 00C95236
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C95244
?size@QListData@@QBEHXZ.QT5CORE ref: 00C9525B
?size@QListData@@QBEHXZ.QT5CORE ref: 00C95272
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C95284
?size@QListData@@QBEHXZ.QT5CORE ref: 00C9529A
?size@QListData@@QBEHXZ.QT5CORE ref: 00C952AE
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C952D2
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C952F7
?size@QListData@@QBEHXZ.QT5CORE ref: 00C9530D
?size@QListData@@QBEHXZ.QT5CORE ref: 00C95324
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C95334
?size@QListData@@QBEHXZ.QT5CORE ref: 00C95349
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,00CBF42C,?), ref: 00C953CB
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?), ref: 00C95437
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?), ref: 00C954A3
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?), ref: 00C95510
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?), ref: 00C9553C
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?), ref: 00C95568
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE ref: 00C95591
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?), ref: 00C955BD
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?), ref: 00C955E6
??1QWidget@@UAE@XZ.QT5WIDGETS ref: 00C955EE

Strings

jng, xrefs: 00C95167

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?size@$?dispose@Data@1@@$?at@$Widget@@
String ID: jng
API String ID: 357403616-1186463058
Opcode ID: d25bc79d030b64b017e433b5ca8c7726f857ef7be4116e3e6b3dc79fa1e775f3
Instruction ID: ece831b670d8044c6ffd43af19d6575327e8e32990cff6d2650ad941ab7339bd
Opcode Fuzzy Hash: d25bc79d030b64b017e433b5ca8c7726f857ef7be4116e3e6b3dc79fa1e775f3
Instruction Fuzzy Hash: 6AF17170A01A059BDF15CF78D888B6D77A5BF05328B180268E425DB3E1DB32EE56CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C63830 Relevance: 47.4, APIs: 22, Strings: 5, Instructions: 134windowCOMMON

Download Yara Rule

APIs

Part of subcall function 00C640B0: ?currentIndex@QStackedWidget@@QBEHXZ.QT5WIDGETS(676E6AEE,?,000000FF,?,00C62F32,676E6AEE), ref: 00C640E1
Part of subcall function 00C640B0: ??0QMessageBox@@QAE@PAVQWidget@@@Z.QT5WIDGETS(00000000,?,000000FF,?,00C62F32,676E6AEE), ref: 00C6410A
Part of subcall function 00C640B0: ?setWindowTitle@QMessageBox@@QAEXABVQString@@@Z.QT5WIDGETS(00000000,?,?,?,?,000000FF,?,00C62F32,676E6AEE), ref: 00C64134
Part of subcall function 00C640B0: ??1QString@@QAE@XZ.QT5CORE(?,?,?,?,000000FF,?,00C62F32,676E6AEE), ref: 00C64141
Part of subcall function 00C640B0: ?setText@QMessageBox@@QAEXABVQString@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,000000FF,?,00C62F32,676E6AEE), ref: 00C64164
Part of subcall function 00C640B0: ??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,000000FF,?,00C62F32,676E6AEE), ref: 00C64171
Part of subcall function 00C640B0: ?setInformativeText@QMessageBox@@QAEXABVQString@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,?,?,?,?,000000FF,?,00C62F32), ref: 00C64194
Part of subcall function 00C640B0: ??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,?,000000FF,?,00C62F32,676E6AEE), ref: 00C641A1
Part of subcall function 00C640B0: ?setStandardButtons@QMessageBox@@QAEXV?$QFlags@W4StandardButton@QMessageBox@@@@@Z.QT5WIDGETS(00C00800,?,?,?,?,?,?,?,?,?,?,?,?,000000FF,?,00C62F32), ref: 00C641AF
Part of subcall function 00C640B0: ?setDefaultButton@QMessageBox@@QAEXW4StandardButton@1@@Z.QT5WIDGETS(00000800,?,?,?,?,?,?,?,?,?,?,?,?,000000FF,?,00C62F32), ref: 00C641BD
Part of subcall function 00C640B0: ?exec@QDialog@@UAEHXZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,?,000000FF,?,00C62F32,676E6AEE), ref: 00C641C6
Part of subcall function 00C640B0: ??1QMessageBox@@UAE@XZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,?,000000FF,?,00C62F32,676E6AEE), ref: 00C641E4

Part of subcall function 00C64250: ?currentIndex@QStackedWidget@@QBEHXZ.QT5WIDGETS(676E6AEE,00000000,000000FF,?,00C62F3B,676E6AEE), ref: 00C64281
Part of subcall function 00C64250: ??0QMessageBox@@QAE@PAVQWidget@@@Z.QT5WIDGETS(00000000,?,00C62F3B,676E6AEE), ref: 00C642AB
Part of subcall function 00C64250: ?setWindowTitle@QMessageBox@@QAEXABVQString@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,00C62F3B,676E6AEE), ref: 00C642D5
Part of subcall function 00C64250: ??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,00C62F3B,676E6AEE), ref: 00C642E2
Part of subcall function 00C64250: ?setText@QMessageBox@@QAEXABVQString@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,?,?,00C62F3B,676E6AEE), ref: 00C64305
Part of subcall function 00C64250: ??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,00C62F3B,676E6AEE), ref: 00C64312
Part of subcall function 00C64250: ?setInformativeText@QMessageBox@@QAEXABVQString@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00C62F3B), ref: 00C64335
Part of subcall function 00C64250: ??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00C62F3B,676E6AEE), ref: 00C64342
Part of subcall function 00C64250: ?setStandardButtons@QMessageBox@@QAEXV?$QFlags@W4StandardButton@QMessageBox@@@@@Z.QT5WIDGETS(00C00800,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00C62F3B), ref: 00C64350
Part of subcall function 00C64250: ?setDefaultButton@QMessageBox@@QAEXW4StandardButton@1@@Z.QT5WIDGETS(00000800,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00C62F3B), ref: 00C6435E
Part of subcall function 00C64250: ?exec@QDialog@@UAEHXZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00C62F3B,676E6AEE), ref: 00C64367
Part of subcall function 00C64250: ??1QMessageBox@@UAE@XZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00C62F3B,676E6AEE), ref: 00C64385

?setCurrentIndex@QStackedWidget@@QAEXH@Z.QT5WIDGETS(00000003,676E6AEE), ref: 00C63888
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:/Images/add.png,00000010), ref: 00C63895
??0QIcon@@QAE@ABVQString@@@Z.QT5GUI(?), ref: 00C638B5
?setIcon@QAbstractButton@@QAEXABVQIcon@@@Z.QT5WIDGETS(00000000), ref: 00C638CB
??1QIcon@@QAE@XZ.QT5GUI ref: 00C638D6
??1QString@@QAE@XZ.QT5CORE ref: 00C638E2
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:/Images/view.png,00000011), ref: 00C638EF
??0QIcon@@QAE@ABVQString@@@Z.QT5GUI(?), ref: 00C63909
?setIcon@QAbstractButton@@QAEXABVQIcon@@@Z.QT5WIDGETS(00000000), ref: 00C6391C
??1QIcon@@QAE@XZ.QT5GUI ref: 00C63921
??1QString@@QAE@XZ.QT5CORE ref: 00C6392D
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:/Images/analysis.png,00000015), ref: 00C6393A
??0QIcon@@QAE@ABVQString@@@Z.QT5GUI(?), ref: 00C63954
?setIcon@QAbstractButton@@QAEXABVQIcon@@@Z.QT5WIDGETS(00000000), ref: 00C63967
??1QIcon@@QAE@XZ.QT5GUI ref: 00C6396C
??1QString@@QAE@XZ.QT5CORE ref: 00C63978
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:/Images/database-selected.png,0000001E), ref: 00C63985
??0QIcon@@QAE@ABVQString@@@Z.QT5GUI(?), ref: 00C6399F
?setIcon@QAbstractButton@@QAEXABVQIcon@@@Z.QT5WIDGETS(00000000), ref: 00C639B2
??1QIcon@@QAE@XZ.QT5GUI ref: 00C639B7
??1QString@@QAE@XZ.QT5CORE ref: 00C639C3
?setChecked@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(00000001,676E6AEE), ref: 00C639DE

Strings

:/Images/database-selected.png, xrefs: 00C63980
:/Images/view.png, xrefs: 00C638EA
jng, xrefs: 00C63847
:/Images/analysis.png, xrefs: 00C63935
:/Images/add.png, xrefs: 00C63890

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: ?setMessage$Box@@String@@$String@@@$Icon@@$Standard$AbstractButton@@$?fromArrayAscii_helper@Button@Data@Icon@Icon@@@Text@Typed$Index@StackedWidget@@$?current?exec@Box@@@@@Button@1@@Buttons@DefaultDialog@@Flags@InformativeTitle@Widget@@@Window$Checked@Current
String ID: :/Images/add.png$:/Images/analysis.png$:/Images/database-selected.png$:/Images/view.png$jng
API String ID: 1712370117-550782057
Opcode ID: ca6ecf9b41fc722794a29ce7f050ef6537c61c21f71fdf7e388626cffac9c077
Instruction ID: b4827c6a9444063a78b8e8147cf25a81818538446da5980d97aacbe184253614
Opcode Fuzzy Hash: ca6ecf9b41fc722794a29ce7f050ef6537c61c21f71fdf7e388626cffac9c077
Instruction Fuzzy Hash: EB517F71900209DFCB04DFA4ED94BEDBBB8FF44314F240269D516A72D1DB712A09CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00C9B2A0 Relevance: 45.8, APIs: 25, Strings: 1, Instructions: 252COMMON

Download Yara Rule

APIs

?size@QListData@@QBEHXZ.QT5CORE(676E6AEE,4D8BD6FF,00000000,4D8BD783), ref: 00C9B2D4
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C9B2E3
?size@QListData@@QBEHXZ.QT5CORE ref: 00C9B2F9
?size@QListData@@QBEHXZ.QT5CORE ref: 00C9B30D
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C9B31A
?size@QListData@@QBEHXZ.QT5CORE ref: 00C9B330
?size@QListData@@QBEHXZ.QT5CORE ref: 00C9B347
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C9B357
?size@QListData@@QBEHXZ.QT5CORE ref: 00C9B36C
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE ref: 00C9B40B
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(6B94A624), ref: 00C9B438
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE ref: 00C9B46A
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(6B94A624), ref: 00C9B48E
?clear@QGraphicsScene@@QAEXXZ.QT5WIDGETS ref: 00C9B4A0
??0QLine@@QAE@HHHH@Z.QT5CORE(FF6BA7E8,5230B8FF,17E900F2,5230B8FF), ref: 00C9B4BD
??0QLine@@QAE@HHHH@Z.QT5CORE(FF6BA7E8,5230B8FF,FF6BA7E8,CCFFFF79), ref: 00C9B4DA
??0QLineF@@QAE@ABVQLine@@@Z.QT5CORE(?), ref: 00C9B4E7
??0QPen@@QAE@XZ.QT5GUI ref: 00C9B4F6
?addLine@QGraphicsScene@@QAEPAVQGraphicsLineItem@@ABVQLineF@@ABVQPen@@@Z.QT5WIDGETS(?,00000000), ref: 00C9B50D
??1QPen@@QAE@XZ.QT5GUI ref: 00C9B51F
??0QLineF@@QAE@ABVQLine@@@Z.QT5CORE(?), ref: 00C9B528
??0QPen@@QAE@XZ.QT5GUI ref: 00C9B531
?addLine@QGraphicsScene@@QAEPAVQGraphicsLineItem@@ABVQLineF@@ABVQPen@@@Z.QT5WIDGETS(?,00000000), ref: 00C9B545
??1QPen@@QAE@XZ.QT5GUI ref: 00C9B551

Part of subcall function 00C9A3E0: ??0QLineF@@QAE@ABVQLine@@@Z.QT5CORE(?,676E6AEE,6BC1BB50,6C017DB0,00000000), ref: 00C9A4BE
Part of subcall function 00C9A3E0: ??0QPen@@QAE@XZ.QT5GUI ref: 00C9A4C7
Part of subcall function 00C9A3E0: ?addLine@QGraphicsScene@@QAEPAVQGraphicsLineItem@@ABVQLineF@@ABVQPen@@@Z.QT5WIDGETS(?,00000000), ref: 00C9A4DC
Part of subcall function 00C9A3E0: ??1QPen@@QAE@XZ.QT5GUI ref: 00C9A4EC
Part of subcall function 00C9A3E0: new.LIBCMT ref: 00C9A4F4
Part of subcall function 00C9A3E0: ??0QGraphicsTextItem@@QAE@PAVQGraphicsItem@@@Z.QT5WIDGETS(00000000), ref: 00C9A50C

Part of subcall function 00C9A6B0: ??0QLineF@@QAE@ABVQLine@@@Z.QT5CORE(?,676E6AEE,6BC1BB50,6C017DB0,00000000), ref: 00C9A7A8
Part of subcall function 00C9A6B0: ??0QPen@@QAE@XZ.QT5GUI ref: 00C9A7B1
Part of subcall function 00C9A6B0: ?addLine@QGraphicsScene@@QAEPAVQGraphicsLineItem@@ABVQLineF@@ABVQPen@@@Z.QT5WIDGETS(?,00000000), ref: 00C9A7C9
Part of subcall function 00C9A6B0: ??1QPen@@QAE@XZ.QT5GUI ref: 00C9A7D9
Part of subcall function 00C9A6B0: new.LIBCMT ref: 00C9A7E1
Part of subcall function 00C9A6B0: ??0QGraphicsTextItem@@QAE@PAVQGraphicsItem@@@Z.QT5WIDGETS(00000000), ref: 00C9A7F9
Part of subcall function 00C9A6B0: ?font@QGraphicsTextItem@@QBE?AVQFont@@XZ.QT5WIDGETS(?,?), ref: 00C9A82E

?setScene@QGraphicsView@@QAEXPAVQGraphicsScene@@@Z.QT5WIDGETS(CCCCCCCC), ref: 00C9B569

Strings

jng, xrefs: 00C9B2B7

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Graphics$Data@@List$Line$Pen@@$Item@@$?size@$Scene@@$?add?dispose@Data@1@@Line@Line@@@Pen@@@$?at@Text$Item@@@Line@@$?clear@?font@?setFont@@Scene@Scene@@@View@@
String ID: jng
API String ID: 3706340655-1186463058
Opcode ID: 1e17cdef9746bcc56642a75a22f51345083b20a224fb032afb6542b067214c06
Instruction ID: 7b32b8c61e53c2198b205274424c2d445d721a1911e401fbcb2ae4d6ecef5e8d
Opcode Fuzzy Hash: 1e17cdef9746bcc56642a75a22f51345083b20a224fb032afb6542b067214c06
Instruction Fuzzy Hash: 01917F74600605DBDF14DF68E988BAEB7B9FF09320F140219E826D72A1DF349E09DB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C90900 Relevance: 43.9, APIs: 23, Strings: 2, Instructions: 125COMMON

Download Yara Rule

APIs

??0QString@@QAE@XZ.QT5CORE(676E6AEE,?,00000000,00000000), ref: 00C9094F
?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A), ref: 00C90962
?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z.QT5SQL(?,00000000,00000001,00000000), ref: 00C90978
??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL(?,?,00000000), ref: 00C90984
??1QString@@QAE@XZ.QT5CORE(?,?,00000000), ref: 00C90991
??4QString@@QAEAAV0@PBD@Z.QT5CORE(SELECT * FROM serialNums,?,?,00000000), ref: 00C9099F
?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(00000000,?,?,00000000), ref: 00C909AC
?exec@QSqlQuery@@QAE_NXZ.QT5SQL(?,?,00000000), ref: 00C909B5
?next@QSqlQuery@@QAE_NXZ.QT5SQL(?,?,00000000), ref: 00C909CA
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000001,?,?,00000000), ref: 00C909ED
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?,?,?,00000000), ref: 00C909F9
??4QString@@QAEAAV0@$$QAV0@@Z.QT5CORE(00000000,?,?,00000000), ref: 00C909FF
??1QString@@QAE@XZ.QT5CORE(?,?,00000000), ref: 00C90A08
??1QVariant@@QAE@XZ.QT5CORE(?,?,00000000), ref: 00C90A15
?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000002,?,?,00000000), ref: 00C90A24
?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?,?,?,00000000), ref: 00C90A30
??4QString@@QAEAAV0@$$QAV0@@Z.QT5CORE(00000000,?,?,00000000), ref: 00C90A36
??1QString@@QAE@XZ.QT5CORE(?,?,00000000), ref: 00C90A3F
??1QVariant@@QAE@XZ.QT5CORE(?,?,00000000), ref: 00C90A4C

Part of subcall function 00C8F750: new.LIBCMT ref: 00C8F7C2
Part of subcall function 00C8F750: ??0QString@@QAE@ABV0@@Z.QT5CORE(?), ref: 00C8F7D2
Part of subcall function 00C8F750: ??0QString@@QAE@ABV0@@Z.QT5CORE(00000008), ref: 00C8F7DF

??1QString@@QAE@XZ.QT5CORE(?,?,?,00000000), ref: 00C90A64
??1QString@@QAE@XZ.QT5CORE(?,?,00000000), ref: 00C90A6D
??1QSqlQuery@@QAE@XZ.QT5SQL(?,?,00000000), ref: 00C90A7B
??1QString@@QAE@XZ.QT5CORE(?,?,00000000), ref: 00C90A84

Part of subcall function 00C61110: ??0QString@@QAE@XZ.QT5CORE ref: 00C61118
Part of subcall function 00C61110: ??0QString@@QAE@XZ.QT5CORE ref: 00C61121

Strings

jng, xrefs: 00C90917
SELECT * FROM serialNums, xrefs: 00C90997

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Query@@$Variant@@$V0@@$?value@String@V0@$$$?database@?exec@?next@?number@?prepare@Database@@Database@@@String@@@String@@_
String ID: SELECT * FROM serialNums$jng
API String ID: 2755733413-3849784509
Opcode ID: 7ed3d487dc7338c275b2b2cd53385496d54dcacb7580b86ce51c905b8b9e6cc7
Instruction ID: 2f8ed5ee711813a8539f3645e47c3c185a5b2cab9240b036ec67c5b08d6c5fdf
Opcode Fuzzy Hash: 7ed3d487dc7338c275b2b2cd53385496d54dcacb7580b86ce51c905b8b9e6cc7
Instruction Fuzzy Hash: 2751D57590414ADFCF04DBA4E959BEEBBB8FB24715F104259E502A32A0DF742A0DCFA1

Uniqueness

Uniqueness Score: -1.00%

Function 00CA78D0 Relevance: 43.9, APIs: 18, Strings: 7, Instructions: 117COMMON

Download Yara Rule

APIs

?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(00CA7471,serialNumDialog,Add New Cap Set,00000000,000000FF,676E6AEE,000000FF,00CA7471,6B9DED70,00CA855D,00CA7471), ref: 00CA7912
?setWindowTitle@QWidget@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00CA7922
??1QString@@QAE@XZ.QT5CORE ref: 00CA7932
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,serialNumDialog,Enter cap-set serial number and purchase date. Test results more than two years past purchase date are not certified and damaged, soiled or faded cap sets should be replaced.,00000000,000000FF), ref: 00CA794A
?setPlainText@QPlainTextEdit@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00CA795A
??1QString@@QAE@XZ.QT5CORE ref: 00CA796A
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,serialNumDialog,Serial Number,00000000,000000FF), ref: 00CA7982
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00CA7998
??1QString@@QAE@XZ.QT5CORE ref: 00CA79A4
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,serialNumDialog,Purchase Date,00000000,000000FF), ref: 00CA79BC
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00CA79CC
??1QString@@QAE@XZ.QT5CORE ref: 00CA79D8
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,serialNumDialog,00CBFDB0,00000000,000000FF), ref: 00CA79F0
?setText@QAbstractButton@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00CA7A06
??1QString@@QAE@XZ.QT5CORE ref: 00CA7A12
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,serialNumDialog,Cancel,00000000,000000FF), ref: 00CA7A2A
?setText@QAbstractButton@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00CA7A3A
??1QString@@QAE@XZ.QT5CORE ref: 00CA7A3F

Strings

Enter cap-set serial number and purchase date. Test results more than two years past purchase date are not certified and damaged, soiled or faded cap sets should be replaced., xrefs: 00CA793C
serialNumDialog, xrefs: 00CA790C, 00CA7944, 00CA797C, 00CA79B6, 00CA79EA, 00CA7A24
Add New Cap Set, xrefs: 00CA7907
jng, xrefs: 00CA78E7
Serial Number, xrefs: 00CA7974
Cancel, xrefs: 00CA7A1C
Purchase Date, xrefs: 00CA79AE

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$?set?translate@Application@@CoreString@@@$Text@$AbstractButton@@Label@@Plain$Edit@@TextTitle@Widget@@Window
String ID: Add New Cap Set$Cancel$Enter cap-set serial number and purchase date. Test results more than two years past purchase date are not certified and damaged, soiled or faded cap sets should be replaced.$Purchase Date$Serial Number$serialNumDialog$jng
API String ID: 218651849-2866415963
Opcode ID: 12c34f3eb5fedc9c562f73764903b9da785beaeb0916fa6071567a06722e7668
Instruction ID: 6a27aff2ec38caad09a045593c861980a10eee19ad3da6527cd05cc9bc3d5035
Opcode Fuzzy Hash: 12c34f3eb5fedc9c562f73764903b9da785beaeb0916fa6071567a06722e7668
Instruction Fuzzy Hash: 80412EB5644209EBCF00EFA8DC45F9D7B68EB08730F254369F925A72D0DB706609CB65

Uniqueness

Uniqueness Score: -1.00%

Function 00C76960 Relevance: 40.7, APIs: 27, Instructions: 229COMMON

Download Yara Rule

APIs

?size@QListData@@QBEHXZ.QT5CORE(00C744AC,00000002,?,00000000,?,00C77D43), ref: 00C76972

Part of subcall function 00C6FA90: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(676E6AEE,676E6AEE,676E6AEE,00C744AC,00000002,00000000,00C744DC,00C744DC,00CAF106,000000FF,?,00C7811A,676E6AEE,00C744AC,00000002), ref: 00C6FB14

?size@QListData@@QBEHXZ.QT5CORE(?,00000000,?,00C77D43), ref: 00C76994
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001,?,00000000,?,00C77D43), ref: 00C769C7
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00000000,?,00C77D43), ref: 00C769D8
?size@QListData@@QBEHXZ.QT5CORE(?,?,00000000,?,00C77D43), ref: 00C769FD
?size@QListData@@QBEHXZ.QT5CORE(?,00000000,?,00C77D43), ref: 00C76A0C
?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS(?,00000000,?,00C77D43), ref: 00C76A29
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00000000,?,00C77D43), ref: 00C76A37
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00000000,?,00C77D43), ref: 00C76A48
?size@QListData@@QBEHXZ.QT5CORE(?,?,00000000,?,00C77D43), ref: 00C76A6D
?size@QListData@@QBEHXZ.QT5CORE ref: 00C76A84
?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS ref: 00C76AAF
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C76AD6
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C76AE5
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C76AEE
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C76B1B
?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS ref: 00C76B26
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C76B4D
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C76B70
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C76B7F
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C76B88
?size@QListData@@QBEHXZ.QT5CORE ref: 00C76BBA
?size@QListData@@QBEHXZ.QT5CORE ref: 00C76BD8
?size@QListData@@QBEHXZ.QT5CORE ref: 00C76BE4
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C76C06
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C76C2B

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?at@$?size@$AbstractButton@@Checked@$?dispose@Data@1@@
String ID:
API String ID: 2520052819-0
Opcode ID: 6315cb15484d13a2896ef1d08b01721638b01515fbc82412b0d2ac2caa2562a2
Instruction ID: c190f4d3d886f284f0023b6c19fffbf5001dac17febe34a90d4d0c08e5c45b58
Opcode Fuzzy Hash: 6315cb15484d13a2896ef1d08b01721638b01515fbc82412b0d2ac2caa2562a2
Instruction Fuzzy Hash: 74916B34100A0ACFCF0ADF35D898AAE7B78FF16345F048269E856A7161EF319D4ADB51

Uniqueness

Uniqueness Score: -1.00%

Function 00C9ACE0 Relevance: 40.4, APIs: 22, Strings: 1, Instructions: 165COMMON

Download Yara Rule

APIs

?setRenderHint@QGraphicsView@@QAEXW4RenderHint@QPainter@@_N@Z.QT5WIDGETS(00000001,00000001,676E6AEE,000000FF,00000000,000000FF,?,?,?,?,?,?,?,?,00000000,00CB5373), ref: 00C9AD1D
new.LIBCMT ref: 00C9AD25

Part of subcall function 00CAC0B7: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0DE

??0QGraphicsScene@@QAE@PAVQObject@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,?,00000000,00CB5373,000000FF,?,00C732B7), ref: 00C9AD3D
?height@QWidget@@QBEHXZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,00000000,00CB5373,000000FF,?,00C732B7), ref: 00C9AD58
?width@QWidget@@QBEHXZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,00000000,00CB5373,000000FF,?,00C732B7), ref: 00C9AD73
?setSceneRect@QGraphicsScene@@QAEXNNNN@Z.QT5WIDGETS ref: 00C9AD94
?width@QGraphicsScene@@QBENXZ.QT5WIDGETS ref: 00C9AD9D
?width@QGraphicsScene@@QBENXZ.QT5WIDGETS ref: 00C9ADBA
?width@QGraphicsScene@@QBENXZ.QT5WIDGETS ref: 00C9ADDF
??0QRectF@@QAE@NNNN@Z.QT5CORE ref: 00C9AE38
??0QRectF@@QAE@NNNN@Z.QT5CORE ref: 00C9AE86
??0QBrush@@QAE@XZ.QT5GUI ref: 00C9AE9E
??0QPen@@QAE@XZ.QT5GUI ref: 00C9AEB0
?addEllipse@QGraphicsScene@@QAEPAVQGraphicsEllipseItem@@ABVQRectF@@ABVQPen@@ABVQBrush@@@Z.QT5WIDGETS(?,00000000,00000000), ref: 00C9AEC0
??1QPen@@QAE@XZ.QT5GUI ref: 00C9AECF
??1QBrush@@QAE@XZ.QT5GUI ref: 00C9AEE1
??0QBrush@@QAE@XZ.QT5GUI ref: 00C9AEE6
??0QPen@@QAE@XZ.QT5GUI ref: 00C9AEF8
?addEllipse@QGraphicsScene@@QAEPAVQGraphicsEllipseItem@@ABVQRectF@@ABVQPen@@ABVQBrush@@@Z.QT5WIDGETS(?,00000000,00000000), ref: 00C9AF0E
??1QPen@@QAE@XZ.QT5GUI ref: 00C9AF17
??1QBrush@@QAE@XZ.QT5GUI ref: 00C9AF23

Part of subcall function 00C98E20: _libm_sse2_sin_precise.API-MS-WIN-CRT-MATH-L1-1-0(676E6AEE,6BF77020,?), ref: 00C98EAB
Part of subcall function 00C98E20: _libm_sse2_cos_precise.API-MS-WIN-CRT-MATH-L1-1-0(676E6AEE,6BF77020,?), ref: 00C98EBD
Part of subcall function 00C98E20: ??0QColor@@QAE@W4GlobalColor@Qt@@@Z.QT5GUI(00000005,?,676E6AEE,6BF77020,?), ref: 00C98F90
Part of subcall function 00C98E20: ??0QLineF@@QAE@ABVQLine@@@Z.QT5CORE(?), ref: 00C98FA3

Part of subcall function 00C9A220: ?width@QRectF@@QBENXZ.QT5CORE(676E6AEE,6BF77020,?,6C017DB0), ref: 00C9A2E0
Part of subcall function 00C9A220: ??0QRectF@@QAE@NNNN@Z.QT5CORE ref: 00C9A32E
Part of subcall function 00C9A220: ??0QColor@@QAE@W4GlobalColor@Qt@@@Z.QT5GUI(00000005,?), ref: 00C9A345
Part of subcall function 00C9A220: ??0QBrush@@QAE@XZ.QT5GUI ref: 00C9A34E
Part of subcall function 00C9A220: ??0QPen@@QAE@ABVQColor@@@Z.QT5GUI(?), ref: 00C9A364
Part of subcall function 00C9A220: ?addEllipse@QGraphicsScene@@QAEPAVQGraphicsEllipseItem@@ABVQRectF@@ABVQPen@@ABVQBrush@@@Z.QT5WIDGETS(?,00000000,00000000), ref: 00C9A377
Part of subcall function 00C9A220: ??1QPen@@QAE@XZ.QT5GUI ref: 00C9A380
Part of subcall function 00C9A220: ??1QBrush@@QAE@XZ.QT5GUI ref: 00C9A390

?setScene@QGraphicsView@@QAEXPAVQGraphicsScene@@@Z.QT5WIDGETS(?), ref: 00C9AF3B

Strings

jng, xrefs: 00C9ACF7

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Graphics$Pen@@$Scene@@$Rect$Brush@@$?width@$?add?setBrush@@@EllipseEllipse@Item@@$Color@Color@@GlobalHint@Qt@@@RenderView@@Widget@@$?height@Color@@@LineLine@@@Object@@@Painter@@_Rect@SceneScene@Scene@@@_libm_sse2_cos_precise_libm_sse2_sin_precisemalloc
String ID: jng
API String ID: 3334551464-1186463058
Opcode ID: 5c14addb5b121fe199e2cf9041b81bd9ec30dfefc11655a6377447b442a9f536
Instruction ID: f60bd5b63888131c3d156558463a9a6ee192cfaf3531085bf35cf483a44036ca
Opcode Fuzzy Hash: 5c14addb5b121fe199e2cf9041b81bd9ec30dfefc11655a6377447b442a9f536
Instruction Fuzzy Hash: DD718A71D00646CFDB04DF74C8997AEBBB8FF59310F004369E946AB2A2EB306995CB51

Uniqueness

Uniqueness Score: -1.00%

Function 00C6B1B0 Relevance: 40.4, APIs: 21, Strings: 2, Instructions: 102COMMON

Download Yara Rule

APIs

??0QString@@QAE@XZ.QT5CORE(676E6AEE), ref: 00C6B1DD
??0QString@@QAE@XZ.QT5CORE ref: 00C6B1EF
??0QString@@QAE@XZ.QT5CORE ref: 00C6B1FA
??0QFileDialog@@QAE@PAVQWidget@@ABVQString@@11@Z.QT5WIDGETS(?,00000000,00000000,00000000), ref: 00C6B20B
??1QString@@QAE@XZ.QT5CORE(?,00000000,00000000,00000000), ref: 00C6B214
??1QString@@QAE@XZ.QT5CORE(?,00000000,00000000,00000000), ref: 00C6B21D
??1QString@@QAE@XZ.QT5CORE(?,00000000,00000000,00000000), ref: 00C6B22A
?applicationDirPath@QCoreApplication@@SA?AVQString@@XZ.QT5CORE(?,?,00000000,00000000,00000000), ref: 00C6B234
?setDirectory@QFileDialog@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C6B245
??1QString@@QAE@XZ.QT5CORE ref: 00C6B24E
??0QString@@QAE@XZ.QT5CORE ref: 00C6B257
??0QString@@QAE@XZ.QT5CORE ref: 00C6B262
??0QString@@QAE@XZ.QT5CORE ref: 00C6B26D
?getSaveFileName@QFileDialog@@SA?AVQString@@PAVQWidget@@ABV2@11PAV2@V?$QFlags@W4Option@QFileDialog@@@@@Z.QT5WIDGETS(?,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00C6B284
??1QString@@QAE@XZ.QT5CORE ref: 00C6B290
??1QString@@QAE@XZ.QT5CORE ref: 00C6B299
??1QString@@QAE@XZ.QT5CORE ref: 00C6B2A6
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(.sqlite), ref: 00C6B2B4
??0QString@@QAE@ABV0@@Z.QT5CORE(?), ref: 00C6B2C4

Part of subcall function 00C8F560: new.LIBCMT ref: 00C8F58E

Part of subcall function 00C92820: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(QSQLITE,00000007,000000FF,676E6AEE,00000000,00000000,?,?,00000000,00CB426D,000000FF,?,00C6B2DE), ref: 00C92868
Part of subcall function 00C92820: ?number@QString@@SA?AV1@HH@Z.QT5CORE(?,00000000,0000000A,?,?,00000000,00CB426D,000000FF,?,00C6B2DE), ref: 00C92884
Part of subcall function 00C92820: ?addDatabase@QSqlDatabase@@SA?AV1@ABVQString@@0@Z.QT5SQL(?,?,00000000,?,?,00000000,00CB426D,000000FF,?,00C6B2DE), ref: 00C92893
Part of subcall function 00C92820: ??1QString@@QAE@XZ.QT5CORE ref: 00C9289F
Part of subcall function 00C92820: ??1QString@@QAE@XZ.QT5CORE ref: 00C928AC
Part of subcall function 00C92820: ?setDatabaseName@QSqlDatabase@@QAEXABVQString@@@Z.QT5SQL(?), ref: 00C928BF
Part of subcall function 00C92820: ?open@QSqlDatabase@@QAE_NXZ.QT5SQL ref: 00C928C8
Part of subcall function 00C92820: ?number@QString@@SA?AV1@HH@Z.QT5CORE(?,00000000,0000000A), ref: 00C928D7
Part of subcall function 00C92820: ?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z.QT5SQL(?,00000000,00000001), ref: 00C928E6
Part of subcall function 00C92820: ??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL ref: 00C928F2
Part of subcall function 00C92820: ??1QString@@QAE@XZ.QT5CORE ref: 00C928FB
Part of subcall function 00C92820: ??0QString@@QAE@XZ.QT5CORE ref: 00C92904
Part of subcall function 00C92820: ??4QString@@QAEAAV0@PBD@Z.QT5CORE(CREATE TABLE IF NOT EXISTS users (id INTEGER PRIMARY KEY AUTOINCREMENT, first TEXT, middle TEXT, last TEXT, refNum TEXT, DOB TEXT, gender TEXT, location TEXT, industry TEXT, experience TEXT, job TEXT)), ref: 00C92916
Part of subcall function 00C92820: ?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C92929
Part of subcall function 00C92820: ?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C92934
Part of subcall function 00C92820: ??4QString@@QAEAAV0@PBD@Z.QT5CORE(CREATE TABLE IF NOT EXISTS tests (id INTEGER PRIMARY KEY AUTOINCREMENT, userID INTEGER, illumination TEXT, testDate TEXT, comments TEXT, scores TEXT, serialNum TEXT, time TEXT, FOREIGN KEY(userID) REFERENCES users(id))), ref: 00C9293E
Part of subcall function 00C92820: ?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C9294B
Part of subcall function 00C92820: ?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C92950
Part of subcall function 00C92820: ?size@QListData@@QBEHXZ.QT5CORE ref: 00C92957

??1QString@@QAE@XZ.QT5CORE ref: 00C6B2E1
??1QFileDialog@@UAE@XZ.QT5WIDGETS ref: 00C6B2EA

Strings

jng, xrefs: 00C6B1C7
.sqlite, xrefs: 00C6B2AC

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$File$Query@@$Database@@Dialog@@String@@@$?exec@?number@?prepare@?setName@Widget@@$?add?append@?application?database@?from?get?open@?size@Application@@ArrayAscii_helper@CoreData@Data@@DatabaseDatabase@Database@@@Dialog@@@@@Directory@Flags@ListOption@Path@SaveString@@0@String@@11@String@@_TypedV0@@V2@11
String ID: .sqlite$jng
API String ID: 2080038635-3781877619
Opcode ID: aeae9039268decfb9d0adc9d25c20f84dca2ae8c4b7a066f650f322d6f49be7b
Instruction ID: 4c3bbecbe57a3bfa4c8647168510a16f332cb54efb4190a1a68eac50d4976556
Opcode Fuzzy Hash: aeae9039268decfb9d0adc9d25c20f84dca2ae8c4b7a066f650f322d6f49be7b
Instruction Fuzzy Hash: 2341CB7590424AEFCB05EBA4EC59BEEBF78FB15355F100259E506A32A0DE341A0DCB61

Uniqueness

Uniqueness Score: -1.00%

Function 00C69610 Relevance: 40.4, APIs: 21, Strings: 2, Instructions: 102COMMON

Download Yara Rule

APIs

??0QString@@QAE@XZ.QT5CORE(676E6AEE), ref: 00C6963D
??0QString@@QAE@XZ.QT5CORE ref: 00C6964F
??0QString@@QAE@XZ.QT5CORE ref: 00C6965A
??0QFileDialog@@QAE@PAVQWidget@@ABVQString@@11@Z.QT5WIDGETS(?,00000000,00000000,00000000), ref: 00C6966B
??1QString@@QAE@XZ.QT5CORE(?,00000000,00000000,00000000), ref: 00C69674
??1QString@@QAE@XZ.QT5CORE(?,00000000,00000000,00000000), ref: 00C6967D
??1QString@@QAE@XZ.QT5CORE(?,00000000,00000000,00000000), ref: 00C6968A
?applicationDirPath@QCoreApplication@@SA?AVQString@@XZ.QT5CORE(?,?,00000000,00000000,00000000), ref: 00C69694
?setDirectory@QFileDialog@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C696A5
??1QString@@QAE@XZ.QT5CORE ref: 00C696AE
??0QString@@QAE@XZ.QT5CORE ref: 00C696B7
??0QString@@QAE@XZ.QT5CORE ref: 00C696C2
??0QString@@QAE@XZ.QT5CORE ref: 00C696CD
?getSaveFileName@QFileDialog@@SA?AVQString@@PAVQWidget@@ABV2@11PAV2@V?$QFlags@W4Option@QFileDialog@@@@@Z.QT5WIDGETS(?,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00C696E4
??1QString@@QAE@XZ.QT5CORE ref: 00C696F0
??1QString@@QAE@XZ.QT5CORE ref: 00C696F9
??1QString@@QAE@XZ.QT5CORE ref: 00C69706
?append@QString@@QAEAAV1@PBD@Z.QT5CORE(.sqlite), ref: 00C69714
??0QString@@QAE@ABV0@@Z.QT5CORE(?), ref: 00C69724

Part of subcall function 00C8F560: new.LIBCMT ref: 00C8F58E

Part of subcall function 00C8F800: ??8QString@@QBE_NPBD@Z.QT5CORE(00CB9364,676E6AEE,00000000,00000000,?,?,?,?,?,?,00000000,00CB397A,000000FF,?,00C6973E), ref: 00C8F83C
Part of subcall function 00C8F800: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(QSQLITE,00000007,?,?,?,?,?,?,00000000,00CB397A,000000FF,?,00C6973E), ref: 00C8F854
Part of subcall function 00C8F800: ?number@QString@@SA?AV1@HH@Z.QT5CORE(?,00000000,0000000A,?,?,?,?,?,?,00000000,00CB397A,000000FF,?,00C6973E), ref: 00C8F86A
Part of subcall function 00C8F800: ?addDatabase@QSqlDatabase@@SA?AV1@ABVQString@@0@Z.QT5SQL(00000000,?,00000000,?,?,?,?,?,?,00000000,00CB397A,000000FF,?,00C6973E), ref: 00C8F87D
Part of subcall function 00C8F800: ??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,000000FF), ref: 00C8F889
Part of subcall function 00C8F800: ??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,000000FF), ref: 00C8F896
Part of subcall function 00C8F800: ?setDatabaseName@QSqlDatabase@@QAEXABVQString@@@Z.QT5SQL(00C6973E), ref: 00C8F8A9
Part of subcall function 00C8F800: ?open@QSqlDatabase@@QAE_NXZ.QT5SQL(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,000000FF), ref: 00C8F8B2
Part of subcall function 00C8F800: ??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(00C6973E), ref: 00C8F8BF
Part of subcall function 00C8F800: ??0QSqlDatabase@@QAE@ABV0@@Z.QT5SQL(?), ref: 00C8F8CB
Part of subcall function 00C8F800: ??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL ref: 00C8F8D4
Part of subcall function 00C8F800: ??0QString@@QAE@XZ.QT5CORE ref: 00C8F8DD
Part of subcall function 00C8F800: ??4QString@@QAEAAV0@PBD@Z.QT5CORE(CREATE TABLE IF NOT EXISTS users (id INTEGER PRIMARY KEY AUTOINCREMENT, first TEXT, middle TEXT, last TEXT, refNum TEXT, DOB TEXT, gender TEXT, location TEXT, industry TEXT, experience TEXT, job TEXT)), ref: 00C8F8EF
Part of subcall function 00C8F800: ?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C8F902
Part of subcall function 00C8F800: ?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C8F90D
Part of subcall function 00C8F800: ??4QString@@QAEAAV0@PBD@Z.QT5CORE(CREATE TABLE IF NOT EXISTS tests (id INTEGER PRIMARY KEY AUTOINCREMENT, userID INTEGER, illumination TEXT, testDate TEXT, comments TEXT, scores TEXT, serialNum TEXT, time TEXT, FOREIGN KEY(userID) REFERENCES users(id))), ref: 00C8F917
Part of subcall function 00C8F800: ?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C8F924
Part of subcall function 00C8F800: ?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C8F929
Part of subcall function 00C8F800: ??4QString@@QAEAAV0@PBD@Z.QT5CORE(CREATE TABLE IF NOT EXISTS serialNums (id INTEGER PRIMARY KEY AUTOINCREMENT, serialNum TEXT, purchaseDate TEXT)), ref: 00C8F933
Part of subcall function 00C8F800: ?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C8F940
Part of subcall function 00C8F800: ?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C8F945
Part of subcall function 00C8F800: ??4QString@@QAEAAV0@PBD@Z.QT5CORE(CREATE TABLE IF NOT EXISTS settings (id INTEGER PRIMARY KEY AUTOINCREMENT, scoreMode INTEGER, testGui INTEGER, testReport INTEGER, tesGui INTEGER, tesReport INTEGER,), ref: 00C8F94F

??1QString@@QAE@XZ.QT5CORE ref: 00C69741
??1QFileDialog@@UAE@XZ.QT5WIDGETS ref: 00C6974A

Strings

jng, xrefs: 00C69627
.sqlite, xrefs: 00C6970C

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Query@@$File$String@@@$Database@@Dialog@@$?exec@?prepare@V0@@$?setName@Widget@@$?add?append@?application?from?get?number@?open@Application@@ArrayAscii_helper@CoreData@DatabaseDatabase@Database@@@Dialog@@@@@Directory@Flags@Option@Path@SaveString@@0@String@@11@TypedV2@11
String ID: .sqlite$jng
API String ID: 2918694385-3781877619
Opcode ID: f6780e1bda8a24f904f19a7e0c3ac40e0d32e4aa4b52fa0fcb7b2695072cfa98
Instruction ID: 01ce18fc5f69136ab1753f01e106951ac91770c11cb7f4c46d7b42b01da82373
Opcode Fuzzy Hash: f6780e1bda8a24f904f19a7e0c3ac40e0d32e4aa4b52fa0fcb7b2695072cfa98
Instruction Fuzzy Hash: A341CB7590424AEFCB04EBA4EC59BEEBF78FB15355F100269E506A32A0DE341A0DCB61

Uniqueness

Uniqueness Score: -1.00%

Function 00C88E20 Relevance: 38.7, APIs: 20, Strings: 2, Instructions: 162windowCOMMON

Download Yara Rule

APIs

Part of subcall function 00C61FD0: ??1QString@@QAE@XZ.QT5CORE(676E6AEE,?,6B520380,6B5175D0,00000000,00CAD200,000000FF,?,00C88DAB,?,00C6B410,?,?,676E6AEE), ref: 00C62035
Part of subcall function 00C61FD0: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(6B5175D0,676E6AEE,?,6B520380,6B5175D0,00000000,00CAD200,000000FF,?,00C88DAB,?,00C6B410,?,?,676E6AEE), ref: 00C62040

?clear@QComboBox@@QAEXXZ.QT5WIDGETS(676E6AEE,?,?,6B5175D0,00C6B43D,jng,?,jng,?,?,676E6AEE), ref: 00C88EA6
?clearEditText@QComboBox@@QAEXXZ.QT5WIDGETS(?,jng,?,?,676E6AEE), ref: 00C88EB5
??0QVariant@@QAE@XZ.QT5CORE(?,jng,?,?,676E6AEE), ref: 00C88EBE
?count@QComboBox@@QBEHXZ.QT5WIDGETS(?,?,?,?,?,?,?,jng,?,?,676E6AEE), ref: 00C88EF1
??0QIcon@@QAE@XZ.QT5GUI(?,?,?,?,?,?,?,jng,?,?,676E6AEE), ref: 00C88EFC
?insertItem@QComboBox@@QAEXHABVQIcon@@ABVQString@@ABVQVariant@@@Z.QT5WIDGETS(00000000,00000000,00000000,?,?,?,?,?,?,?,?,jng,?,?,676E6AEE), ref: 00C88F0E
??1QIcon@@QAE@XZ.QT5GUI(?,?,?,?,?,?,?,jng,?,?,676E6AEE), ref: 00C88F17
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,jng,?,?,676E6AEE), ref: 00C88F20
??1QVariant@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,jng,?,?,676E6AEE), ref: 00C88F29
?size@QListData@@QBEHXZ.QT5CORE(?,?,?,?,?,?,?,jng,?,?,676E6AEE), ref: 00C88F3C
??0QVariant@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,jng,?,?,676E6AEE), ref: 00C88F49
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,?,?,?,?,?,?,jng,?,?,676E6AEE), ref: 00C88F59
?count@QComboBox@@QBEHXZ.QT5WIDGETS(?,?,?,?,?,?,?,jng,?,?,676E6AEE), ref: 00C88F6F
??0QIcon@@QAE@XZ.QT5GUI(?,?,?,?,?,?,?,jng,?,?,676E6AEE), ref: 00C88F7A
?insertItem@QComboBox@@QAEXHABVQIcon@@ABVQString@@ABVQVariant@@@Z.QT5WIDGETS(00000000,00000000,00000000,?,?,?,?,?,?,?,?,jng,?,?,676E6AEE), ref: 00C88F8C
??1QIcon@@QAE@XZ.QT5GUI(?,?,?,?,?,?,?,jng,?,?,676E6AEE), ref: 00C88F95
??1QVariant@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,jng,?,?,676E6AEE), ref: 00C88F9E
?size@QListData@@QBEHXZ.QT5CORE(?,?,?,?,?,?,?,jng,?,?,676E6AEE), ref: 00C88FB3
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,jng,?,?,676E6AEE), ref: 00C89005
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(676E6AEE,?,?,?,?,?,?,?,jng,?,?,676E6AEE), ref: 00C89010

Strings

jng, xrefs: 00C88E37
jng, xrefs: 00C88E78, 00C88E7D, 00C88E80

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Box@@ComboIcon@@$Data@@ListString@@$Variant@@$?count@?dispose@?insert?size@Data@1@@Item@Variant@@@$?at@?clear?clear@EditText@
String ID: jng$jng
API String ID: 1822405900-1345699772
Opcode ID: 28dbed238997c087a70c911dada3e64065a07445030f2a925675c007b3cbb5ca
Instruction ID: 46032e3c8f4be061947120273c69813a62bc1a012ed58ebe8da58b63b9883741
Opcode Fuzzy Hash: 28dbed238997c087a70c911dada3e64065a07445030f2a925675c007b3cbb5ca
Instruction Fuzzy Hash: 1561457590021ADFDB14DFA4D898BAEB7B8FF14314F144629E812A3391DF306D09CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00C9BA50 Relevance: 38.6, APIs: 18, Strings: 4, Instructions: 109windowCOMMON

Download Yara Rule

APIs

?objectName@QObject@@QBE?AVQString@@XZ.QT5CORE(00CB553A,676E6AEE,000000FF,00000000,?,6B94A624,00CB553A,000000FF,?,00C94FDF,00000000), ref: 00C9BA83
??1QString@@QAE@XZ.QT5CORE(?,6B94A624,00CB553A,000000FF,?,00C94FDF,00000000), ref: 00C9BA91
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(00C94FDF,chartGraphicsView,000000FF,?,6B94A624,00CB553A,000000FF,?,00C94FDF,00000000), ref: 00C9BAA6
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000,?,?,?,?,?,?,000000FF,?,00C94FDF,00000000), ref: 00C9BAB5
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,000000FF,?,00C94FDF), ref: 00C9BAC5
?resize@QWidget@@QAEXHH@Z.QT5WIDGETS(00000258,00000258,?,6B94A624,00CB553A,000000FF,?,00C94FDF,00000000), ref: 00C9BAD7
?setContextMenuPolicy@QWidget@@QAEXW4ContextMenuPolicy@Qt@@@Z.QT5WIDGETS(00000000,?,6B94A624,00CB553A,000000FF,?,00C94FDF,00000000), ref: 00C9BAE1
new.LIBCMT ref: 00C9BAE9
??0QGraphicsView@@QAE@PAVQWidget@@@Z.QT5WIDGETS(00C94FDF,?,?,6B94A624,00CB553A,000000FF,?,00C94FDF), ref: 00C9BB00
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(00C94FDF,chartView,000000FF,?,?,6B94A624,00CB553A,000000FF,?,00C94FDF), ref: 00C9BB2A
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000,?,?,?,?,?,?,00CB553A,000000FF,?,00C94FDF), ref: 00C9BB40
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,00CB553A,000000FF,?,00C94FDF), ref: 00C9BB50
??0QRect@@QAE@HHHH@Z.QT5CORE(00000000,00000000,00000258,00000258,?,?,?,?,?,?,00CB553A,000000FF,?,00C94FDF), ref: 00C9BB67
?setGeometry@QWidget@@QAEXABVQRect@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,00CB553A,000000FF,?,00C94FDF), ref: 00C9BB70
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,chartGraphicsView,Form,00000000,000000FF,?,?,?,?,?,?,00CB553A,000000FF,?,00C94FDF), ref: 00C9BB88
?setWindowTitle@QWidget@@QAEXABVQString@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,?,?,?,00CB553A,000000FF,?,00C94FDF), ref: 00C9BB9B
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,00CB553A,000000FF,?,00C94FDF), ref: 00C9BBAB
?connectSlotsByName@QMetaObject@@SAXPAVQObject@@@Z.QT5CORE(00C94FDF,?,?,?,?,?,?,?,?,?,?,?,00CB553A,000000FF,?,00C94FDF), ref: 00C9BBB2

Strings

jng, xrefs: 00C9BA66
chartGraphicsView, xrefs: 00C9BAA0, 00C9BB82
Form, xrefs: 00C9BB7A
chartView, xrefs: 00C9BB1D

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$?set$Name@Object@@Widget@@$String@@@$?fromContextMenuObjectPolicy@Utf8@$?connect?object?resize@?translate@Application@@CoreGeometry@GraphicsMetaObject@@@Qt@@@Rect@@Rect@@@SlotsTitle@View@@Widget@@@Window
String ID: Form$chartGraphicsView$chartView$jng
API String ID: 3151063852-1483730501
Opcode ID: d758fdf0728558f00836e36fb57b86a09868fd5b61d4d4181400869d23846faa
Instruction ID: e79b67f72e23fcc57e1cfbbafa17623bc08ebc42eaa93ca4de8c9ea8130435c9
Opcode Fuzzy Hash: d758fdf0728558f00836e36fb57b86a09868fd5b61d4d4181400869d23846faa
Instruction Fuzzy Hash: 5D412971A00609AFCB00DF98EC09B9EBBB8FB58721F144319E526A72E0CB705609DB95

Uniqueness

Uniqueness Score: -1.00%

Function 00C7DAF0 Relevance: 38.6, APIs: 15, Strings: 7, Instructions: 101COMMON

Download Yara Rule

APIs

?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,DatabaseFormWidget,Form,00000000,000000FF,676E6AEE,6B9DED70,?,00C79704,00C7FAE6,00C79704), ref: 00C7DB32
?setWindowTitle@QWidget@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C7DB42
??1QString@@QAE@XZ.QT5CORE ref: 00C7DB52
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,DatabaseFormWidget,Enter...,00000000,000000FF), ref: 00C7DB6A
?setPlaceholderText@QLineEdit@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C7DB7A
??1QString@@QAE@XZ.QT5CORE ref: 00C7DB8A
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,DatabaseFormWidget,Clear Search,00000000,000000FF), ref: 00C7DBA2
?setText@QAbstractButton@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C7DBB8
??1QString@@QAE@XZ.QT5CORE ref: 00C7DBC4
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,DatabaseFormWidget,Select Test,00000000,000000FF), ref: 00C7DBDC
?setText@QAbstractButton@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C7DBEC
??1QString@@QAE@XZ.QT5CORE ref: 00C7DBF8
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,DatabaseFormWidget,Delete,00000000,000000FF), ref: 00C7DC10
?setText@QAbstractButton@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C7DC20
??1QString@@QAE@XZ.QT5CORE ref: 00C7DC25

Strings

jng, xrefs: 00C7DB07
Enter..., xrefs: 00C7DB5C
Clear Search, xrefs: 00C7DB94
Form, xrefs: 00C7DB27
Delete, xrefs: 00C7DC02
Select Test, xrefs: 00C7DBCE
DatabaseFormWidget, xrefs: 00C7DB2C, 00C7DB64, 00C7DB9C, 00C7DBD6, 00C7DC0A

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$?set?translate@Application@@CoreString@@@$Text@$AbstractButton@@$Edit@@LinePlaceholderTitle@Widget@@Window
String ID: Clear Search$DatabaseFormWidget$Delete$Enter...$Form$Select Test$jng
API String ID: 194458776-3031190024
Opcode ID: 0b1ad3f0ce848197f52c4c5efdeaa47b493bf4f6236a39fca512943dc86978e8
Instruction ID: ced511891e6448b7e88bc1be9ca69ce4f95801e1b644e0ba16ba87c1802de3bd
Opcode Fuzzy Hash: 0b1ad3f0ce848197f52c4c5efdeaa47b493bf4f6236a39fca512943dc86978e8
Instruction Fuzzy Hash: 9F3130B1544219ABCB00EFA8DC85FDE7B68EB58720F214359F925A72D0DB70A605CB61

Uniqueness

Uniqueness Score: -1.00%

Function 00C6E480 Relevance: 37.2, APIs: 20, Strings: 1, Instructions: 407COMMON

Download Yara Rule

APIs

??1QString@@QAE@XZ.QT5CORE ref: 00C6E531
??1QString@@QAE@XZ.QT5CORE ref: 00C6E53D
??1QString@@QAE@XZ.QT5CORE ref: 00C6E549
??1QString@@QAE@XZ.QT5CORE ref: 00C6E555
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?), ref: 00C6E58E
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?), ref: 00C6E5C0
?freeTree@QMapDataBase@@QAEXPAUQMapNodeBase@@H@Z.QT5CORE(?,00000004), ref: 00C6E5F9
?freeData@QMapDataBase@@SAXPAU1@@Z.QT5CORE(?), ref: 00C6E603
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?), ref: 00C6E631
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?), ref: 00C6E65B
?freeTree@QMapDataBase@@QAEXPAUQMapNodeBase@@H@Z.QT5CORE(?,00000004), ref: 00C6E694
?freeData@QMapDataBase@@SAXPAU1@@Z.QT5CORE(?), ref: 00C6E69E
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?), ref: 00C6E6CC
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(6B4BE2C0,CCCCCCC8,CCCCCCC8), ref: 00C6E711
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(6B4BE2C0,CCCCCCC8,CCCCCCC8), ref: 00C6E75A
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(6B4BE2C0,CCCCCCC8,CCCCCCC8,?,?), ref: 00C6E7F9
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(6B4BE2C0,CCCCCCC8,CCCCCCC8), ref: 00C6E842
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(6B4BE2C0,CCCCCCC8,CCCCCCC8), ref: 00C6E88B
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(6B4BE2C0,CCCCCCC8,CCCCCCC8), ref: 00C6E8D4
??1QWidget@@UAE@XZ.QT5WIDGETS(?), ref: 00C6E909

Strings

jng, xrefs: 00C6E495

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: ?dispose@Data@1@@Data@@List$Base@@$?freeDataString@@$Data@NodeTree@U1@@$Widget@@
String ID: jng
API String ID: 2566133024-1186463058
Opcode ID: 1e3d7192f5ba9720c721065ce555e1564836cc3734b165c349ea0e9d375c3a83
Instruction ID: 96e513f5bd7ae2d22ce53f27fdcc55fb868bca6bbca30c9138d0e5d63b3eb72a
Opcode Fuzzy Hash: 1e3d7192f5ba9720c721065ce555e1564836cc3734b165c349ea0e9d375c3a83
Instruction Fuzzy Hash: A5F15274601606DFEB24DF68D884B59B3A4FF05328F184269E426DB6A0DB31FE19CF91

Uniqueness

Uniqueness Score: -1.00%

Function 00C69C20 Relevance: 36.9, APIs: 20, Strings: 1, Instructions: 101COMMON

Download Yara Rule

APIs

??0QString@@QAE@XZ.QT5CORE(676E6AEE), ref: 00C69C4D
??0QString@@QAE@XZ.QT5CORE ref: 00C69C5F
??0QString@@QAE@XZ.QT5CORE ref: 00C69C6A
??0QFileDialog@@QAE@PAVQWidget@@ABVQString@@11@Z.QT5WIDGETS(?,00000000,00000000,00000000), ref: 00C69C7B
??1QString@@QAE@XZ.QT5CORE(?,00000000,00000000,00000000), ref: 00C69C84
??1QString@@QAE@XZ.QT5CORE(?,00000000,00000000,00000000), ref: 00C69C8D
??1QString@@QAE@XZ.QT5CORE(?,00000000,00000000,00000000), ref: 00C69C9A
?applicationDirPath@QCoreApplication@@SA?AVQString@@XZ.QT5CORE(?,?,00000000,00000000,00000000), ref: 00C69CA4
?setDirectory@QFileDialog@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C69CB5
??1QString@@QAE@XZ.QT5CORE ref: 00C69CBE
??0QString@@QAE@XZ.QT5CORE ref: 00C69CC7
??0QString@@QAE@XZ.QT5CORE ref: 00C69CD2
??0QString@@QAE@XZ.QT5CORE ref: 00C69CDD
?getOpenFileName@QFileDialog@@SA?AVQString@@PAVQWidget@@ABV2@11PAV2@V?$QFlags@W4Option@QFileDialog@@@@@Z.QT5WIDGETS(?,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00C69CF4
??1QString@@QAE@XZ.QT5CORE ref: 00C69D00
??1QString@@QAE@XZ.QT5CORE ref: 00C69D09
??1QString@@QAE@XZ.QT5CORE ref: 00C69D12
??0QString@@QAE@ABV0@@Z.QT5CORE(?), ref: 00C69D22

Part of subcall function 00C8F560: new.LIBCMT ref: 00C8F58E

Part of subcall function 00C925D0: ??8QString@@QBE_NPBD@Z.QT5CORE(00CB9364,676E6AEE,00000000,00000000,?,?,00000000,00CB41A4,000000FF,?,00C69D3C), ref: 00C9260C
Part of subcall function 00C925D0: ??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(00C69D3C,?,?,00000000,00CB41A4,000000FF,?,00C69D3C), ref: 00C92625
Part of subcall function 00C925D0: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(QSQLITE,00000007,?,?,00000000,00CB41A4,000000FF,?,00C69D3C), ref: 00C92635
Part of subcall function 00C925D0: ?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A,?,?,?,00000000,00CB41A4,000000FF,?,00C69D3C), ref: 00C9264E
Part of subcall function 00C925D0: ?addDatabase@QSqlDatabase@@SA?AV1@ABVQString@@0@Z.QT5SQL(00CB41A4,00000000,00000000,?,?,?,?,?,?,00000000,00CB41A4,000000FF,?,00C69D3C), ref: 00C92664
Part of subcall function 00C925D0: ??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,00000000,00CB41A4,000000FF,?,00C69D3C), ref: 00C92670
Part of subcall function 00C925D0: ??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,00000000,00CB41A4,000000FF,?,00C69D3C), ref: 00C9267D
Part of subcall function 00C925D0: ?setDatabaseName@QSqlDatabase@@QAEXABVQString@@@Z.QT5SQL(00C69D3C,?,?,?,?,?,?,?,?,?,00000000,00CB41A4,000000FF,?,00C69D3C), ref: 00C92690
Part of subcall function 00C925D0: ?open@QSqlDatabase@@QAE_NXZ.QT5SQL(?,?,?,?,?,?,?,?,?,00000000,00CB41A4,000000FF,?,00C69D3C), ref: 00C92699
Part of subcall function 00C925D0: ?setDatabaseName@QSqlDatabase@@QAEXABVQString@@@Z.QT5SQL(00C69D3C,?,?,?,?,?,?,?,?,?,00000000,00CB41A4,000000FF,?,00C69D3C), ref: 00C926A6
Part of subcall function 00C925D0: ??1QSqlDatabase@@QAE@XZ.QT5SQL(?,?,?,?,?,?,?,?,?,00000000,00CB41A4,000000FF,?,00C69D3C), ref: 00C926B6
Part of subcall function 00C925D0: ??1QString@@QAE@XZ.QT5CORE(?,?,00000000,00CB41A4,000000FF,?,00C69D3C), ref: 00C926BF

??1QString@@QAE@XZ.QT5CORE ref: 00C69D4D
??1QFileDialog@@UAE@XZ.QT5WIDGETS ref: 00C69D56

Strings

jng, xrefs: 00C69C37

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$File$Database@@$Dialog@@$?setName@String@@@$DatabaseV0@@Widget@@$?add?application?from?get?number@?open@Application@@ArrayAscii_helper@CoreData@Database@Dialog@@@@@Directory@Flags@OpenOption@Path@String@@0@String@@11@TypedV2@11
String ID: jng
API String ID: 2323394482-1186463058
Opcode ID: 12a8f156e55f46755e9d1a40c7044f54b4e965b9e9beb1bf0079a0557ca242f0
Instruction ID: a2f26513e71868d3c5b9195c552ab0fec6eea0546592fee1fec729d815f13029
Opcode Fuzzy Hash: 12a8f156e55f46755e9d1a40c7044f54b4e965b9e9beb1bf0079a0557ca242f0
Instruction Fuzzy Hash: 2B41FC75900249DFCB04EBA4EC59BEEBF78FB15355F100269E506A32A0DE341A0DCBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00C79470 Relevance: 36.1, APIs: 24, Instructions: 141COMMON

Download Yara Rule

APIs

??0QSize@@QAE@HH@Z.QT5CORE(6BEAC440,6BEAC440,6BA7F4C0,6BEAC440,?,00C630BB,-00000001), ref: 00C794B2
?setMaximumSize@QWidget@@QAEXABVQSize@@@Z.QT5WIDGETS(00000000), ref: 00C794BF
??0QSize@@QAE@HH@Z.QT5CORE(6BEAC440,6BEAC440), ref: 00C794CB
?setMinimumSize@QWidget@@QAEXABVQSize@@@Z.QT5WIDGETS(00000000), ref: 00C794D8
??0QSize@@QAE@HH@Z.QT5CORE(6BEAC440,6BEAC440), ref: 00C794F8
?setMaximumSize@QWidget@@QAEXABVQSize@@@Z.QT5WIDGETS(00000000), ref: 00C79505
??0QSize@@QAE@HH@Z.QT5CORE(6BEAC440,6BEAC440), ref: 00C79511
?setMinimumSize@QWidget@@QAEXABVQSize@@@Z.QT5WIDGETS(00000000), ref: 00C7951E
??0QSize@@QAE@HH@Z.QT5CORE(6BEAC440,6BEAC440,6BA7F4C0,6BEAC440,?,00C630BB,-00000001), ref: 00C79543
?setMaximumSize@QWidget@@QAEXABVQSize@@@Z.QT5WIDGETS(00000000), ref: 00C79550
??0QSize@@QAE@HH@Z.QT5CORE(6BEAC440,6BEAC440), ref: 00C7955C
?setMinimumSize@QWidget@@QAEXABVQSize@@@Z.QT5WIDGETS(00000000), ref: 00C79569
??0QSize@@QAE@HH@Z.QT5CORE(6BEAC440,6BEAC440), ref: 00C7958B
?setMaximumSize@QWidget@@QAEXABVQSize@@@Z.QT5WIDGETS(00000000), ref: 00C79598
??0QSize@@QAE@HH@Z.QT5CORE(6BEAC440,6BEAC440), ref: 00C795A4
?setMinimumSize@QWidget@@QAEXABVQSize@@@Z.QT5WIDGETS(00000000), ref: 00C795B1
??0QSize@@QAE@HH@Z.QT5CORE(00000000,00000000), ref: 00C795D1
?setMinimumSize@QWidget@@QAEXABVQSize@@@Z.QT5WIDGETS(00000000), ref: 00C795DE
??0QSize@@QAE@HH@Z.QT5CORE(6BEAC440,6BEAC440), ref: 00C795EA
?setMaximumSize@QWidget@@QAEXABVQSize@@@Z.QT5WIDGETS(00000000), ref: 00C795F7
?setMinimumWidth@QWidget@@QAEXH@Z.QT5WIDGETS(6BEAC440,6BEAC440,6BEAC440), ref: 00C79630
?setMaximumWidth@QWidget@@QAEXH@Z.QT5WIDGETS(6BEAC440), ref: 00C7963D
?height@QWidget@@QBEHXZ.QT5WIDGETS ref: 00C79649
?width@QWidget@@QBEHXZ.QT5WIDGETS(00000000), ref: 00C79656

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Widget@@$?set$Size@Size@@Size@@@$MaximumMinimum$Width@$?height@?width@
String ID:
API String ID: 2171772789-0
Opcode ID: 503b6762ee092bcf7f9b3efb678cc8c5f854d9db0535bfd1b2090865c086a16c
Instruction ID: 63394792046aa0200b743fd879ddbd984145c461d175500233698ad20dca336f
Opcode Fuzzy Hash: 503b6762ee092bcf7f9b3efb678cc8c5f854d9db0535bfd1b2090865c086a16c
Instruction Fuzzy Hash: 2D513B71615511EFC345DF70EC68AAEF72DFF9A251B004719F506A3590DF30A88ACBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00C9AAD0 Relevance: 35.1, APIs: 19, Strings: 1, Instructions: 140COMMON

Download Yara Rule

APIs

?setRenderHint@QGraphicsView@@QAEXW4RenderHint@QPainter@@_N@Z.QT5WIDGETS(00000001,00000001,676E6AEE,000000FF,00000000,000000FF), ref: 00C9AB0D
new.LIBCMT ref: 00C9AB15

Part of subcall function 00CAC0B7: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0DE

??0QGraphicsScene@@QAE@PAVQObject@@@Z.QT5WIDGETS(00000000), ref: 00C9AB2D
?height@QWidget@@QBEHXZ.QT5WIDGETS ref: 00C9AB48
?width@QWidget@@QBEHXZ.QT5WIDGETS ref: 00C9AB63
?setSceneRect@QGraphicsScene@@QAEXNNNN@Z.QT5WIDGETS ref: 00C9AB84
?width@QGraphicsScene@@QBENXZ.QT5WIDGETS ref: 00C9AB8D
?height@QGraphicsScene@@QBENXZ.QT5WIDGETS ref: 00C9ABAA
?width@QGraphicsScene@@QBENXZ.QT5WIDGETS ref: 00C9ABC7
?height@QGraphicsScene@@QBENXZ.QT5WIDGETS ref: 00C9ABE4
??0QLineF@@QAE@ABVQLine@@@Z.QT5CORE(?), ref: 00C9AC2F
??0QPen@@QAE@XZ.QT5GUI ref: 00C9AC3E
?addLine@QGraphicsScene@@QAEPAVQGraphicsLineItem@@ABVQLineF@@ABVQPen@@@Z.QT5WIDGETS(?,00000000), ref: 00C9AC55
??1QPen@@QAE@XZ.QT5GUI ref: 00C9AC67
??0QLineF@@QAE@ABVQLine@@@Z.QT5CORE(?), ref: 00C9AC70
??0QPen@@QAE@XZ.QT5GUI ref: 00C9AC79
?addLine@QGraphicsScene@@QAEPAVQGraphicsLineItem@@ABVQLineF@@ABVQPen@@@Z.QT5WIDGETS(?,00000000), ref: 00C9AC8D
??1QPen@@QAE@XZ.QT5GUI ref: 00C9AC99

Part of subcall function 00C9A3E0: ??0QLineF@@QAE@ABVQLine@@@Z.QT5CORE(?,676E6AEE,6BC1BB50,6C017DB0,00000000), ref: 00C9A4BE
Part of subcall function 00C9A3E0: ??0QPen@@QAE@XZ.QT5GUI ref: 00C9A4C7
Part of subcall function 00C9A3E0: ?addLine@QGraphicsScene@@QAEPAVQGraphicsLineItem@@ABVQLineF@@ABVQPen@@@Z.QT5WIDGETS(?,00000000), ref: 00C9A4DC
Part of subcall function 00C9A3E0: ??1QPen@@QAE@XZ.QT5GUI ref: 00C9A4EC
Part of subcall function 00C9A3E0: new.LIBCMT ref: 00C9A4F4
Part of subcall function 00C9A3E0: ??0QGraphicsTextItem@@QAE@PAVQGraphicsItem@@@Z.QT5WIDGETS(00000000), ref: 00C9A50C

Part of subcall function 00C9A6B0: ??0QLineF@@QAE@ABVQLine@@@Z.QT5CORE(?,676E6AEE,6BC1BB50,6C017DB0,00000000), ref: 00C9A7A8
Part of subcall function 00C9A6B0: ??0QPen@@QAE@XZ.QT5GUI ref: 00C9A7B1
Part of subcall function 00C9A6B0: ?addLine@QGraphicsScene@@QAEPAVQGraphicsLineItem@@ABVQLineF@@ABVQPen@@@Z.QT5WIDGETS(?,00000000), ref: 00C9A7C9
Part of subcall function 00C9A6B0: ??1QPen@@QAE@XZ.QT5GUI ref: 00C9A7D9
Part of subcall function 00C9A6B0: new.LIBCMT ref: 00C9A7E1
Part of subcall function 00C9A6B0: ??0QGraphicsTextItem@@QAE@PAVQGraphicsItem@@@Z.QT5WIDGETS(00000000), ref: 00C9A7F9
Part of subcall function 00C9A6B0: ?font@QGraphicsTextItem@@QBE?AVQFont@@XZ.QT5WIDGETS(?,?), ref: 00C9A82E

?setScene@QGraphicsView@@QAEXPAVQGraphicsScene@@@Z.QT5WIDGETS(?), ref: 00C9ACBB

Strings

jng, xrefs: 00C9AAE7

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Graphics$Line$Scene@@$Pen@@$Item@@$?addLine@Line@@@Pen@@@$?height@?set?width@Text$Hint@Item@@@RenderView@@Widget@@$?font@Font@@Object@@@Painter@@_Rect@SceneScene@Scene@@@malloc
String ID: jng
API String ID: 2597500792-1186463058
Opcode ID: 50f4e2b2fe3b5d176e6b21f47205f25aabfa5001acad7d2fa52de28bdf9bdefd
Instruction ID: 51ea1879ada435c468a9eb485b487a647f5b1cbb68c416cdfb2f4ad13008d1ba
Opcode Fuzzy Hash: 50f4e2b2fe3b5d176e6b21f47205f25aabfa5001acad7d2fa52de28bdf9bdefd
Instruction Fuzzy Hash: 0F512CB1D0060ADFCB04DFA4D994B9EFBB9FF49310F10431AE916A32A1DB706955CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C8F0A0 Relevance: 34.7, APIs: 23, Instructions: 157COMMON

Download Yara Rule

APIs

?rowCount@QTableWidget@@QBEHXZ.QT5WIDGETS(00000000,00000000,?,?,?,?,?,?,?,?,?,?,00C85E79,00000000), ref: 00C8F0C6
??0QSize@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,00C85E79,00000000), ref: 00C8F0F4
?item@QListWidget@@QBEPAVQListWidgetItem@@H@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,?,00C85E79,00000000), ref: 00C8F101
?itemWidget@QListWidget@@QBEPAVQWidget@@PAVQListWidgetItem@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,?,00C85E79,00000000), ref: 00C8F10E
?cast@QMetaObject@@QBEPAVQObject@@PAV2@@Z.QT5CORE(00000000,?,?,?,?,?,?,?,?,?,00C85E79,00000000), ref: 00C8F11A
?setVerticalScrollBarPolicy@QAbstractScrollArea@@QAEXW4ScrollBarPolicy@Qt@@@Z.QT5WIDGETS(00000001,?,?,?,?,?,?,?,?,?,00C85E79,00000000), ref: 00C8F12A
?setHorizontalScrollBarPolicy@QAbstractScrollArea@@QAEXW4ScrollBarPolicy@Qt@@@Z.QT5WIDGETS(00000001,?,?,?,?,?,?,?,?,?,00C85E79,00000000), ref: 00C8F138
?rowCount@QTableWidget@@QBEHXZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,00C85E79,00000000), ref: 00C8F144
?spacing@QListView@@QBEHXZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,00C85E79,00000000), ref: 00C8F166
?setWidth@QSize@@QAEXH@Z.QT5CORE(00000000,?,?,?,?,?,?,?,?,?,00C85E79,00000000), ref: 00C8F189
?viewport@QAbstractScrollArea@@QBEPAVQWidget@@XZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,00C85E79,00000000), ref: 00C8F195
?height@QWidget@@QBEHXZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,00C85E79,00000000), ref: 00C8F19D
?setHeight@QSize@@QAEXH@Z.QT5CORE(00000000,?,?,?,?,?,?,?,?,?,00C85E79,00000000), ref: 00C8F1A8
?item@QListWidget@@QBEPAVQListWidgetItem@@H@Z.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,00C85E79,00000000), ref: 00C8F1BE
?setSizeHint@QListWidgetItem@@QAEXABVQSize@@@Z.QT5WIDGETS(?,?,?,?,?,?,?,?,?,00C85E79,00000000), ref: 00C8F1C6
?width@QWidget@@QBEHXZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,00C85E79,00000000), ref: 00C8F1CE
?rowCount@QTableWidget@@QBEHXZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,00C85E79,00000000), ref: 00C8F1F2
?width@QWidget@@QBEHXZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,00C85E79,00000000), ref: 00C8F210
?rowCount@QTableWidget@@QBEHXZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,00C85E79,00000000), ref: 00C8F234
?spacing@QListView@@QBEHXZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,00C85E79,00000000), ref: 00C8F256
?spacing@QListView@@QBEHXZ.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,?,00C85E79,00000000), ref: 00C8F27B
??0QSize@@QAE@HH@Z.QT5CORE(00000000,?,?,?,?,?,?,?,?,?,00C85E79,00000000), ref: 00C8F29E

Part of subcall function 00C949D0: ?pixmap@QIcon@@QBE?AVQPixmap@@ABVQSize@@W4Mode@1@W4State@1@@Z.QT5GUI(00000000,?,00000000,00000000,676E6AEE,00000000,?,00C8F2B3,?,?), ref: 00C94A07
Part of subcall function 00C949D0: ?setPixmap@QLabel@@QAEXABVQPixmap@@@Z.QT5WIDGETS(00000000,?,00C8F2B3,?), ref: 00C94A1B
Part of subcall function 00C949D0: ??1QPixmap@@UAE@XZ.QT5GUI(?,00C8F2B3,?), ref: 00C94A2B
Part of subcall function 00C949D0: ?resize@QWidget@@QAEXABVQSize@@@Z.QT5WIDGETS(?,?,00C8F2B3,?), ref: 00C94A3B

?rowCount@QTableWidget@@QBEHXZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,00C85E79,00000000), ref: 00C8F2C2

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Widget@@$List$Scroll$?set$?rowCount@Size@@Table$Policy@Widget$?spacing@AbstractArea@@Item@@View@@$?item@?width@Object@@Pixmap@@Qt@@@Size@@@$?cast@?height@?item?pixmap@?resize@?viewport@Height@Hint@HorizontalIcon@@Item@@@Label@@MetaMode@1@Pixmap@Pixmap@@@SizeState@1@@V2@@VerticalWidget@Width@
String ID:
API String ID: 1466127715-0
Opcode ID: 527c8a74260f3732961b12bedd7a4db87d09ddfc841aeee07c4c7d101ec1b7a2
Instruction ID: 68cc9fedd4a59f0241934dbc8ce71f903070bba30b7c5122b1d6a3f5177c1943
Opcode Fuzzy Hash: 527c8a74260f3732961b12bedd7a4db87d09ddfc841aeee07c4c7d101ec1b7a2
Instruction Fuzzy Hash: 32614375A14B059FC346DF34C864A29F7B9BF9E344B10871AF80AA7251EF31A8D6CB41

Uniqueness

Uniqueness Score: -1.00%

Function 00C6F0E0 Relevance: 33.5, APIs: 18, Strings: 1, Instructions: 234COMMON

Download Yara Rule

APIs

?size@QListData@@QBEHXZ.QT5CORE(676E6AEE,?,?,?,00CAEF8F,000000FF,?,00C6D7D6,?), ref: 00C6F117

Part of subcall function 00C6FB30: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(000000FF,?,?,000000FF,676E6AEE,?,?,?,00CAF136,000000FF,?,00C76CC1), ref: 00C6FBA5

?size@QListData@@QBEHXZ.QT5CORE(?,?,?,00CAEF8F,000000FF,?,00C6D7D6,?), ref: 00C6F138
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CBA9B4,00000001,?,?,?,00CAEF8F,000000FF,?,00C6D7D6,?), ref: 00C6F166
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,?,00CAEF8F,000000FF,?,00C6D7D6,?), ref: 00C6F17A
?split@QString@@QBE?AVQStringList@@ABV1@W4SplitBehavior@1@W4CaseSensitivity@Qt@@@Z.QT5CORE(000000FF,00CAEF8F,00000000,00000001,?,?,00CAEF8F,000000FF,?,00C6D7D6,?), ref: 00C6F191
??1QString@@QAE@XZ.QT5CORE(?,?,00CAEF8F,000000FF,?,00C6D7D6,?), ref: 00C6F1E5
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(00C6D7D6,?,?,00CAEF8F,000000FF,?,00C6D7D6,?), ref: 00C6F1F0
??1QString@@QAE@XZ.QT5CORE(?,?,?,00CAEF8F,000000FF,?,00C6D7D6,?), ref: 00C6F239
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(000000FF,?,?,?,00CAEF8F,000000FF,?,00C6D7D6,?), ref: 00C6F244
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,00CAEF8F,000000FF,?,00C6D7D6,?), ref: 00C6F254
?size@QListData@@QBEHXZ.QT5CORE(?,?,?,?,00CAEF8F,000000FF,?,00C6D7D6,?), ref: 00C6F25F
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,00000000,0000000A,?,?,?,?,00CAEF8F,000000FF,?,00C6D7D6,?), ref: 00C6F278
?toInt@QString@@QBEHPA_NH@Z.QT5CORE(?,?,?,?,00CAEF8F,000000FF,?,00C6D7D6,?), ref: 00C6F280
?size@QListData@@QBEHXZ.QT5CORE(?,?,?,?,?,00CAEF8F,000000FF,?,00C6D7D6,?), ref: 00C6F299
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,00CAEF8F,000000FF,?,00C6D7D6,?), ref: 00C6F2F5
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(00C6D7D6,?,?,?,?,?,00CAEF8F,000000FF,?,00C6D7D6,?), ref: 00C6F306
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,?,?,?,?,?,00CAEF8F,000000FF,?,00C6D7D6,?), ref: 00C6F339
?size@QListData@@QBEHXZ.QT5CORE(?,?,?,?,?,?,00CAEF8F,000000FF,?,00C6D7D6,?), ref: 00C6F34C

Strings

jng, xrefs: 00C6F0F7

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$String@@$?dispose@?size@Data@1@@$?at@$?from?split@ArrayAscii_helper@Behavior@1@CaseData@Int@List@@Qt@@@Sensitivity@SplitStringTyped
String ID: jng
API String ID: 474448163-1186463058
Opcode ID: f650d3b58e0b94372864320877e7f93aae5e428c50fc8c787ca26fd0046e744b
Instruction ID: 69b77ab66df56436a495f721bacff2782ed646bf64e14a030fb41910871118b7
Opcode Fuzzy Hash: f650d3b58e0b94372864320877e7f93aae5e428c50fc8c787ca26fd0046e744b
Instruction Fuzzy Hash: BC91A275900215DBDF15DFA8E8C47ADB774FF15324F150268E826A72A0DB30AE0ACB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C9A3E0 Relevance: 33.4, APIs: 18, Strings: 1, Instructions: 179COMMON

Download Yara Rule

APIs

??0QLineF@@QAE@ABVQLine@@@Z.QT5CORE(?,676E6AEE,6BC1BB50,6C017DB0,00000000), ref: 00C9A4BE
??0QPen@@QAE@XZ.QT5GUI ref: 00C9A4C7
?addLine@QGraphicsScene@@QAEPAVQGraphicsLineItem@@ABVQLineF@@ABVQPen@@@Z.QT5WIDGETS(?,00000000), ref: 00C9A4DC
??1QPen@@QAE@XZ.QT5GUI ref: 00C9A4EC
new.LIBCMT ref: 00C9A4F4

Part of subcall function 00CAC0B7: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0DE

??0QGraphicsTextItem@@QAE@PAVQGraphicsItem@@@Z.QT5WIDGETS(00000000), ref: 00C9A50C
?setPos@QGraphicsItem@@QAEXABVQPointF@@@Z.QT5WIDGETS(?,?), ref: 00C9A575
?number@QString@@SA?AV1@HH@Z.QT5CORE(?,00CB5259,0000000A), ref: 00C9A584
?setPlainText@QGraphicsTextItem@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C9A597
??1QString@@QAE@XZ.QT5CORE ref: 00C9A5A7
?addItem@QGraphicsScene@@QAEXPAVQGraphicsItem@@@Z.QT5WIDGETS(00000008), ref: 00C9A5B1
new.LIBCMT ref: 00C9A5B9

Part of subcall function 00CAC0B7: _callnewh.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0BF

??0QGraphicsRectItem@@QAE@NNNNPAVQGraphicsItem@@@Z.QT5WIDGETS ref: 00C9A619

Part of subcall function 00C95C90: ?append@QListData@@QAEPAPAXXZ.QT5CORE(676E6AEE,6B62DA60,6B62B6F0,00000000,?,?,00CB4DD0,000000FF,?,00C8160E,?,676E6AEE,6B62DA60,6B62B6F0), ref: 00C95CF9

?at@QListData@@QBEPAPAXH@Z.QT5CORE(00CB5259,?), ref: 00C9A642
??0QBrush@@QAE@ABVQColor@@W4BrushStyle@Qt@@@Z.QT5GUI(00000000,00000001), ref: 00C9A64F
?setBrush@QAbstractGraphicsShapeItem@@QAEXABVQBrush@@@Z.QT5WIDGETS(00000000), ref: 00C9A65F
??1QBrush@@QAE@XZ.QT5GUI ref: 00C9A66F
?addItem@QGraphicsScene@@QAEXPAVQGraphicsItem@@@Z.QT5WIDGETS(00000000), ref: 00C9A679

Strings

jng, xrefs: 00C9A3F7

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Graphics$Item@@$Item@@@$?add?setLineScene@@$Brush@@Data@@Item@ListPen@@String@@Text$?append@?at@?number@AbstractBrushBrush@Brush@@@Color@@F@@@Line@Line@@@Pen@@@PlainPointPos@Qt@@@RectShapeString@@@Style@Text@_callnewhmalloc
String ID: jng
API String ID: 254872605-1186463058
Opcode ID: cd687acdd529e3ad1b25a0772cea10e692d301dceb16893e8e0698daaf200e7c
Instruction ID: ebf821d82db7fea3fc435ba2ebaa94fff057179c423dd094b7a60f1f4d990a60
Opcode Fuzzy Hash: cd687acdd529e3ad1b25a0772cea10e692d301dceb16893e8e0698daaf200e7c
Instruction Fuzzy Hash: BD81697191060ADFCB02DFB5D884B9EFBB8BF59310F14832AE805B7291EB702589DB51

Uniqueness

Uniqueness Score: -1.00%

Function 00C640B0 Relevance: 33.4, APIs: 14, Strings: 5, Instructions: 119windowCOMMON

Download Yara Rule

APIs

?currentIndex@QStackedWidget@@QBEHXZ.QT5WIDGETS(676E6AEE,?,000000FF,?,00C62F32,676E6AEE), ref: 00C640E1
??0QMessageBox@@QAE@PAVQWidget@@@Z.QT5WIDGETS(00000000,?,000000FF,?,00C62F32,676E6AEE), ref: 00C6410A

Part of subcall function 00C6D860: ?tr@QMetaObject@@QBE?AVQString@@PBD0H@Z.QT5CORE(?,?,?,?,?,00C61B0A,?,Save,00000000,000000FF), ref: 00C6D87E

?setWindowTitle@QMessageBox@@QAEXABVQString@@@Z.QT5WIDGETS(00000000,?,?,?,?,000000FF,?,00C62F32,676E6AEE), ref: 00C64134
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,000000FF,?,00C62F32,676E6AEE), ref: 00C64141
?setText@QMessageBox@@QAEXABVQString@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,000000FF,?,00C62F32,676E6AEE), ref: 00C64164
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,000000FF,?,00C62F32,676E6AEE), ref: 00C64171
?setInformativeText@QMessageBox@@QAEXABVQString@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,?,?,?,?,000000FF,?,00C62F32), ref: 00C64194
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,?,000000FF,?,00C62F32,676E6AEE), ref: 00C641A1
?setStandardButtons@QMessageBox@@QAEXV?$QFlags@W4StandardButton@QMessageBox@@@@@Z.QT5WIDGETS(00C00800,?,?,?,?,?,?,?,?,?,?,?,?,000000FF,?,00C62F32), ref: 00C641AF
?setDefaultButton@QMessageBox@@QAEXW4StandardButton@1@@Z.QT5WIDGETS(00000800,?,?,?,?,?,?,?,?,?,?,?,?,000000FF,?,00C62F32), ref: 00C641BD
?exec@QDialog@@UAEHXZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,?,000000FF,?,00C62F32,676E6AEE), ref: 00C641C6
??1QMessageBox@@UAE@XZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,?,000000FF,?,00C62F32,676E6AEE), ref: 00C641E4
??1QMessageBox@@UAE@XZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,?,000000FF,?,00C62F32,676E6AEE), ref: 00C64202
??1QMessageBox@@UAE@XZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,?,000000FF,?,00C62F32,676E6AEE), ref: 00C64230

Strings

jng, xrefs: 00C640C5
Unsaved Changes, xrefs: 00C6411E
jng, xrefs: 00C64114, 00C6413A, 00C6414B, 00C6416A, 00C6417B, 00C6419A, 00C64123, 00C64153, 00C64183
There are unsaved changes., xrefs: 00C6414E
Do you want to save your changes?, xrefs: 00C6417E

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Message$Box@@$?set$String@@$StandardString@@@$Button@Text@$?current?exec@?tr@Box@@@@@Button@1@@Buttons@DefaultDialog@@Flags@Index@InformativeMetaObject@@StackedTitle@Widget@@Widget@@@Window
String ID: Do you want to save your changes?$There are unsaved changes.$Unsaved Changes$jng$jng
API String ID: 1650597752-3378095877
Opcode ID: cc4fc7572659b5dc0e4657569441e5b390e8e6b5f9e29cff30f24721de218032
Instruction ID: da0093c409a62606dbf80d5620d447126cb7e2c67bcdb8d8034f73a24b410070
Opcode Fuzzy Hash: cc4fc7572659b5dc0e4657569441e5b390e8e6b5f9e29cff30f24721de218032
Instruction Fuzzy Hash: 5441C571904249DBDB14DFA8DC49BEC7B78FB18324F140269E916A32D1DF311609DB61

Uniqueness

Uniqueness Score: -1.00%

Function 00C64250 Relevance: 33.4, APIs: 14, Strings: 5, Instructions: 119windowCOMMON

Download Yara Rule

APIs

?currentIndex@QStackedWidget@@QBEHXZ.QT5WIDGETS(676E6AEE,00000000,000000FF,?,00C62F3B,676E6AEE), ref: 00C64281
??0QMessageBox@@QAE@PAVQWidget@@@Z.QT5WIDGETS(00000000,?,00C62F3B,676E6AEE), ref: 00C642AB

Part of subcall function 00C6D860: ?tr@QMetaObject@@QBE?AVQString@@PBD0H@Z.QT5CORE(?,?,?,?,?,00C61B0A,?,Save,00000000,000000FF), ref: 00C6D87E

?setWindowTitle@QMessageBox@@QAEXABVQString@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,00C62F3B,676E6AEE), ref: 00C642D5
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,00C62F3B,676E6AEE), ref: 00C642E2
?setText@QMessageBox@@QAEXABVQString@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,?,?,00C62F3B,676E6AEE), ref: 00C64305
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,00C62F3B,676E6AEE), ref: 00C64312
?setInformativeText@QMessageBox@@QAEXABVQString@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00C62F3B), ref: 00C64335
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00C62F3B,676E6AEE), ref: 00C64342
?setStandardButtons@QMessageBox@@QAEXV?$QFlags@W4StandardButton@QMessageBox@@@@@Z.QT5WIDGETS(00C00800,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00C62F3B), ref: 00C64350
?setDefaultButton@QMessageBox@@QAEXW4StandardButton@1@@Z.QT5WIDGETS(00000800,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00C62F3B), ref: 00C6435E
?exec@QDialog@@UAEHXZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00C62F3B,676E6AEE), ref: 00C64367
??1QMessageBox@@UAE@XZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00C62F3B,676E6AEE), ref: 00C64385
??1QMessageBox@@UAE@XZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00C62F3B,676E6AEE), ref: 00C643A3
??1QMessageBox@@UAE@XZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00C62F3B,676E6AEE), ref: 00C643D1

Strings

jng, xrefs: 00C64265
Unsaved Changes, xrefs: 00C642BF
jng, xrefs: 00C642B5, 00C642DB, 00C642EC, 00C6430B, 00C6431C, 00C6433B, 00C642C4, 00C642F4, 00C64324
There are unsaved changes., xrefs: 00C642EF
Do you want to save your changes?, xrefs: 00C6431F

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Message$Box@@$?set$String@@$StandardString@@@$Button@Text@$?current?exec@?tr@Box@@@@@Button@1@@Buttons@DefaultDialog@@Flags@Index@InformativeMetaObject@@StackedTitle@Widget@@Widget@@@Window
String ID: Do you want to save your changes?$There are unsaved changes.$Unsaved Changes$jng$jng
API String ID: 1650597752-3378095877
Opcode ID: 21321d5cec026c857c0cba890ec7e5a2a11e75d461fbf9d5072777d638f8c27e
Instruction ID: 80901b2246b494401165b75874e3f7f868e534b45b219956a5d3cb4e17e61658
Opcode Fuzzy Hash: 21321d5cec026c857c0cba890ec7e5a2a11e75d461fbf9d5072777d638f8c27e
Instruction Fuzzy Hash: F9419371904249DBDB14DB98DC89BECBB78FB18324F140669E516A32D1DF351A04DB61

Uniqueness

Uniqueness Score: -1.00%

Function 00C692B0 Relevance: 33.4, APIs: 14, Strings: 5, Instructions: 103COMMON

Download Yara Rule

APIs

?removeTranslator@QCoreApplication@@SA_NPAVQTranslator@@@Z.QT5CORE(?,676E6AEE,?,00000000,6BEAC180,00C61E41,?,?,?,?,?), ref: 00C692DD

Part of subcall function 00C62460: ?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,?,000000FF,676E6AEE,00CB35BE,?,?,00CAD27A,000000FF), ref: 00C6249B
Part of subcall function 00C62460: ?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE ref: 00C624B7

Part of subcall function 00C623D0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00CB35BE), ref: 00C62405
Part of subcall function 00C623D0: ?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(000000FF,00000000,000000FF), ref: 00C62422
Part of subcall function 00C623D0: ?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE(00000000), ref: 00C62435
Part of subcall function 00C623D0: ??1QString@@QAE@XZ.QT5CORE ref: 00C6243E

??0QString@@QAE@$$QAV0@@Z.QT5CORE(00000000), ref: 00C69311
??1QString@@QAE@XZ.QT5CORE ref: 00C6931A
??1QString@@QAE@XZ.QT5CORE ref: 00C69327
??9QString@@QBE_NPBD@Z.QT5CORE(qt_en.qm), ref: 00C69335
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:/translations,0000000E), ref: 00C69346
??0QString@@QAE@XZ.QT5CORE ref: 00C69355
??0QString@@QAE@XZ.QT5CORE ref: 00C69360
?load@QTranslator@@QAE_NABVQString@@000@Z.QT5CORE(?,?,00000000,00000000), ref: 00C69377
??1QString@@QAE@XZ.QT5CORE ref: 00C69382
??1QString@@QAE@XZ.QT5CORE ref: 00C6938B
??1QString@@QAE@XZ.QT5CORE ref: 00C69398
?installTranslator@QCoreApplication@@SA_NPAVQTranslator@@@Z.QT5CORE(?), ref: 00C693A6
??1QString@@QAE@XZ.QT5CORE(?), ref: 00C693FB

Strings

qt_en.qm, xrefs: 00C6932D
.qm, xrefs: 00C692F4
jng, xrefs: 00C692C7
qt_, xrefs: 00C692E9
:/translations, xrefs: 00C69341

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$?from$?append@Application@@CoreTranslator@Translator@@@Utf8@V0@@V1@@$?install?load@?removeArrayAscii_helper@Data@E@$$String@@000@Translator@@Typed
String ID: .qm$:/translations$qt_$qt_en.qm$jng
API String ID: 3399960650-50640478
Opcode ID: a1dffb8e377cddfeb82fa2be499fb6d314ff32c6150f65ee61772afc6c9f6e04
Instruction ID: 3ad1dac27e873a88870181202c0398a6a24dac1229059186434ca13ff7b94492
Opcode Fuzzy Hash: a1dffb8e377cddfeb82fa2be499fb6d314ff32c6150f65ee61772afc6c9f6e04
Instruction Fuzzy Hash: 63414175900509EFCB04EFA0EC99BEEBB79FF14354F100269E406632A1DF356909DBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00CA8A20 Relevance: 33.4, APIs: 16, Strings: 3, Instructions: 103COMMON

Download Yara Rule

APIs

?objectName@QObject@@QBE?AVQString@@XZ.QT5CORE(000000FF,676E6AEE,6B9DE680,00000000,6BA8AA30,00CB7291,000000FF,?,00CA8674,00000000), ref: 00CA8A53
??1QString@@QAE@XZ.QT5CORE(?,00CA8674,00000000), ref: 00CA8A61
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(00CA8674,labelImageDisplay,000000FF,?,00CA8674,00000000), ref: 00CA8A76
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00CA8A85
??1QString@@QAE@XZ.QT5CORE ref: 00CA8A95
?resize@QWidget@@QAEXHH@Z.QT5WIDGETS(00000064,00000064,?,00CA8674,00000000), ref: 00CA8AA1
new.LIBCMT ref: 00CA8AA9
??0QLabel@@QAE@PAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z.QT5WIDGETS(00CA8674,00000000,?,?,?,?,00CA8674), ref: 00CA8AC2
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(00CA8674,label,000000FF,?,?,?,?,00CA8674), ref: 00CA8AE9
?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000,?,?,?,?,?,?,?,00CA8674), ref: 00CA8AFC
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,00CA8674), ref: 00CA8B0C
??0QRect@@QAE@HHHH@Z.QT5CORE(00000000,00000000,00000064,00000064,?,?,?,?,?,?,?,00CA8674), ref: 00CA8B1D
?setGeometry@QWidget@@QAEXABVQRect@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,00CA8674), ref: 00CA8B26
?setScaledContents@QLabel@@QAEX_N@Z.QT5WIDGETS(00000001,?,?,?,?,?,?,?,00CA8674), ref: 00CA8B30
?setAlignment@QLabel@@QAEXV?$QFlags@W4AlignmentFlag@Qt@@@@@Z.QT5WIDGETS(?,?,?,?,?,?,?,?,00CA8674), ref: 00CA8B41
?connectSlotsByName@QMetaObject@@SAXPAVQObject@@@Z.QT5CORE(00CA8674,00CA8674,?,?,?,?,?,?,?,?,00CA8674), ref: 00CA8B50

Strings

label, xrefs: 00CA8AD3
jng, xrefs: 00CA8A37
labelImageDisplay, xrefs: 00CA8A70

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$?set$Name@Object@@$Label@@Widget@@$?fromFlags@ObjectQt@@@@@String@@@Utf8@$?connect?object?resize@AlignmentAlignment@Contents@Flag@Geometry@MetaObject@@@Rect@@Rect@@@ScaledSlotsType@Window
String ID: label$labelImageDisplay$jng
API String ID: 4007567336-31479317
Opcode ID: bba9538e1430c174023fcc0071579c4127dbda7641d04bead458d82bfc7ef571
Instruction ID: 2413db7efca16c8b6bd6909e3f5c23fcb133cdda518c541f9c1c74efae7d5192
Opcode Fuzzy Hash: bba9538e1430c174023fcc0071579c4127dbda7641d04bead458d82bfc7ef571
Instruction Fuzzy Hash: 18418F71600615EFCB00DF98DC49B9DBBB8FB49724F104369F6169B2E0CB705908CB92

Uniqueness

Uniqueness Score: -1.00%

Function 00C65250 Relevance: 33.3, APIs: 15, Strings: 4, Instructions: 93COMMON

Download Yara Rule

APIs

??0QString@@QAE@XZ.QT5CORE(676E6AEE), ref: 00C6527B
??8QString@@QBE_NPBD@Z.QT5CORE(00CBA934), ref: 00C65290
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(00000000), ref: 00C652D1
??1QString@@QAE@XZ.QT5CORE ref: 00C652DA
??1QString@@QAE@XZ.QT5CORE ref: 00C652E3
?applicationDirPath@QCoreApplication@@SA?AVQString@@XZ.QT5CORE(?), ref: 00C6529E

Part of subcall function 00C62460: ?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,?,000000FF,676E6AEE,00CB35BE,?,?,00CAD27A,000000FF), ref: 00C6249B
Part of subcall function 00C62460: ?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE ref: 00C624B7

Part of subcall function 00C623D0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00CB35BE), ref: 00C62405
Part of subcall function 00C623D0: ?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(000000FF,00000000,000000FF), ref: 00C62422
Part of subcall function 00C623D0: ?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE(00000000), ref: 00C62435
Part of subcall function 00C623D0: ??1QString@@QAE@XZ.QT5CORE ref: 00C6243E

?applicationDirPath@QCoreApplication@@SA?AVQString@@XZ.QT5CORE(?), ref: 00C652F2
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(00000000), ref: 00C65325
??1QString@@QAE@XZ.QT5CORE ref: 00C6532E
??1QString@@QAE@XZ.QT5CORE ref: 00C65337
??1QString@@QAE@XZ.QT5CORE ref: 00C65344
??0QUrl@@QAE@ABVQString@@W4ParsingMode@0@@Z.QT5CORE(?,00000000), ref: 00C65353
?openUrl@QDesktopServices@@SA_NABVQUrl@@@Z.QT5GUI(00000000), ref: 00C6535E
??1QUrl@@QAE@XZ.QT5CORE ref: 00C6536A
??1QString@@QAE@XZ.QT5CORE ref: 00C65373

Strings

jng, xrefs: 00C65265
/Help/Japanese/html/index.htm, xrefs: 00C652B7
/Help/English/html/index.htm, xrefs: 00C6530B
file:///, xrefs: 00C652AC, 00C65300

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$V0@@$?append@?application?fromApplication@@CorePath@Url@@Utf8@V1@@$?openDesktopMode@0@@ParsingServices@@Url@Url@@@
String ID: /Help/English/html/index.htm$/Help/Japanese/html/index.htm$file:///$jng
API String ID: 3743353868-2546022247
Opcode ID: 18998a1b9ffe4e777e5552b3a9c62f3e909efbff9d11ee92e7609baafe83f3bd
Instruction ID: 3a4a26afa9b6c0762b7e123861768a73bcd7a9a57bb22fbce3eed7c37c55d458
Opcode Fuzzy Hash: 18998a1b9ffe4e777e5552b3a9c62f3e909efbff9d11ee92e7609baafe83f3bd
Instruction Fuzzy Hash: BD314B75C0064AEBCB04EBA4ED49BEEBB7CFB14305F004669E512A32A0DF74660DDB61

Uniqueness

Uniqueness Score: -1.00%

Function 00C6F6F0 Relevance: 31.8, APIs: 17, Strings: 1, Instructions: 281COMMON

Download Yara Rule

APIs

Part of subcall function 00C76960: ?size@QListData@@QBEHXZ.QT5CORE(00C744AC,00000002,?,00000000,?,00C77D43), ref: 00C76972
Part of subcall function 00C76960: ?size@QListData@@QBEHXZ.QT5CORE(?,00000000,?,00C77D43), ref: 00C76994
Part of subcall function 00C76960: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001,?,00000000,?,00C77D43), ref: 00C769C7
Part of subcall function 00C76960: ?size@QListData@@QBEHXZ.QT5CORE(?,?,00000000,?,00C77D43), ref: 00C769FD
Part of subcall function 00C76960: ?size@QListData@@QBEHXZ.QT5CORE ref: 00C76A84
Part of subcall function 00C76960: ?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS ref: 00C76AAF
Part of subcall function 00C76960: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C76AD6
Part of subcall function 00C76960: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C76AE5
Part of subcall function 00C76960: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C76AEE
Part of subcall function 00C76960: ?size@QListData@@QBEHXZ.QT5CORE ref: 00C76BBA

?number@QString@@SA?AV1@NDH@Z.QT5CORE ref: 00C6F751
?number@QString@@SA?AV1@NDH@Z.QT5CORE ref: 00C6F773
?number@QString@@SA?AV1@NDH@Z.QT5CORE ref: 00C6F796

Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63254,00CBC634,00000000,00C63254,?,6B5136D0), ref: 00C61ED9
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63258), ref: 00C61EE6
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C6325C), ref: 00C61EF3
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63260), ref: 00C61F00
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63264), ref: 00C61F0D
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63268), ref: 00C61F1A
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C6326C), ref: 00C61F27
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63270), ref: 00C61F34
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63274), ref: 00C61F41
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63278), ref: 00C61F4E
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C6327C), ref: 00C61F5B
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63280), ref: 00C61F68
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63284), ref: 00C61F75
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63288), ref: 00C61F82
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C6328C), ref: 00C61F8F
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63290), ref: 00C61F9C
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63294), ref: 00C61FA9
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63298), ref: 00C61FB6

Part of subcall function 00C704B0: ??0QString@@QAE@XZ.QT5CORE(676E6AEE,?,000000FF), ref: 00C704ED
Part of subcall function 00C704B0: ?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS ref: 00C70503
Part of subcall function 00C704B0: ?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE(00000000), ref: 00C70530
Part of subcall function 00C704B0: ??1QString@@QAE@XZ.QT5CORE ref: 00C7053D
Part of subcall function 00C704B0: ?append@QString@@QAEAAV1@PBD@Z.QT5CORE(00CBA9A0), ref: 00C7054A
Part of subcall function 00C704B0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001), ref: 00C70555
Part of subcall function 00C704B0: ?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE(00000000), ref: 00C7057C
Part of subcall function 00C704B0: ??1QString@@QAE@XZ.QT5CORE ref: 00C70589
Part of subcall function 00C704B0: ?number@QString@@SA?AV1@HH@Z.QT5CORE(?,00000001,0000000A), ref: 00C70598
Part of subcall function 00C704B0: ?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE(00000000), ref: 00C705A8
Part of subcall function 00C704B0: ??1QString@@QAE@XZ.QT5CORE ref: 00C705B5
Part of subcall function 00C704B0: ?append@QString@@QAEAAV1@PBD@Z.QT5CORE(00CBA9A0), ref: 00C705C2
Part of subcall function 00C704B0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000002), ref: 00C705CD
Part of subcall function 00C704B0: ?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE(00000000), ref: 00C705F4
Part of subcall function 00C704B0: ??1QString@@QAE@XZ.QT5CORE ref: 00C70601

??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?), ref: 00C6F7D7
?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS(676E6AEE), ref: 00C6F7E6
?text@QLineEdit@@QBE?AVQString@@XZ.QT5WIDGETS(?), ref: 00C6F803
??9QString@@QBE_NPBD@Z.QT5CORE(00CB9364), ref: 00C6F81B
??1QString@@QAE@XZ.QT5CORE ref: 00C6F83B
?text@QLineEdit@@QBE?AVQString@@XZ.QT5WIDGETS(?), ref: 00C6F854
?toInt@QString@@QBEHPA_NH@Z.QT5CORE(00000000,0000000A), ref: 00C6F863
??1QString@@QAE@XZ.QT5CORE ref: 00C6F875
?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS ref: 00C6F88F
?size@QListData@@QBEHXZ.QT5CORE ref: 00C6F898
?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS ref: 00C6F8E2
?size@QListData@@QBEHXZ.QT5CORE ref: 00C6F8F1

Part of subcall function 00C9B8C0: ?size@QListData@@QBEHXZ.QT5CORE(676E6AEE,00C744AC,6BABF570,00000000,00000000,00CB54EE,000000FF,?,00C77FA6,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C9B915
Part of subcall function 00C9B8C0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FA6,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C9B924
Part of subcall function 00C9B8C0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,00000000,?,00C77FA6,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C9B93B
Part of subcall function 00C9B8C0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FA6,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C9B95D
Part of subcall function 00C9B8C0: ?size@QListData@@QBEHXZ.QT5CORE(?,00C77FA6,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C9B973

Part of subcall function 00C6DE50: ?detach@QListData@@QAEPAUData@1@H@Z.QT5CORE(?,676E6AEE,?,00000001,00000001,00000001,00000001,?,?), ref: 00C6DE9C
Part of subcall function 00C6DE50: ?begin@QListData@@QBEPAPAXXZ.QT5CORE ref: 00C6DEAB
Part of subcall function 00C6DE50: ?end@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C6DEB4
Part of subcall function 00C6DE50: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C6DEBD

Part of subcall function 00C9B8C0: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(BC8E89F0,4D8BD783,?,?,?,00C77FA6,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C9BA24

Part of subcall function 00C95AD0: ?size@QListData@@QBEHXZ.QT5CORE(676E6AEE,00C744AC,00C744E4,00000000,00000000,00CB4DAE,000000FF,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC), ref: 00C95B01
Part of subcall function 00C95AD0: ?size@QListData@@QBEHXZ.QT5CORE(?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B14
Part of subcall function 00C95AD0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B34
Part of subcall function 00C95AD0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,00000000,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B48
Part of subcall function 00C95AD0: ?size@QListData@@QBEHXZ.QT5CORE(?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B50
Part of subcall function 00C95AD0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B64
Part of subcall function 00C95AD0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B6D
Part of subcall function 00C95AD0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B8F
Part of subcall function 00C95AD0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B98
Part of subcall function 00C95AD0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95BAF
Part of subcall function 00C95AD0: ?size@QListData@@QBEHXZ.QT5CORE(?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95BB7
Part of subcall function 00C95AD0: ?size@QListData@@QBEHXZ.QT5CORE(?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95BC5

Part of subcall function 00C6DFC0: ?detach@QListData@@QAEPAUData@1@H@Z.QT5CORE(?,676E6AEE,4D8BD6FF,00000000,4D8BD783,4D8BD783,?,?), ref: 00C6E00C
Part of subcall function 00C6DFC0: ?begin@QListData@@QBEPAPAXXZ.QT5CORE ref: 00C6E01B
Part of subcall function 00C6DFC0: ?end@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C6E024
Part of subcall function 00C6DFC0: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C6E02D

Part of subcall function 00C95AD0: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(BC8E89F0,?,?,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000), ref: 00C95C6D

?size@QListData@@QBEHXZ.QT5CORE ref: 00C6F9C2
?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS ref: 00C6FA62

Strings

jng, xrefs: 00C6F707

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$String@@$V0@@$?at@$?size@$?append@AbstractButton@@Checked@$?begin@?number@V1@@$?detach@?dispose@?end@?text@Data@1@Data@1@@Edit@@Line$Int@
String ID: jng
API String ID: 3237429059-1186463058
Opcode ID: 6e9000f5008b1b5aec0a346c55078de58a0a652bb0e789c299913a3631d9b6ae
Instruction ID: 619c305abe262808611d726edaea7c41804fcee3da5ce5118f3c9ba587addbd0
Opcode Fuzzy Hash: 6e9000f5008b1b5aec0a346c55078de58a0a652bb0e789c299913a3631d9b6ae
Instruction Fuzzy Hash: C1A1EF70B11A05BBDB18EB64DC96BAEB769FF05344F000228F41A672D1CB316D16DBE5

Uniqueness

Uniqueness Score: -1.00%

Function 00C95880 Relevance: 28.2, APIs: 15, Strings: 1, Instructions: 187COMMON

Download Yara Rule

APIs

?size@QListData@@QBEHXZ.QT5CORE(676E6AEE,00C744AC,6BABF570,00000000,?,6BABF570,?,45890000,BC8E89F0), ref: 00C958B7
?size@QListData@@QBEHXZ.QT5CORE(?,6BABF570,?,45890000,BC8E89F0), ref: 00C958D0
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,6BABF570,?,45890000,BC8E89F0), ref: 00C958F9
?size@QListData@@QBEHXZ.QT5CORE(?,6BABF570,?,45890000,BC8E89F0), ref: 00C95901
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95914
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,6BABF570,?,45890000,BC8E89F0), ref: 00C9591D
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95931
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,6BABF570,?,45890000,BC8E89F0), ref: 00C9593A
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,6BABF570,?,45890000,BC8E89F0), ref: 00C9594C
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95955
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95979
?size@QListData@@QBEHXZ.QT5CORE(?,6BABF570,?,45890000,BC8E89F0), ref: 00C95981
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,?,?,6BABF570,?,45890000,BC8E89F0), ref: 00C959EC
?size@QListData@@QBEHXZ.QT5CORE(?,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95A00
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(BC8E89F0,?,?,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95AA6

Strings

jng, xrefs: 00C95897

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?at@$?size@$?dispose@Data@1@@
String ID: jng
API String ID: 1925973254-1186463058
Opcode ID: 152d5254c8abf099f25530aa0ce5611c988e079f179c5ecddda2f85d92ee1591
Instruction ID: ed46f80d940716e17bbdfc62a225f01062e9184e9124dd29d8a0efc968c59c7f
Opcode Fuzzy Hash: 152d5254c8abf099f25530aa0ce5611c988e079f179c5ecddda2f85d92ee1591
Instruction Fuzzy Hash: BE619D75900605DBDF15DF78C888BAD77B8BF15324F044629E816DB291EF30AE09DB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C6ECE0 Relevance: 27.1, APIs: 18, Instructions: 81COMMON

Download Yara Rule

APIs

??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ECF0
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ECF9
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED02
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED0B
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED14
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED1D
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED26
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED2F
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED38
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED41
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED4A
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED53
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED5C
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED65
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED6E
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED77
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED80
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED89

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@V0@@
String ID:
API String ID: 3972277252-0
Opcode ID: 7737d5a2002d69815b8990ccbabecbe885ef7b14cc4c91213ca5cb918978bd61
Instruction ID: 3f40e89d2beb060792a5f6faa46f632f2d2f46aa8fdc9f6e6b1373fc28d0acd5
Opcode Fuzzy Hash: 7737d5a2002d69815b8990ccbabecbe885ef7b14cc4c91213ca5cb918978bd61
Instruction Fuzzy Hash: 382102B70005089BC769EF58EDD0CD7B3ECBE98210315576ADA47C6469EE20FA49CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 00C61ED0 Relevance: 27.1, APIs: 18, Instructions: 78COMMON

Download Yara Rule

APIs

??0QString@@QAE@ABV0@@Z.QT5CORE(00C63254,00CBC634,00000000,00C63254,?,6B5136D0), ref: 00C61ED9
??0QString@@QAE@ABV0@@Z.QT5CORE(00C63258), ref: 00C61EE6
??0QString@@QAE@ABV0@@Z.QT5CORE(00C6325C), ref: 00C61EF3
??0QString@@QAE@ABV0@@Z.QT5CORE(00C63260), ref: 00C61F00
??0QString@@QAE@ABV0@@Z.QT5CORE(00C63264), ref: 00C61F0D
??0QString@@QAE@ABV0@@Z.QT5CORE(00C63268), ref: 00C61F1A
??0QString@@QAE@ABV0@@Z.QT5CORE(00C6326C), ref: 00C61F27
??0QString@@QAE@ABV0@@Z.QT5CORE(00C63270), ref: 00C61F34
??0QString@@QAE@ABV0@@Z.QT5CORE(00C63274), ref: 00C61F41
??0QString@@QAE@ABV0@@Z.QT5CORE(00C63278), ref: 00C61F4E
??0QString@@QAE@ABV0@@Z.QT5CORE(00C6327C), ref: 00C61F5B
??0QString@@QAE@ABV0@@Z.QT5CORE(00C63280), ref: 00C61F68
??0QString@@QAE@ABV0@@Z.QT5CORE(00C63284), ref: 00C61F75
??0QString@@QAE@ABV0@@Z.QT5CORE(00C63288), ref: 00C61F82
??0QString@@QAE@ABV0@@Z.QT5CORE(00C6328C), ref: 00C61F8F
??0QString@@QAE@ABV0@@Z.QT5CORE(00C63290), ref: 00C61F9C
??0QString@@QAE@ABV0@@Z.QT5CORE(00C63294), ref: 00C61FA9
??0QString@@QAE@ABV0@@Z.QT5CORE(00C63298), ref: 00C61FB6

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@V0@@
String ID:
API String ID: 3972277252-0
Opcode ID: d020b7d206fedd167008ff353d27d1b499d7cca5a3003873379c26715e4c8b90
Instruction ID: 8b58671ccb63b4ed31595521b06f7bfe478d3368cdec16c1839838bc8a6afb48
Opcode Fuzzy Hash: d020b7d206fedd167008ff353d27d1b499d7cca5a3003873379c26715e4c8b90
Instruction Fuzzy Hash: FF31037200195AAFC715DF51D998EDBBBBCBE14205B00862AE157C2B60EF30F65DCB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C94600 Relevance: 27.0, APIs: 18, Instructions: 43COMMON

Download Yara Rule

APIs

??0QString@@QAE@XZ.QT5CORE(?,0000002C,00C800BF), ref: 00C94608
??0QString@@QAE@XZ.QT5CORE ref: 00C94611
??0QString@@QAE@XZ.QT5CORE ref: 00C9461A
??0QString@@QAE@XZ.QT5CORE ref: 00C94623
??0QString@@QAE@XZ.QT5CORE ref: 00C9462C
??0QString@@QAE@XZ.QT5CORE ref: 00C94635
??0QString@@QAE@XZ.QT5CORE ref: 00C9463E
??0QString@@QAE@XZ.QT5CORE ref: 00C94647
??0QString@@QAE@XZ.QT5CORE ref: 00C94650
??0QString@@QAE@XZ.QT5CORE ref: 00C94659
??0QString@@QAE@XZ.QT5CORE ref: 00C94662
??0QString@@QAE@XZ.QT5CORE ref: 00C9466B
??0QString@@QAE@XZ.QT5CORE ref: 00C94674
??0QString@@QAE@XZ.QT5CORE ref: 00C9467D
??0QString@@QAE@XZ.QT5CORE ref: 00C94686
??0QString@@QAE@XZ.QT5CORE ref: 00C9468F
??0QString@@QAE@XZ.QT5CORE ref: 00C94698
??0QString@@QAE@XZ.QT5CORE ref: 00C946A1

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@
String ID:
API String ID: 1688221058-0
Opcode ID: b2c39fa31c4c9338821c605553ceaf4dbd696bfbdf055213043715692e874249
Instruction ID: 1eb8c98959d74432dcfce9dc72a303328a377baefbb02ce1db1f42257f4d2504
Opcode Fuzzy Hash: b2c39fa31c4c9338821c605553ceaf4dbd696bfbdf055213043715692e874249
Instruction Fuzzy Hash: DF11A23105061A8FC728AF21F959B9ABBB8FE14796B10462DE057938B4DF20790ECB80

Uniqueness

Uniqueness Score: -1.00%

Function 00C94860 Relevance: 26.3, APIs: 12, Strings: 3, Instructions: 62COMMON

Download Yara Rule

APIs

?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,ScoreWidget,Form,00000000,000000FF,676E6AEE,6B9DEE70,?,?,00000000,00CB4A94,000000FF,?,00C94EE9,00C94724), ref: 00C94899
?setWindowTitle@QWidget@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C948AD
??1QString@@QAE@XZ.QT5CORE ref: 00C948B6
??0QString@@QAE@XZ.QT5CORE ref: 00C948BF
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C948D6
??1QString@@QAE@XZ.QT5CORE ref: 00C948DB
??0QString@@QAE@XZ.QT5CORE ref: 00C948E4
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C948F5
??1QString@@QAE@XZ.QT5CORE ref: 00C948FA
??0QString@@QAE@XZ.QT5CORE ref: 00C94903
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C94914
??1QString@@QAE@XZ.QT5CORE ref: 00C94919

Strings

ScoreWidget, xrefs: 00C94893
jng, xrefs: 00C94874
Form, xrefs: 00C9488B

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$?setString@@@$Label@@Text@$?translate@Application@@CoreTitle@Widget@@Window
String ID: Form$ScoreWidget$jng
API String ID: 3829188796-836635164
Opcode ID: 6ec54d8898a82665ce4aaa344c86d97664d22ee44fa2a510ad2ebe18f9bce238
Instruction ID: dfccd3858c2d47900f18d1528899b0581cdc6472e038810a5ad0a3ca9041b0a5
Opcode Fuzzy Hash: 6ec54d8898a82665ce4aaa344c86d97664d22ee44fa2a510ad2ebe18f9bce238
Instruction Fuzzy Hash: 2C210876504209EFDB04EF94EC59BADBB7CFB58750F004229E916932E0DF746A09CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00C62280 Relevance: 25.5, APIs: 17, Instructions: 39COMMON

Download Yara Rule

APIs

??1QString@@QAE@XZ.QT5CORE(00CBC630,00C63A62,00000000,00CBC634,?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C62286
??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C6228F
??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C62298
??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622A1
??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622AA
??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622B3
??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622BC
??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622C5
??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622CE
??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622D7
??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622E0
??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622E9
??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622F2
??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C622FB
??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C62304
??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C6230D
??1QString@@QAE@XZ.QT5CORE(?,00000000,00C6402B,00000000,00000000,?,6B5136D0,00CBC634), ref: 00C62316

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@
String ID:
API String ID: 1688221058-0
Opcode ID: ae5a91dcd82992dd212b3381fc83cc4793119e6f29351695dcef6b51e3e6cda8
Instruction ID: 99065117c73ed5c3ecf61173241b9f6eb00b7f57df6d7c819fff61f1c609409f
Opcode Fuzzy Hash: ae5a91dcd82992dd212b3381fc83cc4793119e6f29351695dcef6b51e3e6cda8
Instruction Fuzzy Hash: 76117F390106168FCB68AF31F959B99BBB8FE24796B505729D057828B0DF60694FCB80

Uniqueness

Uniqueness Score: -1.00%

Function 00C8C180 Relevance: 24.7, APIs: 12, Strings: 2, Instructions: 244COMMON

Download Yara Rule

APIs

?nextNode@QMapNodeBase@@QBEPBU1@XZ.QT5CORE(?,676E6AEE), ref: 00C8C1D4
?setItemWidget@QListWidget@@QAEXPAVQListWidgetItem@@PAVQWidget@@@Z.QT5WIDGETS(?,00000000), ref: 00C8C1E8

Part of subcall function 00C8CB60: ?freeNodeAndRebalance@QMapDataBase@@QAEXPAUQMapNodeBase@@@Z.QT5CORE(00000000,00000039,?,?,00000000,00C8C55A,?,?,00C80DC4), ref: 00C8CBB0

?nextNode@QMapNodeBase@@QBEPBU1@XZ.QT5CORE(?,?,676E6AEE), ref: 00C8C22A
?freeData@QMapDataBase@@SAXPAU1@@Z.QT5CORE(?,?,?,676E6AEE), ref: 00C8C29A
?freeData@QMapDataBase@@SAXPAU1@@Z.QT5CORE(?,?,?,676E6AEE), ref: 00C8C2F3
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,?,?,676E6AEE), ref: 00C8C33F
?freeTree@QMapDataBase@@QAEXPAUQMapNodeBase@@H@Z.QT5CORE(?,00000004), ref: 00C8C38E
?freeData@QMapDataBase@@SAXPAU1@@Z.QT5CORE(?), ref: 00C8C39B
?freeTree@QMapDataBase@@QAEXPAUQMapNodeBase@@H@Z.QT5CORE(?,00000004), ref: 00C8C3D4
?freeData@QMapDataBase@@SAXPAU1@@Z.QT5CORE(?), ref: 00C8C3DE
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?), ref: 00C8C407
??1QWidget@@UAE@XZ.QT5WIDGETS ref: 00C8C412

Strings

jng, xrefs: 00C8C197
jng, xrefs: 00C8C307

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Base@@$?freeData$Node$Data@ListU1@@$?dispose@?nextData@1@@Data@@Node@Tree@Widget@@$?setBase@@@ItemItem@@Rebalance@WidgetWidget@Widget@@@
String ID: jng$jng
API String ID: 3142219671-1345699772
Opcode ID: b822b20df711269113b6f2e7c3a93124c55c491e53ef26751d1912718a6e7b06
Instruction ID: fc377e004b936e728e81f73d3412da31738b71385e14d3a17f5797925a3e7d86
Opcode Fuzzy Hash: b822b20df711269113b6f2e7c3a93124c55c491e53ef26751d1912718a6e7b06
Instruction Fuzzy Hash: D191D0706002059BDF10EF68DC80B6E73B5BF45728F284218E825EB3A1DB31ED16CBA5

Uniqueness

Uniqueness Score: -1.00%

Function 00C71420 Relevance: 24.7, APIs: 13, Strings: 1, Instructions: 225COMMON

Download Yara Rule

APIs

Part of subcall function 00C76960: ?size@QListData@@QBEHXZ.QT5CORE(00C744AC,00000002,?,00000000,?,00C77D43), ref: 00C76972
Part of subcall function 00C76960: ?size@QListData@@QBEHXZ.QT5CORE(?,00000000,?,00C77D43), ref: 00C76994
Part of subcall function 00C76960: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001,?,00000000,?,00C77D43), ref: 00C769C7
Part of subcall function 00C76960: ?size@QListData@@QBEHXZ.QT5CORE(?,?,00000000,?,00C77D43), ref: 00C769FD
Part of subcall function 00C76960: ?size@QListData@@QBEHXZ.QT5CORE ref: 00C76A84
Part of subcall function 00C76960: ?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS ref: 00C76AAF
Part of subcall function 00C76960: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C76AD6
Part of subcall function 00C76960: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C76AE5
Part of subcall function 00C76960: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C76AEE
Part of subcall function 00C76960: ?size@QListData@@QBEHXZ.QT5CORE ref: 00C76BBA

?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS(676E6AEE), ref: 00C7145D
?text@QLineEdit@@QBE?AVQString@@XZ.QT5WIDGETS(?), ref: 00C7147A
??9QString@@QBE_NPBD@Z.QT5CORE(00CB9364), ref: 00C7148E
??1QString@@QAE@XZ.QT5CORE ref: 00C714AE
?text@QLineEdit@@QBE?AVQString@@XZ.QT5WIDGETS(?), ref: 00C714C7
?toInt@QString@@QBEHPA_NH@Z.QT5CORE(00000000,0000000A), ref: 00C714D6
??1QString@@QAE@XZ.QT5CORE ref: 00C714E8
?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS ref: 00C71502
?size@QListData@@QBEHXZ.QT5CORE ref: 00C7150D
?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS ref: 00C71554
?size@QListData@@QBEHXZ.QT5CORE ref: 00C71563

Part of subcall function 00C9B8C0: ?size@QListData@@QBEHXZ.QT5CORE(676E6AEE,00C744AC,6BABF570,00000000,00000000,00CB54EE,000000FF,?,00C77FA6,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C9B915
Part of subcall function 00C9B8C0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FA6,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C9B924
Part of subcall function 00C9B8C0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,00000000,?,00C77FA6,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C9B93B
Part of subcall function 00C9B8C0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FA6,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C9B95D
Part of subcall function 00C9B8C0: ?size@QListData@@QBEHXZ.QT5CORE(?,00C77FA6,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C9B973

Part of subcall function 00C6DE50: ?detach@QListData@@QAEPAUData@1@H@Z.QT5CORE(?,676E6AEE,?,00000001,00000001,00000001,00000001,?,?), ref: 00C6DE9C
Part of subcall function 00C6DE50: ?begin@QListData@@QBEPAPAXXZ.QT5CORE ref: 00C6DEAB
Part of subcall function 00C6DE50: ?end@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C6DEB4
Part of subcall function 00C6DE50: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C6DEBD

Part of subcall function 00C9B8C0: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(BC8E89F0,4D8BD783,?,?,?,00C77FA6,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C9BA24

Part of subcall function 00C95AD0: ?size@QListData@@QBEHXZ.QT5CORE(676E6AEE,00C744AC,00C744E4,00000000,00000000,00CB4DAE,000000FF,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC), ref: 00C95B01
Part of subcall function 00C95AD0: ?size@QListData@@QBEHXZ.QT5CORE(?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B14
Part of subcall function 00C95AD0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B34
Part of subcall function 00C95AD0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,00000000,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B48
Part of subcall function 00C95AD0: ?size@QListData@@QBEHXZ.QT5CORE(?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B50
Part of subcall function 00C95AD0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B64
Part of subcall function 00C95AD0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B6D
Part of subcall function 00C95AD0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B8F
Part of subcall function 00C95AD0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B98
Part of subcall function 00C95AD0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95BAF
Part of subcall function 00C95AD0: ?size@QListData@@QBEHXZ.QT5CORE(?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95BB7
Part of subcall function 00C95AD0: ?size@QListData@@QBEHXZ.QT5CORE(?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95BC5

Part of subcall function 00C6DFC0: ?detach@QListData@@QAEPAUData@1@H@Z.QT5CORE(?,676E6AEE,4D8BD6FF,00000000,4D8BD783,4D8BD783,?,?), ref: 00C6E00C
Part of subcall function 00C6DFC0: ?begin@QListData@@QBEPAPAXXZ.QT5CORE ref: 00C6E01B
Part of subcall function 00C6DFC0: ?end@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C6E024
Part of subcall function 00C6DFC0: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C6E02D

Part of subcall function 00C95AD0: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(BC8E89F0,?,?,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000), ref: 00C95C6D

?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS ref: 00C716D4

Strings

jng, xrefs: 00C71437

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?at@?size@$String@@$AbstractButton@@Checked@$?begin@$?detach@?dispose@?end@?text@Data@1@Data@1@@Edit@@Line$Int@
String ID: jng
API String ID: 2228221095-1186463058
Opcode ID: 0ebee61a8516104591ecc92b376ed6e2c003dccbf5383795afa50cf55aebd8d0
Instruction ID: fe8a10502d7851024b8d12e91abd2caa57cc7cad072a6ba3a5b2b022bf64fd2e
Opcode Fuzzy Hash: 0ebee61a8516104591ecc92b376ed6e2c003dccbf5383795afa50cf55aebd8d0
Instruction Fuzzy Hash: 57819970B11905BBDB08EB29DC95BAEB76AFF45344F040218F41A67291CF213D01DBE9

Uniqueness

Uniqueness Score: -1.00%

Function 00C95AD0 Relevance: 24.6, APIs: 13, Strings: 1, Instructions: 136COMMON

Download Yara Rule

APIs

?size@QListData@@QBEHXZ.QT5CORE(676E6AEE,00C744AC,00C744E4,00000000,00000000,00CB4DAE,000000FF,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC), ref: 00C95B01
?size@QListData@@QBEHXZ.QT5CORE(?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B14
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B34
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,00000000,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B48
?size@QListData@@QBEHXZ.QT5CORE(?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B50
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B64
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B6D
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B8F
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95B98
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95BAF
?size@QListData@@QBEHXZ.QT5CORE(?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95BB7
?size@QListData@@QBEHXZ.QT5CORE(?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C95BC5
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(BC8E89F0,?,?,?,00C77FD6,00C744E4,?,6BABF570,00C744DC,?,6BABF570,00C744DC,?,6BABF570,?,45890000), ref: 00C95C6D

Strings

jng, xrefs: 00C95AE4

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?at@$?size@$?dispose@Data@1@@
String ID: jng
API String ID: 1925973254-1186463058
Opcode ID: 40394f68a86c1df87f036dc94240a44828988a2d1856b60f584fafc2cd92e5c6
Instruction ID: f2c3158f47ad04afc65b38bffb479ccdd19af7b686de36e3f437f9b886f181eb
Opcode Fuzzy Hash: 40394f68a86c1df87f036dc94240a44828988a2d1856b60f584fafc2cd92e5c6
Instruction Fuzzy Hash: B5519F75600A04AFCF16DF75D888BAD37A8FF15350F044269F816DB2A1EF30AA49CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C80040 Relevance: 24.6, APIs: 11, Strings: 3, Instructions: 105COMMON

Download Yara Rule

APIs

??0QWidget@@QAE@PAV0@V?$QFlags@W4WindowType@Qt@@@@@Z.QT5WIDGETS(00C6CF47,00000000,676E6AEE,6B9DED70,?,6B9DEE70,00000000,00000000,00CB150B,000000FF,?,00C6CF47,00000000), ref: 00C80070
new.LIBCMT ref: 00C8009B

Part of subcall function 00CAC0B7: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0DE

??0QString@@QAE@XZ.QT5CORE ref: 00C800AD

Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE(?,0000002C,00C800BF), ref: 00C94608
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94611
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9461A
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94623
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9462C
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94635
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9463E
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94647
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94650
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94659
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94662
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9466B
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94674
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9467D
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94686
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C9468F
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C94698
Part of subcall function 00C94600: ??0QString@@QAE@XZ.QT5CORE ref: 00C946A1

Part of subcall function 00C89050: ?objectName@QObject@@QBE?AVQString@@XZ.QT5CORE(?,676E6AEE,6B9DED70,?,00000000), ref: 00C8908B
Part of subcall function 00C89050: ??1QString@@QAE@XZ.QT5CORE ref: 00C89099
Part of subcall function 00C89050: ?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,HueTestFormWidget,000000FF), ref: 00C890AE
Part of subcall function 00C89050: ?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C890BD
Part of subcall function 00C89050: ??1QString@@QAE@XZ.QT5CORE ref: 00C890CD
Part of subcall function 00C89050: ?resize@QWidget@@QAEXHH@Z.QT5WIDGETS(00000258,00000190), ref: 00C890DF
Part of subcall function 00C89050: new.LIBCMT ref: 00C890E7
Part of subcall function 00C89050: ??0QVBoxLayout@@QAE@PAVQWidget@@@Z.QT5WIDGETS(00CBD240), ref: 00C890FE
Part of subcall function 00C89050: ?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,verticalLayout_2,000000FF), ref: 00C89125
Part of subcall function 00C89050: ?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C89138
Part of subcall function 00C89050: ??1QString@@QAE@XZ.QT5CORE ref: 00C89148
Part of subcall function 00C89050: new.LIBCMT ref: 00C89150
Part of subcall function 00C89050: ??0QVBoxLayout@@QAE@XZ.QT5WIDGETS ref: 00C8916C
Part of subcall function 00C89050: ?setSpacing@QBoxLayout@@QAEXH@Z.QT5WIDGETS(00000005), ref: 00C8918F
Part of subcall function 00C89050: ?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,verticalLayout,000000FF), ref: 00C8919C
Part of subcall function 00C89050: ?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C891B3

?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(00000000,00CBD240,2clearIcons(),00000000,1removeDragIcons(),00000000,00000000), ref: 00C800E9
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C800F7
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2clearIcons(),00000000,1removeDragIcons(),00000000), ref: 00C80110
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C80118
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2clearIcons(),00000000,1removeDragIcons(),00000000), ref: 00C80131
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C80139
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2clearIcons(),00000000,1removeDragIcons(),00000000), ref: 00C80152
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C8015A

Part of subcall function 00C81340: ?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(00000000,?,2selectionChanged(),00000000,1firstChanged(),00000000,6B62DA60,6B62B6F0,00000000,00000000,00C8016A), ref: 00C81364
Part of subcall function 00C81340: ??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C81373
Part of subcall function 00C81340: ?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2selectionChanged(),00000000,1middleChanged(),00000000), ref: 00C8138D
Part of subcall function 00C81340: ??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C81396
Part of subcall function 00C81340: ?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2selectionChanged(),00000000,1lastChanged(),00000000), ref: 00C813B0
Part of subcall function 00C81340: ??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C813B9
Part of subcall function 00C81340: ?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2selectionChanged(),00000000,1DOBChanged(),00000000), ref: 00C813D3
Part of subcall function 00C81340: ??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C813DC
Part of subcall function 00C81340: ?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2selectionChanged(),00000000,1refChanged(),00000000), ref: 00C813F6
Part of subcall function 00C81340: ??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C813FF
Part of subcall function 00C81340: ?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2selectionChanged(),00000000,1dateChanged(),00000000), ref: 00C8141C
Part of subcall function 00C81340: ??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C81425
Part of subcall function 00C81340: ?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2selectionChanged(),00000000,1timeChanged(),00000000), ref: 00C81442
Part of subcall function 00C81340: ??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00C8144B
Part of subcall function 00C81340: ?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(?,?,2selectionChanged(),00000000,1commentsChanged(),00000000), ref: 00C81468

Strings

jng, xrefs: 00C80055
2clearIcons(), xrefs: 00C800DD, 00C80104, 00C80125, 00C80146
1removeDragIcons(), xrefs: 00C800D7, 00C800FE, 00C8011F, 00C80140

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Object@@$String@@$Connection@Meta$Type@$?connect@ConnectionQt@@@$?setName@$?fromLayout@@ObjectString@@@Utf8@$Widget@@$?object?resize@Flags@Qt@@@@@Spacing@Widget@@@Windowmalloc
String ID: 1removeDragIcons()$2clearIcons()$jng
API String ID: 1877986879-1755257020
Opcode ID: bcd50c76d7ad4a14907e8f03e13ceed06c3812daf0a95008b9c9d3d5dfc543c0
Instruction ID: c101600e4d9effb5e8dcc248d6f8289827434d10fb91586e828f13e2cb70d4f0
Opcode Fuzzy Hash: bcd50c76d7ad4a14907e8f03e13ceed06c3812daf0a95008b9c9d3d5dfc543c0
Instruction Fuzzy Hash: EB4181B1640209EFDB04DF68CC85FDA7BA8EF14708F104169F9069B292E775EA09CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C925D0 Relevance: 24.6, APIs: 12, Strings: 2, Instructions: 81COMMON

Download Yara Rule

APIs

??8QString@@QBE_NPBD@Z.QT5CORE(00CB9364,676E6AEE,00000000,00000000,?,?,00000000,00CB41A4,000000FF,?,00C69D3C), ref: 00C9260C
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(00C69D3C,?,?,00000000,00CB41A4,000000FF,?,00C69D3C), ref: 00C92625
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(QSQLITE,00000007,?,?,00000000,00CB41A4,000000FF,?,00C69D3C), ref: 00C92635
?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A,?,?,?,00000000,00CB41A4,000000FF,?,00C69D3C), ref: 00C9264E
?addDatabase@QSqlDatabase@@SA?AV1@ABVQString@@0@Z.QT5SQL(00CB41A4,00000000,00000000,?,?,?,?,?,?,00000000,00CB41A4,000000FF,?,00C69D3C), ref: 00C92664
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,00000000,00CB41A4,000000FF,?,00C69D3C), ref: 00C92670
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,00000000,00CB41A4,000000FF,?,00C69D3C), ref: 00C9267D
?setDatabaseName@QSqlDatabase@@QAEXABVQString@@@Z.QT5SQL(00C69D3C,?,?,?,?,?,?,?,?,?,00000000,00CB41A4,000000FF,?,00C69D3C), ref: 00C92690
?open@QSqlDatabase@@QAE_NXZ.QT5SQL(?,?,?,?,?,?,?,?,?,00000000,00CB41A4,000000FF,?,00C69D3C), ref: 00C92699
?setDatabaseName@QSqlDatabase@@QAEXABVQString@@@Z.QT5SQL(00C69D3C,?,?,?,?,?,?,?,?,?,00000000,00CB41A4,000000FF,?,00C69D3C), ref: 00C926A6

Part of subcall function 00C91410: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(QSQLITE,00000007,676E6AEE,?,00000000,?,?,?,?,?,00000000,00CB3F21,000000FF,?,00C8F5BC,00000000), ref: 00C9144E
Part of subcall function 00C91410: ?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A,?,?,?,?,00000000,00CB3F21,000000FF,?,00C8F5BC), ref: 00C91463
Part of subcall function 00C91410: ?addDatabase@QSqlDatabase@@SA?AV1@ABVQString@@0@Z.QT5SQL(00000000,?,00000000,?,?,?,?,00000000,00CB3F21,000000FF,?,00C8F5BC), ref: 00C91476
Part of subcall function 00C91410: ??1QString@@QAE@XZ.QT5CORE ref: 00C91482
Part of subcall function 00C91410: ??1QString@@QAE@XZ.QT5CORE ref: 00C9148F
Part of subcall function 00C91410: ?setDatabaseName@QSqlDatabase@@QAEXABVQString@@@Z.QT5SQL(00000008), ref: 00C914A2
Part of subcall function 00C91410: ?open@QSqlDatabase@@QAE_NXZ.QT5SQL ref: 00C914AB
Part of subcall function 00C91410: ??0QSqlDatabase@@QAE@ABV0@@Z.QT5SQL(?), ref: 00C914B7
Part of subcall function 00C91410: ??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL ref: 00C914C0
Part of subcall function 00C91410: ??0QString@@QAE@XZ.QT5CORE ref: 00C914C9
Part of subcall function 00C91410: ??4QString@@QAEAAV0@PBD@Z.QT5CORE(CREATE TABLE IF NOT EXISTS users (id INTEGER PRIMARY KEY AUTOINCREMENT, first TEXT, middle TEXT, last TEXT, refNum TEXT, DOB TEXT, gender TEXT, location TEXT, industry TEXT, experience TEXT, job TEXT)), ref: 00C914DB
Part of subcall function 00C91410: ?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C914EE
Part of subcall function 00C91410: ?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C914F9
Part of subcall function 00C91410: ??4QString@@QAEAAV0@PBD@Z.QT5CORE(CREATE TABLE IF NOT EXISTS tests (id INTEGER PRIMARY KEY AUTOINCREMENT, userID INTEGER, illumination TEXT, testDate TEXT, comments TEXT, scores TEXT, serialNum TEXT, time TEXT, FOREIGN KEY(userID) REFERENCES users(id))), ref: 00C91503
Part of subcall function 00C91410: ?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C91510
Part of subcall function 00C91410: ?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C91515
Part of subcall function 00C91410: ??4QString@@QAEAAV0@PBD@Z.QT5CORE(CREATE TABLE IF NOT EXISTS serialNums (id INTEGER PRIMARY KEY AUTOINCREMENT, serialNum TEXT, purchaseDate TEXT)), ref: 00C9151F
Part of subcall function 00C91410: ?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C9152C
Part of subcall function 00C91410: ?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C91531
Part of subcall function 00C91410: ??4QString@@QAEAAV0@PBD@Z.QT5CORE(CREATE TABLE IF NOT EXISTS settings (id INTEGER PRIMARY KEY AUTOINCREMENT, scoreMode INTEGER, testGui INTEGER, testReport INTEGER, tesGui INTEGER, tesReport INTEGER,), ref: 00C9153B
Part of subcall function 00C91410: ?append@QString@@QAEAAV1@PBD@Z.QT5CORE(sqrtTesGui INTEGER, sqrtTesReport INTEGER, vingrysGui INTEGER, vingrysReport INTEGER,), ref: 00C91549
Part of subcall function 00C91410: ?append@QString@@QAEAAV1@PBD@Z.QT5CORE(classGui INTEGER, classReport INTEGER, percentFirstGui INTEGER, percentFirstReport INTEGER,), ref: 00C91557
Part of subcall function 00C91410: ?append@QString@@QAEAAV1@PBD@Z.QT5CORE(percentSomeGui INTEGER, percentSomeReport INTEGER, percentExpGui INTEGER, percentExpReport INTEGER,), ref: 00C91565

??1QSqlDatabase@@QAE@XZ.QT5SQL(?,?,?,?,?,?,?,?,?,00000000,00CB41A4,000000FF,?,00C69D3C), ref: 00C926B6
??1QString@@QAE@XZ.QT5CORE(?,?,00000000,00CB41A4,000000FF,?,00C69D3C), ref: 00C926BF

Strings

QSQLITE, xrefs: 00C92630
jng, xrefs: 00C925E7

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Database@@$Query@@$String@@@$?append@?exec@?prepare@?setDatabaseName@$?add?from?number@?open@ArrayAscii_helper@Data@Database@String@@0@TypedV0@@$Database@@@
String ID: QSQLITE$jng
API String ID: 2511127092-1150821439
Opcode ID: 1e2acc0605cb6eb3da614c80ab8d9c467dce2624117f9c33a3000396cb347934
Instruction ID: aaa3102ad09d6edafeb5fe2fa5a6efa302914a434f33f477e5ee1bdfe856f8c3
Opcode Fuzzy Hash: 1e2acc0605cb6eb3da614c80ab8d9c467dce2624117f9c33a3000396cb347934
Instruction Fuzzy Hash: F931407590420AEFCB14DFA4E949BDEBFBCFB14715F004629E902A3291DB756608CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00C88CE0 Relevance: 24.6, APIs: 12, Strings: 2, Instructions: 74COMMON

Download Yara Rule

APIs

?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,00000000,0000000A,676E6AEE,?,?,00000000,00CB2608,000000FF,?,00C6B410,?,?,676E6AEE), ref: 00C88D16
?toInt@QString@@QBEHPA_NH@Z.QT5CORE(?,00C6B410,?,?,676E6AEE), ref: 00C88D24
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001,00000000,0000000A,?,00C6B410,?,?,676E6AEE), ref: 00C88D32
?toInt@QString@@QBEHPA_NH@Z.QT5CORE(?,00C6B410,?,?,676E6AEE), ref: 00C88D3A
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000002,00000000,0000000A,?,00C6B410,?,?,676E6AEE), ref: 00C88D48
?toInt@QString@@QBEHPA_NH@Z.QT5CORE(?,00C6B410,?,?,676E6AEE), ref: 00C88D50
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000003,00000000,0000000A,?,00C6B410,?,?,676E6AEE), ref: 00C88D61
?toInt@QString@@QBEHPA_NH@Z.QT5CORE(?,00C6B410,?,?,676E6AEE), ref: 00C88D69
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000004,00000000,0000000A,?,00C6B410,?,?,676E6AEE), ref: 00C88D7A
?toInt@QString@@QBEHPA_NH@Z.QT5CORE(?,00C6B410,?,?,676E6AEE), ref: 00C88D82
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000005,00000000,0000000A,?,00C6B410,?,?,676E6AEE), ref: 00C88D93
?toInt@QString@@QBEHPA_NH@Z.QT5CORE(?,00C6B410,?,?,676E6AEE), ref: 00C88D9B

Part of subcall function 00C61FD0: ??1QString@@QAE@XZ.QT5CORE(676E6AEE,?,6B520380,6B5175D0,00000000,00CAD200,000000FF,?,00C88DAB,?,00C6B410,?,?,676E6AEE), ref: 00C62035
Part of subcall function 00C61FD0: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(6B5175D0,676E6AEE,?,6B520380,6B5175D0,00000000,00CAD200,000000FF,?,00C88DAB,?,00C6B410,?,?,676E6AEE), ref: 00C62040

Strings

jng, xrefs: 00C88D0C, 00C88D2C, 00C88D42, 00C88D58, 00C88D71, 00C88D8A, 00C88D9D
jng, xrefs: 00C88CF3

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@ListString@@$?at@Int@$?dispose@Data@1@@
String ID: jng$jng
API String ID: 1567015778-1345699772
Opcode ID: f540c43bc755fb84e968bfd3d9c21f453acf16e827d1dcae6cea7e04c4be1e22
Instruction ID: 585ff8771b70eb48f5f14c598f851c1217dc50e9a3047c9942c981a81ff03cd3
Opcode Fuzzy Hash: f540c43bc755fb84e968bfd3d9c21f453acf16e827d1dcae6cea7e04c4be1e22
Instruction Fuzzy Hash: FE210A74B40708ABDB189F71CC5AB997BA4FB14B61F00461AA9069B2C0EFB4A508CA81

Uniqueness

Uniqueness Score: -1.00%

Function 00CA8600 Relevance: 24.6, APIs: 10, Strings: 4, Instructions: 72COMMON

Download Yara Rule

APIs

??0QLabel@@QAE@PAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z.QT5WIDGETS(00CA57D5,00000000,676E6AEE,?,00000000,00000000,00CB719A,000000FF,?,00CA57D5,?), ref: 00CA862E
new.LIBCMT ref: 00CA864A

Part of subcall function 00CAC0B7: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0DE

??0QPixmap@@QAE@XZ.QT5GUI ref: 00CA8658
??0QString@@QAE@XZ.QT5CORE ref: 00CA8661

Part of subcall function 00CA8A20: ?objectName@QObject@@QBE?AVQString@@XZ.QT5CORE(000000FF,676E6AEE,6B9DE680,00000000,6BA8AA30,00CB7291,000000FF,?,00CA8674,00000000), ref: 00CA8A53
Part of subcall function 00CA8A20: ??1QString@@QAE@XZ.QT5CORE(?,00CA8674,00000000), ref: 00CA8A61
Part of subcall function 00CA8A20: ?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(00CA8674,labelImageDisplay,000000FF,?,00CA8674,00000000), ref: 00CA8A76
Part of subcall function 00CA8A20: ?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00CA8A85
Part of subcall function 00CA8A20: ??1QString@@QAE@XZ.QT5CORE ref: 00CA8A95
Part of subcall function 00CA8A20: ?resize@QWidget@@QAEXHH@Z.QT5WIDGETS(00000064,00000064,?,00CA8674,00000000), ref: 00CA8AA1
Part of subcall function 00CA8A20: new.LIBCMT ref: 00CA8AA9
Part of subcall function 00CA8A20: ??0QLabel@@QAE@PAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z.QT5WIDGETS(00CA8674,00000000,?,?,?,?,00CA8674), ref: 00CA8AC2
Part of subcall function 00CA8A20: ?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(00CA8674,label,000000FF,?,?,?,?,00CA8674), ref: 00CA8AE9
Part of subcall function 00CA8A20: ?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000,?,?,?,?,?,?,?,00CA8674), ref: 00CA8AFC
Part of subcall function 00CA8A20: ??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,00CA8674), ref: 00CA8B0C
Part of subcall function 00CA8A20: ??0QRect@@QAE@HHHH@Z.QT5CORE(00000000,00000000,00000064,00000064,?,?,?,?,?,?,?,00CA8674), ref: 00CA8B1D
Part of subcall function 00CA8A20: ?setGeometry@QWidget@@QAEXABVQRect@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,00CA8674), ref: 00CA8B26
Part of subcall function 00CA8A20: ?setScaledContents@QLabel@@QAEX_N@Z.QT5WIDGETS(00000001,?,?,?,?,?,?,?,00CA8674), ref: 00CA8B30
Part of subcall function 00CA8A20: ?setAlignment@QLabel@@QAEXV?$QFlags@W4AlignmentFlag@Qt@@@@@Z.QT5WIDGETS(?,?,?,?,?,?,?,?,00CA8674), ref: 00CA8B41
Part of subcall function 00CA8A20: ?connectSlotsByName@QMetaObject@@SAXPAVQObject@@@Z.QT5CORE(00CA8674,00CA8674,?,?,?,?,?,?,?,?,00CA8674), ref: 00CA8B50

?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z.QT5CORE(00000000,00000000,2clicked(),00000000,1labelClicked(),00000000,00000000), ref: 00CA8686
??1Connection@QMetaObject@@QAE@XZ.QT5CORE ref: 00CA8692
?setMinimumHeight@QWidget@@QAEXH@Z.QT5WIDGETS(00000064), ref: 00CA869C
?setMinimumWidth@QWidget@@QAEXH@Z.QT5WIDGETS(00000064), ref: 00CA86A6

Part of subcall function 00CA8B70: ?tr@QMetaObject@@QBE?AVQString@@PBD0H@Z.QT5CORE(00CA86BE,00CA86BE,00CA86BE,00CA86BE,?,00CA86BE,?,Select Logo Image,00000000), ref: 00CA8B8E

?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00CA86CB
??1QString@@QAE@XZ.QT5CORE ref: 00CA86D4

Strings

2clicked(), xrefs: 00CA867C
jng, xrefs: 00CA8613
1labelClicked(), xrefs: 00CA8676
Select Logo Image, xrefs: 00CA86B3

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$?setObject@@$Widget@@$Label@@$MetaName@$Flags@Qt@@@@@String@@@Type@$?fromConnection@MinimumObjectUtf8@Window$?connect?connect@?object?resize@?tr@AlignmentAlignment@ConnectionContents@Flag@Geometry@Height@Object@@@Pixmap@@Qt@@@Rect@@Rect@@@ScaledSlotsText@Width@malloc
String ID: 1labelClicked()$2clicked()$Select Logo Image$jng
API String ID: 412070428-1141458206
Opcode ID: 5b239cbfaea463211e084eff85dee193b050b843a70bc92f7563f4fd0d1d361e
Instruction ID: 0336aa8c883a1605567bfe11f491e431524e377445e28f5a3d81d31bda3e2741
Opcode Fuzzy Hash: 5b239cbfaea463211e084eff85dee193b050b843a70bc92f7563f4fd0d1d361e
Instruction Fuzzy Hash: 692189B1A40744EFCB10DF54DC49F9E7BB8EB18B14F10462DF906862A0EBB16A09CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00C7F2C0 Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 118COMMON

Download Yara Rule

APIs

?selectionModel@QAbstractItemView@@QBEPAVQItemSelectionModel@@XZ.QT5WIDGETS(676E6AEE), ref: 00C7F2F0
?selectedIndexes@QItemSelectionModel@@QBE?AV?$QList@VQModelIndex@@@@XZ.QT5CORE(?), ref: 00C7F2FC

Part of subcall function 00C79B50: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,676E6AEE,?,?,?,00CB032C,000000FF,?,00C76CB4), ref: 00C79BA0
Part of subcall function 00C79B50: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(6B94A624), ref: 00C79BC8

?size@QListData@@QBEHXZ.QT5CORE ref: 00C7F31B
?size@QListData@@QBEHXZ.QT5CORE ref: 00C7F33A
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C7F348
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C7F354
?row@QModelIndex@@QBEHXZ.QT5CORE ref: 00C7F35C
?size@QListData@@QBEHXZ.QT5CORE ref: 00C7F379
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C7F38B
?row@QModelIndex@@QBEHXZ.QT5CORE ref: 00C7F393
?size@QListData@@QBEHXZ.QT5CORE(?), ref: 00C7F3AC
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?), ref: 00C7F40A

Strings

jng, xrefs: 00C7F2D7

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?size@$?at@?dispose@Data@1@@ItemModel$?row@Index@@Model@@Selection$?selected?selectionAbstractIndex@@@@Indexes@List@Model@View@@
String ID: jng
API String ID: 1700056022-1186463058
Opcode ID: 166bd84d74715bfb28bd15728ab730018f048822832d106d2e685fe46e45776f
Instruction ID: 7d0061dd29662e4ee98bb8e89b28a553410cf2caf089ccb15bf213ec9e7fb14b
Opcode Fuzzy Hash: 166bd84d74715bfb28bd15728ab730018f048822832d106d2e685fe46e45776f
Instruction Fuzzy Hash: 56419F7690061ADBDF14DF64D884BBEB7B8FF54314F140639E816A32A0DB30AD0ACB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C8C910 Relevance: 21.1, APIs: 11, Strings: 1, Instructions: 66windowCOMMON

Download Yara Rule

APIs

?currentIndex@QAbstractItemView@@QBE?AVQModelIndex@@XZ.QT5WIDGETS(?,676E6AEE), ref: 00C8C942
?row@QModelIndex@@QBEHXZ.QT5CORE ref: 00C8C94A
?item@QListWidget@@QBEPAVQListWidgetItem@@H@Z.QT5WIDGETS(00000000), ref: 00C8C957
?itemWidget@QListWidget@@QBEPAVQWidget@@PAVQListWidgetItem@@@Z.QT5WIDGETS(00000000), ref: 00C8C964
?cast@QMetaObject@@QBEPAVQObject@@PAV2@@Z.QT5CORE(00000000), ref: 00C8C970

Part of subcall function 00C947B0: ??0QIcon@@QAE@XZ.QT5GUI(676E6AEE,?,?,?,?,00000000,00CB4A53,000000FF), ref: 00C947E5
Part of subcall function 00C947B0: ?rect@QWidget@@QBE?AVQRect@@XZ.QT5WIDGETS(?,?,?,?,?,00000000,00CB4A53,000000FF), ref: 00C947FF
Part of subcall function 00C947B0: ?grab@QWidget@@QAE?AVQPixmap@@ABVQRect@@@Z.QT5WIDGETS(?,00000000,?,?,?,?,00000000,00CB4A53,000000FF), ref: 00C9480C
Part of subcall function 00C947B0: ?addPixmap@QIcon@@QAEXABVQPixmap@@W4Mode@1@W4State@1@@Z.QT5GUI(00000000,00000000,00000001,?,?,?,?,00000000,00CB4A53,000000FF), ref: 00C94820
Part of subcall function 00C947B0: ??1QPixmap@@UAE@XZ.QT5GUI(?,?,?,?,00000000,00CB4A53,000000FF), ref: 00C94829

?currentItem@QListWidget@@QBEPAVQListWidgetItem@@XZ.QT5WIDGETS(?,?), ref: 00C8C992
?sizeHint@QListWidgetItem@@QBE?AVQSize@@XZ.QT5WIDGETS ref: 00C8C99A
?setIconSize@QAbstractItemView@@QAEXABVQSize@@@Z.QT5WIDGETS(00000000), ref: 00C8C9A7
?currentItem@QListWidget@@QBEPAVQListWidgetItem@@XZ.QT5WIDGETS(?), ref: 00C8C9B7
?setIcon@QListWidgetItem@@QAEXABVQIcon@@@Z.QT5WIDGETS ref: 00C8C9BF

Part of subcall function 00CAA510: ?activate@QMetaObject@@SAXPAVQObject@@PBU1@HPAPAX@Z.QT5CORE(?,00F37060,00000001,?), ref: 00CAA52D

??1QIcon@@QAE@XZ.QT5GUI ref: 00C8C9CF

Strings

jng, xrefs: 00C8C925

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: List$Widget@@$Widget$Item@@$Object@@$?currentIcon@@Pixmap@@$?setAbstractIndex@@ItemItem@MetaModelView@@$?activate@?add?cast@?grab@?item?item@?rect@?row@?sizeHint@IconIcon@Icon@@@Index@Item@@@Mode@1@Pixmap@Rect@@Rect@@@Size@Size@@Size@@@State@1@@V2@@Widget@
String ID: jng
API String ID: 872409928-1186463058
Opcode ID: 343260b5d0e6cd35ead3eaaa0f362ad13eea0eb5bad96ad1f699b9b30e677fd6
Instruction ID: a5eff1016f25640fa47578efad81cd1541532613bea707833eb198070f62319b
Opcode Fuzzy Hash: 343260b5d0e6cd35ead3eaaa0f362ad13eea0eb5bad96ad1f699b9b30e677fd6
Instruction Fuzzy Hash: 5521FA75A00509AFCB08EFA5DC58B6DB7B9FB48315F004269E50AD37A0DF35A886CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C74230 Relevance: 19.4, APIs: 10, Strings: 1, Instructions: 168COMMON

Download Yara Rule

APIs

Part of subcall function 00C6FB30: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(000000FF,?,?,000000FF,676E6AEE,?,?,?,00CAF136,000000FF,?,00C76CC1), ref: 00C6FBA5

Part of subcall function 00C6ECE0: ??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ECF0
Part of subcall function 00C6ECE0: ??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ECF9
Part of subcall function 00C6ECE0: ??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED02
Part of subcall function 00C6ECE0: ??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED0B
Part of subcall function 00C6ECE0: ??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED14
Part of subcall function 00C6ECE0: ??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED1D
Part of subcall function 00C6ECE0: ??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED26
Part of subcall function 00C6ECE0: ??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED2F
Part of subcall function 00C6ECE0: ??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED38
Part of subcall function 00C6ECE0: ??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED41
Part of subcall function 00C6ECE0: ??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED4A
Part of subcall function 00C6ECE0: ??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED53
Part of subcall function 00C6ECE0: ??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED5C
Part of subcall function 00C6ECE0: ??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED65
Part of subcall function 00C6ECE0: ??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED6E
Part of subcall function 00C6ECE0: ??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED77
Part of subcall function 00C6ECE0: ??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED80
Part of subcall function 00C6ECE0: ??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,00C88CB8,00C698C5,676E6AEE,00000000,00000000,00CB25D8,000000FF,?,00C698C5), ref: 00C6ED89

?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CBA9B4,00000001,00C69903,676E6AEE,?,00000000,?,00CAFB45,000000FF), ref: 00C74292
?split@QString@@QBE?AVQStringList@@ABV1@W4SplitBehavior@1@W4CaseSensitivity@Qt@@@Z.QT5CORE(00000001,00CAFB45,00000000,00000001,?,?,00CAFB45,000000FF), ref: 00C742B4

Part of subcall function 00C61FD0: ??1QString@@QAE@XZ.QT5CORE(676E6AEE,?,6B520380,6B5175D0,00000000,00CAD200,000000FF,?,00C88DAB,?,00C6B410,?,?,676E6AEE), ref: 00C62035
Part of subcall function 00C61FD0: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(6B5175D0,676E6AEE,?,6B520380,6B5175D0,00000000,00CAD200,000000FF,?,00C88DAB,?,00C6B410,?,?,676E6AEE), ref: 00C62040

??1QString@@QAE@XZ.QT5CORE(?,?,00CAFB45,000000FF), ref: 00C742E4

Part of subcall function 00C79B50: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,676E6AEE,?,?,?,00CB032C,000000FF,?,00C76CB4), ref: 00C79BA0
Part of subcall function 00C79B50: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(6B94A624), ref: 00C79BC8

?size@QListData@@QBEHXZ.QT5CORE(?,?,00CAFB45,000000FF), ref: 00C742F9
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,00000000,0000000A,?,?,00CAFB45,000000FF), ref: 00C74318
?toInt@QString@@QBEHPA_NH@Z.QT5CORE(?,?,00CAFB45,000000FF), ref: 00C74320
?size@QListData@@QBEHXZ.QT5CORE(?,?,?,00CAFB45,000000FF), ref: 00C74334
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(00CAFB45,00CAFB45,?,?,?,?,00CAFB45,000000FF), ref: 00C743A4
??1QString@@QAE@XZ.QT5CORE(?,?,?,00CAFB45,000000FF), ref: 00C743F8
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(000000FF,?,?,?,00CAFB45,000000FF), ref: 00C74403

Strings

jng, xrefs: 00C74247

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$V0@@$Data@@List$?dispose@Data@1@@$?size@$?at@?from?split@ArrayAscii_helper@Behavior@1@CaseData@Int@List@@Qt@@@Sensitivity@SplitStringTyped
String ID: jng
API String ID: 1293898345-1186463058
Opcode ID: e1e2952c8b29bcaf57f15e1a1e971667d1e6f2dd428305cf894fd75bcf2da55a
Instruction ID: c35473712408cd25c9db5e349a6227bc4a3ec0f812ee4bfefe5b86ae7569ec59
Opcode Fuzzy Hash: e1e2952c8b29bcaf57f15e1a1e971667d1e6f2dd428305cf894fd75bcf2da55a
Instruction Fuzzy Hash: 6A51A071900205DFDF14DFA8D885BEDB778FF14314F144269E92AA7291DB34AE09CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00C9B590 Relevance: 19.4, APIs: 10, Strings: 1, Instructions: 147COMMON

Download Yara Rule

APIs

?size@QListData@@QBEHXZ.QT5CORE(676E6AEE,4D8BD6FF,00000000,4D8BD783,4D8BD6FF,00000000,00CB5488,000000FF,?,00C9B847,?), ref: 00C9B5C2
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C9B847,?), ref: 00C9B5D3
?size@QListData@@QBEHXZ.QT5CORE(?,00C9B847,?), ref: 00C9B5E9
?size@QListData@@QBEHXZ.QT5CORE(?,00C9B847,?), ref: 00C9B5FA
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C9B847,?), ref: 00C9B607
?size@QListData@@QBEHXZ.QT5CORE(?,00C9B847,?), ref: 00C9B61C
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE ref: 00C9B6B8
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(6B94A624), ref: 00C9B6E4
?clear@QGraphicsScene@@QAEXXZ.QT5WIDGETS ref: 00C9B6F6
?setScene@QGraphicsView@@QAEXPAVQGraphicsScene@@@Z.QT5WIDGETS(?), ref: 00C9B712

Strings

jng, xrefs: 00C9B5A5

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?size@$Graphics$?at@?dispose@Data@1@@$?clear@?setScene@Scene@@Scene@@@View@@
String ID: jng
API String ID: 3923883479-1186463058
Opcode ID: c3283d56e27797a848bb057dc4c76533772af6910b6bc39983362192994186df
Instruction ID: 79c112d812414afd7ea08e5d9748f02768f8df4c28599a3585810e56fe7b2eba
Opcode Fuzzy Hash: c3283d56e27797a848bb057dc4c76533772af6910b6bc39983362192994186df
Instruction Fuzzy Hash: 7D518174601601EBDF189F29ED8876D77A9EF49320F180269F822D73E0DB35AD16CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C8C9F0 Relevance: 19.4, APIs: 10, Strings: 1, Instructions: 116windowCOMMON

Download Yara Rule

APIs

?selectedItems@QListWidget@@QBE?AV?$QList@PAVQListWidgetItem@@@@XZ.QT5WIDGETS(?,?,?,?,?,?,?,?,?,00CB2F6D,000000FF), ref: 00C8CA3A
?size@QListData@@QBEHXZ.QT5CORE(?,?,?,?,?,?,?,?,00CB2F6D,000000FF), ref: 00C8CA42
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,?,?,?,?,?,?,?,?,00CB2F6D,000000FF), ref: 00C8CA74
??0QIcon@@QAE@XZ.QT5GUI ref: 00C8CA8B
?selectedItems@QListWidget@@QBE?AV?$QList@PAVQListWidgetItem@@@@XZ.QT5WIDGETS(?), ref: 00C8CAA7
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,00000000), ref: 00C8CACE
?setIcon@QListWidgetItem@@QAEXABVQIcon@@@Z.QT5WIDGETS ref: 00C8CAD6
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?), ref: 00C8CB06
??1QIcon@@QAE@XZ.QT5GUI ref: 00C8CB1D
?clearSelection@QAbstractItemView@@QAEXXZ.QT5WIDGETS ref: 00C8CB35

Strings

jng, xrefs: 00C8CA07

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: List$Data@@$Widget$?dispose@?selectedData@1@@Icon@@Item@@@@Items@List@Widget@@$?at@?clear?set?size@AbstractIcon@Icon@@@ItemItem@@Selection@View@@
String ID: jng
API String ID: 368208493-1186463058
Opcode ID: e42dd5ef64f4cb310b3d137a063f93c25962731d76bb84ee6a899cd78a294c0b
Instruction ID: 59a2156a186bb2e84389517d1075469851d04e43ad0b1280ef0f0398d2a33252
Opcode Fuzzy Hash: e42dd5ef64f4cb310b3d137a063f93c25962731d76bb84ee6a899cd78a294c0b
Instruction Fuzzy Hash: A8418071A012099FCB08DB68D894BBDB7B5FF49324F150259E426973E0CB31AD06DBA5

Uniqueness

Uniqueness Score: -1.00%

Function 00C9D0B0 Relevance: 19.3, APIs: 9, Strings: 2, Instructions: 40COMMON

Download Yara Rule

APIs

??4QString@@QAEAAV0@PBD@Z.QT5CORE(00CC0090), ref: 00C9D0C7
??4QString@@QAEAAV0@PBD@Z.QT5CORE(00CC0094), ref: 00C9D0D6
??4QString@@QAEAAV0@PBD@Z.QT5CORE(00CC0098), ref: 00C9D0E5
??4QString@@QAEAAV0@PBD@Z.QT5CORE(00CBA934), ref: 00C9D0F4
??4QString@@QAEAAV0@PBD@Z.QT5CORE(00CC009C), ref: 00C9D103
??4QString@@QAEAAV0@PBD@Z.QT5CORE(00CC00A0), ref: 00C9D112
??4QString@@QAEAAV0@PBD@Z.QT5CORE(zh_Hans), ref: 00C9D121
??4QString@@QAEAAV0@PBD@Z.QT5CORE(zh_Hant), ref: 00C9D130
??4QString@@QAEAAV0@PBD@Z.QT5CORE(00CBA714,00C9FF21), ref: 00C9D13F

Strings

zh_Hans, xrefs: 00C9D11C
zh_Hant, xrefs: 00C9D12B

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@
String ID: zh_Hans$zh_Hant
API String ID: 1688221058-1453883406
Opcode ID: af8fafec13e0388195e54f6bea2e785a7b617652c0b85c026871864c2177dbee
Instruction ID: bb443a1eb8b8a853b6674910906e8f87bf719c9c2f5d45b5d643d12c225e8275
Opcode Fuzzy Hash: af8fafec13e0388195e54f6bea2e785a7b617652c0b85c026871864c2177dbee
Instruction Fuzzy Hash: EA012471641900DF8F04DBA0DD59F2C3779BF88706B2A429CE18A4A7A19F759416DB12

Uniqueness

Uniqueness Score: -1.00%

Function 00C8CBC0 Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 107windowCOMMON

Download Yara Rule

APIs

?selectedItems@QListWidget@@QBE?AV?$QList@PAVQListWidgetItem@@@@XZ.QT5WIDGETS(?,676E6AEE), ref: 00C8CBFD
?size@QListData@@QBEHXZ.QT5CORE ref: 00C8CC05
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?), ref: 00C8CC37
??0QIcon@@QAE@XZ.QT5GUI ref: 00C8CC4E
?selectedItems@QListWidget@@QBE?AV?$QList@PAVQListWidgetItem@@@@XZ.QT5WIDGETS(?), ref: 00C8CC6A
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,00000000), ref: 00C8CC91
?setIcon@QListWidgetItem@@QAEXABVQIcon@@@Z.QT5WIDGETS ref: 00C8CC99
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?), ref: 00C8CCC9
??1QIcon@@QAE@XZ.QT5GUI ref: 00C8CCE0

Strings

jng, xrefs: 00C8CBD7

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: List$Data@@$Widget$?dispose@?selectedData@1@@Icon@@Item@@@@Items@List@Widget@@$?at@?set?size@Icon@Icon@@@Item@@
String ID: jng
API String ID: 409976791-1186463058
Opcode ID: 06341106829f3ce58569b424d19304f5d249904c00ba62388db0e69d5d6e8485
Instruction ID: 952af76ceb4fcff8924d9e9dab8cc41438021d854e7676087993140676c0d217
Opcode Fuzzy Hash: 06341106829f3ce58569b424d19304f5d249904c00ba62388db0e69d5d6e8485
Instruction Fuzzy Hash: D2418E71A012099BCF08DF68D894B7EB7B9FF45328F240259E826973E0DB319D06CB65

Uniqueness

Uniqueness Score: -1.00%

Function 00C9CC70 Relevance: 17.6, APIs: 7, Strings: 3, Instructions: 96COMMON

Download Yara Rule

APIs

Part of subcall function 00C9CB20: ?currentIndex@QComboBox@@QBEHXZ.QT5WIDGETS(0000000A,?,00C9CCC1,jng,676E6AEE), ref: 00C9CB34
Part of subcall function 00C9CB20: ?number@QString@@SA?AV1@HH@Z.QT5CORE(?,00000000), ref: 00C9CB3F

Part of subcall function 00C63120: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C7C58A,7FFFFFFF,00000001,676E6AEE,00000000,00000000,00000000,?,00000000,00CAD3B0,000000FF,?,00C7C58A,00000000), ref: 00C6316D

??1QString@@QAE@XZ.QT5CORE(00000000,jng,676E6AEE), ref: 00C9CCD7

Part of subcall function 00C9CBB0: ?currentIndex@QComboBox@@QBEHXZ.QT5WIDGETS(0000000A,?,00C9CCE8,?), ref: 00C9CBC4
Part of subcall function 00C9CBB0: ?number@QString@@SA?AV1@HH@Z.QT5CORE(?,00000000), ref: 00C9CBCF

Part of subcall function 00C63120: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C7C58A,676E6AEE,00000000,00000000,00000000,?,00000000,00CAD3B0,000000FF,?,00C7C58A,00000000), ref: 00C6318D
Part of subcall function 00C63120: ?append@QListData@@QAEPAPAXXZ.QT5CORE ref: 00C6319C

??1QString@@QAE@XZ.QT5CORE(00000000,?), ref: 00C9CCFE

Part of subcall function 00C9CB50: ?currentIndex@QComboBox@@QBEHXZ.QT5WIDGETS(0000000A,?,00C9CD0F,?), ref: 00C9CB64
Part of subcall function 00C9CB50: ?number@QString@@SA?AV1@HH@Z.QT5CORE(?,00000000), ref: 00C9CB6F

??1QString@@QAE@XZ.QT5CORE(00000000,?), ref: 00C9CD25

Part of subcall function 00C9CB80: ?currentIndex@QComboBox@@QBEHXZ.QT5WIDGETS(0000000A,?,00C9CD36,?), ref: 00C9CB94
Part of subcall function 00C9CB80: ?number@QString@@SA?AV1@HH@Z.QT5CORE(?,00000000), ref: 00C9CB9F

??1QString@@QAE@XZ.QT5CORE(00000000,?), ref: 00C9CD4C

Part of subcall function 00C9CAD0: ?currentIndex@QComboBox@@QBEHXZ.QT5WIDGETS(0000000A,?,00C9CD5D,?), ref: 00C9CAE4
Part of subcall function 00C9CAD0: ?number@QString@@SA?AV1@HH@Z.QT5CORE(?,00000000), ref: 00C9CAEF

??1QString@@QAE@XZ.QT5CORE(00000000,?), ref: 00C9CD73
?number@QString@@SA?AV1@HH@Z.QT5CORE(0000000A,?,0000000A), ref: 00C9CD82
??1QString@@QAE@XZ.QT5CORE(00000000), ref: 00C9CD9D

Strings

jng, xrefs: 00C9CC86
jng, xrefs: 00C9CCA0
jng, xrefs: 00C9CCAA, 00C9CCB4

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$?number@$?currentBox@@ComboIndex@$V0@@$?append@Data@@List
String ID: jng$jng$jng
API String ID: 3271277820-4285407776
Opcode ID: 79cd54ffbc4b49b684de78a6db88b9049bcc40a7ed7339337310d7115ef2cf51
Instruction ID: 1fa6d71c6e56477df8606bc24d43d3346f5c2c1a025f583bb9fae80ab1c8cbe4
Opcode Fuzzy Hash: 79cd54ffbc4b49b684de78a6db88b9049bcc40a7ed7339337310d7115ef2cf51
Instruction Fuzzy Hash: 0C312AB4904149EBCF04EBA8D959BAEFBFDEF64314F100259E405A3291DBB45B08DB72

Uniqueness

Uniqueness Score: -1.00%

Function 00C63DE0 Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 96COMMON

Download Yara Rule

APIs

?begin@QListData@@QBEPAPAXXZ.QT5CORE(676E6AEE,00000000,?,00000000,?,00C7C58A,00000000), ref: 00C63E10
?detach_grow@QListData@@QAEPAUData@1@PAHH@Z.QT5CORE(?,?), ref: 00C63E21
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C63E36
?begin@QListData@@QBEPAPAXXZ.QT5CORE(?), ref: 00C63E45

Part of subcall function 00C699B0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00000000,00000000,00000000,00000000,00C63B29,00000000), ref: 00C699CF

?end@QListData@@QBEPAPAXXZ.QT5CORE(?,00000000), ref: 00C63E63
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C63E6C
??1QString@@QAE@XZ.QT5CORE(00000000), ref: 00C63EC5
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(00000000,00000000), ref: 00C63ED0
?begin@QListData@@QBEPAPAXXZ.QT5CORE ref: 00C63EDE

Strings

jng, xrefs: 00C63DF7

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?begin@$String@@$?detach_grow@?dispose@?end@Data@1@Data@1@@V0@@
String ID: jng
API String ID: 2944942897-1186463058
Opcode ID: ffff69bc24038f593d7afb0c9756677faf432af94a84dd75738f4821fd3efc20
Instruction ID: 4bb912a7fa569f4e86c9344353115c41281490222f61359fa60b30ca595e450e
Opcode Fuzzy Hash: ffff69bc24038f593d7afb0c9756677faf432af94a84dd75738f4821fd3efc20
Instruction Fuzzy Hash: 6C316571A006099FCB14DF68DC84B6DB7B8FB49364F004229E916D3391DB34AA19CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C8CD40 Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 88COMMON

Download Yara Rule

APIs

?rowCount@QTableWidget@@QBEHXZ.QT5WIDGETS(676E6AEE,6B519CB0,?,00000041,?,00000000,00CB2FDE,000000FF,?,00C8BBC5,?), ref: 00C8CD77
?item@QListWidget@@QBEPAVQListWidgetItem@@H@Z.QT5WIDGETS(00000000,?,00C8BBC5,?), ref: 00C8CD88
?itemWidget@QListWidget@@QBEPAVQWidget@@PAVQListWidgetItem@@@Z.QT5WIDGETS(00000000,?,00C8BBC5,?), ref: 00C8CD95
?cast@QMetaObject@@QBEPAVQObject@@PAV2@@Z.QT5CORE(00000000,?,00C8BBC5,?), ref: 00C8CDA1
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C8BBC5,?), ref: 00C8CDAD
??0QString@@QAE@ABV0@@Z.QT5CORE(00000000,?,?,00C8BBC5,?), ref: 00C8CDB7

Part of subcall function 00C94AD0: ?setMinimumHeight@QWidget@@QAEXH@Z.QT5WIDGETS(0000001E,676E6AEE,00000000,00000000,00000000,00CB4B52,000000FF,?,00C8CDC4,?,?,00C8BBC5,?), ref: 00C94B05
Part of subcall function 00C94AD0: ?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(?,?,00C8CDC4,?,?,00C8BBC5,?), ref: 00C94B15
Part of subcall function 00C94AD0: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(QLabel { color: red; },00000016,?,00C8CDC4,?,?,00C8BBC5,?), ref: 00C94B22
Part of subcall function 00C94AD0: ?setStyleSheet@QWidget@@QAEXABVQString@@@Z.QT5WIDGETS(?,?), ref: 00C94B3C
Part of subcall function 00C94AD0: ??1QString@@QAE@XZ.QT5CORE ref: 00C94B45
Part of subcall function 00C94AD0: ??1QString@@QAE@XZ.QT5CORE ref: 00C94B4E

?rowCount@QTableWidget@@QBEHXZ.QT5WIDGETS(?,?,00C8BBC5,?), ref: 00C8CDCB
??1QString@@QAE@XZ.QT5CORE(?,00C8BBC5,?), ref: 00C8CE16
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,?,00C8BBC5,?), ref: 00C8CE21

Strings

jng, xrefs: 00C8CD55

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Widget@@$List$String@@$?set$?rowCount@Data@@Object@@String@@@TableWidget$?at@?cast@?dispose@?from?item?item@ArrayAscii_helper@Data@Data@1@@Height@Item@@Item@@@Label@@MetaMinimumSheet@StyleText@TypedV0@@V2@@Widget@
String ID: jng
API String ID: 824273902-1186463058
Opcode ID: 4611ca2cd75a2d86258dca8d9e1e88fccc8ede851364ea5868b04fffff292e9b
Instruction ID: 2cab8bd1800c0683ec91c9add053535e89451ab5d908712c7c57d61337306f27
Opcode Fuzzy Hash: 4611ca2cd75a2d86258dca8d9e1e88fccc8ede851364ea5868b04fffff292e9b
Instruction Fuzzy Hash: EB31A072A00104ABCB14EF68DC84B6EB769FF94364F044269E81AD7390DF31AD56CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 00C802F0 Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 81COMMON

Download Yara Rule

APIs

?text@QLineEdit@@QBE?AVQString@@XZ.QT5WIDGETS(?,676E6AEE), ref: 00C80331
??8QString@@QBE_NPBD@Z.QT5CORE(00CB9364), ref: 00C80349
?text@QLineEdit@@QBE?AVQString@@XZ.QT5WIDGETS(?), ref: 00C8035D
??8QString@@QBE_NPBD@Z.QT5CORE(00CB9364), ref: 00C80371
?text@QLineEdit@@QBE?AVQString@@XZ.QT5WIDGETS(?), ref: 00C80385
??8QString@@QBE_NPBD@Z.QT5CORE(00CB9364), ref: 00C8039D
??1QString@@QAE@XZ.QT5CORE ref: 00C803BA
??1QString@@QAE@XZ.QT5CORE ref: 00C803C8
??1QString@@QAE@XZ.QT5CORE ref: 00C803D1

Strings

jng, xrefs: 00C80307

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$?text@Edit@@Line
String ID: jng
API String ID: 1636785295-1186463058
Opcode ID: 6ec83679e2f897a7675ff5e192017a97392697ac06c6690ac6bc4a80930b46d4
Instruction ID: 80ff4915c0529d906dbfb1294153fc95ed3bfbb444f45ff0d70ebfd2ee5b7f10
Opcode Fuzzy Hash: 6ec83679e2f897a7675ff5e192017a97392697ac06c6690ac6bc4a80930b46d4
Instruction Fuzzy Hash: DB316B71A046089FDB14EF68D849BEDBBBCFF44358F10426DD506A32E1DB396A09CB50

Uniqueness

Uniqueness Score: -1.00%

Function 00C8F2E0 Relevance: 17.6, APIs: 7, Strings: 3, Instructions: 63COMMON

Download Yara Rule

APIs

??0QObject@@QAE@PAV0@@Z.QT5CORE(00C8F5A9,676E6AEE,?,00000000,?,00C8F5A9,00000000), ref: 00C8F30F
??0QString@@QAE@XZ.QT5CORE(?,00C8F5A9), ref: 00C8F325

Part of subcall function 00C61130: ??0QString@@QAE@XZ.QT5CORE ref: 00C6113B
Part of subcall function 00C61130: ??0QString@@QAE@XZ.QT5CORE ref: 00C61144

?applicationDirPath@QCoreApplication@@SA?AVQString@@XZ.QT5CORE(?,?,00C8F5A9), ref: 00C8F33F

Part of subcall function 00C623D0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00CB35BE), ref: 00C62405
Part of subcall function 00C623D0: ?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(000000FF,00000000,000000FF), ref: 00C62422
Part of subcall function 00C623D0: ?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE(00000000), ref: 00C62435
Part of subcall function 00C623D0: ??1QString@@QAE@XZ.QT5CORE ref: 00C6243E

??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,00C8F5A9), ref: 00C8F362

Part of subcall function 00CA97B0: ?productType@QSysInfo@@SA?AVQString@@XZ.QT5CORE(00CB7459,676E6AEE,?,?,00000000,00CB7459,000000FF,?,00C8F378,?,?,?,?,?,00C8F5A9), ref: 00CA97D8
Part of subcall function 00CA97B0: ??8QString@@QBE_NPBD@Z.QT5CORE(windows), ref: 00CA97F0
Part of subcall function 00CA97B0: ??8QString@@QBE_NPBD@Z.QT5CORE(winrt), ref: 00CA9802
Part of subcall function 00CA97B0: ??1QString@@QAE@XZ.QT5CORE ref: 00CA9815

??4QString@@QAEAAV0@PBD@Z.QT5CORE(C:\ProgramData\Farnworth-MunsellHueTest\FM100DB.sqlite,?,?,?,?,?,00C8F5A9), ref: 00C8F384
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(?,?,?,?,?,?,00C8F5A9), ref: 00C8F391
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,00C8F5A9), ref: 00C8F39A

Strings

jng, xrefs: 00C8F2F6
C:\ProgramData\Farnworth-MunsellHueTest\FM100DB.sqlite, xrefs: 00C8F37C
/FM100DB.sqlite, xrefs: 00C8F345

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$V0@@$?append@?application?from?productApplication@@CoreInfo@@Object@@Path@Type@Utf8@V1@@
String ID: /FM100DB.sqlite$C:\ProgramData\Farnworth-MunsellHueTest\FM100DB.sqlite$jng
API String ID: 1225025567-1690995346
Opcode ID: 777ea33383b8effcc45ec8e55b197c73d4764350055c7cdf75199d00cc98d758
Instruction ID: dfa50ce2439a4763f6be434baab8ef28be2d68515891ec8bae390a0d079127b4
Opcode Fuzzy Hash: 777ea33383b8effcc45ec8e55b197c73d4764350055c7cdf75199d00cc98d758
Instruction Fuzzy Hash: AF217F75810249EFCB14EF64DD49BEEBBBCFF15314F004669E812A32A1EB745608CB61

Uniqueness

Uniqueness Score: -1.00%

Function 00CA8960 Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 61COMMON

Download Yara Rule

APIs

??0QImage@@QAE@ABVQString@@PBD@Z.QT5GUI(00C9F831,00000000,676E6AEE,6B5136D0,?,?,?,?,00000000,00CB7252,000000FF,?,00C9F831), ref: 00CA8999
??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(00C9F831,?,?,?,00000000,00CB7252,000000FF,?,00C9F831), ref: 00CA89AA
?fromImage@QPixmap@@SA?AV1@ABVQImage@@V?$QFlags@W4ImageConversionFlag@Qt@@@@@Z.QT5GUI(?,?,?,?,?,?,00000000,00CB7252,000000FF,?,00C9F831), ref: 00CA89C1
??4QPixmap@@QAEAAV0@$$QAV0@@Z.QT5GUI(00000000,?,?,?,?,?,?,00000000,00CB7252,000000FF,?,00C9F831), ref: 00CA89D0
??1QPixmap@@UAE@XZ.QT5GUI(?,?,?,?,?,?,00000000,00CB7252,000000FF,?,00C9F831), ref: 00CA89D9
?setScaledContents@QLabel@@QAEX_N@Z.QT5WIDGETS(00000001,?,?,?,?,?,?,00000000,00CB7252,000000FF,?,00C9F831), ref: 00CA89E6
?setPixmap@QLabel@@QAEXABVQPixmap@@@Z.QT5WIDGETS(?,?,?,?,?,?,?,00000000,00CB7252,000000FF,?,00C9F831), ref: 00CA89F2
??1QImage@@UAE@XZ.QT5GUI(?,?,?,?,?,?,00000000,00CB7252,000000FF,?,00C9F831), ref: 00CA89FB
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,00000000,00CB7252,000000FF,?,00C9F831), ref: 00CA8A04

Strings

jng, xrefs: 00CA8976

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Image@@Pixmap@@String@@$?setLabel@@V0@@$?fromContents@ConversionFlag@Flags@ImageImage@Pixmap@Pixmap@@@Qt@@@@@ScaledV0@$$
String ID: jng
API String ID: 2746039038-1186463058
Opcode ID: 0914ab3a3a4c1e9fc691a2b02434eb700c2862d57a00780454d6a16717a5c133
Instruction ID: 07d3ff50c93e1255af6a465412a4604d6944f050eb6eac41a5cc6f3bf6c3b38c
Opcode Fuzzy Hash: 0914ab3a3a4c1e9fc691a2b02434eb700c2862d57a00780454d6a16717a5c133
Instruction Fuzzy Hash: 2421F972514109EBCB04DF54EC58BDDBBBCFB58714F00422AE802936A0DF74A949CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00C9A220 Relevance: 15.9, APIs: 8, Strings: 1, Instructions: 115COMMON

Download Yara Rule

APIs

Part of subcall function 00C95F10: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(676E6AEE,676E6AEE,676E6AEE,6BF77020,00000001,?,?,?,00CAF106,000000FF,?,00C9A282,676E6AEE,6BF77020,?), ref: 00C95F94

?width@QRectF@@QBENXZ.QT5CORE(676E6AEE,6BF77020,?,6C017DB0), ref: 00C9A2E0
??0QRectF@@QAE@NNNN@Z.QT5CORE ref: 00C9A32E

Part of subcall function 00C95DC0: new.LIBCMT ref: 00C95E32

??0QColor@@QAE@W4GlobalColor@Qt@@@Z.QT5GUI(00000005,?), ref: 00C9A345
??0QBrush@@QAE@XZ.QT5GUI ref: 00C9A34E
??0QPen@@QAE@ABVQColor@@@Z.QT5GUI(?), ref: 00C9A364
?addEllipse@QGraphicsScene@@QAEPAVQGraphicsEllipseItem@@ABVQRectF@@ABVQPen@@ABVQBrush@@@Z.QT5WIDGETS(?,00000000,00000000), ref: 00C9A377
??1QPen@@QAE@XZ.QT5GUI ref: 00C9A380
??1QBrush@@QAE@XZ.QT5GUI ref: 00C9A390

Strings

jng, xrefs: 00C9A234

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Pen@@Rect$Brush@@Graphics$?add?dispose@?width@Brush@@@Color@Color@@Color@@@Data@1@@Data@@EllipseEllipse@GlobalItem@@ListQt@@@Scene@@
String ID: jng
API String ID: 4146847800-1186463058
Opcode ID: 3ae8bdcad4cacdc8d8bc0918f33c94d3a0945067f70632cd08e62c0d448d3510
Instruction ID: a9bce1cdee1d08b028d42032708871e9bb77d10d9dcd4e133014b88e225e83dc
Opcode Fuzzy Hash: 3ae8bdcad4cacdc8d8bc0918f33c94d3a0945067f70632cd08e62c0d448d3510
Instruction Fuzzy Hash: 46415D32D14649DFCB02DFB4C894B9EB7B8BF59390F108366E806BA256EB306549CB50

Uniqueness

Uniqueness Score: -1.00%

Function 00C70050 Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 91COMMON

Download Yara Rule

APIs

?begin@QListData@@QBEPAPAXXZ.QT5CORE(676E6AEE,00000000,?,00000000,00000000,00000002,00000000,?,00C77CE9,?,00000000), ref: 00C70080
?detach_grow@QListData@@QAEPAUData@1@PAHH@Z.QT5CORE(?,?,?,00C77CE9,?,00000000), ref: 00C70091
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C700A6
?begin@QListData@@QBEPAPAXXZ.QT5CORE(?), ref: 00C700B5
?end@QListData@@QBEPAPAXXZ.QT5CORE(?,00000000), ref: 00C700D3
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C700DC
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(00000000,?,?,00000000), ref: 00C7012F
?begin@QListData@@QBEPAPAXXZ.QT5CORE(?,?,?,?,?,00C77CE9,?,00000000), ref: 00C7013A

Strings

jng, xrefs: 00C70067

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?begin@$?detach_grow@?dispose@?end@Data@1@Data@1@@
String ID: jng
API String ID: 2885242468-1186463058
Opcode ID: 871ae8200eb19b0db33fde420b359774a2bf2e0262edf39167bf9a9afbe0f90e
Instruction ID: a5e22c1307c7e50e8d51bfb0893bc35f26c3b3cbce48eec02163862ec2411ec2
Opcode Fuzzy Hash: 871ae8200eb19b0db33fde420b359774a2bf2e0262edf39167bf9a9afbe0f90e
Instruction Fuzzy Hash: D1317471600609DFCB14EF58D854F6EB7ADEF49324F148619F816C3391DB349A05DB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C701C0 Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 91COMMON

Download Yara Rule

APIs

?begin@QListData@@QBEPAPAXXZ.QT5CORE(676E6AEE,000000010000000A,?,FFFFFFF7,000000010000000A,00000000,FFFFFFF7,00C787AD,?,?,?), ref: 00C701F0
?detach_grow@QListData@@QAEPAUData@1@PAHH@Z.QT5CORE(?,?), ref: 00C70201
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C70216
?begin@QListData@@QBEPAPAXXZ.QT5CORE(?), ref: 00C70225
?end@QListData@@QBEPAPAXXZ.QT5CORE(?,00000000), ref: 00C70243
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C7024C
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(00000000,?,?,00000000), ref: 00C7029F
?begin@QListData@@QBEPAPAXXZ.QT5CORE ref: 00C702AA

Strings

jng, xrefs: 00C701D7

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?begin@$?detach_grow@?dispose@?end@Data@1@Data@1@@
String ID: jng
API String ID: 2885242468-1186463058
Opcode ID: a291d89e487ad814450741d5af0b8a20624da7bc7883a460e5b0594a5f3d9772
Instruction ID: d1367448356c0af106332658af41ed8597c62a764d54ae3220518e77d156710e
Opcode Fuzzy Hash: a291d89e487ad814450741d5af0b8a20624da7bc7883a460e5b0594a5f3d9772
Instruction Fuzzy Hash: 213182716005099FCB14EF58D854B6EB7ADEF49324F148619F816C3391DF349A05CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C70330 Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 91COMMON

Download Yara Rule

APIs

?begin@QListData@@QBEPAPAXXZ.QT5CORE(676E6AEE,?,00000000,00000000,?,00000000,00000000,?,00000000), ref: 00C70360
?detach_grow@QListData@@QAEPAUData@1@PAHH@Z.QT5CORE(?,?), ref: 00C70371
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C70386
?begin@QListData@@QBEPAPAXXZ.QT5CORE(?), ref: 00C70395

Part of subcall function 00C736A0: new.LIBCMT ref: 00C736EB
Part of subcall function 00C736A0: ?createData@QMapDataBase@@SAPAU1@XZ.QT5CORE(00000000), ref: 00C73717
Part of subcall function 00C736A0: ?recalcMostLeftNode@QMapDataBase@@QAEXXZ.QT5CORE(00000000), ref: 00C73746

?end@QListData@@QBEPAPAXXZ.QT5CORE(?,00000000), ref: 00C703B3
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C703BC
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(00000000,?,?,00000000), ref: 00C7040F
?begin@QListData@@QBEPAPAXXZ.QT5CORE ref: 00C7041A

Strings

jng, xrefs: 00C70347

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?begin@$Base@@Data$?create?detach_grow@?dispose@?end@?recalcData@Data@1@Data@1@@LeftMostNode@
String ID: jng
API String ID: 3650365713-1186463058
Opcode ID: 19b400d3aa9fe951eb560b57a2c4b4c69fa5c0e43423c1ec5e32ab13c7d28c83
Instruction ID: 25b3dfb403903efd84d583045ad7536ae5f11338dd71e4201028361443b7ab03
Opcode Fuzzy Hash: 19b400d3aa9fe951eb560b57a2c4b4c69fa5c0e43423c1ec5e32ab13c7d28c83
Instruction Fuzzy Hash: E1314271600508EFCB14EF58D854BAEB7ADFF89364F148619F816C3391DB34AA09DB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C90580 Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 91COMMON

Download Yara Rule

APIs

?begin@QListData@@QBEPAPAXXZ.QT5CORE(676E6AEE,6B648640,00C9D2E9,6B992BE0,6B648640,00C9D2E9,6B992BE0,00C90A5D,?,?,?,00000000), ref: 00C905B0
?detach_grow@QListData@@QAEPAUData@1@PAHH@Z.QT5CORE(?,?,?,?,00000000), ref: 00C905C1
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C905D6
?begin@QListData@@QBEPAPAXXZ.QT5CORE(?), ref: 00C905E5

Part of subcall function 00C69AA0: new.LIBCMT ref: 00C69ADF
Part of subcall function 00C69AA0: ??0QString@@QAE@ABV0@@Z.QT5CORE(?,00000000), ref: 00C69AF1
Part of subcall function 00C69AA0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00000008), ref: 00C69AFE

?end@QListData@@QBEPAPAXXZ.QT5CORE(?,00000000), ref: 00C90603
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C9060C
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(00000000,?,?,00000000), ref: 00C9065F
?begin@QListData@@QBEPAPAXXZ.QT5CORE(?,?,?,?,?,?,?,?,00000000), ref: 00C9066A

Strings

jng, xrefs: 00C90597

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?begin@$String@@V0@@$?detach_grow@?dispose@?end@Data@1@Data@1@@
String ID: jng
API String ID: 2724638698-1186463058
Opcode ID: 781f7af8cd306cbf9714eb3cd9f80765bda181a4dc539d6b3299187291026108
Instruction ID: c399000deaa87798a26320fea2d57af0705c971cac616dc0244eda8f8dfa568b
Opcode Fuzzy Hash: 781f7af8cd306cbf9714eb3cd9f80765bda181a4dc539d6b3299187291026108
Instruction Fuzzy Hash: A33174716005089FCF14EF58D894FAEB7ADEF89324F144219F816C3391DB34AA15DB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C96E50 Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 81COMMON

Download Yara Rule

APIs

?begin@QListData@@QBEPAPAXXZ.QT5CORE(676E6AEE,6B62DA60,6B62B6F0,00000000,6B62DA60,6B62B6F0,00000000), ref: 00C96E80
?detach_grow@QListData@@QAEPAUData@1@PAHH@Z.QT5CORE(?,?), ref: 00C96E91
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C96EA6
?begin@QListData@@QBEPAPAXXZ.QT5CORE(?), ref: 00C96EB5

Part of subcall function 00C737B0: memcpy.VCRUNTIME140(?,?,?,00C96EC3,00000000), ref: 00C737CF

?end@QListData@@QBEPAPAXXZ.QT5CORE(?,00000000), ref: 00C96ED3
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C96EDC
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(00000000,00000000), ref: 00C96F14
?begin@QListData@@QBEPAPAXXZ.QT5CORE ref: 00C96F1F

Strings

jng, xrefs: 00C96E67

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?begin@$?detach_grow@?dispose@?end@Data@1@Data@1@@memcpy
String ID: jng
API String ID: 2342842139-1186463058
Opcode ID: bb2da0dba708722292ea1fadd37c568dc5800a133047887236c17060e56f1d0c
Instruction ID: 58f70515a52c993ff7c92be089d5e2118e0a17b6500be30a34c128dfb1f9eab6
Opcode Fuzzy Hash: bb2da0dba708722292ea1fadd37c568dc5800a133047887236c17060e56f1d0c
Instruction Fuzzy Hash: 3F314C71604509AFCF14EF58D848BADBBB9EB49764F00421AF816C3391DF349A09CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C9C5D0 Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 63COMMON

Download Yara Rule

APIs

Part of subcall function 00C79B50: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,676E6AEE,?,?,?,00CB032C,000000FF,?,00C76CB4), ref: 00C79BA0
Part of subcall function 00C79B50: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(6B94A624), ref: 00C79BC8

??1QButtonGroup@@UAE@XZ.QT5WIDGETS ref: 00C9C621

Part of subcall function 00C61FD0: ??1QString@@QAE@XZ.QT5CORE(676E6AEE,?,6B520380,6B5175D0,00000000,00CAD200,000000FF,?,00C88DAB,?,00C6B410,?,?,676E6AEE), ref: 00C62035
Part of subcall function 00C61FD0: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(6B5175D0,676E6AEE,?,6B520380,6B5175D0,00000000,00CAD200,000000FF,?,00C88DAB,?,00C6B410,?,?,676E6AEE), ref: 00C62040

??1QString@@QAE@XZ.QT5CORE ref: 00C9C638

Part of subcall function 00CA7660: ??1QString@@QAE@XZ.QT5CORE(?,00C9C646), ref: 00CA769C
Part of subcall function 00CA7660: ??1QString@@QAE@XZ.QT5CORE(?,00C9C646), ref: 00CA76A5

??1QString@@QAE@XZ.QT5CORE ref: 00C9C649
??1QString@@QAE@XZ.QT5CORE ref: 00C9C652
??1QString@@QAE@XZ.QT5CORE ref: 00C9C65B
??1QString@@QAE@XZ.QT5CORE ref: 00C9C664
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?), ref: 00C9C690
??1QDialog@@UAE@XZ.QT5WIDGETS ref: 00C9C69B

Strings

jng, xrefs: 00C9C5E3

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$?dispose@Data@1@@Data@@List$ButtonDialog@@Group@@
String ID: jng
API String ID: 2761523361-1186463058
Opcode ID: 5b677e412f055f733791ecb2fd5051d32d38381dd297a02554384c2e4ff202ad
Instruction ID: 97af954bfafd97bdfd0a4089f8e9eabd0c41be816a0b871e498c10a4ff1e4503
Opcode Fuzzy Hash: 5b677e412f055f733791ecb2fd5051d32d38381dd297a02554384c2e4ff202ad
Instruction Fuzzy Hash: 45213D71500A05DBCB24EF24EC59B9ABBB8FF15714F00472DE85A836E0EF31A90ACB50

Uniqueness

Uniqueness Score: -1.00%

Function 00CA88D0 Relevance: 15.8, APIs: 6, Strings: 3, Instructions: 43COMMON

Download Yara Rule

APIs

?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,labelImageDisplay,Form,00000000,000000FF,676E6AEE,00000000,?,00000000,00CB7222,000000FF,?,00CA8B4F,00CA8674), ref: 00CA8908
?setWindowTitle@QWidget@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00CA891C
??1QString@@QAE@XZ.QT5CORE ref: 00CA8925
??0QString@@QAE@XZ.QT5CORE ref: 00CA892E
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00CA893E
??1QString@@QAE@XZ.QT5CORE ref: 00CA8947

Strings

jng, xrefs: 00CA88E3
labelImageDisplay, xrefs: 00CA8902
Form, xrefs: 00CA88FA

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$?setString@@@$?translate@Application@@CoreLabel@@Text@Title@Widget@@Window
String ID: Form$labelImageDisplay$jng
API String ID: 1473085788-2141916889
Opcode ID: e69e9962bd7732f005e75b36143f968d0fe78da9709e1f5123260d3949ed244e
Instruction ID: 4ffb6ba6d3cc98cf6a88db6664f539453107630f47cd61c5a2e037ba585e1bd3
Opcode Fuzzy Hash: e69e9962bd7732f005e75b36143f968d0fe78da9709e1f5123260d3949ed244e
Instruction Fuzzy Hash: F5012971504209EFCB04DF94EC49BAE7BACFB08710F104369F816932D0DBB56A08CB50

Uniqueness

Uniqueness Score: -1.00%

Function 00C970E0 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 81COMMON

Download Yara Rule

APIs

?begin@QListData@@QBEPAPAXXZ.QT5CORE(676E6AEE,?,?,?,?,?,?,00C99E5E,?), ref: 00C97110
?detach_grow@QListData@@QAEPAUData@1@PAHH@Z.QT5CORE(?,?,?,?,?,?,00C99E5E,?), ref: 00C97121
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000,?,?,?), ref: 00C97136
?begin@QListData@@QBEPAPAXXZ.QT5CORE(?,?,?,?), ref: 00C97145

Part of subcall function 00C9B0A0: new.LIBCMT ref: 00C9B0E4

?end@QListData@@QBEPAPAXXZ.QT5CORE(?,00000000,?,?,?), ref: 00C97163
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000,?,?,?), ref: 00C9716C
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000,00000000,?,?,?), ref: 00C971AD

Strings

jng, xrefs: 00C970F7

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?begin@$?detach_grow@?end@Data@1@
String ID: jng
API String ID: 299856034-1186463058
Opcode ID: 06518e41e0f4411f25cbafed8f7e76cd2c69192e941dc4096f6285028dfd5a7d
Instruction ID: 3d2b8239b3201ef8ff169c045ae052cd7d3a5d7f1dbd791dca4b33526d2f7f24
Opcode Fuzzy Hash: 06518e41e0f4411f25cbafed8f7e76cd2c69192e941dc4096f6285028dfd5a7d
Instruction Fuzzy Hash: F9218D71605608AFCF14EF68D858BAEBBADEB48760F00421AF816C33D1DF349A05CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C97230 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 81COMMON

Download Yara Rule

APIs

?begin@QListData@@QBEPAPAXXZ.QT5CORE(676E6AEE,6BF77020,00000001,?,6BF77020,00000001,?,00C9A340,?), ref: 00C97260
?detach_grow@QListData@@QAEPAUData@1@PAHH@Z.QT5CORE(?,?), ref: 00C97271
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C97286
?begin@QListData@@QBEPAPAXXZ.QT5CORE(?), ref: 00C97295

Part of subcall function 00C9B140: new.LIBCMT ref: 00C9B184

?end@QListData@@QBEPAPAXXZ.QT5CORE(?,00000000), ref: 00C972B3
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C972BC
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000,00000000), ref: 00C972FD

Strings

jng, xrefs: 00C97247

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?begin@$?detach_grow@?end@Data@1@
String ID: jng
API String ID: 299856034-1186463058
Opcode ID: 07b51902eec55e87e091a178d206516b11b5611410b16141a4ad1eda0f9b5f17
Instruction ID: 9f191fd24ad6bc3124d4ec7f5087b009c821dcdeeafae60733261d26443f5790
Opcode Fuzzy Hash: 07b51902eec55e87e091a178d206516b11b5611410b16141a4ad1eda0f9b5f17
Instruction Fuzzy Hash: C5218C71605608AFCF04EF68D858BAEBBADEB49764F00421AF816C3391DF349A05CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C9FB70 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 64COMMON

Download Yara Rule

APIs

?currentRow@QTableWidget@@QBEHXZ.QT5WIDGETS(676E6AEE), ref: 00C9FBAD
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(00000000,00000000), ref: 00C9FBBF
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C9FBCE

Part of subcall function 00C8F560: new.LIBCMT ref: 00C8F58E

Part of subcall function 00C92700: ??0QString@@QAE@XZ.QT5CORE(676E6AEE), ref: 00C92732
Part of subcall function 00C92700: ?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A), ref: 00C92745
Part of subcall function 00C92700: ?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z.QT5SQL(?,00000000,00000001), ref: 00C92758
Part of subcall function 00C92700: ??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL ref: 00C92764
Part of subcall function 00C92700: ??1QString@@QAE@XZ.QT5CORE ref: 00C92771
Part of subcall function 00C92700: ??4QString@@QAEAAV0@PBD@Z.QT5CORE(DELETE FROM serialNums WHERE serialNum = :serialNum), ref: 00C9277F
Part of subcall function 00C92700: ?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C9278C
Part of subcall function 00C92700: ??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C92799
Part of subcall function 00C92700: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:serialNum,0000000A), ref: 00C927AA
Part of subcall function 00C92700: ?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C927CD
Part of subcall function 00C92700: ??1QString@@QAE@XZ.QT5CORE ref: 00C927D6
Part of subcall function 00C92700: ??1QVariant@@QAE@XZ.QT5CORE ref: 00C927E3
Part of subcall function 00C92700: ?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C927EC
Part of subcall function 00C92700: ??1QSqlQuery@@QAE@XZ.QT5SQL ref: 00C927F5
Part of subcall function 00C92700: ??1QString@@QAE@XZ.QT5CORE ref: 00C927FE
Part of subcall function 00C92700: ??1QString@@QAE@XZ.QT5CORE ref: 00C92807

?rowCount@QTableWidget@@QBEHXZ.QT5WIDGETS ref: 00C9FBF1
?setRowCount@QTableWidget@@QAEXH@Z.QT5WIDGETS(-00000001), ref: 00C9FC02

Part of subcall function 00CA7810: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CB9364,00000000,676E6AEE), ref: 00CA783F
Part of subcall function 00CA7810: ?setText@QLineEdit@@QAEXABVQString@@@Z.QT5WIDGETS(?), ref: 00CA785C
Part of subcall function 00CA7810: ??1QString@@QAE@XZ.QT5CORE ref: 00CA786C
Part of subcall function 00CA7810: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CB9364,00000000), ref: 00CA7879
Part of subcall function 00CA7810: ?setText@QLineEdit@@QAEXABVQString@@@Z.QT5WIDGETS(?), ref: 00CA7896
Part of subcall function 00CA7810: ??1QString@@QAE@XZ.QT5CORE ref: 00CA789F

?clear@QTableWidget@@QAEXXZ.QT5WIDGETS ref: 00C9FC19
?clear@QComboBox@@QAEXXZ.QT5WIDGETS ref: 00C9FC28

Part of subcall function 00C9D170: ?setRowCount@QTableWidget@@QAEXH@Z.QT5WIDGETS(00000000,676E6AEE,6B5136D0,?,?,?,?,?,?,?,?,?,?,00000000,00CB5889,000000FF), ref: 00C9D1A8
Part of subcall function 00C9D170: ?setSelectionMode@QAbstractItemView@@QAEXW4SelectionMode@1@@Z.QT5WIDGETS(00000001,?,?,?,?,?,?,?,?,00000000,00CB5889,000000FF,?,00C9F83F), ref: 00C9D1B9
Part of subcall function 00C9D170: ??1QString@@QAE@XZ.QT5CORE(00000000,00000000), ref: 00C9D23B
Part of subcall function 00C9D170: ??1QString@@QAE@XZ.QT5CORE ref: 00C9D248
Part of subcall function 00C9D170: ?setHorizontalHeaderLabels@QTableWidget@@QAEXABVQStringList@@@Z.QT5WIDGETS(00000000), ref: 00C9D25B
Part of subcall function 00C9D170: ??0QVariant@@QAE@XZ.QT5CORE ref: 00C9D264
Part of subcall function 00C9D170: ?count@QComboBox@@QBEHXZ.QT5WIDGETS ref: 00C9D297
Part of subcall function 00C9D170: ??0QIcon@@QAE@XZ.QT5GUI ref: 00C9D2A2
Part of subcall function 00C9D170: ?insertItem@QComboBox@@QAEXHABVQIcon@@ABVQString@@ABVQVariant@@@Z.QT5WIDGETS(00000000,00000000,00000000,?), ref: 00C9D2B4
Part of subcall function 00C9D170: ??1QIcon@@QAE@XZ.QT5GUI ref: 00C9D2BD
Part of subcall function 00C9D170: ??1QString@@QAE@XZ.QT5CORE ref: 00C9D2C6

Strings

jng, xrefs: 00C9FB87

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Table$Widget@@$?set$Query@@$String@@@Variant@@$?fromArrayAscii_helper@Box@@ComboCount@Data@Icon@@Typed$?clear@Edit@@Item@@LineSelectionText@Widget$?bind?count@?current?database@?exec@?insert?item@?number@?prepare@?row?text@AbstractDatabase@@Database@@@Flag@Flags@HeaderHorizontalItemItem@Labels@List@@@Mode@Mode@1@@ParamRow@Sql@@@@@StringString@@_TypeValue@Variant@@@View@@
String ID: jng
API String ID: 1151976462-1186463058
Opcode ID: 1b9065f28ee029ae7f4d16d4d9e16ef6ec68714bf4dde906749b3615ede6e8f7
Instruction ID: 3dde13c0451dec5e6a74c2db945467354631457e7e2e010afee9a67d88e6b636
Opcode Fuzzy Hash: 1b9065f28ee029ae7f4d16d4d9e16ef6ec68714bf4dde906749b3615ede6e8f7
Instruction Fuzzy Hash: C8217C70604204DFCB18EF59D859BAEBBB9FB48714F10026DE406977A1CF326D09CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00CAA110 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 61COMMON

Download Yara Rule

APIs

?className@QMetaObject@@QBEPBDXZ.QT5CORE(676E6AEE,?), ref: 00CAA149
??0QString@@QAE@XZ.QT5CORE ref: 00CAA154
?reserve@QByteArray@@QAEXH@Z.QT5CORE(00000002), ref: 00CAA174
?append@QByteArray@@QAEAAV1@PBD@Z.QT5CORE(00000000,0000002A), ref: 00CAA180
?append@QByteArray@@QAEAAV1@D@Z.QT5CORE ref: 00CAA188
?registerNormalizedType@QMetaType@@SAHABVQByteArray@@P6AXPAX@ZP6APAX1PBX@ZHV?$QFlags@W4TypeFlag@QMetaType@@@@PBUQMetaObject@@@Z.QT5CORE(?,00CAA8C0,Function_0004A010,00000004,0000010C), ref: 00CAA1B0
??1QByteArray@@QAE@XZ.QT5CORE ref: 00CAA1C4

Strings

jng, xrefs: 00CAA125

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Array@@Byte$Meta$?append@$?class?register?reserve@Flag@Flags@Name@NormalizedObject@@Object@@@String@@TypeType@Type@@Type@@@@
String ID: jng
API String ID: 3321901786-1186463058
Opcode ID: f03e81ce70c020e519bacb75c2e38a1e44143eacd70a9d8a558c2a5c60ad1089
Instruction ID: dc92b93521deb8647070431916a1e8588ceac92130a344837f464d2c94e82e3e
Opcode Fuzzy Hash: f03e81ce70c020e519bacb75c2e38a1e44143eacd70a9d8a558c2a5c60ad1089
Instruction Fuzzy Hash: 35217F71A14216EBCB14EF64EC09BAD7BB8FB09755F004669E912E32E0EF75590CCB50

Uniqueness

Uniqueness Score: -1.00%

Function 00C69DD0 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 52clipboardCOMMON

Download Yara Rule

APIs

Part of subcall function 00C9BC50: new.LIBCMT ref: 00C9BC80
Part of subcall function 00C9BC50: ??0QObject@@QAE@PAV0@@Z.QT5CORE(00000000), ref: 00C9BC98
Part of subcall function 00C9BC50: ??0QString@@QAE@XZ.QT5CORE ref: 00C9BCA7
Part of subcall function 00C9BC50: ??4QString@@QAEAAV0@PBD@Z.QT5CORE(00CB9364), ref: 00C9BCD0

?clipboard@QGuiApplication@@SAPAVQClipboard@@XZ.QT5GUI(00000000,00000000), ref: 00C9BE04
?text@QClipboard@@QBE?AVQString@@W4Mode@1@@Z.QT5GUI ref: 00C9BE0C
?insert@QLineEdit@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C9BE1D
?clipboard@QGuiApplication@@SAPAVQClipboard@@XZ.QT5GUI(00000000,00000000,?,?,?,?,000000FF), ref: 00C9BE34
?text@QClipboard@@QBE?AVQString@@W4Mode@1@@Z.QT5GUI(?,?,?,?,000000FF), ref: 00C9BE3C
?insertPlainText@QPlainTextEdit@@QAEXABVQString@@@Z.QT5WIDGETS(00000000,?,?,?,?,000000FF), ref: 00C9BE4D
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,000000FF), ref: 00C9BE56

Strings

jng, xrefs: 00C9BDE5

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Clipboard@@$?clipboard@?text@Application@@Edit@@Mode@1@@PlainString@@@$?insert?insert@LineObject@@TextText@V0@@
String ID: jng
API String ID: 2658280852-1186463058
Opcode ID: 0293b89ace5cb05119a1af17b9d3b64e1331429810c095c584fc1d82d63314e1
Instruction ID: 630857d4934b7c079b3f89761ae38e97d4fb0185224c5582ac6228a8b037170b
Opcode Fuzzy Hash: 0293b89ace5cb05119a1af17b9d3b64e1331429810c095c584fc1d82d63314e1
Instruction Fuzzy Hash: 34111F71504609EFCF24DFA4EA5DBAE77BCFB08B11F100669E51293690DF74A908CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00C94AD0 Relevance: 14.0, APIs: 6, Strings: 2, Instructions: 46COMMON

Download Yara Rule

APIs

?setMinimumHeight@QWidget@@QAEXH@Z.QT5WIDGETS(0000001E,676E6AEE,00000000,00000000,00000000,00CB4B52,000000FF,?,00C8CDC4,?,?,00C8BBC5,?), ref: 00C94B05
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(?,?,00C8CDC4,?,?,00C8BBC5,?), ref: 00C94B15
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(QLabel { color: red; },00000016,?,00C8CDC4,?,?,00C8BBC5,?), ref: 00C94B22
?setStyleSheet@QWidget@@QAEXABVQString@@@Z.QT5WIDGETS(?,?), ref: 00C94B3C
??1QString@@QAE@XZ.QT5CORE ref: 00C94B45
??1QString@@QAE@XZ.QT5CORE ref: 00C94B4E

Strings

QLabel { color: red; }, xrefs: 00C94B1D
jng, xrefs: 00C94AE3

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: ?setString@@$String@@@Widget@@$?fromArrayAscii_helper@Data@Height@Label@@MinimumSheet@StyleText@Typed
String ID: QLabel { color: red; }$jng
API String ID: 375353175-2737774923
Opcode ID: d5bd7cf18b876126466400956a76e8a0be32af9bb6ed7ae052955cea9218dfeb
Instruction ID: 67fa24c8705e3e773e35bfe1645f43f4199c00522395c773c8c828c6a3bbed38
Opcode Fuzzy Hash: d5bd7cf18b876126466400956a76e8a0be32af9bb6ed7ae052955cea9218dfeb
Instruction Fuzzy Hash: D2118E31504209EFC714DF94EC54FAEBBB8FB18704F00426DE906872A1DB72690ACB40

Uniqueness

Uniqueness Score: -1.00%

Function 00C81050 Relevance: 13.6, APIs: 9, Instructions: 121windowCOMMON

Download Yara Rule

APIs

?hasFocus@QWidget@@QBE_NXZ.QT5WIDGETS ref: 00C81060
?hasFocus@QWidget@@QBE_NXZ.QT5WIDGETS ref: 00C81083

Part of subcall function 00C9BC50: new.LIBCMT ref: 00C9BC80
Part of subcall function 00C9BC50: ??0QObject@@QAE@PAV0@@Z.QT5CORE(00000000), ref: 00C9BC98
Part of subcall function 00C9BC50: ??0QString@@QAE@XZ.QT5CORE ref: 00C9BCA7
Part of subcall function 00C9BC50: ??4QString@@QAEAAV0@PBD@Z.QT5CORE(00CB9364), ref: 00C9BCD0

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: ?hasFocus@String@@Widget@@$Object@@V0@@
String ID:
API String ID: 4173688630-0
Opcode ID: d3106b9cd229a30b99d0ccd032777b7687f2cf107fad3282f76d5d381a897c77
Instruction ID: a98240edd5da450c66280486ba21ce2bcd31465f7afed87074f7237481783e93
Opcode Fuzzy Hash: d3106b9cd229a30b99d0ccd032777b7687f2cf107fad3282f76d5d381a897c77
Instruction Fuzzy Hash: 7E4144323006049FCE64FF68E959D9E77A6AFC1744705496EE5424F252CF22EC4BDB60

Uniqueness

Uniqueness Score: -1.00%

Function 00C744B0 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 130COMMON

Download Yara Rule

APIs

?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,?,676E6AEE,?,?,00CAFB97,000000FF,?,00C61B9B), ref: 00C7452E
?number@QString@@SA?AV1@NDH@Z.QT5CORE(?,?,?,00CAFB97,000000FF,?,00C61B9B), ref: 00C7456C
?number@QString@@SA?AV1@NDH@Z.QT5CORE(?,?,?,?,?,?,?,?,?,?,000000FF,?,00C61B9B), ref: 00C74592
?number@QString@@SA?AV1@NDH@Z.QT5CORE ref: 00C745BF
??1QString@@QAE@XZ.QT5CORE(?,000001BB,?,?,?,00000163), ref: 00C74600
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,676E6AEE,?,?,00CAFB97,000000FF,?,00C61B9B), ref: 00C7462B

Strings

jng, xrefs: 00C744C6

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$?number@$?dispose@Data@1@@Data@@List
String ID: jng
API String ID: 2837678802-1186463058
Opcode ID: cda9453b42c75df30efbfe46a54f6e60ba3182c19a9645ba82b35126c2fd26c5
Instruction ID: 0d3866dd88b6b8cfef76f3d5050cc7cf8adf56e4465e680a30cd8f25accad283
Opcode Fuzzy Hash: cda9453b42c75df30efbfe46a54f6e60ba3182c19a9645ba82b35126c2fd26c5
Instruction Fuzzy Hash: 0251B270D00748DBDF14DFA8D805BAEBBB9AF06714F04865DE85AAB280D7749A04CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00C9B8C0 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 120COMMON

Download Yara Rule

APIs

Part of subcall function 00C6FA90: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(676E6AEE,676E6AEE,676E6AEE,00C744AC,00000002,00000000,00C744DC,00C744DC,00CAF106,000000FF,?,00C7811A,676E6AEE,00C744AC,00000002), ref: 00C6FB14

Part of subcall function 00C6FBC0: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(676E6AEE,?,?,676E6AEE,676E6AEE,00000002,00C744E4,00C744E4,00CAF136,000000FF,?,00C78134,676E6AEE,00C744AC,00000002), ref: 00C6FC35

?size@QListData@@QBEHXZ.QT5CORE(676E6AEE,00C744AC,6BABF570,00000000,00000000,00CB54EE,000000FF,?,00C77FA6,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C9B915
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FA6,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C9B924

Part of subcall function 00C6F3B0: new.LIBCMT ref: 00C6F422

?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,00000000,?,00C77FA6,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C9B93B
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,00C77FA6,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C9B95D
?size@QListData@@QBEHXZ.QT5CORE(?,00C77FA6,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C9B973
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(BC8E89F0,4D8BD783,?,?,?,00C77FA6,00C744DC,?,6BABF570,?,45890000,BC8E89F0), ref: 00C9BA24

Strings

jng, xrefs: 00C9B8D4

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?at@?dispose@Data@1@@$?size@
String ID: jng
API String ID: 3829366358-1186463058
Opcode ID: 79d4ab3fefda6cabd68bfaf96d78e6c1c0ecd325b67d448016082fb5a5c4fabd
Instruction ID: 26b43a1686e7dc8d4cf3786671c0ad33faedd880f574b41c8138e4052e14b261
Opcode Fuzzy Hash: 79d4ab3fefda6cabd68bfaf96d78e6c1c0ecd325b67d448016082fb5a5c4fabd
Instruction Fuzzy Hash: 7341B171600A05AFCB15DF34E895BADB769FF45360F004329E82A97291DF30AE19DB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C63AC0 Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 72COMMON

Download Yara Rule

APIs

?begin@QListData@@QBEPAPAXXZ.QT5CORE(676E6AEE,00CB3CFD,00000000,?,00C910DF,00000008), ref: 00C63AF0
?detach@QListData@@QAEPAUData@1@H@Z.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,6B5136D0,?,?,00CB3CFD), ref: 00C63AFD
?end@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C63B12
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C63B1B

Part of subcall function 00C699B0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00000000,00000000,00000000,00000000,00C63B29,00000000), ref: 00C699CF

??1QString@@QAE@XZ.QT5CORE(00000000), ref: 00C63B65
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(00000000,00000000), ref: 00C63B70

Strings

jng, xrefs: 00C63AD7

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?begin@String@@$?detach@?dispose@?end@Data@1@Data@1@@V0@@
String ID: jng
API String ID: 3904719009-1186463058
Opcode ID: acb269f8e727d9998fb362650155ebe841abd06683fc9442a753215d5f391b59
Instruction ID: 5fcc1e82809a71708d66b2c15f5ca14e70152ccf25e2809e69ade75d567a3479
Opcode Fuzzy Hash: acb269f8e727d9998fb362650155ebe841abd06683fc9442a753215d5f391b59
Instruction Fuzzy Hash: 35219272A00615ABCB109F68DC84B5DBBA8FB49734F104325E925D3390DB346A15CBD5

Uniqueness

Uniqueness Score: -1.00%

Function 00CA7810 Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 48COMMON

Download Yara Rule

APIs

?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CB9364,00000000,676E6AEE), ref: 00CA783F
?setText@QLineEdit@@QAEXABVQString@@@Z.QT5WIDGETS(?), ref: 00CA785C
??1QString@@QAE@XZ.QT5CORE ref: 00CA786C
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CB9364,00000000), ref: 00CA7879
?setText@QLineEdit@@QAEXABVQString@@@Z.QT5WIDGETS(?), ref: 00CA7896
??1QString@@QAE@XZ.QT5CORE ref: 00CA789F

Strings

jng, xrefs: 00CA7825

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$?from?setArrayAscii_helper@Data@Edit@@LineString@@@Text@Typed
String ID: jng
API String ID: 2972465390-1186463058
Opcode ID: ef25562218b7a24b69b61910e201aa6339084b99b23f10d4bd2721c92e469ef5
Instruction ID: 6ee89ff1a928f7feedf33a9acbf7dc582d180611ebe7d807c999ca9bf0cb91f1
Opcode Fuzzy Hash: ef25562218b7a24b69b61910e201aa6339084b99b23f10d4bd2721c92e469ef5
Instruction Fuzzy Hash: CA118E71D0020ADFCB04DF94ED49BADBBB8FB08715F100369E916A72E0EB716A09CB51

Uniqueness

Uniqueness Score: -1.00%

Function 00C63270 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 104COMMON

Download Yara Rule

APIs

?_Xout_of_range@std@@YAXPBD@Z.MSVCP140(invalid string position), ref: 00C63289
?_Xout_of_range@std@@YAXPBD@Z.MSVCP140(invalid string position), ref: 00C632AC
?_Xlength_error@std@@YAXPBD@Z.MSVCP140(string too long), ref: 00C632DE
memcpy.VCRUNTIME140(?,?,?), ref: 00C6333B

Strings

invalid string position, xrefs: 00C63284, 00C632A7
string too long, xrefs: 00C632D9

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Xout_of_range@std@@$Xlength_error@std@@memcpy
String ID: invalid string position$string too long
API String ID: 3790025958-4289949731
Opcode ID: 80dcac5f5ec09d6ad96864681ef4dca2d6d11d36d5716434150a01bda49e7657
Instruction ID: 780aca740ee03711d82591d03fef44516f95e6628214c74a3f2ca79a3501d356
Opcode Fuzzy Hash: 80dcac5f5ec09d6ad96864681ef4dca2d6d11d36d5716434150a01bda49e7657
Instruction Fuzzy Hash: 1431C432300790CBC7309F5CE880B6AF7E5EB95722F100A3EE59287251DB729A45C7A1

Uniqueness

Uniqueness Score: -1.00%

Function 00C798D0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 96COMMON

Download Yara Rule

APIs

Part of subcall function 00C79B50: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,676E6AEE,?,?,?,00CB032C,000000FF,?,00C76CB4), ref: 00C79BA0
Part of subcall function 00C79B50: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(6B94A624), ref: 00C79BC8

?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?), ref: 00C79946
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?), ref: 00C79970
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?), ref: 00C7999A
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?), ref: 00C799C3
??1QWidget@@UAE@XZ.QT5WIDGETS ref: 00C799CA

Strings

jng, xrefs: 00C798E4

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: ?dispose@Data@1@@Data@@List$Widget@@
String ID: jng
API String ID: 2141481269-1186463058
Opcode ID: ea3f0d95ca3dc99229ce6adb8d8b1c25fd656fa141eee6dafd048be81367b659
Instruction ID: 164cbbc5db92c86faf814ee66b79667bd4a2aa3576612cba4fbcc7f4e9dac35a
Opcode Fuzzy Hash: ea3f0d95ca3dc99229ce6adb8d8b1c25fd656fa141eee6dafd048be81367b659
Instruction Fuzzy Hash: 4C31A1701016009BEB218F29DC4175AB7A5EF42334F28466CE86E9B6E0DB36EE06DB50

Uniqueness

Uniqueness Score: -1.00%

Function 00C63C80 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 68COMMON

Download Yara Rule

APIs

?begin@QListData@@QBEPAPAXXZ.QT5CORE(676E6AEE,?,?,?,00000000,00000000), ref: 00C63CB0
?detach@QListData@@QAEPAUData@1@H@Z.QT5CORE(00000000,?,?,?,00000000,00000000), ref: 00C63CBD
?end@QListData@@QBEPAPAXXZ.QT5CORE(00000000,?,?,?,00000000), ref: 00C63CD2
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000,?,?,?,00000000), ref: 00C63CDB

Part of subcall function 00C69AA0: new.LIBCMT ref: 00C69ADF
Part of subcall function 00C69AA0: ??0QString@@QAE@ABV0@@Z.QT5CORE(?,00000000), ref: 00C69AF1
Part of subcall function 00C69AA0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00000008), ref: 00C69AFE

?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(00000000,?,?,00000000,?,?,?,00000000), ref: 00C63D25

Strings

jng, xrefs: 00C63C97

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?begin@String@@V0@@$?detach@?dispose@?end@Data@1@Data@1@@
String ID: jng
API String ID: 1915436224-1186463058
Opcode ID: c53ffbf98da5e81dbad1eb2601a4effacbf8e7ca47345e9ca6d6f9087aa78452
Instruction ID: edfc26c38be3d21193d3308637cafed47174c5f0067a4c2440a9b028c0cb9bd6
Opcode Fuzzy Hash: c53ffbf98da5e81dbad1eb2601a4effacbf8e7ca47345e9ca6d6f9087aa78452
Instruction Fuzzy Hash: B6218171604604ABCB20DF69DC85B6EB7EDEB49324F144629F826D3390DB34AA05CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C9C890 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 66COMMON

Download Yara Rule

APIs

Part of subcall function 00CA7770: ??0QString@@QAE@ABV0@@Z.QT5CORE(?,?,00C9C8C8,?,?,676E6AEE), ref: 00CA7780

Part of subcall function 00CA7790: ??0QString@@QAE@ABV0@@Z.QT5CORE(?,?,00C9C8DE,?,?,?,?,676E6AEE), ref: 00CA77A0

?currentRow@QTableWidget@@QBEHXZ.QT5WIDGETS(00000000,?,?,?,?,?,?,676E6AEE), ref: 00C9C8F4
?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,676E6AEE), ref: 00C9C904
?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS(?,?,?,?,?,?,676E6AEE), ref: 00C9C90C

Part of subcall function 00C8F560: new.LIBCMT ref: 00C8F58E

Part of subcall function 00C93140: ??0QString@@QAE@XZ.QT5CORE(676E6AEE), ref: 00C93174
Part of subcall function 00C93140: ?number@QString@@SA?AV1@HH@Z.QT5CORE(?,?,0000000A), ref: 00C93187
Part of subcall function 00C93140: ?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z.QT5SQL(?,00000000,00000001), ref: 00C9319A
Part of subcall function 00C93140: ??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL ref: 00C931A6
Part of subcall function 00C93140: ??1QString@@QAE@XZ.QT5CORE ref: 00C931B3
Part of subcall function 00C93140: ??4QString@@QAEAAV0@PBD@Z.QT5CORE(UPDATE serialNums SET serialNum = :serialNum, purchaseDate = :purchaseDate WHERE serialNum = :oldSerialNum), ref: 00C931C1
Part of subcall function 00C93140: ?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(?), ref: 00C931CE
Part of subcall function 00C93140: ??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C931DB
Part of subcall function 00C93140: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:serialNum,0000000A), ref: 00C931F2
Part of subcall function 00C93140: ?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C93217
Part of subcall function 00C93140: ??1QString@@QAE@XZ.QT5CORE ref: 00C9321C
Part of subcall function 00C93140: ??1QVariant@@QAE@XZ.QT5CORE ref: 00C9322F
Part of subcall function 00C93140: ??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C93238
Part of subcall function 00C93140: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:purchaseDate,0000000D), ref: 00C93249
Part of subcall function 00C93140: ?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C93268
Part of subcall function 00C93140: ??1QString@@QAE@XZ.QT5CORE ref: 00C9326D
Part of subcall function 00C93140: ??1QVariant@@QAE@XZ.QT5CORE ref: 00C9327A
Part of subcall function 00C93140: ??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C93283

Part of subcall function 00CA7810: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CB9364,00000000,676E6AEE), ref: 00CA783F
Part of subcall function 00CA7810: ?setText@QLineEdit@@QAEXABVQString@@@Z.QT5WIDGETS(?), ref: 00CA785C
Part of subcall function 00CA7810: ??1QString@@QAE@XZ.QT5CORE ref: 00CA786C
Part of subcall function 00CA7810: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CB9364,00000000), ref: 00CA7879
Part of subcall function 00CA7810: ?setText@QLineEdit@@QAEXABVQString@@@Z.QT5WIDGETS(?), ref: 00CA7896
Part of subcall function 00CA7810: ??1QString@@QAE@XZ.QT5CORE ref: 00CA789F

?clear@QTableWidget@@QAEXXZ.QT5WIDGETS(?,?,?,676E6AEE), ref: 00C9C93A
?clear@QComboBox@@QAEXXZ.QT5WIDGETS(?,?,?,676E6AEE), ref: 00C9C949

Part of subcall function 00C9D170: ?setRowCount@QTableWidget@@QAEXH@Z.QT5WIDGETS(00000000,676E6AEE,6B5136D0,?,?,?,?,?,?,?,?,?,?,00000000,00CB5889,000000FF), ref: 00C9D1A8
Part of subcall function 00C9D170: ?setSelectionMode@QAbstractItemView@@QAEXW4SelectionMode@1@@Z.QT5WIDGETS(00000001,?,?,?,?,?,?,?,?,00000000,00CB5889,000000FF,?,00C9F83F), ref: 00C9D1B9
Part of subcall function 00C9D170: ??1QString@@QAE@XZ.QT5CORE(00000000,00000000), ref: 00C9D23B
Part of subcall function 00C9D170: ??1QString@@QAE@XZ.QT5CORE ref: 00C9D248
Part of subcall function 00C9D170: ?setHorizontalHeaderLabels@QTableWidget@@QAEXABVQStringList@@@Z.QT5WIDGETS(00000000), ref: 00C9D25B
Part of subcall function 00C9D170: ??0QVariant@@QAE@XZ.QT5CORE ref: 00C9D264
Part of subcall function 00C9D170: ?count@QComboBox@@QBEHXZ.QT5WIDGETS ref: 00C9D297
Part of subcall function 00C9D170: ??0QIcon@@QAE@XZ.QT5GUI ref: 00C9D2A2
Part of subcall function 00C9D170: ?insertItem@QComboBox@@QAEXHABVQIcon@@ABVQString@@ABVQVariant@@@Z.QT5WIDGETS(00000000,00000000,00000000,?), ref: 00C9D2B4
Part of subcall function 00C9D170: ??1QIcon@@QAE@XZ.QT5GUI ref: 00C9D2BD
Part of subcall function 00C9D170: ??1QString@@QAE@XZ.QT5CORE ref: 00C9D2C6

Strings

jng, xrefs: 00C9C8A6

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Variant@@$Table$String@@@$?setWidget@@$?fromArrayAscii_helper@Data@Query@@Typed$Box@@ComboIcon@@$?bind?clear@Edit@@Flag@Flags@Item@@LineParamSelectionSql@@@@@Text@TypeV0@@Value@Widget$?count@?current?database@?insert?item@?number@?prepare@?text@AbstractCount@Database@@Database@@@HeaderHorizontalItemItem@Labels@List@@@Mode@Mode@1@@Row@StringString@@_Variant@@@View@@
String ID: jng
API String ID: 916551870-1186463058
Opcode ID: 38ddb7e4e1c82abf29c8c052120f8d0242f2be4f997357e4d4ba4246af92dc7c
Instruction ID: d49d29fdd68c4d7101226b35894645ea30b15447f8174696e76b3eed481a7172
Opcode Fuzzy Hash: 38ddb7e4e1c82abf29c8c052120f8d0242f2be4f997357e4d4ba4246af92dc7c
Instruction Fuzzy Hash: 1221BEB0A04205EBC704EF58CC4ABAEBBB9FB48724F10022DF80693390CF316905CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00C96D80 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 58COMMON

Download Yara Rule

APIs

?begin@QListData@@QBEPAPAXXZ.QT5CORE(676E6AEE,00000000,00000000,?,00C79056,?), ref: 00C96DB0
?detach@QListData@@QAEPAUData@1@H@Z.QT5CORE(00C79056,?,00C79056,?), ref: 00C96DBD
?end@QListData@@QBEPAPAXXZ.QT5CORE(00000000,?,00C79056), ref: 00C96DD2
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000,?,00C79056), ref: 00C96DDB

Part of subcall function 00C737B0: memcpy.VCRUNTIME140(?,?,?,00C96EC3,00000000), ref: 00C737CF

?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(00000000,00000000,?,00C79056), ref: 00C96E0A

Strings

jng, xrefs: 00C96D97

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?begin@$?detach@?dispose@?end@Data@1@Data@1@@memcpy
String ID: jng
API String ID: 2335835429-1186463058
Opcode ID: d053baf29ba2cb3834dce5ba3c573b55bcd0949156982e34d691790099b3e108
Instruction ID: 20cf18dbbf9f64fc024b07f02b5f0ad4f3792e6ae77e2202fc313befe920b689
Opcode Fuzzy Hash: d053baf29ba2cb3834dce5ba3c573b55bcd0949156982e34d691790099b3e108
Instruction Fuzzy Hash: 21115171604604ABCB159F69DC48B6EBBADEB48331F14432AF925D33D0DB345A05DA91

Uniqueness

Uniqueness Score: -1.00%

Function 00C612D0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 53COMMON

Download Yara Rule

APIs

?detach@QListData@@QAEPAUData@1@H@Z.QT5CORE(08244C8B,676E6AEE,?,?,6B5175D0,676E6AEE,?,?,00C61B83), ref: 00C6131C
?begin@QListData@@QBEPAPAXXZ.QT5CORE ref: 00C6132B
?end@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C61334
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C6133D

Strings

jng, xrefs: 00C61300
jng, xrefs: 00C612E7

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?begin@$?detach@?end@Data@1@
String ID: jng$jng
API String ID: 2291827984-1345699772
Opcode ID: d5a7d47e59df2767f2fd73e5d8fbb35734b0e682e91adfb071d1d3bdddceca00
Instruction ID: 9f9ade936443cc787f2e3788b4541914a69dcf01d6caedaad85e0934f22366fd
Opcode Fuzzy Hash: d5a7d47e59df2767f2fd73e5d8fbb35734b0e682e91adfb071d1d3bdddceca00
Instruction Fuzzy Hash: 0411AD726085089FCB14DF59DC44B6EBBBCEB49B21F14422EF91AC37A0CB345905CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C63470 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 52COMMON

Download Yara Rule

APIs

Part of subcall function 00C9BC50: new.LIBCMT ref: 00C9BC80
Part of subcall function 00C9BC50: ??0QObject@@QAE@PAV0@@Z.QT5CORE(00000000), ref: 00C9BC98
Part of subcall function 00C9BC50: ??0QString@@QAE@XZ.QT5CORE ref: 00C9BCA7
Part of subcall function 00C9BC50: ??4QString@@QAEAAV0@PBD@Z.QT5CORE(00CB9364), ref: 00C9BCD0

?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CB9364,00000000), ref: 00C9BD25
?insert@QLineEdit@@QAEXABVQString@@@Z.QT5WIDGETS(?), ref: 00C9BD3F
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CB9364,00000000,?,?,?,?,000000FF), ref: 00C9BD57
?insertPlainText@QPlainTextEdit@@QAEXABVQString@@@Z.QT5WIDGETS(?), ref: 00C9BD71
??1QString@@QAE@XZ.QT5CORE ref: 00C9BD7A

Strings

jng, xrefs: 00C9BD05

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$?fromArrayAscii_helper@Data@Edit@@PlainString@@@Typed$?insert?insert@LineObject@@TextText@V0@@
String ID: jng
API String ID: 854027203-1186463058
Opcode ID: aedf70005e1c460cd4ca8cfcb3b111edfa090d9cf9f01a0fd3e725a73d22bc56
Instruction ID: a992d463ea5dbc7248aa0632f3af3bfdbefc2376328003b2109bf18595ca2af5
Opcode Fuzzy Hash: aedf70005e1c460cd4ca8cfcb3b111edfa090d9cf9f01a0fd3e725a73d22bc56
Instruction Fuzzy Hash: 8611547190460AEFCB54DF64EE49B9DB7F8FB04715F100669E416A22D0DB706A08CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00C63800 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 50clipboardCOMMON

Download Yara Rule

APIs

Part of subcall function 00C9BC50: new.LIBCMT ref: 00C9BC80
Part of subcall function 00C9BC50: ??0QObject@@QAE@PAV0@@Z.QT5CORE(00000000), ref: 00C9BC98
Part of subcall function 00C9BC50: ??0QString@@QAE@XZ.QT5CORE ref: 00C9BCA7
Part of subcall function 00C9BC50: ??4QString@@QAEAAV0@PBD@Z.QT5CORE(00CB9364), ref: 00C9BCD0

?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CB9364,00000000), ref: 00C9BD25
?insert@QLineEdit@@QAEXABVQString@@@Z.QT5WIDGETS(?), ref: 00C9BD3F
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CB9364,00000000,?,?,?,?,000000FF), ref: 00C9BD57
?insertPlainText@QPlainTextEdit@@QAEXABVQString@@@Z.QT5WIDGETS(?), ref: 00C9BD71
??1QString@@QAE@XZ.QT5CORE ref: 00C9BD7A
?clipboard@QGuiApplication@@SAPAVQClipboard@@XZ.QT5GUI(0000000C,00000000), ref: 00C9BDB9
?setText@QClipboard@@QAEXABVQString@@W4Mode@1@@Z.QT5GUI ref: 00C9BDC1

Strings

jng, xrefs: 00C9BD05

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$?fromArrayAscii_helper@Clipboard@@Data@Edit@@PlainString@@@Text@Typed$?clipboard@?insert?insert@?setApplication@@LineMode@1@@Object@@TextV0@@
String ID: jng
API String ID: 523358164-1186463058
Opcode ID: bc5c343c6cbd351d8ab66a372d286d1469500d17e51db477f87669631389894e
Instruction ID: 1e3ecd028ef4180d7a460ba793b70d8e902e661754390ba7b1c9f5cfc4de5573
Opcode Fuzzy Hash: bc5c343c6cbd351d8ab66a372d286d1469500d17e51db477f87669631389894e
Instruction Fuzzy Hash: B2113C71A54619EFCB149F68E949BADB7A8FB08B11F00066AE81693290DB746908CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00C946B0 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 45windowCOMMON

Download Yara Rule

APIs

??0QWidget@@QAE@PAV0@V?$QFlags@W4WindowType@Qt@@@@@Z.QT5WIDGETS(00C8EBEF,00000000,676E6AEE,00CB35BE,00000000,00000000,00CB4A15,000000FF,?,00C8EBEF,00000000), ref: 00C946DE
new.LIBCMT ref: 00C946FA

Part of subcall function 00CAC0B7: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0DE

??0QColor@@QAE@XZ.QT5GUI ref: 00C94708
??0QIcon@@QAE@XZ.QT5GUI ref: 00C94711

Part of subcall function 00C94B70: ?objectName@QObject@@QBE?AVQString@@XZ.QT5CORE(00CB4BFA,676E6AEE,6B62DA60,00000000,00000000,00CB4BFA,000000FF,?,00C94724,00000000), ref: 00C94BA6
Part of subcall function 00C94B70: ??1QString@@QAE@XZ.QT5CORE(?,00C94724,00000000), ref: 00C94BB4
Part of subcall function 00C94B70: ?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,ScoreWidget,000000FF,?,00C94724,00000000), ref: 00C94BC9
Part of subcall function 00C94B70: ?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000), ref: 00C94BD8
Part of subcall function 00C94B70: ??1QString@@QAE@XZ.QT5CORE ref: 00C94BE8
Part of subcall function 00C94B70: ?resize@QWidget@@QAEXHH@Z.QT5WIDGETS(00000064,00000084,?,00C94724,00000000), ref: 00C94BF7
Part of subcall function 00C94B70: new.LIBCMT ref: 00C94BFF
Part of subcall function 00C94B70: ??0QVBoxLayout@@QAE@PAVQWidget@@@Z.QT5WIDGETS(00C94724,?,?,?,?,00C94724), ref: 00C94C16
Part of subcall function 00C94B70: ?setSpacing@QBoxLayout@@QAEXH@Z.QT5WIDGETS(00000000,?,?,?,?,00C94724), ref: 00C94C3C
Part of subcall function 00C94B70: ?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,verticalLayout_2,000000FF,?,?,?,?,00C94724), ref: 00C94C49
Part of subcall function 00C94B70: ?setObjectName@QObject@@QAEXABVQString@@@Z.QT5CORE(00000000,?,?,?,?,?,?,?,00C94724), ref: 00C94C5F
Part of subcall function 00C94B70: ??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,00C94724), ref: 00C94C6F
Part of subcall function 00C94B70: ?setContentsMargins@QLayout@@QAEXHHHH@Z.QT5WIDGETS(00000000,00000000,00000000,00000000,?,?,?,?,?,?,?,00C94724), ref: 00C94C7F
Part of subcall function 00C94B70: new.LIBCMT ref: 00C94C87
Part of subcall function 00C94B70: ??0QVBoxLayout@@QAE@XZ.QT5WIDGETS(?,?,?,?,?,?,?,?,00C94724), ref: 00C94C9D
Part of subcall function 00C94B70: ?setSpacing@QBoxLayout@@QAEXH@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,00C94724), ref: 00C94CC1

?setAlignment@QLabel@@QAEXV?$QFlags@W4AlignmentFlag@Qt@@@@@Z.QT5WIDGETS(00000084,00000000), ref: 00C9472F

Strings

jng, xrefs: 00C946C3

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: ?setString@@$Layout@@$Name@Object@@$?fromFlags@ObjectQt@@@@@Spacing@String@@@Utf8@Widget@@$?object?resize@AlignmentAlignment@Color@@ContentsFlag@Icon@@Label@@Margins@Type@Widget@@@Windowmalloc
String ID: jng
API String ID: 3385012848-1186463058
Opcode ID: aea31c74da7a22a697f595882fc8705adf1c877958006f1417ab29483676008a
Instruction ID: e37e3cf6ccccc51f15069441e2409edab32d194d43f48cdf4ddd526095ea8853
Opcode Fuzzy Hash: aea31c74da7a22a697f595882fc8705adf1c877958006f1417ab29483676008a
Instruction Fuzzy Hash: 4811C0B2504604EFCB24DF48DC45B9ABBF8FF18B14F00462EE942877A0DBB16904CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00C94940 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 43windowCOMMON

Download Yara Rule

APIs

??4QIcon@@QAEAAV0@ABV0@@Z.QT5GUI(?,676E6AEE,00000000,00C8ECDB,?,?), ref: 00C94976
?pixmap@QIcon@@QBE?AVQPixmap@@ABVQSize@@W4Mode@1@W4State@1@@Z.QT5GUI(?,?,00000000,00000000,?,?), ref: 00C9498B
?setPixmap@QLabel@@QAEXABVQPixmap@@@Z.QT5WIDGETS(00000000,?,?), ref: 00C9499C
??1QPixmap@@UAE@XZ.QT5GUI(?,?), ref: 00C949A5
??1QIcon@@QAE@XZ.QT5GUI(?,?), ref: 00C949AE

Strings

jng, xrefs: 00C94955

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Icon@@$Pixmap@@$?pixmap@?setLabel@@Mode@1@Pixmap@Pixmap@@@Size@@State@1@@V0@@
String ID: jng
API String ID: 862792444-1186463058
Opcode ID: 4db4f12b3d41dcb94beff5aa49b77bfb8aaced887318651b0327a15e222e088b
Instruction ID: b0b2c004bc0413dca9504484a68c083b7dff0958c311658143cc1b425aba320c
Opcode Fuzzy Hash: 4db4f12b3d41dcb94beff5aa49b77bfb8aaced887318651b0327a15e222e088b
Instruction Fuzzy Hash: E2011B72904208EFC715DF54DD55FDEBBBCFB08B20F10426AE812976A0DB75A609CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00CA2C50 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 25COMMON

Download Yara Rule

APIs

?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS ref: 00CA2C59
??4QString@@QAEAAV0@PBD@Z.QT5CORE(Standard), ref: 00CA2C6B
??4QString@@QAEAAV0@PBD@Z.QT5CORE(Kinnear), ref: 00CA2C7E
?activate@QMetaObject@@SAXPAVQObject@@PBU1@HPAPAX@Z.QT5CORE(?,00F370D8,00000002,00000000), ref: 00CAAE3A

Strings

Standard, xrefs: 00CA2C66
Kinnear, xrefs: 00CA2C79

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Object@@String@@$?activate@AbstractButton@@Checked@Meta
String ID: Kinnear$Standard
API String ID: 1797401580-2678617739
Opcode ID: 7d292b0634715dd8aad155b2846bd01803d93cee39ec32d399edff864a1d049b
Instruction ID: 2928b28a9dd04e2130e9a276e04e96cfcf2f5884b21b2ab1776df55913021f3b
Opcode Fuzzy Hash: 7d292b0634715dd8aad155b2846bd01803d93cee39ec32d399edff864a1d049b
Instruction Fuzzy Hash: 50E0D8743847209BC6346B989C09FAD736DAF48B1AF40026DE807623E1CFB46809C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 00C7043A Relevance: 9.1, APIs: 6, Instructions: 59COMMON

Download Yara Rule

APIs

?begin@QListData@@QBEPAPAXXZ.QT5CORE ref: 00C7043F
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C7044E

Part of subcall function 00C73A20: ?freeTree@QMapDataBase@@QAEXPAUQMapNodeBase@@H@Z.QT5CORE(CB827015,00000004,676E6AEE,?,00C76CDB,00000000,FEFFFFFC,00CAF9D6,000000FF,?,00C6ECB3,FEFFFFFC,CB827011,676E6AEE,?,?), ref: 00C73A8A
Part of subcall function 00C73A20: ?freeData@QMapDataBase@@SAXPAU1@@Z.QT5CORE(00C76CDB,676E6AEE,?,00C76CDB,00000000,FEFFFFFC,00CAF9D6,000000FF,?,00C6ECB3,FEFFFFFC,CB827011,676E6AEE,?,?,000000FF), ref: 00C73A91

?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,00000000), ref: 00C7045E
_CxxThrowException.VCRUNTIME140(00000000,00000000), ref: 00C70470
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,00000000,00000000), ref: 00C7047A
_CxxThrowException.VCRUNTIME140(00000000,00000000), ref: 00C7048C

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$Base@@$?begin@?dispose@?freeDataData@1@@ExceptionThrow$Data@NodeTree@U1@@
String ID:
API String ID: 513215831-0
Opcode ID: f8102423e16980875268dd420bd553da2642db144964a28d6923308402584f38
Instruction ID: 0c3423fb696c4e83b9f8dc5cdac5f0a22968666626e3d3337f936a6376e6ea17
Opcode Fuzzy Hash: f8102423e16980875268dd420bd553da2642db144964a28d6923308402584f38
Instruction Fuzzy Hash: 6CF05E74600106DFDF50EF90DC0AB6D7BB8EF04705F140018FA86A7391DA306A14DB56

Uniqueness

Uniqueness Score: -1.00%

Function 00C8C800 Relevance: 9.0, APIs: 6, Instructions: 46COMMON

Download Yara Rule

APIs

?rowCount@QTableWidget@@QBEHXZ.QT5WIDGETS(?,?,?,?,?,00C80411), ref: 00C8C80F
?item@QListWidget@@QBEPAVQListWidgetItem@@H@Z.QT5WIDGETS(00000000,?,?,?,?,?,00C80411), ref: 00C8C827
?itemWidget@QListWidget@@QBEPAVQWidget@@PAVQListWidgetItem@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,00C80411), ref: 00C8C834
?cast@QMetaObject@@QBEPAVQObject@@PAV2@@Z.QT5CORE(00000000,?,?,?,?,?,00C80411), ref: 00C8C840
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CB9364,00000000,?,?,?,?,?,?,00C80411), ref: 00C8C852

Part of subcall function 00C94AD0: ?setMinimumHeight@QWidget@@QAEXH@Z.QT5WIDGETS(0000001E,676E6AEE,00000000,00000000,00000000,00CB4B52,000000FF,?,00C8CDC4,?,?,00C8BBC5,?), ref: 00C94B05
Part of subcall function 00C94AD0: ?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(?,?,00C8CDC4,?,?,00C8BBC5,?), ref: 00C94B15
Part of subcall function 00C94AD0: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(QLabel { color: red; },00000016,?,00C8CDC4,?,?,00C8BBC5,?), ref: 00C94B22
Part of subcall function 00C94AD0: ?setStyleSheet@QWidget@@QAEXABVQString@@@Z.QT5WIDGETS(?,?), ref: 00C94B3C
Part of subcall function 00C94AD0: ??1QString@@QAE@XZ.QT5CORE ref: 00C94B45
Part of subcall function 00C94AD0: ??1QString@@QAE@XZ.QT5CORE ref: 00C94B4E

?rowCount@QTableWidget@@QBEHXZ.QT5WIDGETS ref: 00C8C86B

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Widget@@$ListString@@$?set$?from?rowArrayAscii_helper@Count@Data@Object@@String@@@TableTypedWidget$?cast@?item?item@Height@Item@@Item@@@Label@@MetaMinimumSheet@StyleText@V2@@Widget@
String ID:
API String ID: 2667820997-0
Opcode ID: b209b6d220cc357f17c3425d42868d3b53dffd612b8643ac1c5dbd04155f50a9
Instruction ID: 557202dc44d16e26fd0ec113f867970ac99261f75edcf55ffcdc485f82a579b9
Opcode Fuzzy Hash: b209b6d220cc357f17c3425d42868d3b53dffd612b8643ac1c5dbd04155f50a9
Instruction Fuzzy Hash: 460184717011049FC70CAF54EC99B3AB7ADEB84315F10016CE50AC72A1DF72AC42CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 00C7015A Relevance: 9.0, APIs: 6, Instructions: 43COMMON

Download Yara Rule

APIs

?begin@QListData@@QBEPAPAXXZ.QT5CORE ref: 00C7015F
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C7016E

Part of subcall function 00C73810: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,676E6AEE,?,00C76CC1,00000000,FF8E62E4,00CAF976,000000FF,?,00C6EB73,FF8E62E4,2C468DFB,676E6AEE,?,?,000000FF), ref: 00C73877

?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,00000000), ref: 00C7017E
_CxxThrowException.VCRUNTIME140(00000000,00000000), ref: 00C70190
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,00000000,00000000), ref: 00C7019A
_CxxThrowException.VCRUNTIME140(00000000,00000000), ref: 00C701AC

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?dispose@Data@1@@$?begin@ExceptionThrow
String ID:
API String ID: 4063321333-0
Opcode ID: 10a4270cc054c3b7b548492108efcde03c3360c297a7f3f2de6ceaf05d5b2a12
Instruction ID: 5ca5be21986a5b23ec391e4b5a06227b824d43997e7ebd1046b0a0d36c0a5a32
Opcode Fuzzy Hash: 10a4270cc054c3b7b548492108efcde03c3360c297a7f3f2de6ceaf05d5b2a12
Instruction Fuzzy Hash: 17F05E74600106DFDF50AF50DC0AB2D7BB8EF04705F140418FA46A7391DA316A14CB56

Uniqueness

Uniqueness Score: -1.00%

Function 00C702CA Relevance: 9.0, APIs: 6, Instructions: 43COMMON

Download Yara Rule

APIs

?begin@QListData@@QBEPAPAXXZ.QT5CORE ref: 00C702CF
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C702DE

Part of subcall function 00C73910: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(00000002,676E6AEE,00C744E4,00000002,00000000,?,00CAF976,000000FF,?,00C6EC13,?,?,676E6AEE,00C744AC,00000002,676E6AEE), ref: 00C73997

?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,00000000), ref: 00C702EE
_CxxThrowException.VCRUNTIME140(00000000,00000000), ref: 00C70300
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,00000000,00000000), ref: 00C7030A
_CxxThrowException.VCRUNTIME140(00000000,00000000), ref: 00C7031C

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?dispose@Data@1@@$?begin@ExceptionThrow
String ID:
API String ID: 4063321333-0
Opcode ID: bd56bc2fba68d9000e59841b21d68d4ce14bbdbca74cf6992068d6cc4b76cf3f
Instruction ID: 31f25d0326b53fd487deef4abeb5b333d11cf5b41543387e6521726d34d1fba7
Opcode Fuzzy Hash: bd56bc2fba68d9000e59841b21d68d4ce14bbdbca74cf6992068d6cc4b76cf3f
Instruction Fuzzy Hash: 95F05E74600106DFDF50AF50DC0AB2D7BB8EF04705F140418FA46A73A1DA316A14CB56

Uniqueness

Uniqueness Score: -1.00%

Function 00C9068A Relevance: 9.0, APIs: 6, Instructions: 43COMMON

Download Yara Rule

APIs

?begin@QListData@@QBEPAPAXXZ.QT5CORE ref: 00C9068F
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C9069E

Part of subcall function 00C69BE0: ??1QString@@QAE@XZ.QT5CORE(00C9D2E9,00000000,00000000,00C9065E,?,?,00000000), ref: 00C69BFD
Part of subcall function 00C69BE0: ??1QString@@QAE@XZ.QT5CORE ref: 00C69C05

?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,00000000), ref: 00C906AE
_CxxThrowException.VCRUNTIME140(00000000,00000000), ref: 00C906C0
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,00000000,00000000), ref: 00C906CA
_CxxThrowException.VCRUNTIME140(00000000,00000000), ref: 00C906DC

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?begin@?dispose@Data@1@@ExceptionString@@Throw
String ID:
API String ID: 344673253-0
Opcode ID: b87b5918789c3c649690a7b90db3da0e15be368a4d69b4902ed1875236480b45
Instruction ID: 5f0395921f88a9502aabcca21f53a2f552b92b530f5fada29ad2ec30fd7d8d9c
Opcode Fuzzy Hash: b87b5918789c3c649690a7b90db3da0e15be368a4d69b4902ed1875236480b45
Instruction Fuzzy Hash: F2F05E74600106DFDF50AF50DC4AB2D7BB8EF04745F140018FA46A7391DE306914CB56

Uniqueness

Uniqueness Score: -1.00%

Function 00C6404D Relevance: 9.0, APIs: 6, Instructions: 40COMMON

Download Yara Rule

APIs

?begin@QListData@@QBEPAPAXXZ.QT5CORE ref: 00C64052
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C64061
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,00000000), ref: 00C64071
_CxxThrowException.VCRUNTIME140(00000000,00000000), ref: 00C64083
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,00000000,00000000), ref: 00C6408D
_CxxThrowException.VCRUNTIME140(00000000,00000000), ref: 00C6409F

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?begin@?dispose@Data@1@@ExceptionThrow
String ID:
API String ID: 1020644930-0
Opcode ID: 56229ed99f2a2dce2286281b785b7186851619955cc62fb7cb69fe786b76ee8c
Instruction ID: e153c1f72bba44842d198a3c75b5a24c88c4aeec3e2951a11ce04f0c01df1cb9
Opcode Fuzzy Hash: 56229ed99f2a2dce2286281b785b7186851619955cc62fb7cb69fe786b76ee8c
Instruction Fuzzy Hash: 21F05E74600106DFDF50AF50DC4AB2DBBB8EF04705F140018FA46A7391DA316914CB56

Uniqueness

Uniqueness Score: -1.00%

Function 00C9707D Relevance: 9.0, APIs: 6, Instructions: 40COMMON

Download Yara Rule

APIs

?begin@QListData@@QBEPAPAXXZ.QT5CORE ref: 00C97082
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C97091
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,00000000), ref: 00C970A1
_CxxThrowException.VCRUNTIME140(00000000,00000000), ref: 00C970B3
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,00000000,00000000), ref: 00C970BD
_CxxThrowException.VCRUNTIME140(00000000,00000000), ref: 00C970CF

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?begin@?dispose@Data@1@@ExceptionThrow
String ID:
API String ID: 1020644930-0
Opcode ID: ff2b0fe0b32220dc562eac35753fdbe54cb36df77a540a0f17fd408404b376b2
Instruction ID: c0993d40422277c82196b49f2e8d9d3ce7cd81f7f4bfce08d87b7c197edc84e9
Opcode Fuzzy Hash: ff2b0fe0b32220dc562eac35753fdbe54cb36df77a540a0f17fd408404b376b2
Instruction Fuzzy Hash: D0F05E74600106DFDF50AF50DC0AB2D7BB8EF04705F140018FA46A73A1DB306E14CB56

Uniqueness

Uniqueness Score: -1.00%

Function 00C971CD Relevance: 9.0, APIs: 6, Instructions: 40COMMON

Download Yara Rule

APIs

?begin@QListData@@QBEPAPAXXZ.QT5CORE ref: 00C971D2
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C971E1
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,00000000), ref: 00C971F1
_CxxThrowException.VCRUNTIME140(00000000,00000000), ref: 00C97203
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,00000000,00000000), ref: 00C9720D
_CxxThrowException.VCRUNTIME140(00000000,00000000), ref: 00C9721F

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?begin@?dispose@Data@1@@ExceptionThrow
String ID:
API String ID: 1020644930-0
Opcode ID: ff2b0fe0b32220dc562eac35753fdbe54cb36df77a540a0f17fd408404b376b2
Instruction ID: c0993d40422277c82196b49f2e8d9d3ce7cd81f7f4bfce08d87b7c197edc84e9
Opcode Fuzzy Hash: ff2b0fe0b32220dc562eac35753fdbe54cb36df77a540a0f17fd408404b376b2
Instruction Fuzzy Hash: D0F05E74600106DFDF50AF50DC0AB2D7BB8EF04705F140018FA46A73A1DB306E14CB56

Uniqueness

Uniqueness Score: -1.00%

Function 00C9731D Relevance: 9.0, APIs: 6, Instructions: 40COMMON

Download Yara Rule

APIs

?begin@QListData@@QBEPAPAXXZ.QT5CORE ref: 00C97322
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C97331
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,00000000), ref: 00C97341
_CxxThrowException.VCRUNTIME140(00000000,00000000), ref: 00C97353
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,00000000,00000000), ref: 00C9735D
_CxxThrowException.VCRUNTIME140(00000000,00000000), ref: 00C9736F

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?begin@?dispose@Data@1@@ExceptionThrow
String ID:
API String ID: 1020644930-0
Opcode ID: 84a1568d1b4945f20ba7f922464b932797fdddb080d279d3755692a843df8110
Instruction ID: 25b3d2bfeb53d8dc1067b688ba94bde3700322c89f07d559a4d432a2bdab38ac
Opcode Fuzzy Hash: 84a1568d1b4945f20ba7f922464b932797fdddb080d279d3755692a843df8110
Instruction Fuzzy Hash: CEF05E74600506DFDF50AF50DC0AB2D7BB8EF04705F140418FA46A7391DB316E14CB56

Uniqueness

Uniqueness Score: -1.00%

Function 00C63EFE Relevance: 9.0, APIs: 6, Instructions: 39COMMON

Download Yara Rule

APIs

?begin@QListData@@QBEPAPAXXZ.QT5CORE ref: 00C63F03
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C63F12

Part of subcall function 00C69B70: ??1QString@@QAE@XZ.QT5CORE(?,?,00C63F20,00000000), ref: 00C69B85

?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,00000000), ref: 00C63F22
_CxxThrowException.VCRUNTIME140(00000000,00000000), ref: 00C63F34
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,00000000,00000000), ref: 00C63F3E
_CxxThrowException.VCRUNTIME140(00000000,00000000), ref: 00C63F50

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?begin@?dispose@Data@1@@ExceptionThrow$String@@
String ID:
API String ID: 765311066-0
Opcode ID: 73c513a3312831f84586b9b605e044ee6a7a21d1d1be137360609f073e6b703b
Instruction ID: 49fca766f00736b7becb980ad353a56dd6b9cae01dd58e3e82b3641a8c4b212d
Opcode Fuzzy Hash: 73c513a3312831f84586b9b605e044ee6a7a21d1d1be137360609f073e6b703b
Instruction Fuzzy Hash: C4F05E74600106DFDF50AF60DC4AB2D7BB8EF04705F140118FA46A7391DA316914CB56

Uniqueness

Uniqueness Score: -1.00%

Function 00C72EC0 Relevance: 9.0, APIs: 6, Instructions: 32COMMON

Download Yara Rule

APIs

Part of subcall function 00C76C50: ?size@QListData@@QBEHXZ.QT5CORE(676E6AEE,?), ref: 00C76C8B
Part of subcall function 00C76C50: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C76CE6
Part of subcall function 00C76C50: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000054), ref: 00C76CF5
Part of subcall function 00C76C50: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C76D01
Part of subcall function 00C76C50: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001), ref: 00C76D13
Part of subcall function 00C76C50: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?), ref: 00C76DA7
Part of subcall function 00C76C50: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(-000000FC,?,?,00000000), ref: 00C76DDF

?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS ref: 00C72ECE
?setCurrentWidget@QStackedWidget@@QAEXPAVQWidget@@@Z.QT5WIDGETS(?), ref: 00C72EE4
?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS ref: 00C72EF0

Part of subcall function 00C97380: _libm_sse2_sin_precise.API-MS-WIN-CRT-MATH-L1-1-0(676E6AEE,00C744AC,6BABF570), ref: 00C973BA
Part of subcall function 00C97380: _libm_sse2_cos_precise.API-MS-WIN-CRT-MATH-L1-1-0(676E6AEE,00C744AC,6BABF570), ref: 00C973CC
Part of subcall function 00C97380: _libm_sse2_sin_precise.API-MS-WIN-CRT-MATH-L1-1-0(676E6AEE,00C744AC,6BABF570), ref: 00C97482
Part of subcall function 00C97380: _libm_sse2_cos_precise.API-MS-WIN-CRT-MATH-L1-1-0(676E6AEE,00C744AC,6BABF570), ref: 00C97494

?setCurrentWidget@QStackedWidget@@QAEXPAVQWidget@@@Z.QT5WIDGETS(?), ref: 00C72F0D
?height@QWidget@@QBEHXZ.QT5WIDGETS ref: 00C72F15
?width@QWidget@@QBEHXZ.QT5WIDGETS(00000000), ref: 00C72F1E

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?at@$Widget@@$?setAbstractButton@@Checked@CurrentStackedWidget@Widget@@@_libm_sse2_cos_precise_libm_sse2_sin_precise$?height@?size@?width@
String ID:
API String ID: 1780752203-0
Opcode ID: 0872c7cd1fd046ed4a90587d0857a75c25d538e326f1f35cbc143a2490327b12
Instruction ID: ef62624ad8b44eb7c1133eae6b76097212a131ff45825075d99b96c4e63486b2
Opcode Fuzzy Hash: 0872c7cd1fd046ed4a90587d0857a75c25d538e326f1f35cbc143a2490327b12
Instruction Fuzzy Hash: F1F0F9342106109BCA29EF24DC68BAD777ABF44315B00865DE4579B3B2CF31AD46DFA0

Uniqueness

Uniqueness Score: -1.00%

Function 00C8C4D0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 88COMMON

Download Yara Rule

APIs

?nextNode@QMapNodeBase@@QBEPBU1@XZ.QT5CORE(?,676E6AEE,00000041,?,00000000,000000FF,?,00C80DC4), ref: 00C8C529
?setItemWidget@QListWidget@@QAEXPAVQListWidgetItem@@PAVQWidget@@@Z.QT5WIDGETS(?,00000000,?,00C80DC4), ref: 00C8C545

Part of subcall function 00C8CB60: ?freeNodeAndRebalance@QMapDataBase@@QAEXPAUQMapNodeBase@@@Z.QT5CORE(00000000,00000039,?,?,00000000,00C8C55A,?,?,00C80DC4), ref: 00C8CBB0

?freeTree@QMapDataBase@@QAEXPAUQMapNodeBase@@H@Z.QT5CORE(?,00000004,?,676E6AEE,00000041,?,00000000,000000FF,?,00C80DC4), ref: 00C8C5A5
?freeData@QMapDataBase@@SAXPAU1@@Z.QT5CORE(00000041,?,676E6AEE,00000041,?,00000000,000000FF,?,00C80DC4), ref: 00C8C5AC

Strings

jng, xrefs: 00C8C4E7

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Base@@$Node$?freeData$List$?next?setBase@@@Data@ItemItem@@Node@Rebalance@Tree@U1@@WidgetWidget@Widget@@Widget@@@
String ID: jng
API String ID: 391235125-1186463058
Opcode ID: 640bd7155ff07ac09b027006b0712f936a96cd931d888c5b219329cce0292f79
Instruction ID: c4b12d667fd293a8b0c107d58b8aa29376ea120b62a090c27a7dbf5c4bbe6595
Opcode Fuzzy Hash: 640bd7155ff07ac09b027006b0712f936a96cd931d888c5b219329cce0292f79
Instruction Fuzzy Hash: 953168B1A006099FCB14EF68D8C0B6EB7B8FB08724F144669E825D7391DB30ED05CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 00C6DC30 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 84COMMON

Download Yara Rule

APIs

Part of subcall function 00C7FB40: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,?,676E6AEE), ref: 00C7FBB7
Part of subcall function 00C7FB40: ?size@QListData@@QBEHXZ.QT5CORE(676E6AEE), ref: 00C7FBD9
Part of subcall function 00C7FB40: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C7FBF4
Part of subcall function 00C7FB40: ?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,00000011,?), ref: 00C7FC0C
Part of subcall function 00C7FB40: ?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7FC14
Part of subcall function 00C7FB40: ?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,00000001,?), ref: 00C7FC2D
Part of subcall function 00C7FB40: ?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7FC35
Part of subcall function 00C7FB40: ?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,00000002,?), ref: 00C7FC4E
Part of subcall function 00C7FB40: ?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7FC56
Part of subcall function 00C7FB40: ?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z.QT5WIDGETS(?,00000003,?), ref: 00C7FC6F
Part of subcall function 00C7FB40: ?text@QTableWidgetItem@@QBE?AVQString@@XZ.QT5WIDGETS ref: 00C7FC77

??0QString@@QAE@ABV0@@Z.QT5CORE(?,?,676E6AEE), ref: 00C6DC77

Part of subcall function 00C8F560: new.LIBCMT ref: 00C8F58E

Part of subcall function 00C906F0: ?number@QString@@SA?AV1@HH@Z.QT5CORE(00CB3B11,?,0000000A,676E6AEE), ref: 00C9072D
Part of subcall function 00C906F0: ?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z.QT5SQL(?,00000000,00000001), ref: 00C90740
Part of subcall function 00C906F0: ??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL ref: 00C9074C
Part of subcall function 00C906F0: ??1QString@@QAE@XZ.QT5CORE ref: 00C90755
Part of subcall function 00C906F0: ??0QString@@QAE@XZ.QT5CORE ref: 00C9075E
Part of subcall function 00C906F0: ??4QString@@QAEAAV0@PBD@Z.QT5CORE(SELECT scores FROM tests WHERE id = :id), ref: 00C90770
Part of subcall function 00C906F0: ?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(000000FF), ref: 00C9077D
Part of subcall function 00C906F0: ??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?), ref: 00C9078A
Part of subcall function 00C906F0: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:id,00000003), ref: 00C907A1
Part of subcall function 00C906F0: ?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(?,?), ref: 00C907C0
Part of subcall function 00C906F0: ??1QString@@QAE@XZ.QT5CORE ref: 00C907C9
Part of subcall function 00C906F0: ??1QVariant@@QAE@XZ.QT5CORE ref: 00C907D6
Part of subcall function 00C906F0: ?exec@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C907DF
Part of subcall function 00C906F0: ?next@QSqlQuery@@QAE_NXZ.QT5SQL ref: 00C907E8
Part of subcall function 00C906F0: ?value@QSqlQuery@@QBE?AVQVariant@@H@Z.QT5SQL(?,00000000), ref: 00C907FF
Part of subcall function 00C906F0: ?toString@QVariant@@QBE?AVQString@@XZ.QT5CORE(?), ref: 00C9080F
Part of subcall function 00C906F0: ??1QVariant@@QAE@XZ.QT5CORE ref: 00C9081C
Part of subcall function 00C906F0: ??0QChar@@QAE@H@Z.QT5CORE(00000022), ref: 00C90827
Part of subcall function 00C906F0: ?indexOf@QString@@QBEHVQChar@@HW4CaseSensitivity@Qt@@@Z.QT5CORE(00CB3B11,00000000,00000001), ref: 00C90837
Part of subcall function 00C906F0: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CB9364,00000000), ref: 00C90849

??4QString@@QAEAAV0@$$QAV0@@Z.QT5CORE(00000000,jng,?,676E6AEE), ref: 00C6DC99
??1QString@@QAE@XZ.QT5CORE(?,676E6AEE), ref: 00C6DCA2

Part of subcall function 00C631D0: new.LIBCMT ref: 00C63242

Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63254,00CBC634,00000000,00C63254,?,6B5136D0), ref: 00C61ED9
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63258), ref: 00C61EE6
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C6325C), ref: 00C61EF3
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63260), ref: 00C61F00
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63264), ref: 00C61F0D
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63268), ref: 00C61F1A
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C6326C), ref: 00C61F27
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63270), ref: 00C61F34
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63274), ref: 00C61F41
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63278), ref: 00C61F4E
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C6327C), ref: 00C61F5B
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63280), ref: 00C61F68
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63284), ref: 00C61F75
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63288), ref: 00C61F82
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C6328C), ref: 00C61F8F
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63290), ref: 00C61F9C
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63294), ref: 00C61FA9
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63298), ref: 00C61FB6

Part of subcall function 00C74230: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CBA9B4,00000001,00C69903,676E6AEE,?,00000000,?,00CAFB45,000000FF), ref: 00C74292
Part of subcall function 00C74230: ?split@QString@@QBE?AVQStringList@@ABV1@W4SplitBehavior@1@W4CaseSensitivity@Qt@@@Z.QT5CORE(00000001,00CAFB45,00000000,00000001,?,?,00CAFB45,000000FF), ref: 00C742B4
Part of subcall function 00C74230: ??1QString@@QAE@XZ.QT5CORE(?,?,00CAFB45,000000FF), ref: 00C742E4
Part of subcall function 00C74230: ?size@QListData@@QBEHXZ.QT5CORE(?,?,00CAFB45,000000FF), ref: 00C742F9
Part of subcall function 00C74230: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,00000000,0000000A,?,?,00CAFB45,000000FF), ref: 00C74318
Part of subcall function 00C74230: ?toInt@QString@@QBEHPA_NH@Z.QT5CORE(?,?,00CAFB45,000000FF), ref: 00C74320
Part of subcall function 00C74230: ?size@QListData@@QBEHXZ.QT5CORE(?,?,?,00CAFB45,000000FF), ref: 00C74334

Part of subcall function 00C6F0E0: ?size@QListData@@QBEHXZ.QT5CORE(676E6AEE,?,?,?,00CAEF8F,000000FF,?,00C6D7D6,?), ref: 00C6F117
Part of subcall function 00C6F0E0: ?size@QListData@@QBEHXZ.QT5CORE(?,?,?,00CAEF8F,000000FF,?,00C6D7D6,?), ref: 00C6F138
Part of subcall function 00C6F0E0: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CBA9B4,00000001,?,?,?,00CAEF8F,000000FF,?,00C6D7D6,?), ref: 00C6F166
Part of subcall function 00C6F0E0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,?,00CAEF8F,000000FF,?,00C6D7D6,?), ref: 00C6F17A
Part of subcall function 00C6F0E0: ?split@QString@@QBE?AVQStringList@@ABV1@W4SplitBehavior@1@W4CaseSensitivity@Qt@@@Z.QT5CORE(000000FF,00CAEF8F,00000000,00000001,?,?,00CAEF8F,000000FF,?,00C6D7D6,?), ref: 00C6F191
Part of subcall function 00C6F0E0: ??1QString@@QAE@XZ.QT5CORE(?,?,00CAEF8F,000000FF,?,00C6D7D6,?), ref: 00C6F1E5
Part of subcall function 00C6F0E0: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(00C6D7D6,?,?,00CAEF8F,000000FF,?,00C6D7D6,?), ref: 00C6F1F0

Strings

jng, xrefs: 00C6DC45
jng, xrefs: 00C6DC7D, 00C6DC9F, 00C6DC84

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$V0@@$Table$Data@@List$Item@@Widget$Query@@Variant@@$?size@$?from?item@?text@ArrayAscii_helper@Data@TypedWidget@@$?at@CaseQt@@@Sensitivity@$?dispose@?split@Behavior@1@Char@@Data@1@@List@@SplitStringString@@@$?bind?database@?exec@?index?next@?number@?prepare@?value@Database@@Database@@@Flag@Flags@Int@ParamSql@@@@@String@String@@_TypeV0@$$Value@
String ID: jng$jng
API String ID: 3704245613-1345699772
Opcode ID: 70fbbc2900896b48f22350d14285035c703e70d1c8f49cc57625acbc8ebce50e
Instruction ID: 7e8942f52e92d55596da1d4e94e88ec7d3046c46a32e60c7d297cda9a7a4d2ea
Opcode Fuzzy Hash: 70fbbc2900896b48f22350d14285035c703e70d1c8f49cc57625acbc8ebce50e
Instruction Fuzzy Hash: 2C317070901249DBCB18EF64C895BAE7BB8EF05324F14466DF81297391DF35AA09DBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00CA2B70 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 65COMMON

Download Yara Rule

APIs

Part of subcall function 00CA7790: ??0QString@@QAE@ABV0@@Z.QT5CORE(?,?,00C9C8DE,?,?,?,?,676E6AEE), ref: 00CA77A0

Part of subcall function 00CA7770: ??0QString@@QAE@ABV0@@Z.QT5CORE(?,?,00C9C8C8,?,?,676E6AEE), ref: 00CA7780

Part of subcall function 00C8F560: new.LIBCMT ref: 00C8F58E

Part of subcall function 00C8F5D0: ??0QString@@QAE@XZ.QT5CORE(676E6AEE,6B94FA34,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F602
Part of subcall function 00C8F5D0: ?number@QString@@SA?AV1@HH@Z.QT5CORE(00000000,?,0000000A,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F615
Part of subcall function 00C8F5D0: ?database@QSqlDatabase@@SA?AV1@ABVQString@@_N@Z.QT5SQL(?,00000000,00000001,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F628
Part of subcall function 00C8F5D0: ??0QSqlQuery@@QAE@VQSqlDatabase@@@Z.QT5SQL(?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F634
Part of subcall function 00C8F5D0: ??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F641
Part of subcall function 00C8F5D0: ??4QString@@QAEAAV0@PBD@Z.QT5CORE(INSERT INTO serialNums (serialNum, purchaseDate) VALUES (:serialNum, :purchaseDate),?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F64F
Part of subcall function 00C8F5D0: ?prepare@QSqlQuery@@QAE_NABVQString@@@Z.QT5SQL(000000FF,?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F65C
Part of subcall function 00C8F5D0: ??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(?,?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F669
Part of subcall function 00C8F5D0: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:serialNum,0000000A,?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F67A
Part of subcall function 00C8F5D0: ?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(00CB3731,?,?,?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F69D
Part of subcall function 00C8F5D0: ??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F6A6
Part of subcall function 00C8F5D0: ??1QVariant@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F6B9
Part of subcall function 00C8F5D0: ??0QVariant@@QAE@ABVQString@@@Z.QT5CORE(00C68445,?,?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F6C2
Part of subcall function 00C8F5D0: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(:purchaseDate,0000000D,?,?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F6D3
Part of subcall function 00C8F5D0: ?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z.QT5SQL(00CB3731,?,?,?,?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F6F6
Part of subcall function 00C8F5D0: ??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F6FF
Part of subcall function 00C8F5D0: ??1QVariant@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F70C
Part of subcall function 00C8F5D0: ?exec@QSqlQuery@@QAE_NXZ.QT5SQL(?,?,?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F711
Part of subcall function 00C8F5D0: ??1QSqlQuery@@QAE@XZ.QT5SQL(?,?,?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F71A
Part of subcall function 00C8F5D0: ??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F723
Part of subcall function 00C8F5D0: ??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,?,00000000,00CB3731,000000FF,?,00C68445), ref: 00C8F72C

Part of subcall function 00CA7810: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CB9364,00000000,676E6AEE), ref: 00CA783F
Part of subcall function 00CA7810: ?setText@QLineEdit@@QAEXABVQString@@@Z.QT5WIDGETS(?), ref: 00CA785C
Part of subcall function 00CA7810: ??1QString@@QAE@XZ.QT5CORE ref: 00CA786C
Part of subcall function 00CA7810: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CB9364,00000000), ref: 00CA7879
Part of subcall function 00CA7810: ?setText@QLineEdit@@QAEXABVQString@@@Z.QT5WIDGETS(?), ref: 00CA7896
Part of subcall function 00CA7810: ??1QString@@QAE@XZ.QT5CORE ref: 00CA789F

?clear@QTableWidget@@QAEXXZ.QT5WIDGETS(?,?,?,?,?,?,676E6AEE), ref: 00CA2C03
?clear@QComboBox@@QAEXXZ.QT5WIDGETS(?,?,?,?,?,?,676E6AEE), ref: 00CA2C12

Part of subcall function 00C9D170: ?setRowCount@QTableWidget@@QAEXH@Z.QT5WIDGETS(00000000,676E6AEE,6B5136D0,?,?,?,?,?,?,?,?,?,?,00000000,00CB5889,000000FF), ref: 00C9D1A8
Part of subcall function 00C9D170: ?setSelectionMode@QAbstractItemView@@QAEXW4SelectionMode@1@@Z.QT5WIDGETS(00000001,?,?,?,?,?,?,?,?,00000000,00CB5889,000000FF,?,00C9F83F), ref: 00C9D1B9
Part of subcall function 00C9D170: ??1QString@@QAE@XZ.QT5CORE(00000000,00000000), ref: 00C9D23B
Part of subcall function 00C9D170: ??1QString@@QAE@XZ.QT5CORE ref: 00C9D248
Part of subcall function 00C9D170: ?setHorizontalHeaderLabels@QTableWidget@@QAEXABVQStringList@@@Z.QT5WIDGETS(00000000), ref: 00C9D25B
Part of subcall function 00C9D170: ??0QVariant@@QAE@XZ.QT5CORE ref: 00C9D264
Part of subcall function 00C9D170: ?count@QComboBox@@QBEHXZ.QT5WIDGETS ref: 00C9D297
Part of subcall function 00C9D170: ??0QIcon@@QAE@XZ.QT5GUI ref: 00C9D2A2
Part of subcall function 00C9D170: ?insertItem@QComboBox@@QAEXHABVQIcon@@ABVQString@@ABVQVariant@@@Z.QT5WIDGETS(00000000,00000000,00000000,?), ref: 00C9D2B4
Part of subcall function 00C9D170: ??1QIcon@@QAE@XZ.QT5GUI ref: 00C9D2BD
Part of subcall function 00C9D170: ??1QString@@QAE@XZ.QT5CORE ref: 00C9D2C6

??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,676E6AEE), ref: 00CA2C22
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,676E6AEE), ref: 00CA2C2B

Strings

jng, xrefs: 00CA2B86

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Variant@@$Query@@$?setString@@@$?fromArrayAscii_helper@Data@Typed$Box@@ComboIcon@@TableWidget@@$?bind?clear@Edit@@Flag@Flags@LineParamSelectionSql@@@@@Text@TypeV0@@Value@$?count@?database@?exec@?insert?number@?prepare@AbstractCount@Database@@Database@@@HeaderHorizontalItemItem@Labels@List@@@Mode@Mode@1@@StringString@@_Variant@@@View@@
String ID: jng
API String ID: 934895654-1186463058
Opcode ID: 2fa8a3c9c89cd96e42b42b8e6f28839cdaf742cf908c7efef10f26b588c4b426
Instruction ID: 6ed03436ff8dc12c22a2ac50602c1496e07335f49a47d8b54a5f8d94e16752dc
Opcode Fuzzy Hash: 2fa8a3c9c89cd96e42b42b8e6f28839cdaf742cf908c7efef10f26b588c4b426
Instruction Fuzzy Hash: AD218E7190420AEBCB05EFA4DD46BEEBBB8FB15314F00026DE40293691DF356A08DBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00C73AE0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 61COMMON

Download Yara Rule

APIs

Part of subcall function 00C73BB0: ?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,AnalysisFormWidget,Form,00000000,000000FF,676E6AEE,6B9DEE70,?,00CBB264,?,00C767B5,00CBB264), ref: 00C73BF5
Part of subcall function 00C73BB0: ?setWindowTitle@QWidget@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C73C05
Part of subcall function 00C73BB0: ??1QString@@QAE@XZ.QT5CORE ref: 00C73C15
Part of subcall function 00C73BB0: ?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,AnalysisFormWidget,User Analysis Info,00000000,000000FF), ref: 00C73C2D
Part of subcall function 00C73BB0: ?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C73C43
Part of subcall function 00C73BB0: ??1QString@@QAE@XZ.QT5CORE ref: 00C73C48
Part of subcall function 00C73BB0: ??0QString@@QAE@XZ.QT5CORE ref: 00C73C51
Part of subcall function 00C73BB0: ?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C73C62
Part of subcall function 00C73BB0: ??1QString@@QAE@XZ.QT5CORE ref: 00C73C67
Part of subcall function 00C73BB0: ??0QString@@QAE@XZ.QT5CORE ref: 00C73C70
Part of subcall function 00C73BB0: ?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C73C81
Part of subcall function 00C73BB0: ??1QString@@QAE@XZ.QT5CORE ref: 00C73C8D
Part of subcall function 00C73BB0: ?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,AnalysisFormWidget,Graph Style,00000000,000000FF), ref: 00C73CA5
Part of subcall function 00C73BB0: ?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C73CB5
Part of subcall function 00C73BB0: ??1QString@@QAE@XZ.QT5CORE ref: 00C73CC1
Part of subcall function 00C73BB0: ?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z.QT5CORE(?,AnalysisFormWidget,Polar,00000000,000000FF), ref: 00C73CD9
Part of subcall function 00C73BB0: ?setText@QAbstractButton@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C73CEF
Part of subcall function 00C73BB0: ??1QString@@QAE@XZ.QT5CORE ref: 00C73CFB

Part of subcall function 00C767F0: ?tr@QMetaObject@@QBE?AVQString@@PBD0H@Z.QT5CORE(000000FF,000000FF,000000FF,000000FF,00000000,00C730C6,6B9DEE70,Total Error Score (TES): ,00000000,000000FF,676E6AEE,6B9DED70,00000000), ref: 00C7680E

?number@QString@@SA?AV1@HH@Z.QT5CORE(?,00000000,0000000A,?,676E6AEE,00000000,?,00C693F0), ref: 00C73B37

Part of subcall function 00CA8FB0: new.LIBCMT ref: 00CA8FFC
Part of subcall function 00CA8FB0: ??0QGraphicsTextItem@@QAE@PAVQGraphicsItem@@@Z.QT5WIDGETS(00000000,6BC2A210), ref: 00CA9017
Part of subcall function 00CA8FB0: new.LIBCMT ref: 00CA902F
Part of subcall function 00CA8FB0: ??0QGraphicsTextItem@@QAE@PAVQGraphicsItem@@@Z.QT5WIDGETS(00000000), ref: 00CA9044
Part of subcall function 00CA8FB0: new.LIBCMT ref: 00CA905C
Part of subcall function 00CA8FB0: ??0QGraphicsTextItem@@QAE@PAVQGraphicsItem@@@Z.QT5WIDGETS(00000000), ref: 00CA9071
Part of subcall function 00CA8FB0: ?clear@QGraphicsScene@@QAEXXZ.QT5WIDGETS ref: 00CA908D
Part of subcall function 00CA8FB0: ?sceneRect@QGraphicsScene@@QBE?AVQRectF@@XZ.QT5WIDGETS(?), ref: 00CA90A0
Part of subcall function 00CA8FB0: ?width@QRectF@@QBENXZ.QT5CORE ref: 00CA90A4
Part of subcall function 00CA8FB0: ?sceneRect@QGraphicsScene@@QBE?AVQRectF@@XZ.QT5WIDGETS(?), ref: 00CA90BD
Part of subcall function 00CA8FB0: ?width@QRectF@@QBENXZ.QT5CORE ref: 00CA90C1
Part of subcall function 00CA8FB0: ?sceneRect@QGraphicsScene@@QBE?AVQRectF@@XZ.QT5WIDGETS(?), ref: 00CA90DA
Part of subcall function 00CA8FB0: ?width@QRectF@@QBENXZ.QT5CORE ref: 00CA90DE

?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000,?,?,?,?,?,?,?,?,676E6AEE,00000000,?,00C693F0), ref: 00C73B75
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,?,?,?,?,676E6AEE,00000000,?,00C693F0), ref: 00C73B85

Part of subcall function 00C76C50: ?size@QListData@@QBEHXZ.QT5CORE(676E6AEE,?), ref: 00C76C8B
Part of subcall function 00C76C50: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C76CE6
Part of subcall function 00C76C50: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000054), ref: 00C76CF5
Part of subcall function 00C76C50: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000), ref: 00C76D01
Part of subcall function 00C76C50: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000001), ref: 00C76D13
Part of subcall function 00C76C50: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?), ref: 00C76DA7
Part of subcall function 00C76C50: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(-000000FC,?,?,00000000), ref: 00C76DDF

Strings

Classification: , xrefs: 00C73B59
jng, xrefs: 00C73AF5

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Graphics$?setData@@ListString@@@$?at@RectText@$Label@@$?translate@Application@@CoreScene@@$?scene?width@Item@@Item@@@Rect@Text$?clear@?number@?size@?tr@AbstractButton@@MetaObject@@Title@Widget@@Window
String ID: Classification: $jng
API String ID: 207314892-3243530082
Opcode ID: a73d7c6a22e2ece40a77c131f208322a2c143b6f68d8a486dfd395fae90c428b
Instruction ID: ec750435ca84b7dca0ee073c6d87b8bd73ff656c8401b54fa2720857ff8e0425
Opcode Fuzzy Hash: a73d7c6a22e2ece40a77c131f208322a2c143b6f68d8a486dfd395fae90c428b
Instruction Fuzzy Hash: 6D110071A04705ABCB10EF98DC06F9EB7B8EB04724F204328F426A73D1DB716A08CB81

Uniqueness

Uniqueness Score: -1.00%

Function 00C63BB0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 58COMMON

Download Yara Rule

APIs

?begin@QListData@@QBEPAPAXXZ.QT5CORE(676E6AEE,?,?,?,00000000,00000000), ref: 00C63BE0
?detach@QListData@@QAEPAUData@1@H@Z.QT5CORE(00000000,?,?,?,00000000,00000000), ref: 00C63BED
?end@QListData@@QBEPAPAXXZ.QT5CORE(00000000,?,?,?,00000000), ref: 00C63C02
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000,?,?,?,00000000), ref: 00C63C0B

Part of subcall function 00C699F0: new.LIBCMT ref: 00C69A34

Strings

jng, xrefs: 00C63BC7

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?begin@$?detach@?end@Data@1@
String ID: jng
API String ID: 2291827984-1186463058
Opcode ID: 6ab73b722eb155befe77b96ea190a9f36006b6558da983141960f6e8c7d9989e
Instruction ID: 35fe16c84a9f0651728ae49ee6bcea4b9b36ce74c4f967c12b037865ddd3b6d5
Opcode Fuzzy Hash: 6ab73b722eb155befe77b96ea190a9f36006b6558da983141960f6e8c7d9989e
Instruction Fuzzy Hash: 9911A071604644ABCB249F6CDC84B5EBBACEB49B30F10432AF926D33D0DB345A05DB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C61380 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 53COMMON

Download Yara Rule

APIs

?detach@QListData@@QAEPAUData@1@H@Z.QT5CORE(?,676E6AEE,?,?,?,00000000,00000000), ref: 00C613CC
?begin@QListData@@QBEPAPAXXZ.QT5CORE(?,?,?,00000000), ref: 00C613DB
?end@QListData@@QBEPAPAXXZ.QT5CORE(00000000,?,?,?,00000000), ref: 00C613E4
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000,?,?,?,00000000), ref: 00C613ED

Strings

jng, xrefs: 00C61397

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?begin@$?detach@?end@Data@1@
String ID: jng
API String ID: 2291827984-1186463058
Opcode ID: 7df3fee0b37096475ebbb204d3e594f7d946f91dff8aa1859819f04793cae43c
Instruction ID: 2dc07f0a371d417d8226d5563a6dd85dd5de71d9d867bbaf1d8ab615e19a110f
Opcode Fuzzy Hash: 7df3fee0b37096475ebbb204d3e594f7d946f91dff8aa1859819f04793cae43c
Instruction Fuzzy Hash: 0D11ADB26085049FCB14DF58DC44B6EBBFCEB48B21F14422AF81AC37A0CB345905CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C6DDA0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 53COMMON

Download Yara Rule

APIs

?detach@QListData@@QAEPAUData@1@H@Z.QT5CORE(?,676E6AEE,6B62DA60,6B62B6F0,00000000,6B62B6F0,00000000), ref: 00C6DDEC
?begin@QListData@@QBEPAPAXXZ.QT5CORE ref: 00C6DDFB
?end@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C6DE04
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C6DE0D

Strings

jng, xrefs: 00C6DDB7

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?begin@$?detach@?end@Data@1@
String ID: jng
API String ID: 2291827984-1186463058
Opcode ID: b6a9b33cc8289f823871f39286bcd2f381746d58b6458b9a63725335705c9161
Instruction ID: 532a007e32402d9799ed0a2b8579ea84675d54e41abf0a39f8c6f989aaf58c6c
Opcode Fuzzy Hash: b6a9b33cc8289f823871f39286bcd2f381746d58b6458b9a63725335705c9161
Instruction Fuzzy Hash: 18118E71B04504AFC7149F58DC44B6EBBB9EB49B21F10422AF916C3390CB345905CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C6DE50 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 53COMMON

Download Yara Rule

APIs

?detach@QListData@@QAEPAUData@1@H@Z.QT5CORE(?,676E6AEE,?,00000001,00000001,00000001,00000001,?,?), ref: 00C6DE9C
?begin@QListData@@QBEPAPAXXZ.QT5CORE ref: 00C6DEAB
?end@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C6DEB4
?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C6DEBD

Strings

jng, xrefs: 00C6DE67

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?begin@$?detach@?end@Data@1@
String ID: jng
API String ID: 2291827984-1186463058
Opcode ID: 649417ebb4f8429cd2e1f04431c8572693d5c90d996730dd38260f0075f8df21
Instruction ID: 635848adbfa3d9012e443151d11a05dc0da2cfa08be966baaea49384fd7edc12
Opcode Fuzzy Hash: 649417ebb4f8429cd2e1f04431c8572693d5c90d996730dd38260f0075f8df21
Instruction Fuzzy Hash: 2D118E72B055149FC7159F58DC44B6EBBBDEB49B21F10422AF816D3390CB355905CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C9BC50 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 45COMMON

Download Yara Rule

APIs

new.LIBCMT ref: 00C9BC80

Part of subcall function 00CAC0B7: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0DE

??0QObject@@QAE@PAV0@@Z.QT5CORE(00000000), ref: 00C9BC98
??0QString@@QAE@XZ.QT5CORE ref: 00C9BCA7
??4QString@@QAEAAV0@PBD@Z.QT5CORE(00CB9364), ref: 00C9BCD0

Strings

jng, xrefs: 00C9BC64

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Object@@V0@@malloc
String ID: jng
API String ID: 3486376541-1186463058
Opcode ID: 22b58a8772e6e79a69af0b4b419465b7919d9bdd84ea6bee9957fc3f109d5ac9
Instruction ID: fdbc4b72c60e312404da6d1f31df517efefab1ad94badb6fdeae1c35474c9a3d
Opcode Fuzzy Hash: 22b58a8772e6e79a69af0b4b419465b7919d9bdd84ea6bee9957fc3f109d5ac9
Instruction Fuzzy Hash: DA11ADB164864AEFD710DF44ED08B99FBF8FB44720F00426AE825837D0DBB4A508CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00C949D0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 42windowCOMMON

Download Yara Rule

APIs

?pixmap@QIcon@@QBE?AVQPixmap@@ABVQSize@@W4Mode@1@W4State@1@@Z.QT5GUI(00000000,?,00000000,00000000,676E6AEE,00000000,?,00C8F2B3,?,?), ref: 00C94A07
?setPixmap@QLabel@@QAEXABVQPixmap@@@Z.QT5WIDGETS(00000000,?,00C8F2B3,?), ref: 00C94A1B
??1QPixmap@@UAE@XZ.QT5GUI(?,00C8F2B3,?), ref: 00C94A2B
?resize@QWidget@@QAEXABVQSize@@@Z.QT5WIDGETS(?,?,00C8F2B3,?), ref: 00C94A3B

Strings

jng, xrefs: 00C949E5

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Pixmap@@$?pixmap@?resize@?setIcon@@Label@@Mode@1@Pixmap@Pixmap@@@Size@@Size@@@State@1@@Widget@@
String ID: jng
API String ID: 2778533796-1186463058
Opcode ID: b6913dc423cb956b2fdf3699578c8f8f65e54b84f8a328f691247604bd0089f8
Instruction ID: ce2de44d9214a69a4afdd67595a4f0d66d77f81156c9ba95f07a2c24d9b8be7e
Opcode Fuzzy Hash: b6913dc423cb956b2fdf3699578c8f8f65e54b84f8a328f691247604bd0089f8
Instruction Fuzzy Hash: AA014C76504608EFC714DF94DC55F9AB7BCFB08720F10476AE822936D0DB35A909CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00C623D0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 40COMMON

Download Yara Rule

APIs

??0QString@@QAE@ABV0@@Z.QT5CORE(00CB35BE), ref: 00C62405
?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(000000FF,00000000,000000FF), ref: 00C62422
?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE(00000000), ref: 00C62435
??1QString@@QAE@XZ.QT5CORE ref: 00C6243E

Strings

jng, xrefs: 00C623E5

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$?append@?fromUtf8@V0@@V1@@
String ID: jng
API String ID: 3652567686-1186463058
Opcode ID: 84dc36ce2e41f4abd46bd633db39f1ded0d3eb9adceaee176a31dd6cf488ff43
Instruction ID: d5066096189bb6d1da8de7b6fb3187a0d7e2a9281458234b60c4f1cae1cb7128
Opcode Fuzzy Hash: 84dc36ce2e41f4abd46bd633db39f1ded0d3eb9adceaee176a31dd6cf488ff43
Instruction Fuzzy Hash: D0012C71904619EFCB00DF98DD04B9EBBB8FB08725F10435AE815A3390DBB55A08CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C80440 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 37COMMON

Download Yara Rule

APIs

?textCursor@QPlainTextEdit@@QBE?AVQTextCursor@@XZ.QT5WIDGETS(?,676E6AEE), ref: 00C80472
?selectedText@QTextCursor@@QBE?AVQString@@XZ.QT5GUI ref: 00C80488

Part of subcall function 00C9BC50: new.LIBCMT ref: 00C9BC80
Part of subcall function 00C9BC50: ??0QObject@@QAE@PAV0@@Z.QT5CORE(00000000), ref: 00C9BC98
Part of subcall function 00C9BC50: ??0QString@@QAE@XZ.QT5CORE ref: 00C9BCA7
Part of subcall function 00C9BC50: ??4QString@@QAEAAV0@PBD@Z.QT5CORE(00CB9364), ref: 00C9BCD0

Part of subcall function 00C9BEB0: ??4QString@@QAEAAV0@ABV0@@Z.QT5CORE(FFFFFFFF,00C802E0,?,?,676E6AEE,?,?,00CB16C9,000000FF), ref: 00C9BEB8
Part of subcall function 00C9BEB0: ??1QString@@QAE@XZ.QT5CORE(?,?,676E6AEE,?,?,00CB16C9,000000FF), ref: 00C9BEC2

??1QTextCursor@@QAE@XZ.QT5GUI ref: 00C804A5

Strings

jng, xrefs: 00C80454
jng, xrefs: 00C8045C

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Text$Cursor@@$V0@@$?selected?textCursor@Edit@@Object@@PlainText@
String ID: jng$jng
API String ID: 3574075496-1345699772
Opcode ID: 237b078e996d054bbf7b677e44f8c4387ad7e719067ade1829de9ac9e902ed76
Instruction ID: a6d90fd6ec1de9a5c49b0850f0f821548d9bd6e3dd8a2588ce191cbb67789fd8
Opcode Fuzzy Hash: 237b078e996d054bbf7b677e44f8c4387ad7e719067ade1829de9ac9e902ed76
Instruction Fuzzy Hash: C4016271A08148EFCB44DFA8D909BADBBF8EB09714F10426DE41AD3391DB356904CB61

Uniqueness

Uniqueness Score: -1.00%

Function 00CA8590 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 35COMMON

Download Yara Rule

APIs

?setText@QLineEdit@@QAEXABVQString@@@Z.QT5WIDGETS(?,676E6AEE,6BBC8580,00000000,00CB7152,000000FF,?,00C9C865,?,?,?,?,00000001), ref: 00CA85C6
?setText@QLineEdit@@QAEXABVQString@@@Z.QT5WIDGETS(?,?,00C9C865,?,?,?,?,00000001), ref: 00CA85D6
??1QString@@QAE@XZ.QT5CORE(?,00C9C865,?,?,?,?,00000001), ref: 00CA85DF
??1QString@@QAE@XZ.QT5CORE(?,00C9C865,?,?,?,?,00000001), ref: 00CA85E8

Strings

jng, xrefs: 00CA85A2

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: ?setEdit@@LineString@@String@@@Text@
String ID: jng
API String ID: 596329904-1186463058
Opcode ID: c3d09649a760d1480ec42cb3335fc0a015e8c0f2ebac7a5f4f0ca8f44eac029e
Instruction ID: b9a511bcdaf261ac3783bb3093025a108a348a15e598367df9462c343ff1804b
Opcode Fuzzy Hash: c3d09649a760d1480ec42cb3335fc0a015e8c0f2ebac7a5f4f0ca8f44eac029e
Instruction Fuzzy Hash: 82016D7650410DEFCB04DF04E854FA9B7BCFB58724F00432AE81A876A0DF31AA0ACB40

Uniqueness

Uniqueness Score: -1.00%

Function 00C74430 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 34COMMON

Download Yara Rule

APIs

??8QString@@QBE_NPBD@Z.QT5CORE(polar,676E6AEE,?,00000000,00CB4B19,000000FF), ref: 00C74464
?setChecked@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(00000001,?,00000000,00CB4B19,000000FF), ref: 00C7447B
??1QString@@QAE@XZ.QT5CORE(?,00000000,00CB4B19,000000FF), ref: 00C74484

Strings

jng, xrefs: 00C74442
polar, xrefs: 00C74455

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$?setAbstractButton@@Checked@
String ID: polar$jng
API String ID: 1985653409-1048740847
Opcode ID: acb6a684b30ec29baba91cc99ab16687cfeeb457315e877586b5138e7df5ff75
Instruction ID: 4ccde5a52f26ef5f07526ed80676c6a4a05c52432b79cd49ed6c8803603e271d
Opcode Fuzzy Hash: acb6a684b30ec29baba91cc99ab16687cfeeb457315e877586b5138e7df5ff75
Instruction Fuzzy Hash: 24F0AF71508648EFC718DF50E844BA977B8FB08754F10426AEC12877E0DB75A90ACB40

Uniqueness

Uniqueness Score: -1.00%

Function 00C9CC00 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 22COMMON

Download Yara Rule

APIs

?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS(?,?,00C61BA7,?), ref: 00C9CC12
??4QString@@QAEAAV0@PBD@Z.QT5CORE(Kinnear,?,?,00C61BA7,?), ref: 00C9CC2D
??0QString@@QAE@ABV0@@Z.QT5CORE(?,?,?,00C61BA7,?), ref: 00C9CC38

Strings

Standard, xrefs: 00C9CC21
Kinnear, xrefs: 00C9CC28

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$AbstractButton@@Checked@V0@@
String ID: Kinnear$Standard
API String ID: 3690355419-2678617739
Opcode ID: 109c5031e2b5a337a4829fc4714305a2ef3b0a55991c8887cb170b8e613dacb2
Instruction ID: 0d3276227f3c1f36076ed9762d4005420e2325eaab915c1a8aee979963d70079
Opcode Fuzzy Hash: 109c5031e2b5a337a4829fc4714305a2ef3b0a55991c8887cb170b8e613dacb2
Instruction Fuzzy Hash: 85E01A762452509FC614CB04D858AAABBA9EF98726F00862EF84A53391CF709C45CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 00C6D890 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 80COMMON

Download Yara Rule

APIs

?size@QListData@@QBEHXZ.QT5CORE(676E6AEE,?,?,?,?,00CAEC0E,000000FF), ref: 00C6D8C1
?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,?,?,?,00CAEC0E,000000FF), ref: 00C6D8D0

Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63254,00CBC634,00000000,00C63254,?,6B5136D0), ref: 00C61ED9
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63258), ref: 00C61EE6
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C6325C), ref: 00C61EF3
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63260), ref: 00C61F00
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63264), ref: 00C61F0D
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63268), ref: 00C61F1A
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C6326C), ref: 00C61F27
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63270), ref: 00C61F34
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63274), ref: 00C61F41
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63278), ref: 00C61F4E
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C6327C), ref: 00C61F5B
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63280), ref: 00C61F68
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63284), ref: 00C61F75
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63288), ref: 00C61F82
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C6328C), ref: 00C61F8F
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63290), ref: 00C61F9C
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63294), ref: 00C61FA9
Part of subcall function 00C61ED0: ??0QString@@QAE@ABV0@@Z.QT5CORE(00C63298), ref: 00C61FB6

Part of subcall function 00C74230: ?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(00CBA9B4,00000001,00C69903,676E6AEE,?,00000000,?,00CAFB45,000000FF), ref: 00C74292
Part of subcall function 00C74230: ?split@QString@@QBE?AVQStringList@@ABV1@W4SplitBehavior@1@W4CaseSensitivity@Qt@@@Z.QT5CORE(00000001,00CAFB45,00000000,00000001,?,?,00CAFB45,000000FF), ref: 00C742B4
Part of subcall function 00C74230: ??1QString@@QAE@XZ.QT5CORE(?,?,00CAFB45,000000FF), ref: 00C742E4
Part of subcall function 00C74230: ?size@QListData@@QBEHXZ.QT5CORE(?,?,00CAFB45,000000FF), ref: 00C742F9
Part of subcall function 00C74230: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,00000000,0000000A,?,?,00CAFB45,000000FF), ref: 00C74318
Part of subcall function 00C74230: ?toInt@QString@@QBEHPA_NH@Z.QT5CORE(?,?,00CAFB45,000000FF), ref: 00C74320
Part of subcall function 00C74230: ?size@QListData@@QBEHXZ.QT5CORE(?,?,?,00CAFB45,000000FF), ref: 00C74334

?begin@QListData@@QBEPAPAXXZ.QT5CORE(?,00000000), ref: 00C6D90F

Part of subcall function 00C63BB0: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(676E6AEE,?,?,?,00000000,00000000), ref: 00C63BE0
Part of subcall function 00C63BB0: ?detach@QListData@@QAEPAUData@1@H@Z.QT5CORE(00000000,?,?,?,00000000,00000000), ref: 00C63BED
Part of subcall function 00C63BB0: ?end@QListData@@QBEPAPAXXZ.QT5CORE(00000000,?,?,?,00000000), ref: 00C63C02
Part of subcall function 00C63BB0: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000,?,?,?,00000000), ref: 00C63C0B

Strings

jng, xrefs: 00C6D8A4

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$V0@@$Data@@List$?begin@?size@$?at@$?detach@?end@?from?split@ArrayAscii_helper@Behavior@1@CaseData@Data@1@Int@List@@Qt@@@Sensitivity@SplitStringTyped
String ID: jng
API String ID: 4209483300-1186463058
Opcode ID: 16d2ce2918f220448ef8e0babded4f4e05a68175159133757810acc45d586c18
Instruction ID: 4ccc0638eca2d926af40a1ebe59153914fc577ead2b5b54eb952d08c9dceb2c8
Opcode Fuzzy Hash: 16d2ce2918f220448ef8e0babded4f4e05a68175159133757810acc45d586c18
Instruction Fuzzy Hash: 3D317171600208AFDB28DF55D895FAE7B68EF55360F04426DF8178B3A1DF31AA05DB90

Uniqueness

Uniqueness Score: -1.00%

Function 00C736A0 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 74COMMON

Download Yara Rule

APIs

new.LIBCMT ref: 00C736EB

Part of subcall function 00CAC0B7: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0DE

?createData@QMapDataBase@@SAPAU1@XZ.QT5CORE(00000000), ref: 00C73717
?recalcMostLeftNode@QMapDataBase@@QAEXXZ.QT5CORE(00000000), ref: 00C73746

Strings

jng, xrefs: 00C736B7

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Base@@Data$?create?recalcData@LeftMostNode@malloc
String ID: jng
API String ID: 984947681-1186463058
Opcode ID: 309f0273c079575c27d0da2413d9294c792b3aadf6e2daa574d553e94203f8d7
Instruction ID: 58b0737bd3adaef4b6d9ec70596627e9cec4bb029e445f10420c6b40bc859fee
Opcode Fuzzy Hash: 309f0273c079575c27d0da2413d9294c792b3aadf6e2daa574d553e94203f8d7
Instruction Fuzzy Hash: 6A21E2B5A00646DFCB04DF59C880B9ABBF4FF49324F24816DE9199B390D731AE05CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C63120 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 57COMMON

Download Yara Rule

APIs

??0QString@@QAE@ABV0@@Z.QT5CORE(00C7C58A,7FFFFFFF,00000001,676E6AEE,00000000,00000000,00000000,?,00000000,00CAD3B0,000000FF,?,00C7C58A,00000000), ref: 00C6316D
??0QString@@QAE@ABV0@@Z.QT5CORE(00C7C58A,676E6AEE,00000000,00000000,00000000,?,00000000,00CAD3B0,000000FF,?,00C7C58A,00000000), ref: 00C6318D
?append@QListData@@QAEPAPAXXZ.QT5CORE ref: 00C6319C

Part of subcall function 00C63DE0: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(676E6AEE,00000000,?,00000000,?,00C7C58A,00000000), ref: 00C63E10
Part of subcall function 00C63DE0: ?detach_grow@QListData@@QAEPAUData@1@PAHH@Z.QT5CORE(?,?), ref: 00C63E21
Part of subcall function 00C63DE0: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C63E36
Part of subcall function 00C63DE0: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(?), ref: 00C63E45
Part of subcall function 00C63DE0: ?end@QListData@@QBEPAPAXXZ.QT5CORE(?,00000000), ref: 00C63E63
Part of subcall function 00C63DE0: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C63E6C
Part of subcall function 00C63DE0: ??1QString@@QAE@XZ.QT5CORE(00000000), ref: 00C63EC5
Part of subcall function 00C63DE0: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(00000000,00000000), ref: 00C63ED0
Part of subcall function 00C63DE0: ?begin@QListData@@QBEPAPAXXZ.QT5CORE ref: 00C63EDE

Strings

jng, xrefs: 00C63135

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?begin@$String@@$V0@@$?append@?detach_grow@?dispose@?end@Data@1@Data@1@@
String ID: jng
API String ID: 1565750485-1186463058
Opcode ID: 445a9051ea4a7f1471df2c17964dfbca5f26c4603700726b51b8d4ddd384c1f9
Instruction ID: 31fd442657a10df24b5af9df8684eba145640f03c49b3702efeaf93150a68847
Opcode Fuzzy Hash: 445a9051ea4a7f1471df2c17964dfbca5f26c4603700726b51b8d4ddd384c1f9
Instruction Fuzzy Hash: 67117076604248AFCB24CF59E845BADBBA8EB49760F00426BFD15C3390DB319A04CA94

Uniqueness

Uniqueness Score: -1.00%

Function 00C69AA0 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 47COMMON

Download Yara Rule

APIs

new.LIBCMT ref: 00C69ADF

Part of subcall function 00CAC0B7: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0DE

??0QString@@QAE@ABV0@@Z.QT5CORE(?,00000000), ref: 00C69AF1
??0QString@@QAE@ABV0@@Z.QT5CORE(00000008), ref: 00C69AFE

Strings

jng, xrefs: 00C69AB7

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@V0@@$malloc
String ID: jng
API String ID: 1477144149-1186463058
Opcode ID: 40b343e5c8eecc370a470186ebb096dd091be5d3431014c868306733fbf41384
Instruction ID: 6e80b9f6c26a79653046a301b2b6365369f26b38e09f9a6dccaf072f910f0d25
Opcode Fuzzy Hash: 40b343e5c8eecc370a470186ebb096dd091be5d3431014c868306733fbf41384
Instruction Fuzzy Hash: DA019272900249EFCB10CF48DD41B9EBBB8FB54724F10822AEC1597340DB357A08CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00C6B340 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 43COMMON

Download Yara Rule

APIs

Part of subcall function 00C9CC00: ?isChecked@QAbstractButton@@QBE_NXZ.QT5WIDGETS(?,?,00C61BA7,?), ref: 00C9CC12
Part of subcall function 00C9CC00: ??4QString@@QAEAAV0@PBD@Z.QT5CORE(Kinnear,?,?,00C61BA7,?), ref: 00C9CC2D
Part of subcall function 00C9CC00: ??0QString@@QAE@ABV0@@Z.QT5CORE(?,?,?,00C61BA7,?), ref: 00C9CC38

??8QString@@QBE_NPBD@Z.QT5CORE(Standard,?,676E6AEE,?,?,?,?,00CAE579,000000FF), ref: 00C6B381
??1QString@@QAE@XZ.QT5CORE(?,?,?,?,00CAE579,000000FF), ref: 00C6B393

Strings

Standard, xrefs: 00C6B373
jng, xrefs: 00C6B354

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$AbstractButton@@Checked@V0@@
String ID: Standard$jng
API String ID: 3690355419-833192871
Opcode ID: d77e7337064e6f591aacccbd6485eb9ea4b88b156278f97a7c51446ed94249a4
Instruction ID: 1e2bcf47b0208da85c45d0681718a263e70ba2fdc6de50fe031ebeb5e12faef4
Opcode Fuzzy Hash: d77e7337064e6f591aacccbd6485eb9ea4b88b156278f97a7c51446ed94249a4
Instruction Fuzzy Hash: BE01BC71A44608EFCB24DF94DC45BAAB7A8FB09724F10036AA81A933C0DB356804DB50

Uniqueness

Uniqueness Score: -1.00%

Function 00C94A60 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 35COMMON

Download Yara Rule

APIs

?number@QString@@SA?AV1@HH@Z.QT5CORE(00C8EC2E,00C8EC2E,0000000A,676E6AEE,00CB35BE,?,00CB4B19,000000FF,?,00C8EC2E,?), ref: 00C94A92
?setText@QLabel@@QAEXABVQString@@@Z.QT5WIDGETS(00000000), ref: 00C94AA9
??1QString@@QAE@XZ.QT5CORE ref: 00C94AB2

Strings

jng, xrefs: 00C94A72

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$?number@?setLabel@@String@@@Text@
String ID: jng
API String ID: 611890166-1186463058
Opcode ID: d7196d53688b7fd7f50f988a778b4e2fd1605572a4710296a3fd1524d2b7e6b7
Instruction ID: 39d73d21d93d4b92196983566fcddb0141e806d9b2c2d599bd12760064877ad5
Opcode Fuzzy Hash: d7196d53688b7fd7f50f988a778b4e2fd1605572a4710296a3fd1524d2b7e6b7
Instruction Fuzzy Hash: EEF03C72904608EFC714DF98EC84B9ABBBCFB08710F00466AF906C7790DB35A908CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00C69D70 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 28COMMON

Download Yara Rule

APIs

??0QPageSetupDialog@@QAE@PAVQPrinter@@PAVQWidget@@@Z.QT5PRINTSUPPORT(?,00000000,676E6AEE), ref: 00C69D9E
?exec@QPageSetupDialog@@UAEHXZ.QT5PRINTSUPPORT ref: 00C69DAE
??1QPageSetupDialog@@UAE@XZ.QT5PRINTSUPPORT ref: 00C69DB7

Strings

jng, xrefs: 00C69D84

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Dialog@@PageSetup$?exec@Printer@@Widget@@@
String ID: jng
API String ID: 1801271431-1186463058
Opcode ID: f50c71867760d577430618b8dfc31fa13dd5b16c66a1e650f98beb18ab30800b
Instruction ID: 535f18454a45b43f76e295484b7b61ded73d0f7dcaf832c8285165fcf4d9164f
Opcode Fuzzy Hash: f50c71867760d577430618b8dfc31fa13dd5b16c66a1e650f98beb18ab30800b
Instruction Fuzzy Hash: 91F03A72944149DBCB04DF94DD55BDDB7B8FB08714F1003AAE806A3690DF356A08CF90

Uniqueness

Uniqueness Score: -1.00%

Function 00C79C00 Relevance: 6.0, APIs: 4, Instructions: 41COMMON

Download Yara Rule

APIs

?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C79C0F
?sortByColumn@QTableView@@QAEXHW4SortOrder@Qt@@@Z.QT5WIDGETS(?,00000001), ref: 00C79C27
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C79C30
?at@QListData@@QBEPAPAXH@Z.QT5CORE(?), ref: 00C79C52

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: ?at@Data@@List$?sortColumn@Order@Qt@@@SortTableView@@
String ID:
API String ID: 3792632401-0
Opcode ID: d23055044afdac651139ca1de274a7b5b69c0094ab8ef5b1035bebccb93bd7ce
Instruction ID: 7ad8db2c8244b87a7d737e8adc48fe7218d9b60b5cd0ea25c071ed8d3565d8f9
Opcode Fuzzy Hash: d23055044afdac651139ca1de274a7b5b69c0094ab8ef5b1035bebccb93bd7ce
Instruction Fuzzy Hash: CEF0A4763112109BCF0A4B28C895BBD7BDEAF8A300F148189E5169B291CBB15C46C792

Uniqueness

Uniqueness Score: -1.00%

Function 00C8F4D0 Relevance: 6.0, APIs: 4, Instructions: 26COMMON

Download Yara Rule

APIs

??1QString@@QAE@XZ.QT5CORE ref: 00C8F4ED
??1QString@@QAE@XZ.QT5CORE ref: 00C8F4F6
??1QString@@QAE@XZ.QT5CORE ref: 00C8F4FF
??1QObject@@UAE@XZ.QT5CORE ref: 00C8F507

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$Object@@
String ID:
API String ID: 2159272843-0
Opcode ID: 4c48b2a37d61c4424bd6b3216c084d69c0591cc35f40e4f709065012f28215af
Instruction ID: f7d652e8107b208c6033e6db3b7c4289021c6eb9d67cf3804299f38e26042522
Opcode Fuzzy Hash: 4c48b2a37d61c4424bd6b3216c084d69c0591cc35f40e4f709065012f28215af
Instruction Fuzzy Hash: 78F012742006168BCB28BB24FC58B5D7BA8BF51355F04852CE546876A1DFB0594ACB44

Uniqueness

Uniqueness Score: -1.00%

Function 00C6DD40 Relevance: 6.0, APIs: 4, Instructions: 24COMMON

Download Yara Rule

APIs

?width@QWidget@@QBEHXZ.QT5WIDGETS ref: 00C6DD43
?width@QWidget@@QBEHXZ.QT5WIDGETS(00000000), ref: 00C6DD5A
?height@QWidget@@QBEHXZ.QT5WIDGETS(00000000), ref: 00C6DD71
?width@QWidget@@QBEHXZ.QT5WIDGETS(00000000), ref: 00C6DD7A

Part of subcall function 00C79470: ??0QSize@@QAE@HH@Z.QT5CORE(6BEAC440,6BEAC440,6BA7F4C0,6BEAC440,?,00C630BB,-00000001), ref: 00C794B2
Part of subcall function 00C79470: ?setMaximumSize@QWidget@@QAEXABVQSize@@@Z.QT5WIDGETS(00000000), ref: 00C794BF
Part of subcall function 00C79470: ??0QSize@@QAE@HH@Z.QT5CORE(6BEAC440,6BEAC440), ref: 00C794CB
Part of subcall function 00C79470: ?setMinimumSize@QWidget@@QAEXABVQSize@@@Z.QT5WIDGETS(00000000), ref: 00C794D8
Part of subcall function 00C79470: ??0QSize@@QAE@HH@Z.QT5CORE(6BEAC440,6BEAC440), ref: 00C794F8
Part of subcall function 00C79470: ?setMaximumSize@QWidget@@QAEXABVQSize@@@Z.QT5WIDGETS(00000000), ref: 00C79505
Part of subcall function 00C79470: ??0QSize@@QAE@HH@Z.QT5CORE(6BEAC440,6BEAC440), ref: 00C79511
Part of subcall function 00C79470: ?setMinimumSize@QWidget@@QAEXABVQSize@@@Z.QT5WIDGETS(00000000), ref: 00C7951E
Part of subcall function 00C79470: ??0QSize@@QAE@HH@Z.QT5CORE(00000000,00000000), ref: 00C795D1
Part of subcall function 00C79470: ?setMinimumSize@QWidget@@QAEXABVQSize@@@Z.QT5WIDGETS(00000000), ref: 00C795DE
Part of subcall function 00C79470: ??0QSize@@QAE@HH@Z.QT5CORE(6BEAC440,6BEAC440), ref: 00C795EA
Part of subcall function 00C79470: ?setMaximumSize@QWidget@@QAEXABVQSize@@@Z.QT5WIDGETS(00000000), ref: 00C795F7
Part of subcall function 00C79470: ?setMinimumWidth@QWidget@@QAEXH@Z.QT5WIDGETS(6BEAC440,6BEAC440,6BEAC440), ref: 00C79630
Part of subcall function 00C79470: ?setMaximumWidth@QWidget@@QAEXH@Z.QT5WIDGETS(6BEAC440), ref: 00C7963D
Part of subcall function 00C79470: ?height@QWidget@@QBEHXZ.QT5WIDGETS ref: 00C79649
Part of subcall function 00C79470: ?width@QWidget@@QBEHXZ.QT5WIDGETS(00000000), ref: 00C79656

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Widget@@$?set$Size@Size@@Size@@@$?width@MaximumMinimum$?height@Width@
String ID:
API String ID: 1551252740-0
Opcode ID: 71b63aa0d424287613164c7d40cb7cf430070b022f6bf84b01be8b4575c77111
Instruction ID: 482f72d785ad06e9ba5f48cad11020e4af4461aac9fe5ebc9978bdc8c15b1aad
Opcode Fuzzy Hash: 71b63aa0d424287613164c7d40cb7cf430070b022f6bf84b01be8b4575c77111
Instruction Fuzzy Hash: C4E0C0312005119FC658EB18DC6DB9E737AEB88204F00466DE6079B2A2CF325C42DB94

Uniqueness

Uniqueness Score: -1.00%

Function 00C80530 Relevance: 6.0, APIs: 4, Instructions: 23COMMON

Download Yara Rule

APIs

?setDisabled@QWidget@@QAEX_N@Z.QT5WIDGETS(00000001,?,?,00C61B6B), ref: 00C80542
?setDisabled@QWidget@@QAEX_N@Z.QT5WIDGETS(00000001,?,00C61B6B), ref: 00C8054C
?setDisabled@QWidget@@QAEX_N@Z.QT5WIDGETS(00000001,?,00C61B6B), ref: 00C80556
?setDisabled@QWidget@@QAEX_N@Z.QT5WIDGETS(00000001,?,00C61B6B), ref: 00C80560

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: ?setDisabled@Widget@@
String ID:
API String ID: 2934058872-0
Opcode ID: 789d859a2a52d753a4fc29b5328d26fcbc06e9805f430817d1bd4e74a904476a
Instruction ID: 0eaa12b90e8b10cb22b898a88aacf460cc45613c4b28b9f2137d07364d8de142
Opcode Fuzzy Hash: 789d859a2a52d753a4fc29b5328d26fcbc06e9805f430817d1bd4e74a904476a
Instruction Fuzzy Hash: 39E07D32750515ABD208EB54DC51F64B77AAF88754F10415ED6014B6D1DEE3BC93CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00C63370 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 106COMMON

Download Yara Rule

APIs

?_Xlength_error@std@@YAXPBD@Z.MSVCP140(string too long), ref: 00C633E2
memcpy.VCRUNTIME140(?,?,?), ref: 00C63434

Part of subcall function 00C63270: ?_Xout_of_range@std@@YAXPBD@Z.MSVCP140(invalid string position), ref: 00C63289
Part of subcall function 00C63270: ?_Xout_of_range@std@@YAXPBD@Z.MSVCP140(invalid string position), ref: 00C632AC

Strings

string too long, xrefs: 00C633DD

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Xout_of_range@std@@$Xlength_error@std@@memcpy
String ID: string too long
API String ID: 3790025958-2556327735
Opcode ID: a567d4af63a45f09ff3679db260cd617ccd55ae4cacae179a8b01c8709459c36
Instruction ID: 3f01259c9f0e581047b4f0bc93d97c651abb9414d18f2daf13d55a5a199bd5ba
Opcode Fuzzy Hash: a567d4af63a45f09ff3679db260cd617ccd55ae4cacae179a8b01c8709459c36
Instruction Fuzzy Hash: 8931D6323007908BD7329E5C98C4A2BFBE5EF91711B20493EE1D287351CB71DE4687A1

Uniqueness

Uniqueness Score: -1.00%

Function 00C6FCE0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 74COMMON

Download Yara Rule

APIs

?freeData@QMapDataBase@@SAXPAU1@@Z.QT5CORE(?,676E6AEE,?,?,00000000,?,00CB2E8C,000000FF,?,00C76CA7), ref: 00C6FD4B
?freeData@QMapDataBase@@SAXPAU1@@Z.QT5CORE(6B94FA34), ref: 00C6FD8B

Strings

jng, xrefs: 00C6FCF4

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: ?freeBase@@DataData@U1@@
String ID: jng
API String ID: 934178386-1186463058
Opcode ID: 1f46984837467c88312bf289e0c9cff54598f0c67781a2421ae244074775da18
Instruction ID: 7607ec2a4a87a47b5b82bb042fdf2d74117d85c9f2a79a96365527b58cc5c52e
Opcode Fuzzy Hash: 1f46984837467c88312bf289e0c9cff54598f0c67781a2421ae244074775da18
Instruction Fuzzy Hash: D1218E71201605ABDB20DF19EC80B6AB3ADEF45734F25433DE925973A0DB35BD06CA91

Uniqueness

Uniqueness Score: -1.00%

Function 00C6D980 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 69COMMON

Download Yara Rule

APIs

?realloc@QListData@@QAEXH@Z.QT5CORE(00000000,676E6AEE,00000000,6B94FA34,6B94FA34,?,?,00CAEC49), ref: 00C6D9EB

Part of subcall function 00C63AC0: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(676E6AEE,00CB3CFD,00000000,?,00C910DF,00000008), ref: 00C63AF0
Part of subcall function 00C63AC0: ?detach@QListData@@QAEPAUData@1@H@Z.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,6B5136D0,?,?,00CB3CFD), ref: 00C63AFD
Part of subcall function 00C63AC0: ?end@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C63B12
Part of subcall function 00C63AC0: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C63B1B
Part of subcall function 00C63AC0: ??1QString@@QAE@XZ.QT5CORE(00000000), ref: 00C63B65
Part of subcall function 00C63AC0: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(00000000,00000000), ref: 00C63B70

?nextNode@QMapNodeBase@@QBEPBU1@XZ.QT5CORE(00000018,676E6AEE,00000000,6B94FA34,6B94FA34,?,?,00CAEC49), ref: 00C6DA15

Strings

jng, xrefs: 00C6D995

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?begin@$?detach@?dispose@?end@?next?realloc@Base@@Data@1@Data@1@@NodeNode@String@@
String ID: jng
API String ID: 3972531696-1186463058
Opcode ID: d5fa786ebc71153615c57caa80bd0915c34e307796fd48479b4880bee0ff4f45
Instruction ID: 1ea61de7e88ec311adf9b0699dd9eed15394edb797c45b27915e88995bd8db79
Opcode Fuzzy Hash: d5fa786ebc71153615c57caa80bd0915c34e307796fd48479b4880bee0ff4f45
Instruction Fuzzy Hash: CC21C071B04205DFCB28CF49D894B6EB7E9FB85314F08426AE812D7350CB75AD04DB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C691A0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 69COMMON

Download Yara Rule

APIs

?realloc@QListData@@QAEXH@Z.QT5CORE(00000000,676E6AEE,00000000,6B94FA34,6B94FA34,?,?,00CAEC49), ref: 00C6920B

Part of subcall function 00C63AC0: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(676E6AEE,00CB3CFD,00000000,?,00C910DF,00000008), ref: 00C63AF0
Part of subcall function 00C63AC0: ?detach@QListData@@QAEPAUData@1@H@Z.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,6B5136D0,?,?,00CB3CFD), ref: 00C63AFD
Part of subcall function 00C63AC0: ?end@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C63B12
Part of subcall function 00C63AC0: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C63B1B
Part of subcall function 00C63AC0: ??1QString@@QAE@XZ.QT5CORE(00000000), ref: 00C63B65
Part of subcall function 00C63AC0: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(00000000,00000000), ref: 00C63B70

?nextNode@QMapNodeBase@@QBEPBU1@XZ.QT5CORE(00000014,676E6AEE,00000000,6B94FA34,6B94FA34,?,?,00CAEC49), ref: 00C69235

Strings

jng, xrefs: 00C691B5

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?begin@$?detach@?dispose@?end@?next?realloc@Base@@Data@1@Data@1@@NodeNode@String@@
String ID: jng
API String ID: 3972531696-1186463058
Opcode ID: 914f0414e4c7679aaaf8476fd31c93cc92ece86f074cf4aef9b20f999e63a972
Instruction ID: 103234bff4c7903d1bb222846730f3819c9329ad3a424870b5ee3e92944453ba
Opcode Fuzzy Hash: 914f0414e4c7679aaaf8476fd31c93cc92ece86f074cf4aef9b20f999e63a972
Instruction Fuzzy Hash: B321C071604205EFCB28CF49D8E4B6AB7F9FB45324F04426AE912D7351D775AD00CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C73A20 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 63COMMON

Download Yara Rule

APIs

?freeTree@QMapDataBase@@QAEXPAUQMapNodeBase@@H@Z.QT5CORE(CB827015,00000004,676E6AEE,?,00C76CDB,00000000,FEFFFFFC,00CAF9D6,000000FF,?,00C6ECB3,FEFFFFFC,CB827011,676E6AEE,?,?), ref: 00C73A8A
?freeData@QMapDataBase@@SAXPAU1@@Z.QT5CORE(00C76CDB,676E6AEE,?,00C76CDB,00000000,FEFFFFFC,00CAF9D6,000000FF,?,00C6ECB3,FEFFFFFC,CB827011,676E6AEE,?,?,000000FF), ref: 00C73A91

Strings

jng, xrefs: 00C73A34

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Base@@$?freeData$Data@NodeTree@U1@@
String ID: jng
API String ID: 3016228041-1186463058
Opcode ID: 4723add38472df258aaf14c4b39f6072c76f83481fc53bbf7d206315a77c3145
Instruction ID: 25f2588fd33afda93b41c8bd281ac582a551e47de4b5c573b2e9fc0591e66355
Opcode Fuzzy Hash: 4723add38472df258aaf14c4b39f6072c76f83481fc53bbf7d206315a77c3145
Instruction Fuzzy Hash: 4811E772601245ABDB10CF68CC85B5AB768FB05734F24832AED79973D0D731AF04EAA1

Uniqueness

Uniqueness Score: -1.00%

Function 00C64470 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 63COMMON

Download Yara Rule

APIs

?_Xout_of_range@std@@YAXPBD@Z.MSVCP140(invalid string position,?,?,00C632CB,00000000,?), ref: 00C64484

Strings

invalid string position, xrefs: 00C6447F

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Xout_of_range@std@@
String ID: invalid string position
API String ID: 1960685668-1799206989
Opcode ID: 446be8664f05f4878dbe06d2f74c00817aa38b89a8415fdee72296672c82d9bd
Instruction ID: efa88683488089bd70e0ecf839d8ca83d3176a336fbf380972d79a20df0efcbd
Opcode Fuzzy Hash: 446be8664f05f4878dbe06d2f74c00817aa38b89a8415fdee72296672c82d9bd
Instruction Fuzzy Hash: 40118F323042518FD3389E5CE884B96B7E9EBE1711F154A2EE182CB251DBB1D849C7A1

Uniqueness

Uniqueness Score: -1.00%

Function 00CAC0A6 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 60COMMONLIBRARYCODE

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(00000017), ref: 00CAC6A3
___raise_securityfailure.LIBCMT ref: 00CAC78A

Strings

jng, xrefs: 00CAC76B

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: FeaturePresentProcessor___raise_securityfailure
String ID: jng
API String ID: 3761405300-1186463058
Opcode ID: ca0fdc3a062b9352e2b71fd83b7e79cd6ed4d752b5de50a0e3bf85b95fe5ced1
Instruction ID: d408a6cced31472acd3699823c1b8140ebf0ca9d2b7c739f620fa4b325d9236b
Opcode Fuzzy Hash: ca0fdc3a062b9352e2b71fd83b7e79cd6ed4d752b5de50a0e3bf85b95fe5ced1
Instruction Fuzzy Hash: 6C2125F450A30DCAD720EF15EC86B5437E6BB09320F10569AE9048B7B0D3746580FB44

Uniqueness

Uniqueness Score: -1.00%

Function 00C79B50 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 53COMMON

Download Yara Rule

APIs

?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,676E6AEE,?,?,?,00CB032C,000000FF,?,00C76CB4), ref: 00C79BA0
?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(6B94A624), ref: 00C79BC8

Strings

jng, xrefs: 00C79B63

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: ?dispose@Data@1@@Data@@List
String ID: jng
API String ID: 4120539909-1186463058
Opcode ID: 62abd70846a6e2196c8ad85687feab14b5fc754a11569fc2af002f80975d1632
Instruction ID: 1d9f99312bc87ff1ab944ee798bd7103240a5c940911f1a09962e74cd6302296
Opcode Fuzzy Hash: 62abd70846a6e2196c8ad85687feab14b5fc754a11569fc2af002f80975d1632
Instruction Fuzzy Hash: 9811C471500601DBDB20CF2DEC41B59B7A8EF46734F1847AAE824D73D0DB369D05CA90

Uniqueness

Uniqueness Score: -1.00%

Function 00C6EED0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 52COMMON

Download Yara Rule

APIs

?freeTree@QMapDataBase@@QAEXPAUQMapNodeBase@@H@Z.QT5CORE(?,00000004,676E6AEE,?,?,?,00CB5696,000000FF), ref: 00C6EF26
?freeData@QMapDataBase@@SAXPAU1@@Z.QT5CORE(?,676E6AEE,?,?,?,00CB5696,000000FF), ref: 00C6EF2D

Strings

jng, xrefs: 00C6EEE3

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Base@@$?freeData$Data@NodeTree@U1@@
String ID: jng
API String ID: 3016228041-1186463058
Opcode ID: 76e3ab44cefffcc849b008903667c2cb3731d9db0c8f027802fc563b78911e14
Instruction ID: 3c191e882e572c4be671179444551ff0dc45df08e6fee18bc732dc04ba6244dd
Opcode Fuzzy Hash: 76e3ab44cefffcc849b008903667c2cb3731d9db0c8f027802fc563b78911e14
Instruction Fuzzy Hash: CF01D271644604ABD731CF68DC80B6AB7E8EB0A734F14436AF924D73D0DB759905C692

Uniqueness

Uniqueness Score: -1.00%

Function 00C8CE40 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 51COMMON

Download Yara Rule

APIs

new.LIBCMT ref: 00C8CE6F

Part of subcall function 00CAC0B7: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0DE

Part of subcall function 00C8EAA0: new.LIBCMT ref: 00C8EACF
Part of subcall function 00C8EAA0: ?size@QListData@@QBEHXZ.QT5CORE(00000000,?,?,?,?,?,?,?,?,?,?,00000000,00CB35BE,000000FF,?,00C8CE97), ref: 00C8EAE5
Part of subcall function 00C8EAA0: ?size@QListData@@QBEHXZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,00000000,00CB35BE,000000FF,?,00C8CE97,?), ref: 00C8EAF5
Part of subcall function 00C8EAA0: ?at@QListData@@QBEPAPAXH@Z.QT5CORE(00000000,?,?,?,?,?,?,?,?,?,?,00000000,00CB35BE,000000FF,?,00C8CE97), ref: 00C8EB03
Part of subcall function 00C8EAA0: ?size@QListData@@QBEHXZ.QT5CORE(?,?,?,?,?,?,?,?,?,?,00000000,00CB35BE,000000FF,?,00C8CE97,?), ref: 00C8EB19
Part of subcall function 00C8EAA0: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,?,?,?,?,?,?,?,?,?,?,00000000,00CB35BE,000000FF,?,00C8CE97), ref: 00C8EB55
Part of subcall function 00C8EAA0: ?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(6B94A624,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00CB35BE,000000FF), ref: 00C8EB79
Part of subcall function 00C8EAA0: new.LIBCMT ref: 00C8EBA2
Part of subcall function 00C8EAA0: ??0QListWidgetItem@@QAE@PAVQListWidget@@H@Z.QT5WIDGETS(00000000,00000000), ref: 00C8EBBC

?dispose@QListData@@SAXPAUData@1@@Z.QT5CORE(?,?), ref: 00C8CEBE

Strings

jng, xrefs: 00C8CE53

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: List$Data@@$?dispose@?size@Data@1@@$?at@Item@@WidgetWidget@@malloc
String ID: jng
API String ID: 2879291139-1186463058
Opcode ID: 329e1cb640b5ee727ca4e823671790a91e455982c5385090ba0a49b81921b58e
Instruction ID: fb322bd68cdc9d083f34ae2bb7b9687e88173849d8eee0fa78ef1ba1e03b7525
Opcode Fuzzy Hash: 329e1cb640b5ee727ca4e823671790a91e455982c5385090ba0a49b81921b58e
Instruction Fuzzy Hash: A711C2B1904244EBDF18DF68C885BAA7BA8EF05724F04436EF826877C0DB755A04DBA5

Uniqueness

Uniqueness Score: -1.00%

Function 00C95DC0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 49COMMON

Download Yara Rule

APIs

?append@QListData@@QAEPAPAXXZ.QT5CORE(676E6AEE,6BF77020,00000001,?,00C9A340,?), ref: 00C95E21
new.LIBCMT ref: 00C95E32

Part of subcall function 00C97230: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(676E6AEE,6BF77020,00000001,?,6BF77020,00000001,?,00C9A340,?), ref: 00C97260
Part of subcall function 00C97230: ?detach_grow@QListData@@QAEPAUData@1@PAHH@Z.QT5CORE(?,?), ref: 00C97271
Part of subcall function 00C97230: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C97286
Part of subcall function 00C97230: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(?), ref: 00C97295
Part of subcall function 00C97230: ?end@QListData@@QBEPAPAXXZ.QT5CORE(?,00000000), ref: 00C972B3
Part of subcall function 00C97230: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C972BC
Part of subcall function 00C97230: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000,00000000), ref: 00C972FD

Strings

jng, xrefs: 00C95DD7

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?begin@$?append@?detach_grow@?end@Data@1@
String ID: jng
API String ID: 1475563920-1186463058
Opcode ID: 7c79dba6adf9ed7cd9d9f19f2de3dc5340fc3865ab1d12acc9fa97632502bb19
Instruction ID: bc7f6e78f5123771626d4a018983f86fd26aea9579e7de8e701057324a2dc173
Opcode Fuzzy Hash: 7c79dba6adf9ed7cd9d9f19f2de3dc5340fc3865ab1d12acc9fa97632502bb19
Instruction Fuzzy Hash: 4F116671D04784DFCB00CF68C805B9AB7B4FB15718F10436AF8109B391D732AA80C790

Uniqueness

Uniqueness Score: -1.00%

Function 00C631D0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 47COMMON

Download Yara Rule

APIs

?append@QListData@@QAEPAPAXXZ.QT5CORE(676E6AEE,00CBC634,?,6B5136D0), ref: 00C63231
new.LIBCMT ref: 00C63242

Part of subcall function 00C63F60: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(676E6AEE,00CBC634,?,6B5136D0,00CBC634,?,6B5136D0), ref: 00C63F90
Part of subcall function 00C63F60: ?detach_grow@QListData@@QAEPAUData@1@PAHH@Z.QT5CORE(?,00CBC634,?,6B5136D0,00CBC634,?,6B5136D0), ref: 00C63FA1
Part of subcall function 00C63F60: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000,?,6B5136D0,00CBC634), ref: 00C63FB6
Part of subcall function 00C63F60: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(?,?,6B5136D0,00CBC634), ref: 00C63FC5
Part of subcall function 00C63F60: ?end@QListData@@QBEPAPAXXZ.QT5CORE(?,00000000,?,6B5136D0,00CBC634), ref: 00C63FE3
Part of subcall function 00C63F60: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000,?,6B5136D0,00CBC634), ref: 00C63FEC
Part of subcall function 00C63F60: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000,00000000,?,6B5136D0,00CBC634), ref: 00C6402D

Strings

jng, xrefs: 00C631E7

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?begin@$?append@?detach_grow@?end@Data@1@
String ID: jng
API String ID: 1475563920-1186463058
Opcode ID: 056229ac8b3e7ed4b3a3e2163393028203e774a2666a407d86d1cbac7d63371b
Instruction ID: f2ee96ba2a9c90a8a14ade0789cb11210b07f402ee5f9d320629500dcc955300
Opcode Fuzzy Hash: 056229ac8b3e7ed4b3a3e2163393028203e774a2666a407d86d1cbac7d63371b
Instruction Fuzzy Hash: 6D01F572A04248EBDB20DF69C881B5EB7F4EB15720F10022AF911D7390D7715E04C791

Uniqueness

Uniqueness Score: -1.00%

Function 00C6F3B0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 47COMMON

Download Yara Rule

APIs

?append@QListData@@QAEPAPAXXZ.QT5CORE(676E6AEE,0000000100000000,000000010000000A,FFFFFFF6,00C783E4,?), ref: 00C6F411
new.LIBCMT ref: 00C6F422

Part of subcall function 00C6FF00: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(676E6AEE,0000000100000000,000000010000000A,FFFFFFF6,0000000100000000,000000010000000A,FFFFFFF6,00C783E4,?), ref: 00C6FF30
Part of subcall function 00C6FF00: ?detach_grow@QListData@@QAEPAUData@1@PAHH@Z.QT5CORE(?,?), ref: 00C6FF41
Part of subcall function 00C6FF00: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C6FF56
Part of subcall function 00C6FF00: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(?), ref: 00C6FF65
Part of subcall function 00C6FF00: ?end@QListData@@QBEPAPAXXZ.QT5CORE(?,00000000), ref: 00C6FF83
Part of subcall function 00C6FF00: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000), ref: 00C6FF8C
Part of subcall function 00C6FF00: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000,00000000), ref: 00C6FFCD

Strings

jng, xrefs: 00C6F3C7

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?begin@$?append@?detach_grow@?end@Data@1@
String ID: jng
API String ID: 1475563920-1186463058
Opcode ID: 7267248d941c471e1dc3310fe10d94a5128a368990ac63a13df5052427503626
Instruction ID: 9a5c13aa42f6a1f526f32e5cfd7c36914002eea89fa169b0c2a728984066a085
Opcode Fuzzy Hash: 7267248d941c471e1dc3310fe10d94a5128a368990ac63a13df5052427503626
Instruction Fuzzy Hash: EC01D271A00608EFCB10DF68E881B6AB7B8FB16724F10427AF81097790DB315900D791

Uniqueness

Uniqueness Score: -1.00%

Function 00C95D20 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 47COMMON

Download Yara Rule

APIs

?append@QListData@@QAEPAPAXXZ.QT5CORE(676E6AEE,?,?,?,00C99E5E,?), ref: 00C95D81
new.LIBCMT ref: 00C95D92

Part of subcall function 00C970E0: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(676E6AEE,?,?,?,?,?,?,00C99E5E,?), ref: 00C97110
Part of subcall function 00C970E0: ?detach_grow@QListData@@QAEPAUData@1@PAHH@Z.QT5CORE(?,?,?,?,?,?,00C99E5E,?), ref: 00C97121
Part of subcall function 00C970E0: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000,?,?,?), ref: 00C97136
Part of subcall function 00C970E0: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(?,?,?,?), ref: 00C97145
Part of subcall function 00C970E0: ?end@QListData@@QBEPAPAXXZ.QT5CORE(?,00000000,?,?,?), ref: 00C97163
Part of subcall function 00C970E0: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000,?,?,?), ref: 00C9716C
Part of subcall function 00C970E0: ?begin@QListData@@QBEPAPAXXZ.QT5CORE(00000000,00000000,?,?,?), ref: 00C971AD

Strings

jng, xrefs: 00C95D37

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Data@@List$?begin@$?append@?detach_grow@?end@Data@1@
String ID: jng
API String ID: 1475563920-1186463058
Opcode ID: 4650cd5749be369d204148a279c4fe2a02dc2c46328c6af06cbcccd909ccd222
Instruction ID: 6f534424ff257e368c534b443e4e14fc20c51c820c5c55f1373883065f0d35b0
Opcode Fuzzy Hash: 4650cd5749be369d204148a279c4fe2a02dc2c46328c6af06cbcccd909ccd222
Instruction Fuzzy Hash: 4301F172A04648EFCB11DFA8D949B9AB7B8FB15724F10436AF91097390D7316A44CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00C9B000 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 42COMMON

Download Yara Rule

APIs

new.LIBCMT ref: 00C9B044

Part of subcall function 00CAC0B7: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,00C9BC85,0000001C,676E6AEE,?,?,?,00000000,00CB556F,000000FF,?,00C61199), ref: 00CAC0DE

??0QColor@@QAE@ABV0@@Z.QT5GUI(-00000074,00000000), ref: 00C9B050

Strings

jng, xrefs: 00C9B017

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Color@@V0@@malloc
String ID: jng
API String ID: 1894738749-1186463058
Opcode ID: dc78b5e668a1941b66c290592d0dc23de0638c4c8b919bbdeb08262140690c45
Instruction ID: 59d57a5b169723f7db3da0b08fe7c5e7e6e0b95cce15ce0636ead610922ae913
Opcode Fuzzy Hash: dc78b5e668a1941b66c290592d0dc23de0638c4c8b919bbdeb08262140690c45
Instruction Fuzzy Hash: 8801A2B2D04208EBDB10DF44D941B9EFBF8FB18720F10023AEC1593340D7366D048A91

Uniqueness

Uniqueness Score: -1.00%

Function 00C62140 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 42COMMON

Download Yara Rule

APIs

?freeTree@QMapDataBase@@QAEXPAUQMapNodeBase@@H@Z.QT5CORE(?,00000004,676E6AEE,?,?,00CAEE50,000000FF), ref: 00C62193
?freeData@QMapDataBase@@SAXPAU1@@Z.QT5CORE(?,676E6AEE,?,?,00CAEE50,000000FF), ref: 00C6219A

Strings

jng, xrefs: 00C62152

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Base@@$?freeData$Data@NodeTree@U1@@
String ID: jng
API String ID: 3016228041-1186463058
Opcode ID: b20f54d15cc2f0bc201a94b3310c8a7f325ef70d369ec8b7b9dfe0218dba470e
Instruction ID: 3943b54c0173bb90c8ff2f577080ee2ab431c6ed08c6f6c6c571e82a44d3aa88
Opcode Fuzzy Hash: b20f54d15cc2f0bc201a94b3310c8a7f325ef70d369ec8b7b9dfe0218dba470e
Instruction Fuzzy Hash: F1012671644A009FDB24CF28CC40B59B3A8EF06B30F104359E935837E0CB35AD01CA81

Uniqueness

Uniqueness Score: -1.00%

Function 00C8C100 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 42COMMON

Download Yara Rule

APIs

?freeTree@QMapDataBase@@QAEXPAUQMapNodeBase@@H@Z.QT5CORE(?,00000004,676E6AEE,?,?,00CB2E16,000000FF), ref: 00C8C153
?freeData@QMapDataBase@@SAXPAU1@@Z.QT5CORE(?,676E6AEE,?,?,00CB2E16,000000FF), ref: 00C8C15A

Strings

jng, xrefs: 00C8C112

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Base@@$?freeData$Data@NodeTree@U1@@
String ID: jng
API String ID: 3016228041-1186463058
Opcode ID: fe2832448a151c14f7fedb27a8377e30288d12fc521b070a14f100ae3b58e835
Instruction ID: 5f139b47399ae8e6f1569b74f6f30fc3d582051d8d3c71a0e189329199076c5a
Opcode Fuzzy Hash: fe2832448a151c14f7fedb27a8377e30288d12fc521b070a14f100ae3b58e835
Instruction Fuzzy Hash: C701AD71644A049FDB10DF28DC84B5AB3A8EB09B38F1043A9E825C73D0DB35A905CBA5

Uniqueness

Uniqueness Score: -1.00%

Function 00C6E410 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 41COMMON

Download Yara Rule

APIs

?freeTree@QMapDataBase@@QAEXPAUQMapNodeBase@@H@Z.QT5CORE(?,00000004,676E6AEE,?,?,00CAEE50,000000FF), ref: 00C6E45C
?freeData@QMapDataBase@@SAXPAU1@@Z.QT5CORE(?,676E6AEE,?,?,00CAEE50,000000FF), ref: 00C6E463

Strings

jng, xrefs: 00C6E422

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: Base@@$?freeData$Data@NodeTree@U1@@
String ID: jng
API String ID: 3016228041-1186463058
Opcode ID: 729dcba40c0cc041f3c91700fa26a3ec8293a1e06dc4b79820391e414ad0ed2d
Instruction ID: e8c07a444a34a85022256de5b850f1ac417e93bb6d01c6ddd140474d1acea4ad
Opcode Fuzzy Hash: 729dcba40c0cc041f3c91700fa26a3ec8293a1e06dc4b79820391e414ad0ed2d
Instruction Fuzzy Hash: F201D171640A049FDB20CF68DC40B2673ACEB06B34F14436AE835C77E0DF35A904CA95

Uniqueness

Uniqueness Score: -1.00%

Function 00C62460 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 34COMMON

Download Yara Rule

APIs

?fromUtf8@QString@@SA?AV1@PBDH@Z.QT5CORE(?,?,000000FF,676E6AEE,00CB35BE,?,?,00CAD27A,000000FF), ref: 00C6249B
?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE ref: 00C624B7

Strings

jng, xrefs: 00C62473

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$?append@?fromUtf8@V1@@
String ID: jng
API String ID: 3775357007-1186463058
Opcode ID: ab7a5283bcf709ac7a60f94ee6a24c62acc8224bee09ac2a7a805eef43264fcd
Instruction ID: 5c5bbdf016fa2926b95dbb194eb0f7c1f33cdc174b14078dd8fa5cee3fb83439
Opcode Fuzzy Hash: ab7a5283bcf709ac7a60f94ee6a24c62acc8224bee09ac2a7a805eef43264fcd
Instruction Fuzzy Hash: E5F04F71904618EFDB008F88DC04BAEBBB8FB09724F00435AFC2593790D7B55A04CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00C62360 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 31COMMON

Download Yara Rule

APIs

??0QString@@QAE@ABV0@@Z.QT5CORE(?,676E6AEE,00000000,?,00000001,00CAD27A,000000FF,?,00C71141,00000001,00000000,00000000), ref: 00C62393
?append@QString@@QAEAAV1@ABV1@@Z.QT5CORE(00000000,?,00000001,00CAD27A,000000FF,?,00C71141,00000001,00000000,00000000), ref: 00C623AC

Strings

jng, xrefs: 00C62373

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$?append@V0@@V1@@
String ID: jng
API String ID: 1661748999-1186463058
Opcode ID: aaa7ebf920ab1f368a8d60aa41f673c5dff8f4de802b3ffc0c99dec627fe3dcc
Instruction ID: cd0afd1b01152af4c892aa3cafaa387a4b1d462360995d9fd5e64c3eff1fe743
Opcode Fuzzy Hash: aaa7ebf920ab1f368a8d60aa41f673c5dff8f4de802b3ffc0c99dec627fe3dcc
Instruction Fuzzy Hash: EAF03075604658EFDB058F44DC04BAEBBB8FB08724F00465AFC1593790DBB55904CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00C88DC0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 25COMMON

Download Yara Rule

APIs

?setText@QAbstractButton@@QAEXABVQString@@@Z.QT5WIDGETS(?,676E6AEE,00000000,00CB2639,000000FF), ref: 00C88DF6
??1QString@@QAE@XZ.QT5CORE ref: 00C88DFF

Strings

jng, xrefs: 00C88DD1

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: ?setAbstractButton@@String@@String@@@Text@
String ID: jng
API String ID: 1070691913-1186463058
Opcode ID: 1e0019b553b596881ba19db9b732e12b02936b37ddecebf01885b43735911e6d
Instruction ID: bee77e781ddfdb105d0470bdcb706d66db024adf09af20cedd2ead850c0ad04d
Opcode Fuzzy Hash: 1e0019b553b596881ba19db9b732e12b02936b37ddecebf01885b43735911e6d
Instruction Fuzzy Hash: 9CF0307654454DEFCB14DF54E844F99BBB8FB18724F10827AE81AC7790DB35A90ACB40

Uniqueness

Uniqueness Score: -1.00%

Function 00C69260 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 23COMMON

Download Yara Rule

APIs

?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(linear,00000006), ref: 00C6926F

Part of subcall function 00C74430: ??8QString@@QBE_NPBD@Z.QT5CORE(polar,676E6AEE,?,00000000,00CB4B19,000000FF), ref: 00C74464
Part of subcall function 00C74430: ?setChecked@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(00000001,?,00000000,00CB4B19,000000FF), ref: 00C7447B
Part of subcall function 00C74430: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00CB4B19,000000FF), ref: 00C74484

?setChecked@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(00000001), ref: 00C69293

Strings

linear, xrefs: 00C6926A

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$?setAbstractButton@@Checked@$?fromArrayAscii_helper@Data@Typed
String ID: linear
API String ID: 3150762166-232700083
Opcode ID: 340bdab9352ed7ce89006992eff6a33bcb7b531a51aee56b50de4b99fc3f3b18
Instruction ID: f660b4999013bab7157f34552e7b5256fb5f9ce751250c86b3807baedc5ee907
Opcode Fuzzy Hash: 340bdab9352ed7ce89006992eff6a33bcb7b531a51aee56b50de4b99fc3f3b18
Instruction Fuzzy Hash: 4CE048757102009BD2189F15FC5AF963766EBC5715F14023CE54A4B3C1DAA22C56C7A1

Uniqueness

Uniqueness Score: -1.00%

Function 00C69DE0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 23COMMON

Download Yara Rule

APIs

?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z.QT5CORE(polar,00000005), ref: 00C69DEF

Part of subcall function 00C74430: ??8QString@@QBE_NPBD@Z.QT5CORE(polar,676E6AEE,?,00000000,00CB4B19,000000FF), ref: 00C74464
Part of subcall function 00C74430: ?setChecked@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(00000001,?,00000000,00CB4B19,000000FF), ref: 00C7447B
Part of subcall function 00C74430: ??1QString@@QAE@XZ.QT5CORE(?,00000000,00CB4B19,000000FF), ref: 00C74484

?setChecked@QAbstractButton@@QAEX_N@Z.QT5WIDGETS(00000001), ref: 00C69E13

Strings

polar, xrefs: 00C69DEA

Memory Dump Source

Source File: 00000007.00000002.3323327198.0000000000C61000.00000020.00000001.01000000.00000008.sdmp, Offset: 00C60000, based on PE: true

Associated: 00000007.00000002.3323133404.0000000000C60000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000CB8000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3323632347.0000000000E3B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3324915147.0000000000F37000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000007.00000002.3325034231.0000000000F39000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c60000_Farnsworth-Munsell 100 Hue Test.jbxd

Similarity

API ID: String@@$?setAbstractButton@@Checked@$?fromArrayAscii_helper@Data@Typed
String ID: polar
API String ID: 3150762166-3751118901
Opcode ID: 28df0f789253b686f4c7fd4e9ca31e25a95c705bb80db9c1dd83facd8ab3e66b
Instruction ID: bc95b7cc8c07883025993624a169e5c6c55b607a0e5b9984ea25d5efb53686c6
Opcode Fuzzy Hash: 28df0f789253b686f4c7fd4e9ca31e25a95c705bb80db9c1dd83facd8ab3e66b
Instruction Fuzzy Hash: 2CE04875710600ABD2189F15EC5EF963776EBC5715F14023CE54A4B3C1DEB22C46CBA1

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://downloads.xrite.com/downloads/software/FM100_Scoring_SW/v4.0.7/FM100_HueTest_32-bit_v407.exe

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Farnsworth-Munsell 100 Hue Test.exe (copy)

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm0001.htm (copy)

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm00c1.htm (copy)

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm043d.htm (copy)

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm05rb.htm (copy)

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm0bdx.htm (copy)

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm0f1q.htm (copy)

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm0j5b.htm (copy)

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm0llx.htm (copy)

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm120e.htm (copy)

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm1nug.htm (copy)

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm1oxg.htm (copy)

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm1xf2.htm (copy)

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm1zg9.htm (copy)

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm23fl.htm (copy)

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm26k5.htm (copy)

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm29bn.htm (copy)

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm2bco.htm (copy)

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm2k85.htm (copy)

C:\Program Files (x86)\Farnsworth-Munsell 100 Hue Test\Help\English\html\fm2kms.htm (copy)

Windows Analysis Report
https://downloads.xrite.com/downloads/software/FM100_Scoring_SW/v4.0.7/FM100_HueTest_32-bit_v407.exe