Windows Analysis Report
https://ortelia.com/download-ortelia-curator/

Overview

General Information

Sample URL: https://ortelia.com/download-ortelia-curator/
Analysis ID: 1431415
Infos:

Detection

Havoc
Score: 52
Range: 0 - 100
Whitelisted: false
Confidence: 100%

Signatures

Yara detected Havoc
Yara detected Generic Downloader
Creates a process in suspended mode (likely to inject code)
Drops PE files
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
Found dropped PE file which has not been started or loaded
May sleep (evasive loops) to hinder dynamic analysis
Queries the volume information (name, serial number etc) of a device
Queries time zone information
Stores files to the Windows start menu directory

Classification

Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\AccentBeamShaper.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\AccentBeamSpot.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\AstralAxial18-34Zoomspot.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\AstralAxial22-44Zoomspot.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\Aureal_26_50_BeamShaper.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\Aureal_FrescoFlood.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\ellipsoidalFixedFL.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\ellipsoidalZoom.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\FrescoLEDWallWasher.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\fresnel.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\LEDWallWasher.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\PL1LEDLuminaire.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\PL1_20_50_Beam.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\PL3_NarrowBeam.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\PL3_WideBeamLED.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\scoop.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\SeleconDisplayLEDProfile.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\SeleconDisplayProfile_15_35.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\SeleconDisplayProfile_25_50.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\SeleconWingCDM.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\SeleconWingLinear.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\SeleconWingTuneable.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Frames
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Frames\Deep White.jpg
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Frames\Deep White.json
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Frames\Ornate 1.jpg
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Frames\Ornate 1.json
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Frames\Ornate 2.png
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Frames\Ornate 2.json
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Frames\Rustic Wood.jpg
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Frames\Rustic Wood.json
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Frames\Simple Maple.jpg
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Frames\Simple Maple.json
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Frames\Simple Oak.jpg
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Frames\Simple Oak.json
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\EmbedRuntime
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\EmbedRuntime\mono-2.0-bdwgc.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\EmbedRuntime\MonoPosixHelper.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\2.0
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\2.0\Browsers
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\2.0\Browsers\Compat.browser
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\2.0\DefaultWsdlHelpGenerator.aspx
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\2.0\machine.config
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\2.0\settings.map
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\2.0\web.config
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\4.0
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\4.0\Browsers
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\4.0\Browsers\Compat.browser
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\4.0\DefaultWsdlHelpGenerator.aspx
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\4.0\machine.config
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\4.0\settings.map
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\4.0\web.config
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\4.5
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\4.5\Browsers
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\4.5\Browsers\Compat.browser
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\4.5\DefaultWsdlHelpGenerator.aspx
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\4.5\machine.config
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\4.5\settings.map
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\4.5\web.config
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\browscap.ini
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\config
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\mconfig
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\mconfig\config.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator.exe
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\addons
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\addons\blank.jpg
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\addons\freeimage-license.txt
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\addons\FFmpeg
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\addons\FFmpeg\blank.jpg
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\addons\FFmpeg\ffmpeg-20160530-git-d74cc61.tar.xz
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\addons\FFmpeg\ffmpeg.exe
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\addons\pdf
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\addons\pdf\elevation.css
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\addons\pdf\source
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\addons\pdf\source\libwkhtmltox-0.11.0_rc1.zip
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\addons\pdf\wkhtmltopdf.exe
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\app.info
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\boot.config
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\globalgamemanagers
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\globalgamemanagers.assets
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\level0
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\level1
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\level2
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\level3
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Accessibility.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\AGM.EdgeDetection.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Assembly-CSharp-firstpass.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Assembly-CSharp.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Autodesk.Fbx.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\BakeryRuntimeAssembly.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Byn.Awrtc.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Byn.Awrtc.Native.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\CTCommon.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\FreeImageNET.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\I18N.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\I18N.West.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\ICSharpCode.SharpZipLib.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Mono.Data.Sqlite.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Mono.Posix.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Mono.Security.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Mono.WebBrowser.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\MoodkieSecurity.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\mscorlib.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\netstandard.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Ookii.Dialogs.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Photon3Unity3D.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\PhotonChat.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\PhotonRealtime.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\PhotonUnityNetworking.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\PhotonUnityNetworking.Utilities.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\PhotonWebSocket.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\PLUSManaged.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\PLUSManaged.XmlSerializers.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.ComponentModel.Composition.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.ComponentModel.DataAnnotations.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Configuration.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Core.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Data.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Design.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Diagnostics.StackTrace.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Drawing.Design.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Drawing.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.EnterpriseServices.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Globalization.Extensions.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.IO.Compression.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.IO.Compression.FileSystem.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Net.Http.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Numerics.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Runtime.Serialization.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Runtime.Serialization.Formatters.Soap.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Runtime.Serialization.Xml.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Security.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.ServiceModel.Internals.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Transactions.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Web.ApplicationServices.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Web.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Web.Services.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Windows.Forms.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Xml.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Xml.Linq.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Xml.XPath.XDocument.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.Analytics.DataPrivacy.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.Formats.Fbx.Runtime.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.Postprocessing.Runtime.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.ProBuilder.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.ProBuilder.KdTree.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.ProBuilder.Poly2Tri.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.ProBuilder.Stl.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.Recorder.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.Recorder.Base.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.ScriptableBuildPipeline.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.TextMeshPro.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.Timeline.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.AccessibilityModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.Advertisements.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.AIModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.AndroidJNIModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.AnimationModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ARModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.AssetBundleModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.AudioModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ClothModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ClusterInputModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ClusterRendererModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.CoreModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.CrashReportingModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.DirectorModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.DSPGraphModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.GameCenterModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.GridModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.HotReloadModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ImageConversionModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.IMGUIModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.InputLegacyModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.InputModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.JSONSerializeModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.LouserzationModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.Monetization.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ParticleSystemModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.PerformanceReportingModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.Physics2DModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.PhysicsModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ProfilerModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.Purchasing.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ScreenCaptureModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.SharedInternalsModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.SpatialTracking.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.SpriteMaskModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.SpriteShapeModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.StreamingModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.SubstanceModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.SubsystemsModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.TerrainModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.TerrainPhysicsModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.TextCoreModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.TextRenderingModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.TilemapModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.TLSModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UI.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UIElementsModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UIModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UmbraModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UNETModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityAnalyticsModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityConnectModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityTestProtocolModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityWebRequestAssetBundleModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityWebRequestAudioModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityWebRequestModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityWebRequestTextureModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityWebRequestWWWModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.VehiclesModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.VFXModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.VideoModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.VRModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.WindModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.XR.LegacyInputHelpers.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.XRModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Vectrosity.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\WebRtcCSharp.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\wrtc.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\assimp.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\FreeImage.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\libbrotli.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\libfastlz.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\liblz4.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\liblzma.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\libzipw.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\ProResToolbox.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\ProResWrapper.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\UnityFbxSdkNative.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\webrtccsharpwrap.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Resources
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Resources\unity default resources
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Resources\unity_builtin_extra
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\resources.assets
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\resources.assets.resS
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\sharedassets0.assets
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\sharedassets0.assets.resS
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\sharedassets0.resource
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\sharedassets1.assets
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\sharedassets1.assets.resS
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\sharedassets2.assets
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\sharedassets2.assets.resS
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\sharedassets3.assets
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Spaces
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Spaces\Default.ocs
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Exh
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Exh\OrteliaDemo.exh
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\UnityCrashHandler64.exe
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\vc_redist.x64.exe
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\UnityPlayer.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Ortelia Curator.url
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\uninst.exe
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\addons\freeimage-license.txt
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe File created: C:\Users\user\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\1028\license.rtf
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe File created: C:\Users\user\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\1029\license.rtf
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe File created: C:\Users\user\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\1031\license.rtf
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe File created: C:\Users\user\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\1036\license.rtf
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe File created: C:\Users\user\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\1040\license.rtf
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe File created: C:\Users\user\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\1041\license.rtf
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe File created: C:\Users\user\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\1042\license.rtf
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe File created: C:\Users\user\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\1045\license.rtf
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe File created: C:\Users\user\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\1046\license.rtf
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe File created: C:\Users\user\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\1049\license.rtf
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe File created: C:\Users\user\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\1055\license.rtf
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe File created: C:\Users\user\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\2052\license.rtf
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe File created: C:\Users\user\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\3082\license.rtf
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe File created: C:\Users\user\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\license.rtf
Source: unknown HTTPS traffic detected: 23.46.188.128:443 -> 192.168.2.16:49741 version: TLS 1.2
Source: unknown HTTPS traffic detected: 23.46.188.128:443 -> 192.168.2.16:49745 version: TLS 1.2
Source: unknown HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49749 version: TLS 1.2

Networking
barindex
Yara detected Generic Downloader
Source: Yara match File source: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.dll, type: DROPPED
Source: Yara match File source: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.dll, type: DROPPED
Source: Yara match File source: 00000013.00000002.2623375955.000002BA62DC0000.00000002.00000001.00040000.00000019.sdmp, type: MEMORY
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: global traffic DNS traffic detected: DNS query: ortelia.com
Source: global traffic DNS traffic detected: DNS query: d1f8f9xcsvx3ha.cloudfront.net
Source: global traffic DNS traffic detected: DNS query: s.w.org
Source: global traffic DNS traffic detected: DNS query: www.google.com
Source: global traffic DNS traffic detected: DNS query: analytics.google.com
Source: global traffic DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: unknown Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown HTTPS traffic detected: 23.46.188.128:443 -> 192.168.2.16:49741 version: TLS 1.2
Source: unknown HTTPS traffic detected: 23.46.188.128:443 -> 192.168.2.16:49745 version: TLS 1.2
Source: unknown HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49749 version: TLS 1.2
Source: classification engine Classification label: mal52.troj.win@27/333@16/136
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Users\user\AppData\Local\Temp\nsy88C2.tmp
Source: C:\Users\user\Downloads\CuratorSetup.exe File read: C:\Users\desktop.ini
Source: C:\Users\user\Downloads\CuratorSetup.exe Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://ortelia.com/download-ortelia-curator/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1952,i,16433353149473485546,11441211816697710933,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1952,i,16433353149473485546,11441211816697710933,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4324 --field-trial-handle=1952,i,16433353149473485546,11441211816697710933,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4324 --field-trial-handle=1952,i,16433353149473485546,11441211816697710933,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Users\user\Downloads\CuratorSetup.exe "C:\Users\user\Downloads\CuratorSetup.exe"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Users\user\Downloads\CuratorSetup.exe "C:\Users\user\Downloads\CuratorSetup.exe"
Source: C:\Users\user\Downloads\CuratorSetup.exe Process created: C:\Program Files\Ortelia Curator\vc_redist.x64.exe "C:\Program Files\Ortelia Curator\vc_redist.x64.exe" /silent
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Process created: C:\Program Files\Ortelia Curator\vc_redist.x64.exe "C:\Program Files\Ortelia Curator\vc_redist.x64.exe" /silent -burn.unelevated BurnPipe.{43283AE4-5BB8-44FA-9263-CFC3EA715B84} {2CADAC6A-0855-4F21-A415-28FC270B2FA9} 8188
Source: C:\Users\user\Downloads\CuratorSetup.exe Process created: C:\Program Files\Ortelia Curator\vc_redist.x64.exe "C:\Program Files\Ortelia Curator\vc_redist.x64.exe" /silent
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Process created: C:\Program Files\Ortelia Curator\vc_redist.x64.exe "C:\Program Files\Ortelia Curator\vc_redist.x64.exe" /silent -burn.unelevated BurnPipe.{43283AE4-5BB8-44FA-9263-CFC3EA715B84} {2CADAC6A-0855-4F21-A415-28FC270B2FA9} 8188
Source: C:\Users\user\Downloads\CuratorSetup.exe Process created: C:\Program Files\Ortelia Curator\OrteliaCurator.exe "C:\Program Files\Ortelia Curator\OrteliaCurator.exe"
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process created: C:\Program Files\Ortelia Curator\UnityCrashHandler64.exe "C:\Program Files\Ortelia Curator\UnityCrashHandler64.exe" --attach 7600 2993575759872
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Users\user\Downloads\CuratorSetup.exe Process created: C:\Program Files\Ortelia Curator\OrteliaCurator.exe "C:\Program Files\Ortelia Curator\OrteliaCurator.exe"
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process created: C:\Program Files\Ortelia Curator\UnityCrashHandler64.exe "C:\Program Files\Ortelia Curator\UnityCrashHandler64.exe" --attach 7600 2993575759872
Source: C:\Users\user\Downloads\CuratorSetup.exe Section loaded: uxtheme.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Section loaded: userenv.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Section loaded: apphelp.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Section loaded: propsys.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Section loaded: dwmapi.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Section loaded: cryptbase.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Section loaded: oleacc.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Section loaded: version.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Section loaded: shfolder.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Section loaded: kernel.appcore.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Section loaded: windows.storage.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Section loaded: wldp.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Section loaded: profapi.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Section loaded: riched20.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Section loaded: usp10.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Section loaded: msls31.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Section loaded: textinputframework.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Section loaded: coreuicomponents.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Section loaded: coremessaging.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Section loaded: ntmarta.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Section loaded: wintypes.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Section loaded: wintypes.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Section loaded: wintypes.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Section loaded: textshaping.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Section loaded: linkinfo.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Section loaded: ntshrui.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Section loaded: sspicli.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Section loaded: srvcli.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Section loaded: cscapi.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: cabinet.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: msi.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: wininet.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: version.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: msasn1.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: kernel.appcore.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: msxml3.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: windows.storage.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: wldp.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: profapi.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: apphelp.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: uxtheme.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: textinputframework.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: coreuicomponents.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: coremessaging.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: ntmarta.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: wintypes.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: wintypes.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: wintypes.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: srclient.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: spp.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: powrprof.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: vssapi.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: vsstrace.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: umpdc.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: cabinet.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: msi.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: wininet.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: version.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: msasn1.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: kernel.appcore.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: msxml3.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: windows.storage.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: wldp.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: profapi.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: feclient.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: iertutil.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: uxtheme.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: textinputframework.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: coreuicomponents.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: coremessaging.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: ntmarta.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: wintypes.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: wintypes.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: wintypes.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: windowscodecs.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: explorerframe.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: riched20.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: usp10.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: msls31.dll
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Section loaded: textshaping.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Section loaded: netutils.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: unityplayer.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: version.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: opengl32.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: winmm.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: winhttp.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: hid.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: glu32.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: apphelp.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: kernel.appcore.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: uxtheme.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: windows.storage.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: wldp.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: profapi.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: mswsock.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: d3d11.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: dxgi.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: resourcepolicyclient.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: d3d10warp.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: dxcore.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: wbemcomn.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: amsi.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: userenv.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: mmdevapi.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: devobj.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: xinput1_3.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: xinput9_1_0.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: dcomp.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: dwmapi.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: textinputframework.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: coreuicomponents.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: coremessaging.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: ntmarta.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: wintypes.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: wintypes.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: wintypes.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: cryptsp.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: rsaenh.dll
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Section loaded: cryptbase.dll
Source: C:\Program Files\Ortelia Curator\UnityCrashHandler64.exe Section loaded: dbghelp.dll
Source: C:\Program Files\Ortelia Curator\UnityCrashHandler64.exe Section loaded: wininet.dll
Source: C:\Program Files\Ortelia Curator\UnityCrashHandler64.exe Section loaded: version.dll
Source: C:\Program Files\Ortelia Curator\UnityCrashHandler64.exe Section loaded: kernel.appcore.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32
Source: C:\Users\user\Downloads\CuratorSetup.exe File written: C:\Users\user\AppData\Local\Temp\nsu8A79.tmp\ioSpecial.ini
Source: Window Recorder Window detected: More than 3 window changes detected
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\AccentBeamShaper.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\AccentBeamSpot.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\AstralAxial18-34Zoomspot.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\AstralAxial22-44Zoomspot.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\Aureal_26_50_BeamShaper.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\Aureal_FrescoFlood.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\ellipsoidalFixedFL.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\ellipsoidalZoom.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\FrescoLEDWallWasher.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\fresnel.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\LEDWallWasher.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\PL1LEDLuminaire.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\PL1_20_50_Beam.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\PL3_NarrowBeam.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\PL3_WideBeamLED.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\scoop.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\SeleconDisplayLEDProfile.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\SeleconDisplayProfile_15_35.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\SeleconDisplayProfile_25_50.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\SeleconWingCDM.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\SeleconWingLinear.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Lights\SeleconWingTuneable.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Frames
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Frames\Deep White.jpg
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Frames\Deep White.json
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Frames\Ornate 1.jpg
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Frames\Ornate 1.json
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Frames\Ornate 2.png
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Frames\Ornate 2.json
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Frames\Rustic Wood.jpg
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Frames\Rustic Wood.json
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Frames\Simple Maple.jpg
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Frames\Simple Maple.json
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Frames\Simple Oak.jpg
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Frames\Simple Oak.json
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\EmbedRuntime
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\EmbedRuntime\mono-2.0-bdwgc.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\EmbedRuntime\MonoPosixHelper.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\2.0
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\2.0\Browsers
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\2.0\Browsers\Compat.browser
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\2.0\DefaultWsdlHelpGenerator.aspx
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\2.0\machine.config
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\2.0\settings.map
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\2.0\web.config
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\4.0
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\4.0\Browsers
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\4.0\Browsers\Compat.browser
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\4.0\DefaultWsdlHelpGenerator.aspx
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\4.0\machine.config
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\4.0\settings.map
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\4.0\web.config
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\4.5
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\4.5\Browsers
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\4.5\Browsers\Compat.browser
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\4.5\DefaultWsdlHelpGenerator.aspx
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\4.5\machine.config
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\4.5\settings.map
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\4.5\web.config
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\browscap.ini
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\config
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\mconfig
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\etc\mono\mconfig\config.xml
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator.exe
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\addons
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\addons\blank.jpg
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\addons\freeimage-license.txt
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\addons\FFmpeg
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\addons\FFmpeg\blank.jpg
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\addons\FFmpeg\ffmpeg-20160530-git-d74cc61.tar.xz
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\addons\FFmpeg\ffmpeg.exe
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\addons\pdf
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\addons\pdf\elevation.css
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\addons\pdf\source
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\addons\pdf\source\libwkhtmltox-0.11.0_rc1.zip
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\addons\pdf\wkhtmltopdf.exe
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\app.info
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\boot.config
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\globalgamemanagers
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\globalgamemanagers.assets
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\level0
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\level1
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\level2
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\level3
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Accessibility.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\AGM.EdgeDetection.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Assembly-CSharp-firstpass.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Assembly-CSharp.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Autodesk.Fbx.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\BakeryRuntimeAssembly.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Byn.Awrtc.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Byn.Awrtc.Native.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\CTCommon.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\FreeImageNET.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\I18N.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\I18N.West.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\ICSharpCode.SharpZipLib.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Mono.Data.Sqlite.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Mono.Posix.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Mono.Security.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Mono.WebBrowser.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\MoodkieSecurity.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\mscorlib.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\netstandard.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Ookii.Dialogs.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Photon3Unity3D.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\PhotonChat.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\PhotonRealtime.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\PhotonUnityNetworking.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\PhotonUnityNetworking.Utilities.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\PhotonWebSocket.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\PLUSManaged.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\PLUSManaged.XmlSerializers.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.ComponentModel.Composition.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.ComponentModel.DataAnnotations.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Configuration.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Core.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Data.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Design.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Diagnostics.StackTrace.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Drawing.Design.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Drawing.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.EnterpriseServices.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Globalization.Extensions.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.IO.Compression.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.IO.Compression.FileSystem.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Net.Http.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Numerics.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Runtime.Serialization.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Runtime.Serialization.Formatters.Soap.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Runtime.Serialization.Xml.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Security.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.ServiceModel.Internals.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Transactions.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Web.ApplicationServices.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Web.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Web.Services.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Windows.Forms.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Xml.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Xml.Linq.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Xml.XPath.XDocument.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.Analytics.DataPrivacy.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.Formats.Fbx.Runtime.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.Postprocessing.Runtime.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.ProBuilder.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.ProBuilder.KdTree.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.ProBuilder.Poly2Tri.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.ProBuilder.Stl.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.Recorder.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.Recorder.Base.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.ScriptableBuildPipeline.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.TextMeshPro.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.Timeline.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.AccessibilityModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.Advertisements.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.AIModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.AndroidJNIModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.AnimationModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ARModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.AssetBundleModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.AudioModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ClothModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ClusterInputModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ClusterRendererModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.CoreModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.CrashReportingModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.DirectorModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.DSPGraphModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.GameCenterModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.GridModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.HotReloadModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ImageConversionModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.IMGUIModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.InputLegacyModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.InputModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.JSONSerializeModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.LouserzationModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.Monetization.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ParticleSystemModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.PerformanceReportingModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.Physics2DModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.PhysicsModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ProfilerModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.Purchasing.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ScreenCaptureModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.SharedInternalsModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.SpatialTracking.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.SpriteMaskModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.SpriteShapeModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.StreamingModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.SubstanceModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.SubsystemsModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.TerrainModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.TerrainPhysicsModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.TextCoreModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.TextRenderingModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.TilemapModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.TLSModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UI.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UIElementsModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UIModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UmbraModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UNETModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityAnalyticsModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityConnectModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityTestProtocolModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityWebRequestAssetBundleModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityWebRequestAudioModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityWebRequestModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityWebRequestTextureModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityWebRequestWWWModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.VehiclesModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.VFXModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.VideoModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.VRModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.WindModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.XR.LegacyInputHelpers.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.XRModule.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Vectrosity.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\WebRtcCSharp.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\wrtc.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\assimp.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\FreeImage.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\libbrotli.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\libfastlz.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\liblz4.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\liblzma.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\libzipw.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\ProResToolbox.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\ProResWrapper.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\UnityFbxSdkNative.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\webrtccsharpwrap.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Resources
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Resources\unity default resources
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Resources\unity_builtin_extra
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\resources.assets
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\resources.assets.resS
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\sharedassets0.assets
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\sharedassets0.assets.resS
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\sharedassets0.resource
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\sharedassets1.assets
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\sharedassets1.assets.resS
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\sharedassets2.assets
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\sharedassets2.assets.resS
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\sharedassets3.assets
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Spaces
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Spaces\Default.ocs
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Exh
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Exh\OrteliaDemo.exh
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\UnityCrashHandler64.exe
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\vc_redist.x64.exe
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\UnityPlayer.dll
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\Ortelia Curator.url
Source: C:\Users\user\Downloads\CuratorSetup.exe Directory created: C:\Program Files\Ortelia Curator\uninst.exe
Drops PE files
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.SubstanceModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.Formats.Fbx.Runtime.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Vectrosity.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ClusterInputModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.CrashReportingModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.ComponentModel.Composition.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.HotReloadModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Core.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Runtime.Serialization.Xml.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Data.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\libzipw.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.AssetBundleModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\uninst.exe Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.LouserzationModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.AIModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Numerics.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.Advertisements.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UIElementsModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.ProBuilder.Poly2Tri.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Byn.Awrtc.Native.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.IO.Compression.FileSystem.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\libbrotli.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityWebRequestModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.Recorder.Base.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.TextRenderingModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Drawing.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\ICSharpCode.SharpZipLib.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.XR.LegacyInputHelpers.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Globalization.Extensions.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UmbraModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.PerformanceReportingModule.dll Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\Downloads\16f10be9-37f6-414c-a0a4-a45f20055150.tmp Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.Physics2DModule.dll Jump to dropped file
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe File created: C:\Users\user\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\wixstdba.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.SubsystemsModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\assimp.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.PhysicsModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Web.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.GridModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\ProResToolbox.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.TextCoreModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.Monetization.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\wrtc.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Security.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Transactions.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\UnityCrashHandler64.exe Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.TextMeshPro.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Users\user\AppData\Local\Temp\nsu8A79.tmp\AccessControl.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.Purchasing.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.DirectorModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\PhotonRealtime.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Assembly-CSharp-firstpass.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.VFXModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.AnimationModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.ComponentModel.DataAnnotations.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.WindModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Photon3Unity3D.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Byn.Awrtc.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.ProBuilder.Stl.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityWebRequestWWWModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.TerrainPhysicsModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\CTCommon.dll Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\Downloads\Unconfirmed 530961.crdownload Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UI.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Runtime.Serialization.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\ProResWrapper.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Xml.Linq.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\PhotonWebSocket.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityWebRequestAssetBundleModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Users\user\AppData\Local\Temp\nsu8A79.tmp\InstallOptions.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.VRModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Mono.Posix.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\EmbedRuntime\mono-2.0-bdwgc.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Web.ApplicationServices.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.TLSModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\UnityPlayer.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.ScriptableBuildPipeline.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.TerrainModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Diagnostics.StackTrace.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Mono.Data.Sqlite.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.SpriteShapeModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\libfastlz.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Design.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.JSONSerializeModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ImageConversionModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ClothModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\AGM.EdgeDetection.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Users\user\AppData\Local\Temp\nsu8A79.tmp\UserInfo.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.SpriteMaskModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Windows.Forms.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\PLUSManaged.XmlSerializers.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Web.Services.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Xml.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\addons\FFmpeg\ffmpeg.exe Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\webrtccsharpwrap.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\liblzma.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UIModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.Timeline.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\mscorlib.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.VehiclesModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.XRModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Assembly-CSharp.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.InputLegacyModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.InputModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\FreeImageNET.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\WebRtcCSharp.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.StreamingModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.VideoModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.IO.Compression.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UNETModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityAnalyticsModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Xml.XPath.XDocument.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.AccessibilityModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\UnityFbxSdkNative.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Accessibility.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityWebRequestAudioModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\PLUSManaged.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\BakeryRuntimeAssembly.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\netstandard.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\I18N.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Runtime.Serialization.Formatters.Soap.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\addons\pdf\wkhtmltopdf.exe Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\liblz4.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.AndroidJNIModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\PhotonChat.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.Analytics.DataPrivacy.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.DSPGraphModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.TilemapModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ParticleSystemModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\PhotonUnityNetworking.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.ServiceModel.Internals.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Mono.Security.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityConnectModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ProfilerModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ARModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\MonoBleedingEdge\EmbedRuntime\MonoPosixHelper.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.GameCenterModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Ookii.Dialogs.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Configuration.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.CoreModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\I18N.West.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\FreeImage.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Mono.WebBrowser.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ClusterRendererModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.Recorder.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.SharedInternalsModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.IMGUIModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.SpatialTracking.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.Postprocessing.Runtime.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\PhotonUnityNetworking.Utilities.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.EnterpriseServices.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ScreenCaptureModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Net.Http.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.ProBuilder.KdTree.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.ProBuilder.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityTestProtocolModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Drawing.Design.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Autodesk.Fbx.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\MoodkieSecurity.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityWebRequestTextureModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.AudioModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\addons\freeimage-license.txt
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe File created: C:\Users\user\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\1028\license.rtf
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe File created: C:\Users\user\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\1029\license.rtf
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe File created: C:\Users\user\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\1031\license.rtf
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe File created: C:\Users\user\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\1036\license.rtf
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe File created: C:\Users\user\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\1040\license.rtf
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe File created: C:\Users\user\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\1041\license.rtf
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe File created: C:\Users\user\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\1042\license.rtf
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe File created: C:\Users\user\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\1045\license.rtf
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe File created: C:\Users\user\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\1046\license.rtf
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe File created: C:\Users\user\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\1049\license.rtf
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe File created: C:\Users\user\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\1055\license.rtf
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe File created: C:\Users\user\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\2052\license.rtf
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe File created: C:\Users\user\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\3082\license.rtf
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe File created: C:\Users\user\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\license.rtf
Stores files to the Windows start menu directory
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ortelia Curator
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ortelia Curator\Ortelia Curator.lnk
Source: C:\Users\user\Downloads\CuratorSetup.exe File created: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ortelia Curator\Uninstall.lnk
Source: C:\Users\user\Downloads\CuratorSetup.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Downloads\CuratorSetup.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Downloads\CuratorSetup.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Ortelia Curator\UnityCrashHandler64.exe Process information set: NOGPFAULTERRORBOX
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Window / User API: threadDelayed 1169
Found dropped PE file which has not been started or loaded
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.SubstanceModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.Formats.Fbx.Runtime.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ClusterInputModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Vectrosity.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.CrashReportingModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.ComponentModel.Composition.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.HotReloadModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Core.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Runtime.Serialization.Xml.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Data.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\libzipw.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.AssetBundleModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\uninst.exe Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.LouserzationModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.AIModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Numerics.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.Advertisements.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UIElementsModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.ProBuilder.Poly2Tri.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Byn.Awrtc.Native.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.IO.Compression.FileSystem.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\libbrotli.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityWebRequestModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.Recorder.Base.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.TextRenderingModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Drawing.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\ICSharpCode.SharpZipLib.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.XR.LegacyInputHelpers.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UmbraModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Globalization.Extensions.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.PerformanceReportingModule.dll Jump to dropped file
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\wixstdba.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.Physics2DModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.SubsystemsModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\assimp.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.PhysicsModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.GridModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Web.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\ProResToolbox.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.TextCoreModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.Monetization.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Security.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\wrtc.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Transactions.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.TextMeshPro.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsu8A79.tmp\AccessControl.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.Purchasing.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.DirectorModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\PhotonRealtime.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Assembly-CSharp-firstpass.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.AnimationModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.VFXModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.ComponentModel.DataAnnotations.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.WindModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Photon3Unity3D.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Byn.Awrtc.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.ProBuilder.Stl.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\CTCommon.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.TerrainPhysicsModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityWebRequestWWWModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UI.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\ProResWrapper.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Runtime.Serialization.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Xml.Linq.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\PhotonWebSocket.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityWebRequestAssetBundleModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsu8A79.tmp\InstallOptions.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.VRModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Mono.Posix.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\MonoBleedingEdge\EmbedRuntime\mono-2.0-bdwgc.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Web.ApplicationServices.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.TLSModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\UnityPlayer.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.ScriptableBuildPipeline.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.TerrainModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Diagnostics.StackTrace.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Mono.Data.Sqlite.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.SpriteShapeModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\libfastlz.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.JSONSerializeModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Design.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ImageConversionModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ClothModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\AGM.EdgeDetection.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsu8A79.tmp\UserInfo.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.SpriteMaskModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Windows.Forms.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Web.Services.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\PLUSManaged.XmlSerializers.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Xml.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\addons\FFmpeg\ffmpeg.exe Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\webrtccsharpwrap.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\liblzma.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UIModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.Timeline.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\mscorlib.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.VehiclesModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.XRModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Assembly-CSharp.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.InputModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.InputLegacyModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\FreeImageNET.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\WebRtcCSharp.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.StreamingModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.VideoModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.IO.Compression.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UNETModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityAnalyticsModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Xml.XPath.XDocument.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.AccessibilityModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\UnityFbxSdkNative.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Accessibility.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityWebRequestAudioModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\PLUSManaged.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\BakeryRuntimeAssembly.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\netstandard.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\I18N.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Runtime.Serialization.Formatters.Soap.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\addons\pdf\wkhtmltopdf.exe Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\liblz4.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.AndroidJNIModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.Analytics.DataPrivacy.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.DSPGraphModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\PhotonChat.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.TilemapModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ParticleSystemModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.ServiceModel.Internals.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\PhotonUnityNetworking.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Mono.Security.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityConnectModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ProfilerModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ARModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\MonoBleedingEdge\EmbedRuntime\MonoPosixHelper.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Ookii.Dialogs.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.GameCenterModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Configuration.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.CoreModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\I18N.West.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Plugins\FreeImage.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Mono.WebBrowser.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ClusterRendererModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.Recorder.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.SharedInternalsModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.IMGUIModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.SpatialTracking.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.Postprocessing.Runtime.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\PhotonUnityNetworking.Utilities.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.ScreenCaptureModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.EnterpriseServices.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Net.Http.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.ProBuilder.KdTree.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Unity.ProBuilder.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\System.Drawing.Design.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\Autodesk.Fbx.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityTestProtocolModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\MoodkieSecurity.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.UnityWebRequestTextureModule.dll Jump to dropped file
Source: C:\Users\user\Downloads\CuratorSetup.exe Dropped PE file which has not been started: C:\Program Files\Ortelia Curator\OrteliaCurator_Data\Managed\UnityEngine.AudioModule.dll Jump to dropped file
May sleep (evasive loops) to hinder dynamic analysis
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe TID: 6016 Thread sleep count: 1169 > 30
Source: C:\Users\user\Downloads\CuratorSetup.exe File Volume queried: C:\Program Files FullSizeInformation
Source: C:\Users\user\Downloads\CuratorSetup.exe File Volume queried: C:\Program Files FullSizeInformation
Creates a process in suspended mode (likely to inject code)
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Process created: C:\Program Files\Ortelia Curator\UnityCrashHandler64.exe "C:\Program Files\Ortelia Curator\UnityCrashHandler64.exe" --attach 7600 2993575759872
Queries the volume information (name, serial number etc) of a device
Source: C:\Users\user\Downloads\CuratorSetup.exe Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\Downloads\CuratorSetup.exe Queries volume information: C:\ VolumeInformation
Source: C:\Program Files\Ortelia Curator\vc_redist.x64.exe Queries volume information: C:\Users\user\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\logo.png VolumeInformation
Queries time zone information
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Key value queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\TimeZoneInformation TimeZoneKeyName
Source: C:\Program Files\Ortelia Curator\OrteliaCurator.exe Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Stealing of Sensitive Information
barindex
Yara detected Havoc
Source: Yara match File source: C:\Users\user\Downloads\Unconfirmed 530961.crdownload, type: DROPPED
Source: Yara match File source: C:\Users\user\Downloads\Unconfirmed 530961.crdownload, type: DROPPED
Source: Yara match File source: C:\Users\user\Downloads\Unconfirmed 530961.crdownload, type: DROPPED

Remote Access Functionality
barindex
Yara detected Havoc
Source: Yara match File source: C:\Users\user\Downloads\Unconfirmed 530961.crdownload, type: DROPPED
Source: Yara match File source: C:\Users\user\Downloads\Unconfirmed 530961.crdownload, type: DROPPED
Source: Yara match File source: C:\Users\user\Downloads\Unconfirmed 530961.crdownload, type: DROPPED
windows-stand
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
172.253.124.100
 unknown United States
15169 GOOGLEUS false
1.1.1.1
 unknown Australia
13335 CLOUDFLARENETUS false
139.99.130.163
 ortelia.com Canada
16276 OVHFR false
142.250.105.84
 unknown United States
15169 GOOGLEUS false
64.233.176.95
 unknown United States
15169 GOOGLEUS false
173.194.219.138
 analytics.google.com United States
15169 GOOGLEUS false
142.250.105.100
 unknown United States
15169 GOOGLEUS false
173.194.219.113
 unknown United States
15169 GOOGLEUS false
64.233.176.97
 unknown United States
15169 GOOGLEUS false
173.194.219.94
 unknown United States
15169 GOOGLEUS false
239.255.255.250
 unknown Reserved
unknown unknown false
64.233.176.154
 stats.g.doubleclick.net United States
15169 GOOGLEUS false
142.251.15.94
 unknown United States
15169 GOOGLEUS false
3.161.169.25
 d1f8f9xcsvx3ha.cloudfront.net United States
16509 AMAZON-02US false
3.161.169.36
 unknown United States
16509 AMAZON-02US false
142.251.15.103
 www.google.com United States
15169 GOOGLEUS false
74.125.138.94
 unknown United States
15169 GOOGLEUS false

Private

IP
192.168.2.16

Contacted Domains

Name IP Active
ortelia.com 139.99.130.163 true
www.google.com 142.251.15.103 true
analytics.google.com 173.194.219.138 true
s.w.org 192.0.77.48 true
d1f8f9xcsvx3ha.cloudfront.net 3.161.169.25 true
stats.g.doubleclick.net 64.233.176.154 true