Windows Analysis Report
Gwyddion-2.65.win64.exe

Compliance

Source: Gwyddion-2.65.win64.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe

Window detected: I &AgreeCancelNullsoft Install System v3.08 Nullsoft Install System v3.08License AgreementPlease review the license terms before installing Gwyddion.Press Page Down to see the rest of the agreement.Gwyddion is Free Software published under the GNU General Public License version 2 (or later) that can be found as COPYING-GPLv2.txt in the installation directory.This package contains also other components covered by various Free Software licenses: ATK Cairo dlfcn-win32 gettext GLib GTK+ GtkGLExt iconv Pango pthreads-win32 pygtk2 and pygobject2 (COPYING-LGPLv2.txt) D-BUS FFTW and freetype (COPYING-GPLv2.txt) gtksourceview (COPYING-LGPLv2.txt and COPYING-GPLv2.txt) pycairo (COPYING-LGPLv2.txt and COPYING-MPL-1.1.txt) expat (COPYING-expat.txt) fontconfig (COPYING-fontconfig.txt) jansson (LICENSE-jansson.txt) JasPer (LICENSE-JasPer.txt) harfbuzz (COPYING-harfbuzz.txt) HDF5 (LICENSE-HDF5.txt) libaec (Copyright-libaec.txt) libffi (LICENSE-libffi.txt) libjpeg (COPYING-libjpeg.txt) libpng (COPYING-libpng.txt) libtiff (Copyright-libtiff.txt) libwebp (COPYING-libwebp.txt) libxml2 (Copyright-libxml2.txt) OpenEXR (LICENSE-OpenEXR.txt) PCRE (LICENSE-pcre.txt) libzip (LICENSE-libzip.txt) zlib (COPYING-zlib.txt) and libbz2 (LICENSE-bzip2.txt). These components were repackaged unmodified from the Fedora MinGW32/MinGW64 cross-compilation environment.If you accept the terms of the agreement click I Agree to continue. You must accept the agreement to install Gwyddion.

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\COPYING-expat.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\COPYING-fontconfig.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\COPYING-GPLv2.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\COPYING-harfbuzz.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\COPYING-LGPLv2.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\COPYING-libjpeg.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\COPYING-libwebp.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\COPYING-MPL-1.1.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\COPYING-zlib.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\Copyright-libaec.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\Copyright-libtiff.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\Copyright-libxml2.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\LICENSE-bzip2.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\LICENSE-HDF5.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\LICENSE-JasPer.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\LICENSE-libffi.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\LICENSE-libpng.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\LICENSE-libzip.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\LICENSE-OpenEXR.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\LICENSE-pcre.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\fc-cache.exe			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\fc-list.exe			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\gdbus.exe			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\gdk-pixbuf-query-loaders.exe			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\gsettings.exe			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\gspawn-win64-helper-console.exe			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\gspawn-win64-helper.exe			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\gtk-query-immodules-2.0.exe			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\gwyddion.exe			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\gwyddion-thumbnailer.exe			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\iconv.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libaec.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libasprintf-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libatk-1.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libbz2-1.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libdl.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libcairo-2.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libcairo-gobject-2.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libcairo-script-interpreter-2.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libexpat-1.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libffi-6.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libfftw3-3.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libfontconfig-1.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libfreetype-6.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgailutil-18.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgdkglext-win32-1.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgdk_pixbuf-2.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgdk-win32-2.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgcc_s_seh-1.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libssp-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgio-2.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libglib-2.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgmodule-2.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgobject-2.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgomp-1.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgthread-2.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgtkglext-win32-1.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgtk-win32-2.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgtksourceview-2.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libharfbuzz-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libhdf5-103.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libhdf5_hl-100.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgwyddion2-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgwyprocess2-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgwydraw2-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgwydgets2-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgwymodule2-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgwyapp2-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libintl-8.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libjansson.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libjasper-4.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libjpeg-62.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libpango-1.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libpangocairo-1.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libpangoft2-1.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libpangowin32-1.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libpcre-1.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libpixman-1-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libpng16-16.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libstdc++-6.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libsz.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libwinpthread-1.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libtiff-5.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libwebp-7.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libxml2-2.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libImath-2_5.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libIex-2_5.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libIlmThread-2_5.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libHalf-2_5.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libIexMath-2_5.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libIlmImf-2_5.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libIlmImfUtil-2_5.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\zlib1.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libzip-5.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\etc			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\etc\gtk-2.0			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\etc\gtk-2.0\gtk.immodules			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\etc\gtk-2.0\im-multipress.conf			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders.cache			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-ani.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-icns.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-jasper.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-pnm.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-qtif.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-tga.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-xbm.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-xpm.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\engines			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\engines\libpixmap.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\engines\libwimp.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-am-et.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-cedilla.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-cyrillic-translit.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-ime.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-inuktitut.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-ipa.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-multipress.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-thai.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-ti-er.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-ti-et.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-viqr.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\modules			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\modules\libgail.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\plugin-proxy.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\cmap			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\cmap\cmap.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\file.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\createc.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\imgexport.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\jpkscan.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\keyence.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\npyfile.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\nrrdfile.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\oirfile.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\pixmap.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\rhk-sm4.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\anasys_xml.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\apedaxfile.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\hdf5file.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\hdrimage.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\matfile.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\nanoobserver.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\nanoscantech.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\opengps.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\psppt.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\sensofarx.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\spml.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\spmxfile.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\zonfile.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\graph			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\graph\graph.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\layer			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\layer\layer.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\process			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\process\process.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\tool			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\tool\tools.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\volume			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\volume\volume.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\xyz			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\xyz\xyz.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Alien-Alloy			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Black-Plastic			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Black-Rubber			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Brass			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Bright-White			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Bronze			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Chrome			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Coolish-White			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Copper			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Cyan-Plastic			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Cyan-Rubber			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Emerald			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Gold			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Green-Plastic			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Green-Rubber			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Jade			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Obsidian			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Pearl			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Pewter			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Polished-Bronze			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Polished-Copper			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Polished-Gold			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Red-Plastic			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Red-Rubber			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Ruby			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Silver			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Turquoise			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Warmish-White			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\White-Plastic			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\White-Rubber			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Yellow-Plastic			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Yellow-Rubber			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\BW1			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\BW2			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Blend1			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Blend2			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Blue			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Blue-Cyan			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Blue-Violet			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Blue-Yellow			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Body			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Caribbean			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Code-V			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Cold			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\DFit			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Digitalis			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Gold			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Gray-inverted			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Green			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Green-Cyan			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Green-Stripes-4			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Green-Violet			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Green-Yellow			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Gwyddion.net			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Halcyon			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Lines			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Maple			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\MetroPro			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\NT-MDT			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Neon			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Olive			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Painbow			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Pink			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Plum			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Pm3d			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Rainbow1			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Rainbow2			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Red			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Red-Cyan			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Red-Stripes-5			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Red-Violet			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Red-Yellow			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\RGB-Red			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\RGB-Green			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\RGB-Blue			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Rust			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Saw1			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Shame			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Sky			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Sm2			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Spectral			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Spectral-white			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Spring			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Viridis			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Warm			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Warpp-mono			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Warpp-spectral			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Wyko			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Yellow			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Zones			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_3d_base-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_arithmetic-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_binning-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_bold-20.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_cantilever-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_color_range-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_color_range_adaptive-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_color_range_auto-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_color_range_fixed-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_color_range_full-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_convolution-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_convolve-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_correct_affine-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_correlation_mask-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_correlation_length-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_crop-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_cross_profile-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_curvature-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_cwt-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_data_measure-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_deconvolve-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_disconnected-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_displacement_field-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_distance-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_distance_transform-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_distribution_angle-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_distribution_slope-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_dwt-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_edge-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_enforce_distribution-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_entropy-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_extend-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_extract_path-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_facet_analysis-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_facet_measure-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_facet_level-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_fft-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_fft_2d-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_fft_filter_1d-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_fft_filter_2d-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_filter-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_find_peaks-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_fit_shape-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_fix_zero-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_flip_diagonally-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_flip_horizontally-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_flip_vertically-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_fractal-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_fractal_measure-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_fractal_correction-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_frequency_split-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_gradient_horizontal-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_gradient_vertical-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_grain_bounding_box-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_grain_correlation-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_grain_exscribed_circle-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_grain_inscribed_box-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_grain_inscribed_circle-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_grains-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_grains_edge-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_grains_edge_remove-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_grains_graph-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_grains_measure-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_grains_otsu-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_grains_remove-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_grains_statistics-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_grains_water-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_align-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_cut-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_dos-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_export_ascii-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_export_png-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_export_vector-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_fd-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_filter-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_function-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_halfgauss-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_level-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_measure-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_palette-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_pointer-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_ruler-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_statistics-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_period_measure-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_terrace_measure-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_vertical-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_zoom_fit-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_zoom_in-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_zoom_out-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_hough-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_hold_selection_clear-18.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_hold_selection_replace-18.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_immerse-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_iso_roughness-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_image_relation-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_italic-20.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_less-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_level-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_level_flatten_base-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_level_median-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_level_triangle-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_light_rotate-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_limit_range-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_line_level-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_load_debug-20.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_load_info-20.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_load_warning-20.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_local_slope-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_logscale_horizontal-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_logscale_vertical-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mark_outliers-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mark_scars-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mark_with-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask-16.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_add-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_circle-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_circle_exclusive-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_circle_inclusive-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_distribute-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_editor-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_exclude-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_exclude_circle-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_extract-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_fill_draw-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_fill_erase-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_grow-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_intersect-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_invert-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_line-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_morph-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_noisify-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_paint_draw-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_paint_erase-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_rect_exclusive-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_rect_inclusive-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_remove-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_set-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_shift-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_shrink-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_subtract-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_thin-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_measure_lattice-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_merge-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mfm_convert_to_force-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mfm_current_line-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mfm_field_find_shift-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mfm_field_shift-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mfm_parallel-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mfm_perpendicular-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_more-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mutual_crop-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_neural_apply-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_neural_train-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_next-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_null_offsets-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_palettes-16.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_palettes-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_path_level-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_perspective_distort-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_pointer_measure-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_poly_distort-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_polynom-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_polynom_level-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_previous-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_profile-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_profile_multiple-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_pygwy-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_rasterize-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_radial_profile-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_rank_filter-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_remove_under_mask-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_revolve_arc-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_revolve_sphere-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_rotate_180-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_rotate_3d-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_rotate-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_rotate_90_ccw-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_rotate_90_cw-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_scale-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_scale_horizontally-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_scale_vertically-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_scars-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_scientific_number_format-18.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_selections-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_shader-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_spectrum-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_spot_remove-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_square_samples-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_stat_quantities-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_stitch-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_straighten_path-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_subscript-20.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_superscript-20.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_anneal-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_ballistic_deposition-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_brownian_motion-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_columnar-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_diffusion-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_discs-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_domains-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_dunes-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_fibres-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_lattice-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_line_noise-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_noise-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_objects-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_particles-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_pattern-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_phases-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_pileup-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_plateaus-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_spectral-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_turing_pattern-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_waves-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_terrace_measure-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_tilt-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_tip_dilation-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_tip_erosion-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_tip_estimation-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_tip_indent_analyze-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_tip_lateral_force-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_tip_map-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_tip_model-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_tip_pid-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_unrotate-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_value_invert-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_volume-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_volume_arithmetic-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_volume_calibrate-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_volume_dimensions-24.png			Jump to behavior

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe

Registry value created: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Gwyddion

Jump to behavior

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\LICENSE-bzip2.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\LICENSE-HDF5.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\LICENSE-JasPer.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\LICENSE-libffi.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\LICENSE-libpng.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\LICENSE-libzip.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\LICENSE-OpenEXR.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\LICENSE-pcre.txt			Jump to behavior

Source: Gwyddion-2.65.win64.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Spreading

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Code function: 0_2_00405D74 CloseHandle,GetTempPathW,DeleteFileW,lstrcatW,lstrcatW,lstrlenW,FindFirstFileW,FindNextFileW,FindClose,		0_2_00405D74
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Code function: 0_2_0040699E FindFirstFileW,FindClose,		0_2_0040699E
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Code function: 0_2_0040290B FindFirstFileW,		0_2_0040290B

Networking

Source: Gwyddion-2.65.win64.exe, 00000000.00000002.2899265009.000000000273B000.00000004.00000020.00020000.00000000.sdmp, atk10.mo6.0.dr, atk10.mo8.0.dr	String found in binary or memory: http://bugzilla.gnome.org/enter_bug.cgi?product=atk&keywords=I18N
Source: Gwyddion-2.65.win64.exe, 00000000.00000002.2899265009.000000000273B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://bugzilla.gnome.org/enter_bug.cgi?product=glib&keywords=I18N
Source: Gwyddion-2.65.win64.exe, 00000000.00000002.2899265009.000000000273B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://bugzilla.gnome.org/enter_bug.cgi?product=gtk%2b&component=general
Source: Gwyddion-2.65.win64.exe, 00000000.00000002.2899265009.000000000273B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://bugzilla.gnome.org/enter_bug.cgi?product=gtk%2b&keywords=I18N
Source: Gwyddion-2.65.win64.exe, 00000000.00000002.2897524045.000000000040A000.00000004.00000001.01000000.00000003.sdmp, Gwyddion-2.65.win64.exe, 00000000.00000002.2899265009.000000000273B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://bugzilla.gnome.org/enter_bug.cgi?product=gtksourceview&component=general
Source: nsfDF4E.tmp.0.dr	String found in binary or memory: http://bugzilla.gnome.org/show_bug.cgi?id=%s
Source: nsfDF4E.tmp.0.dr	String found in binary or memory: http://bugzilla.gnome.org/show_bug.cgi?id=%sg_type_is_a
Source: Gwyddion-2.65.win64.exe, 00000000.00000002.2899265009.000000000273B000.00000004.00000020.00020000.00000000.sdmp, def.lang.0.dr	String found in binary or memory: http://docs.python.org/lib/built-in-funcs.html)
Source: Gwyddion-2.65.win64.exe, 00000000.00000002.2899265009.000000000273B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://docs.python.org/lib/typesseq-strings.html
Source: Gwyddion-2.65.win64.exe, 00000000.00000002.2899265009.000000000273B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://docs.python.org/ref/strings.html
Source: nsfDF4E.tmp.0.dr	String found in binary or memory: http://freedesktop.org
Source: nsfDF4E.tmp.0.dr	String found in binary or memory: http://freedesktop.orgtypenameexeccounttimestamp
Source: nsfDF4E.tmp.0.dr	String found in binary or memory: http://gwyddion.net/
Source: Gwyddion-2.65.win64.exe, 00000000.00000002.2898235375.00000000006D8000.00000004.00000020.00020000.00000000.sdmp, nsfDF4E.tmp.0.dr	String found in binary or memory: http://gwyddion.net/.gwyGwyddion.NativeDataGwyddion
Source: nsfDF4E.tmp.0.dr	String found in binary or memory: http://gwyddion.net/Report
Source: nsfDF4E.tmp.0.dr	String found in binary or memory: http://icon-theme.freedesktop.org/releases
Source: nsfDF4E.tmp.0.dr	String found in binary or memory: http://library.gnome.org/devel/gtk-faq/stable/
Source: Gwyddion-2.65.win64.exe	String found in binary or memory: http://nsis.sf.net/NSIS_ErrorError
Source: Gwyddion-2.65.win64.exe, 00000000.00000002.2899265009.000000000273B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://relaxng.org/ns/compatibility/annotations/1.0
Source: Gwyddion-2.65.win64.exe, 00000000.00000002.2899265009.000000000273B000.00000004.00000020.00020000.00000000.sdmp, language2.rng.0.dr	String found in binary or memory: http://relaxng.org/ns/structure/1.0
Source: nsfDF4E.tmp.0.dr	String found in binary or memory: http://www.brynosaurus.com/cachedir/
Source: nsfDF4E.tmp.0.dr	String found in binary or memory: http://www.cmi.cz/
Source: nsfDF4E.tmp.0.dr	String found in binary or memory: http://www.cmi.cz/Credits%s
Source: nsfDF4E.tmp.0.dr	String found in binary or memory: http://www.freedesktop.org/standards/dbus/1.0/introspect.dtd
Source: nsfDF4E.tmp.0.dr	String found in binary or memory: http://www.freedesktop.org/standards/desktop-bookmarks
Source: nsfDF4E.tmp.0.dr	String found in binary or memory: http://www.freedesktop.org/standards/desktop-bookmarksgroupapplicationsgroupsprivateiconmime-typehtt
Source: nsfDF4E.tmp.0.dr	String found in binary or memory: http://www.freedesktop.org/standards/shared-mime-info
Source: nsfDF4E.tmp.0.dr	String found in binary or memory: http://www.mozilla.org/MPL/
Source: Gwyddion-2.65.win64.exe, 00000000.00000002.2899265009.000000000273B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.gnome.org/enter_bug.cgi?product=gdk-pixbuf&keywords=I18N
Source: Gwyddion-2.65.win64.exe, 00000000.00000002.2899265009.000000000273B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.gnome.org/enter_bug.cgi?product=glib&keywords=I18N
Source: nsfDF4E.tmp.0.dr	String found in binary or memory: https://cairographics.org)
Source: nsfDF4E.tmp.0.dr	String found in binary or memory: https://cairographics.org))
Source: Gwyddion-2.65.win64.exe, 00000000.00000002.2899265009.000000000273B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/iobataya/gwyddion-ja-translation
Source: Gwyddion-2.65.win64.exe, 00000000.00000002.2899265009.000000000273B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gitlab.gnome.org/GNOME/gdk-pixbuf/issues
Source: Gwyddion-2.65.win64.exe, 00000000.00000002.2899265009.000000000273B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gnu.org/licenses/gpl.html
Source: Gwyddion-2.65.win64.exe, 00000000.00000002.2899265009.000000000273B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://translationproject.org/team/pt_BR.html
Source: nsfDF4E.tmp.0.dr	String found in binary or memory: https://www.gnu.org/licenses/
Source: nsfDF4E.tmp.0.dr	String found in binary or memory: https://www.gnu.org/licenses/gpl-2.0.html
Source: nsfDF4E.tmp.0.dr	String found in binary or memory: https://www.gnu.org/licenses/gpl-2.0.htmlLicenseGtkGLExt
Source: Gwyddion-2.65.win64.exe, 00000000.00000002.2899265009.000000000273B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.python.org/peps/pep-0263.html
Source: Gwyddion-2.65.win64.exe, 00000000.00000002.2899265009.000000000273B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.python.org/peps/pep-0263.html.

Key, Mouse, Clipboard, Microphone and Screen Capturing

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe

Code function: 0_2_00405809 GetDlgItem,GetDlgItem,GetDlgItem,GetDlgItem,GetClientRect,GetSystemMetrics,SendMessageW,SendMessageW,SendMessageW,SendMessageW,SendMessageW,SendMessageW,ShowWindow,ShowWindow,GetDlgItem,SendMessageW,SendMessageW,SendMessageW,GetDlgItem,CreateThread,FindCloseChangeNotification,ShowWindow,ShowWindow,ShowWindow,ShowWindow,SendMessageW,CreatePopupMenu,AppendMenuW,GetWindowRect,TrackPopupMenu,SendMessageW,OpenClipboard,EmptyClipboard,GlobalAlloc,GlobalLock,SendMessageW,GlobalUnlock,SetClipboardData,CloseClipboard,

0_2_00405809

System Summary

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe

Code function: 0_2_00403640 EntryPoint,SetErrorMode,GetVersionExW,GetVersionExW,GetVersionExW,lstrlenA,#17,OleInitialize,SHGetFileInfoW,GetCommandLineW,CharNextW,GetTempPathW,GetTempPathW,GetWindowsDirectoryW,lstrcatW,GetTempPathW,lstrcatW,SetEnvironmentVariableW,SetEnvironmentVariableW,SetEnvironmentVariableW,DeleteFileW,lstrcatW,lstrcatW,lstrcatW,lstrcmpiW,SetCurrentDirectoryW,DeleteFileW,CopyFileW,CloseHandle,OleUninitialize,ExitProcess,GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueW,AdjustTokenPrivileges,ExitWindowsEx,ExitProcess,

0_2_00403640

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe

Code function: 0_2_00406D5F

0_2_00406D5F

Source: libasprintf-0.dll.0.dr	Static PE information: Number of sections : 13 > 10
Source: libtiff-5.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: zonfile.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: libpixmap.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: libgthread-2.0-0.dll.0.dr	Static PE information: Number of sections : 13 > 10
Source: process.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: libhdf5_hl-100.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: spmxfile.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: libffi-6.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: libjpeg-62.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: sensofarx.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: xyz.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: npyfile.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: libgobject-2.0-0.dll.0.dr	Static PE information: Number of sections : 13 > 10
Source: libwinpthread-1.dll.0.dr	Static PE information: Number of sections : 13 > 10
Source: libgwyprocess2-0.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: im-thai.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: libpixbufloader-xpm.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: libgwyddion2-0.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: libgwydgets2-0.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: libgwydraw2-0.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: libintl-8.dll.0.dr	Static PE information: Number of sections : 13 > 10
Source: apedaxfile.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: nanoscantech.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: libpixbufloader-jasper.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: libstdc++-6.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: libpangoft2-1.0-0.dll.0.dr	Static PE information: Number of sections : 13 > 10
Source: nanoobserver.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: libjansson.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: libatk-1.0-0.dll.0.dr	Static PE information: Number of sections : 13 > 10
Source: libpixbufloader-xbm.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: im-ti-et.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: matfile.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: libdl.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: opengps.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: rhk-sm4.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: volume.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: libcairo-2.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: libwimp.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: jpkscan.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: createc.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: libgail.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: libgdkglext-win32-1.0-0.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: libgtkglext-win32-1.0-0.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: libjasper-4.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: libpcre-1.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: pixmap.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: libfreetype-6.dll.0.dr	Static PE information: Number of sections : 13 > 10
Source: libgwymodule2-0.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: im-ti-er.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: graph.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: libIex-2_5.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: libfftw3-3.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: im-inuktitut.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: im-cyrillic-translit.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: cmap.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: im-cedilla.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: libfontconfig-1.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: hdrimage.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: libpng16-16.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: gspawn-win64-helper.exe.0.dr	Static PE information: Number of sections : 11 > 10
Source: hdf5file.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: plugin-proxy.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: keyence.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: libhdf5-103.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: libsz.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: libssp-0.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: libgmodule-2.0-0.dll.0.dr	Static PE information: Number of sections : 13 > 10
Source: gdbus.exe.0.dr	Static PE information: Number of sections : 11 > 10
Source: libpixman-1-0.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: libcairo-script-interpreter-2.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: libexpat-1.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: imgexport.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: im-multipress.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: iconv.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: tools.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: im-ime.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: libgcc_s_seh-1.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: libbz2-1.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: gwyddion.exe.0.dr	Static PE information: Number of sections : 17 > 10
Source: libpixbufloader-tga.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: libpango-1.0-0.dll.0.dr	Static PE information: Number of sections : 13 > 10
Source: libgtk-win32-2.0-0.dll.0.dr	Static PE information: Number of sections : 13 > 10
Source: psppt.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: libglib-2.0-0.dll.0.dr	Static PE information: Number of sections : 13 > 10
Source: libImath-2_5.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: gwyddion-thumbnailer.exe.0.dr	Static PE information: Number of sections : 17 > 10
Source: im-ipa.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: libgtksourceview-2.0-0.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: gdk-pixbuf-query-loaders.exe.0.dr	Static PE information: Number of sections : 11 > 10
Source: layer.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: libgwyapp2-0.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: libgomp-1.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: libaec.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: libharfbuzz-0.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: libgailutil-18.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: nrrdfile.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: libgio-2.0-0.dll.0.dr	Static PE information: Number of sections : 13 > 10
Source: anasys_xml.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: libxml2-2.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: file.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: libgdk_pixbuf-2.0-0.dll.0.dr	Static PE information: Number of sections : 13 > 10
Source: libgdk-win32-2.0-0.dll.0.dr	Static PE information: Number of sections : 13 > 10
Source: gsettings.exe.0.dr	Static PE information: Number of sections : 11 > 10
Source: libpixbufloader-qtif.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: libcairo-gobject-2.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: oirfile.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: im-am-et.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: libwebp-7.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: libpangowin32-1.0-0.dll.0.dr	Static PE information: Number of sections : 13 > 10
Source: gspawn-win64-helper-console.exe.0.dr	Static PE information: Number of sections : 11 > 10
Source: spml.dll.0.dr	Static PE information: Number of sections : 19 > 10
Source: im-viqr.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: libpixbufloader-pnm.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: libpangocairo-1.0-0.dll.0.dr	Static PE information: Number of sections : 13 > 10

Source: Gwyddion-2.65.win64.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE

Source: classification engine

Classification label: clean3.winEXE@1/615@0/0

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe

Code function: 0_2_00403640 EntryPoint,SetErrorMode,GetVersionExW,GetVersionExW,GetVersionExW,lstrlenA,#17,OleInitialize,SHGetFileInfoW,GetCommandLineW,CharNextW,GetTempPathW,GetTempPathW,GetWindowsDirectoryW,lstrcatW,GetTempPathW,lstrcatW,SetEnvironmentVariableW,SetEnvironmentVariableW,SetEnvironmentVariableW,DeleteFileW,lstrcatW,lstrcatW,lstrcatW,lstrcmpiW,SetCurrentDirectoryW,DeleteFileW,CopyFileW,CloseHandle,OleUninitialize,ExitProcess,GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueW,AdjustTokenPrivileges,ExitWindowsEx,ExitProcess,

0_2_00403640

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe

Code function: 0_2_00404AB5 GetDlgItem,SetWindowTextW,SHAutoComplete,SHBrowseForFolderW,CoTaskMemFree,lstrcmpiW,lstrcatW,SetDlgItemTextW,GetDiskFreeSpaceExW,GetDiskFreeSpaceW,MulDiv,SetDlgItemTextW,

0_2_00404AB5

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe

Code function: 0_2_004021AA CoCreateInstance,

0_2_004021AA

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe

File created: C:\Program Files\Gwyddion

Jump to behavior

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe

File created: C:\Users\user\AppData\Local\Temp\nspDEEF.tmp

Jump to behavior

Source: Gwyddion-2.65.win64.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe

File read: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe

Jump to behavior

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Section loaded: uxtheme.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Section loaded: userenv.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Section loaded: apphelp.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Section loaded: propsys.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Section loaded: dwmapi.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Section loaded: cryptbase.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Section loaded: oleacc.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Section loaded: ntmarta.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Section loaded: version.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Section loaded: shfolder.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Section loaded: kernel.appcore.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Section loaded: windows.storage.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Section loaded: wldp.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Section loaded: riched20.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Section loaded: usp10.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Section loaded: msls31.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Section loaded: textinputframework.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Section loaded: coreuicomponents.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Section loaded: coremessaging.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Section loaded: wintypes.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Section loaded: wintypes.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Section loaded: wintypes.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Section loaded: textshaping.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Section loaded: profapi.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Section loaded: linkinfo.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Section loaded: ntshrui.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Section loaded: sspicli.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Section loaded: srvcli.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Section loaded: cscapi.dll			Jump to behavior

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32

Jump to behavior

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Automated click: I Agree
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Automated click: Next >
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Automated click: Install

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe

Window detected: I &AgreeCancelNullsoft Install System v3.08 Nullsoft Install System v3.08License AgreementPlease review the license terms before installing Gwyddion.Press Page Down to see the rest of the agreement.Gwyddion is Free Software published under the GNU General Public License version 2 (or later) that can be found as COPYING-GPLv2.txt in the installation directory.This package contains also other components covered by various Free Software licenses: ATK Cairo dlfcn-win32 gettext GLib GTK+ GtkGLExt iconv Pango pthreads-win32 pygtk2 and pygobject2 (COPYING-LGPLv2.txt) D-BUS FFTW and freetype (COPYING-GPLv2.txt) gtksourceview (COPYING-LGPLv2.txt and COPYING-GPLv2.txt) pycairo (COPYING-LGPLv2.txt and COPYING-MPL-1.1.txt) expat (COPYING-expat.txt) fontconfig (COPYING-fontconfig.txt) jansson (LICENSE-jansson.txt) JasPer (LICENSE-JasPer.txt) harfbuzz (COPYING-harfbuzz.txt) HDF5 (LICENSE-HDF5.txt) libaec (Copyright-libaec.txt) libffi (LICENSE-libffi.txt) libjpeg (COPYING-libjpeg.txt) libpng (COPYING-libpng.txt) libtiff (Copyright-libtiff.txt) libwebp (COPYING-libwebp.txt) libxml2 (Copyright-libxml2.txt) OpenEXR (LICENSE-OpenEXR.txt) PCRE (LICENSE-pcre.txt) libzip (LICENSE-libzip.txt) zlib (COPYING-zlib.txt) and libbz2 (LICENSE-bzip2.txt). These components were repackaged unmodified from the Fedora MinGW32/MinGW64 cross-compilation environment.If you accept the terms of the agreement click I Agree to continue. You must accept the agreement to install Gwyddion.

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe

Window detected: Number of UI elements: 14

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\COPYING-expat.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\COPYING-fontconfig.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\COPYING-GPLv2.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\COPYING-harfbuzz.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\COPYING-LGPLv2.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\COPYING-libjpeg.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\COPYING-libwebp.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\COPYING-MPL-1.1.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\COPYING-zlib.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\Copyright-libaec.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\Copyright-libtiff.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\Copyright-libxml2.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\LICENSE-bzip2.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\LICENSE-HDF5.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\LICENSE-JasPer.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\LICENSE-libffi.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\LICENSE-libpng.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\LICENSE-libzip.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\LICENSE-OpenEXR.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\LICENSE-pcre.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\fc-cache.exe			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\fc-list.exe			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\gdbus.exe			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\gdk-pixbuf-query-loaders.exe			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\gsettings.exe			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\gspawn-win64-helper-console.exe			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\gspawn-win64-helper.exe			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\gtk-query-immodules-2.0.exe			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\gwyddion.exe			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\gwyddion-thumbnailer.exe			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\iconv.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libaec.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libasprintf-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libatk-1.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libbz2-1.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libdl.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libcairo-2.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libcairo-gobject-2.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libcairo-script-interpreter-2.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libexpat-1.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libffi-6.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libfftw3-3.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libfontconfig-1.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libfreetype-6.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgailutil-18.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgdkglext-win32-1.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgdk_pixbuf-2.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgdk-win32-2.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgcc_s_seh-1.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libssp-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgio-2.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libglib-2.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgmodule-2.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgobject-2.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgomp-1.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgthread-2.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgtkglext-win32-1.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgtk-win32-2.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgtksourceview-2.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libharfbuzz-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libhdf5-103.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libhdf5_hl-100.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgwyddion2-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgwyprocess2-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgwydraw2-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgwydgets2-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgwymodule2-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libgwyapp2-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libintl-8.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libjansson.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libjasper-4.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libjpeg-62.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libpango-1.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libpangocairo-1.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libpangoft2-1.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libpangowin32-1.0-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libpcre-1.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libpixman-1-0.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libpng16-16.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libstdc++-6.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libsz.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libwinpthread-1.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libtiff-5.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libwebp-7.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libxml2-2.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libImath-2_5.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libIex-2_5.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libIlmThread-2_5.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libHalf-2_5.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libIexMath-2_5.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libIlmImf-2_5.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libIlmImfUtil-2_5.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\zlib1.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\bin\libzip-5.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\etc			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\etc\gtk-2.0			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\etc\gtk-2.0\gtk.immodules			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\etc\gtk-2.0\im-multipress.conf			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders.cache			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-ani.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-icns.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-jasper.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-pnm.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-qtif.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-tga.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-xbm.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-xpm.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\engines			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\engines\libpixmap.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\engines\libwimp.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-am-et.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-cedilla.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-cyrillic-translit.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-ime.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-inuktitut.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-ipa.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-multipress.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-thai.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-ti-er.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-ti-et.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-viqr.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\modules			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gtk-2.0\modules\libgail.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\plugin-proxy.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\cmap			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\cmap\cmap.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\file.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\createc.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\imgexport.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\jpkscan.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\keyence.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\npyfile.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\nrrdfile.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\oirfile.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\pixmap.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\rhk-sm4.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\anasys_xml.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\apedaxfile.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\hdf5file.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\hdrimage.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\matfile.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\nanoobserver.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\nanoscantech.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\opengps.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\psppt.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\sensofarx.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\spml.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\spmxfile.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\zonfile.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\graph			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\graph\graph.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\layer			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\layer\layer.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\process			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\process\process.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\tool			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\tool\tools.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\volume			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\volume\volume.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\xyz			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\lib\gwyddion\modules\xyz\xyz.dll			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Alien-Alloy			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Black-Plastic			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Black-Rubber			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Brass			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Bright-White			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Bronze			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Chrome			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Coolish-White			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Copper			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Cyan-Plastic			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Cyan-Rubber			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Emerald			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Gold			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Green-Plastic			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Green-Rubber			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Jade			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Obsidian			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Pearl			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Pewter			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Polished-Bronze			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Polished-Copper			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Polished-Gold			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Red-Plastic			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Red-Rubber			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Ruby			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Silver			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Turquoise			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Warmish-White			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\White-Plastic			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\White-Rubber			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Yellow-Plastic			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\glmaterials\Yellow-Rubber			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\BW1			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\BW2			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Blend1			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Blend2			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Blue			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Blue-Cyan			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Blue-Violet			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Blue-Yellow			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Body			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Caribbean			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Code-V			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Cold			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\DFit			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Digitalis			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Gold			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Gray-inverted			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Green			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Green-Cyan			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Green-Stripes-4			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Green-Violet			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Green-Yellow			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Gwyddion.net			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Halcyon			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Lines			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Maple			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\MetroPro			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\NT-MDT			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Neon			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Olive			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Painbow			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Pink			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Plum			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Pm3d			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Rainbow1			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Rainbow2			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Red			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Red-Cyan			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Red-Stripes-5			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Red-Violet			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Red-Yellow			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\RGB-Red			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\RGB-Green			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\RGB-Blue			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Rust			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Saw1			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Shame			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Sky			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Sm2			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Spectral			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Spectral-white			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Spring			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Viridis			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Warm			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Warpp-mono			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Warpp-spectral			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Wyko			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Yellow			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\gradients\Zones			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_3d_base-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_arithmetic-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_binning-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_bold-20.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_cantilever-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_color_range-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_color_range_adaptive-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_color_range_auto-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_color_range_fixed-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_color_range_full-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_convolution-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_convolve-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_correct_affine-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_correlation_mask-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_correlation_length-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_crop-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_cross_profile-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_curvature-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_cwt-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_data_measure-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_deconvolve-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_disconnected-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_displacement_field-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_distance-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_distance_transform-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_distribution_angle-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_distribution_slope-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_dwt-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_edge-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_enforce_distribution-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_entropy-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_extend-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_extract_path-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_facet_analysis-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_facet_measure-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_facet_level-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_fft-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_fft_2d-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_fft_filter_1d-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_fft_filter_2d-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_filter-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_find_peaks-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_fit_shape-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_fix_zero-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_flip_diagonally-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_flip_horizontally-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_flip_vertically-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_fractal-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_fractal_measure-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_fractal_correction-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_frequency_split-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_gradient_horizontal-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_gradient_vertical-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_grain_bounding_box-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_grain_correlation-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_grain_exscribed_circle-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_grain_inscribed_box-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_grain_inscribed_circle-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_grains-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_grains_edge-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_grains_edge_remove-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_grains_graph-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_grains_measure-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_grains_otsu-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_grains_remove-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_grains_statistics-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_grains_water-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_align-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_cut-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_dos-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_export_ascii-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_export_png-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_export_vector-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_fd-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_filter-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_function-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_halfgauss-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_level-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_measure-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_palette-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_pointer-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_ruler-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_statistics-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_period_measure-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_terrace_measure-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_vertical-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_zoom_fit-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_zoom_in-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_graph_zoom_out-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_hough-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_hold_selection_clear-18.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_hold_selection_replace-18.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_immerse-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_iso_roughness-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_image_relation-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_italic-20.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_less-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_level-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_level_flatten_base-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_level_median-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_level_triangle-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_light_rotate-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_limit_range-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_line_level-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_load_debug-20.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_load_info-20.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_load_warning-20.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_local_slope-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_logscale_horizontal-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_logscale_vertical-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mark_outliers-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mark_scars-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mark_with-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask-16.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_add-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_circle-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_circle_exclusive-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_circle_inclusive-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_distribute-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_editor-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_exclude-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_exclude_circle-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_extract-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_fill_draw-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_fill_erase-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_grow-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_intersect-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_invert-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_line-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_morph-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_noisify-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_paint_draw-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_paint_erase-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_rect_exclusive-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_rect_inclusive-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_remove-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_set-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_shift-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_shrink-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_subtract-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mask_thin-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_measure_lattice-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_merge-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mfm_convert_to_force-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mfm_current_line-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mfm_field_find_shift-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mfm_field_shift-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mfm_parallel-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mfm_perpendicular-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_more-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_mutual_crop-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_neural_apply-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_neural_train-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_next-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_null_offsets-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_palettes-16.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_palettes-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_path_level-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_perspective_distort-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_pointer_measure-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_poly_distort-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_polynom-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_polynom_level-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_previous-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_profile-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_profile_multiple-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_pygwy-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_rasterize-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_radial_profile-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_rank_filter-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_remove_under_mask-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_revolve_arc-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_revolve_sphere-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_rotate_180-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_rotate_3d-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_rotate-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_rotate_90_ccw-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_rotate_90_cw-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_scale-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_scale_horizontally-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_scale_vertically-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_scars-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_scientific_number_format-18.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_selections-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_shader-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_spectrum-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_spot_remove-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_square_samples-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_stat_quantities-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_stitch-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_straighten_path-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_subscript-20.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_superscript-20.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_anneal-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_ballistic_deposition-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_brownian_motion-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_columnar-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_diffusion-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_discs-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_domains-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_dunes-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_fibres-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_lattice-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_line_noise-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_noise-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_objects-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_particles-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_pattern-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_phases-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_pileup-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_plateaus-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_spectral-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_turing_pattern-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_synthetic_waves-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_terrace_measure-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_tilt-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_tip_dilation-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_tip_erosion-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_tip_estimation-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_tip_indent_analyze-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_tip_lateral_force-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_tip_map-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_tip_model-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_tip_pid-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_unrotate-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_value_invert-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_volume-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_volume_arithmetic-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_volume_calibrate-24.png			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Directory created: C:\Program Files\Gwyddion\share\gwyddion\pixmaps\gwy_volume_dimensions-24.png			Jump to behavior

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe

Registry value created: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Gwyddion

Jump to behavior

Source: Gwyddion-2.65.win64.exe

Static file information: File size 25494309 > 1048576

Source: Gwyddion-2.65.win64.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Data Obfuscation

Source: libjpeg-62.dll.0.dr	Static PE information: real checksum: 0xeda30b00 should be: 0xba3ed
Source: libjasper-4.dll.0.dr	Static PE information: real checksum: 0xcf720500 should be: 0x572cf
Source: uninstall.exe.0.dr	Static PE information: real checksum: 0x0 should be: 0x124bd
Source: nsDialogs.dll.0.dr	Static PE information: real checksum: 0x0 should be: 0x2f9b

Source: libpixbufloader-jasper.dll.0.dr	Static PE information: section name: .xdata
Source: libpixbufloader-jasper.dll.0.dr	Static PE information: section name: /4
Source: libpixbufloader-pnm.dll.0.dr	Static PE information: section name: .xdata
Source: libpixbufloader-pnm.dll.0.dr	Static PE information: section name: /4
Source: libpixbufloader-qtif.dll.0.dr	Static PE information: section name: .xdata
Source: libpixbufloader-qtif.dll.0.dr	Static PE information: section name: /4
Source: libpixbufloader-tga.dll.0.dr	Static PE information: section name: .xdata
Source: libpixbufloader-tga.dll.0.dr	Static PE information: section name: /4
Source: libpixbufloader-xbm.dll.0.dr	Static PE information: section name: .xdata
Source: libpixbufloader-xbm.dll.0.dr	Static PE information: section name: /4
Source: libpixbufloader-xpm.dll.0.dr	Static PE information: section name: .xdata
Source: libpixbufloader-xpm.dll.0.dr	Static PE information: section name: /4
Source: libpixmap.dll.0.dr	Static PE information: section name: .xdata
Source: libpixmap.dll.0.dr	Static PE information: section name: /4
Source: libwimp.dll.0.dr	Static PE information: section name: .xdata
Source: libwimp.dll.0.dr	Static PE information: section name: /4
Source: im-am-et.dll.0.dr	Static PE information: section name: .xdata
Source: im-am-et.dll.0.dr	Static PE information: section name: /4
Source: im-cedilla.dll.0.dr	Static PE information: section name: .xdata
Source: im-cedilla.dll.0.dr	Static PE information: section name: /4
Source: im-cyrillic-translit.dll.0.dr	Static PE information: section name: .xdata
Source: im-cyrillic-translit.dll.0.dr	Static PE information: section name: /4
Source: im-ime.dll.0.dr	Static PE information: section name: .xdata
Source: im-ime.dll.0.dr	Static PE information: section name: /4
Source: im-inuktitut.dll.0.dr	Static PE information: section name: .xdata
Source: im-inuktitut.dll.0.dr	Static PE information: section name: /4
Source: im-ipa.dll.0.dr	Static PE information: section name: .xdata
Source: im-ipa.dll.0.dr	Static PE information: section name: /4
Source: im-multipress.dll.0.dr	Static PE information: section name: .xdata
Source: im-multipress.dll.0.dr	Static PE information: section name: /4
Source: im-thai.dll.0.dr	Static PE information: section name: .xdata
Source: im-thai.dll.0.dr	Static PE information: section name: /4
Source: im-ti-er.dll.0.dr	Static PE information: section name: .xdata
Source: im-ti-er.dll.0.dr	Static PE information: section name: /4
Source: im-ti-et.dll.0.dr	Static PE information: section name: .xdata
Source: im-ti-et.dll.0.dr	Static PE information: section name: /4
Source: im-viqr.dll.0.dr	Static PE information: section name: .xdata
Source: im-viqr.dll.0.dr	Static PE information: section name: /4
Source: libgail.dll.0.dr	Static PE information: section name: .xdata
Source: libgail.dll.0.dr	Static PE information: section name: /4
Source: plugin-proxy.dll.0.dr	Static PE information: section name: .xdata
Source: plugin-proxy.dll.0.dr	Static PE information: section name: /4
Source: plugin-proxy.dll.0.dr	Static PE information: section name: /19
Source: plugin-proxy.dll.0.dr	Static PE information: section name: /31
Source: plugin-proxy.dll.0.dr	Static PE information: section name: /45
Source: plugin-proxy.dll.0.dr	Static PE information: section name: /57
Source: plugin-proxy.dll.0.dr	Static PE information: section name: /70
Source: plugin-proxy.dll.0.dr	Static PE information: section name: /81
Source: plugin-proxy.dll.0.dr	Static PE information: section name: /92
Source: cmap.dll.0.dr	Static PE information: section name: .xdata
Source: cmap.dll.0.dr	Static PE information: section name: /4
Source: cmap.dll.0.dr	Static PE information: section name: /19
Source: cmap.dll.0.dr	Static PE information: section name: /31
Source: cmap.dll.0.dr	Static PE information: section name: /45
Source: cmap.dll.0.dr	Static PE information: section name: /57
Source: cmap.dll.0.dr	Static PE information: section name: /70
Source: cmap.dll.0.dr	Static PE information: section name: /81
Source: cmap.dll.0.dr	Static PE information: section name: /92
Source: file.dll.0.dr	Static PE information: section name: .xdata
Source: file.dll.0.dr	Static PE information: section name: /4
Source: file.dll.0.dr	Static PE information: section name: /19
Source: file.dll.0.dr	Static PE information: section name: /31
Source: file.dll.0.dr	Static PE information: section name: /45
Source: file.dll.0.dr	Static PE information: section name: /57
Source: file.dll.0.dr	Static PE information: section name: /70
Source: file.dll.0.dr	Static PE information: section name: /81
Source: file.dll.0.dr	Static PE information: section name: /92
Source: createc.dll.0.dr	Static PE information: section name: .xdata
Source: createc.dll.0.dr	Static PE information: section name: /4
Source: createc.dll.0.dr	Static PE information: section name: /19
Source: createc.dll.0.dr	Static PE information: section name: /31
Source: createc.dll.0.dr	Static PE information: section name: /45
Source: createc.dll.0.dr	Static PE information: section name: /57
Source: createc.dll.0.dr	Static PE information: section name: /70
Source: createc.dll.0.dr	Static PE information: section name: /81
Source: createc.dll.0.dr	Static PE information: section name: /92
Source: imgexport.dll.0.dr	Static PE information: section name: .xdata
Source: imgexport.dll.0.dr	Static PE information: section name: /4
Source: imgexport.dll.0.dr	Static PE information: section name: /19
Source: imgexport.dll.0.dr	Static PE information: section name: /31
Source: imgexport.dll.0.dr	Static PE information: section name: /45
Source: imgexport.dll.0.dr	Static PE information: section name: /57
Source: imgexport.dll.0.dr	Static PE information: section name: /70
Source: imgexport.dll.0.dr	Static PE information: section name: /81
Source: imgexport.dll.0.dr	Static PE information: section name: /92
Source: jpkscan.dll.0.dr	Static PE information: section name: .xdata
Source: jpkscan.dll.0.dr	Static PE information: section name: /4
Source: jpkscan.dll.0.dr	Static PE information: section name: /19
Source: jpkscan.dll.0.dr	Static PE information: section name: /31
Source: jpkscan.dll.0.dr	Static PE information: section name: /45
Source: jpkscan.dll.0.dr	Static PE information: section name: /57
Source: jpkscan.dll.0.dr	Static PE information: section name: /70
Source: jpkscan.dll.0.dr	Static PE information: section name: /81
Source: jpkscan.dll.0.dr	Static PE information: section name: /92
Source: keyence.dll.0.dr	Static PE information: section name: .xdata
Source: keyence.dll.0.dr	Static PE information: section name: /4
Source: keyence.dll.0.dr	Static PE information: section name: /19
Source: keyence.dll.0.dr	Static PE information: section name: /31
Source: keyence.dll.0.dr	Static PE information: section name: /45
Source: keyence.dll.0.dr	Static PE information: section name: /57
Source: keyence.dll.0.dr	Static PE information: section name: /70
Source: keyence.dll.0.dr	Static PE information: section name: /81
Source: keyence.dll.0.dr	Static PE information: section name: /92
Source: npyfile.dll.0.dr	Static PE information: section name: .xdata
Source: npyfile.dll.0.dr	Static PE information: section name: /4
Source: npyfile.dll.0.dr	Static PE information: section name: /19
Source: npyfile.dll.0.dr	Static PE information: section name: /31
Source: npyfile.dll.0.dr	Static PE information: section name: /45
Source: npyfile.dll.0.dr	Static PE information: section name: /57
Source: npyfile.dll.0.dr	Static PE information: section name: /70
Source: npyfile.dll.0.dr	Static PE information: section name: /81
Source: npyfile.dll.0.dr	Static PE information: section name: /92
Source: nrrdfile.dll.0.dr	Static PE information: section name: .xdata
Source: nrrdfile.dll.0.dr	Static PE information: section name: /4
Source: nrrdfile.dll.0.dr	Static PE information: section name: /19
Source: nrrdfile.dll.0.dr	Static PE information: section name: /31
Source: nrrdfile.dll.0.dr	Static PE information: section name: /45
Source: nrrdfile.dll.0.dr	Static PE information: section name: /57
Source: nrrdfile.dll.0.dr	Static PE information: section name: /70
Source: nrrdfile.dll.0.dr	Static PE information: section name: /81
Source: nrrdfile.dll.0.dr	Static PE information: section name: /92
Source: fc-cache.exe.0.dr	Static PE information: section name: .xdata
Source: fc-cache.exe.0.dr	Static PE information: section name: /4
Source: fc-list.exe.0.dr	Static PE information: section name: .xdata
Source: fc-list.exe.0.dr	Static PE information: section name: /4
Source: gdbus.exe.0.dr	Static PE information: section name: .xdata
Source: gdbus.exe.0.dr	Static PE information: section name: /4
Source: gdk-pixbuf-query-loaders.exe.0.dr	Static PE information: section name: .xdata
Source: gdk-pixbuf-query-loaders.exe.0.dr	Static PE information: section name: /4
Source: gsettings.exe.0.dr	Static PE information: section name: .xdata
Source: gsettings.exe.0.dr	Static PE information: section name: /4
Source: gspawn-win64-helper-console.exe.0.dr	Static PE information: section name: .xdata
Source: gspawn-win64-helper-console.exe.0.dr	Static PE information: section name: /4
Source: gspawn-win64-helper.exe.0.dr	Static PE information: section name: .xdata
Source: gspawn-win64-helper.exe.0.dr	Static PE information: section name: /4
Source: gtk-query-immodules-2.0.exe.0.dr	Static PE information: section name: .xdata
Source: gtk-query-immodules-2.0.exe.0.dr	Static PE information: section name: /4
Source: gwyddion.exe.0.dr	Static PE information: section name: .xdata
Source: gwyddion.exe.0.dr	Static PE information: section name: /4
Source: gwyddion.exe.0.dr	Static PE information: section name: /19
Source: gwyddion.exe.0.dr	Static PE information: section name: /31
Source: gwyddion.exe.0.dr	Static PE information: section name: /45
Source: gwyddion.exe.0.dr	Static PE information: section name: /57
Source: gwyddion.exe.0.dr	Static PE information: section name: /70
Source: gwyddion.exe.0.dr	Static PE information: section name: /81
Source: gwyddion.exe.0.dr	Static PE information: section name: /92
Source: oirfile.dll.0.dr	Static PE information: section name: .xdata
Source: oirfile.dll.0.dr	Static PE information: section name: /4
Source: oirfile.dll.0.dr	Static PE information: section name: /19
Source: oirfile.dll.0.dr	Static PE information: section name: /31
Source: oirfile.dll.0.dr	Static PE information: section name: /45
Source: oirfile.dll.0.dr	Static PE information: section name: /57
Source: oirfile.dll.0.dr	Static PE information: section name: /70
Source: oirfile.dll.0.dr	Static PE information: section name: /81
Source: oirfile.dll.0.dr	Static PE information: section name: /92
Source: pixmap.dll.0.dr	Static PE information: section name: .xdata
Source: pixmap.dll.0.dr	Static PE information: section name: /4
Source: pixmap.dll.0.dr	Static PE information: section name: /19
Source: pixmap.dll.0.dr	Static PE information: section name: /31
Source: pixmap.dll.0.dr	Static PE information: section name: /45
Source: pixmap.dll.0.dr	Static PE information: section name: /57
Source: pixmap.dll.0.dr	Static PE information: section name: /70
Source: pixmap.dll.0.dr	Static PE information: section name: /81
Source: pixmap.dll.0.dr	Static PE information: section name: /92
Source: rhk-sm4.dll.0.dr	Static PE information: section name: .xdata
Source: rhk-sm4.dll.0.dr	Static PE information: section name: /4
Source: rhk-sm4.dll.0.dr	Static PE information: section name: /19
Source: rhk-sm4.dll.0.dr	Static PE information: section name: /31
Source: rhk-sm4.dll.0.dr	Static PE information: section name: /45
Source: rhk-sm4.dll.0.dr	Static PE information: section name: /57
Source: rhk-sm4.dll.0.dr	Static PE information: section name: /70
Source: rhk-sm4.dll.0.dr	Static PE information: section name: /81
Source: rhk-sm4.dll.0.dr	Static PE information: section name: /92
Source: anasys_xml.dll.0.dr	Static PE information: section name: .xdata
Source: anasys_xml.dll.0.dr	Static PE information: section name: /4
Source: anasys_xml.dll.0.dr	Static PE information: section name: /19
Source: anasys_xml.dll.0.dr	Static PE information: section name: /31
Source: anasys_xml.dll.0.dr	Static PE information: section name: /45
Source: anasys_xml.dll.0.dr	Static PE information: section name: /57
Source: anasys_xml.dll.0.dr	Static PE information: section name: /70
Source: anasys_xml.dll.0.dr	Static PE information: section name: /81
Source: anasys_xml.dll.0.dr	Static PE information: section name: /92
Source: apedaxfile.dll.0.dr	Static PE information: section name: .xdata
Source: apedaxfile.dll.0.dr	Static PE information: section name: /4
Source: apedaxfile.dll.0.dr	Static PE information: section name: /19
Source: apedaxfile.dll.0.dr	Static PE information: section name: /31
Source: apedaxfile.dll.0.dr	Static PE information: section name: /45
Source: apedaxfile.dll.0.dr	Static PE information: section name: /57
Source: apedaxfile.dll.0.dr	Static PE information: section name: /70
Source: apedaxfile.dll.0.dr	Static PE information: section name: /81
Source: apedaxfile.dll.0.dr	Static PE information: section name: /92
Source: hdf5file.dll.0.dr	Static PE information: section name: .xdata
Source: hdf5file.dll.0.dr	Static PE information: section name: /4
Source: hdf5file.dll.0.dr	Static PE information: section name: /19
Source: hdf5file.dll.0.dr	Static PE information: section name: /31
Source: hdf5file.dll.0.dr	Static PE information: section name: /45
Source: hdf5file.dll.0.dr	Static PE information: section name: /57
Source: hdf5file.dll.0.dr	Static PE information: section name: /70
Source: hdf5file.dll.0.dr	Static PE information: section name: /81
Source: hdf5file.dll.0.dr	Static PE information: section name: /92
Source: hdrimage.dll.0.dr	Static PE information: section name: .xdata
Source: hdrimage.dll.0.dr	Static PE information: section name: /4
Source: hdrimage.dll.0.dr	Static PE information: section name: /19
Source: hdrimage.dll.0.dr	Static PE information: section name: /31
Source: hdrimage.dll.0.dr	Static PE information: section name: /45
Source: hdrimage.dll.0.dr	Static PE information: section name: /57
Source: hdrimage.dll.0.dr	Static PE information: section name: /70
Source: hdrimage.dll.0.dr	Static PE information: section name: /81
Source: hdrimage.dll.0.dr	Static PE information: section name: /92
Source: matfile.dll.0.dr	Static PE information: section name: .xdata
Source: matfile.dll.0.dr	Static PE information: section name: /4
Source: matfile.dll.0.dr	Static PE information: section name: /19
Source: matfile.dll.0.dr	Static PE information: section name: /31
Source: matfile.dll.0.dr	Static PE information: section name: /45
Source: matfile.dll.0.dr	Static PE information: section name: /57
Source: matfile.dll.0.dr	Static PE information: section name: /70
Source: matfile.dll.0.dr	Static PE information: section name: /81
Source: matfile.dll.0.dr	Static PE information: section name: /92
Source: nanoobserver.dll.0.dr	Static PE information: section name: .xdata
Source: nanoobserver.dll.0.dr	Static PE information: section name: /4
Source: nanoobserver.dll.0.dr	Static PE information: section name: /19
Source: nanoobserver.dll.0.dr	Static PE information: section name: /31
Source: nanoobserver.dll.0.dr	Static PE information: section name: /45
Source: nanoobserver.dll.0.dr	Static PE information: section name: /57
Source: nanoobserver.dll.0.dr	Static PE information: section name: /70
Source: nanoobserver.dll.0.dr	Static PE information: section name: /81
Source: nanoobserver.dll.0.dr	Static PE information: section name: /92
Source: nanoscantech.dll.0.dr	Static PE information: section name: .xdata
Source: nanoscantech.dll.0.dr	Static PE information: section name: /4
Source: nanoscantech.dll.0.dr	Static PE information: section name: /19
Source: nanoscantech.dll.0.dr	Static PE information: section name: /31
Source: nanoscantech.dll.0.dr	Static PE information: section name: /45
Source: nanoscantech.dll.0.dr	Static PE information: section name: /57
Source: nanoscantech.dll.0.dr	Static PE information: section name: /70
Source: nanoscantech.dll.0.dr	Static PE information: section name: /81
Source: nanoscantech.dll.0.dr	Static PE information: section name: /92
Source: gwyddion-thumbnailer.exe.0.dr	Static PE information: section name: .xdata
Source: gwyddion-thumbnailer.exe.0.dr	Static PE information: section name: /4
Source: gwyddion-thumbnailer.exe.0.dr	Static PE information: section name: /19
Source: gwyddion-thumbnailer.exe.0.dr	Static PE information: section name: /31
Source: gwyddion-thumbnailer.exe.0.dr	Static PE information: section name: /45
Source: gwyddion-thumbnailer.exe.0.dr	Static PE information: section name: /57
Source: gwyddion-thumbnailer.exe.0.dr	Static PE information: section name: /70
Source: gwyddion-thumbnailer.exe.0.dr	Static PE information: section name: /81
Source: gwyddion-thumbnailer.exe.0.dr	Static PE information: section name: /92
Source: iconv.dll.0.dr	Static PE information: section name: .xdata
Source: iconv.dll.0.dr	Static PE information: section name: /4
Source: libaec.dll.0.dr	Static PE information: section name: .xdata
Source: libaec.dll.0.dr	Static PE information: section name: /4
Source: libasprintf-0.dll.0.dr	Static PE information: section name: .xdata
Source: libasprintf-0.dll.0.dr	Static PE information: section name: /4
Source: libatk-1.0-0.dll.0.dr	Static PE information: section name: .xdata
Source: libatk-1.0-0.dll.0.dr	Static PE information: section name: /4
Source: libbz2-1.dll.0.dr	Static PE information: section name: .xdata
Source: libbz2-1.dll.0.dr	Static PE information: section name: /4
Source: libdl.dll.0.dr	Static PE information: section name: .xdata
Source: libdl.dll.0.dr	Static PE information: section name: /4
Source: libcairo-2.dll.0.dr	Static PE information: section name: .xdata
Source: libcairo-2.dll.0.dr	Static PE information: section name: /4
Source: libcairo-gobject-2.dll.0.dr	Static PE information: section name: .xdata
Source: libcairo-gobject-2.dll.0.dr	Static PE information: section name: /4
Source: libcairo-script-interpreter-2.dll.0.dr	Static PE information: section name: .xdata
Source: libcairo-script-interpreter-2.dll.0.dr	Static PE information: section name: /4
Source: opengps.dll.0.dr	Static PE information: section name: .xdata
Source: opengps.dll.0.dr	Static PE information: section name: /4
Source: opengps.dll.0.dr	Static PE information: section name: /19
Source: opengps.dll.0.dr	Static PE information: section name: /31
Source: opengps.dll.0.dr	Static PE information: section name: /45
Source: opengps.dll.0.dr	Static PE information: section name: /57
Source: opengps.dll.0.dr	Static PE information: section name: /70
Source: opengps.dll.0.dr	Static PE information: section name: /81
Source: opengps.dll.0.dr	Static PE information: section name: /92
Source: psppt.dll.0.dr	Static PE information: section name: .xdata
Source: psppt.dll.0.dr	Static PE information: section name: /4
Source: psppt.dll.0.dr	Static PE information: section name: /19
Source: psppt.dll.0.dr	Static PE information: section name: /31
Source: psppt.dll.0.dr	Static PE information: section name: /45
Source: psppt.dll.0.dr	Static PE information: section name: /57
Source: psppt.dll.0.dr	Static PE information: section name: /70
Source: psppt.dll.0.dr	Static PE information: section name: /81
Source: psppt.dll.0.dr	Static PE information: section name: /92
Source: sensofarx.dll.0.dr	Static PE information: section name: .xdata
Source: sensofarx.dll.0.dr	Static PE information: section name: /4
Source: sensofarx.dll.0.dr	Static PE information: section name: /19
Source: sensofarx.dll.0.dr	Static PE information: section name: /31
Source: sensofarx.dll.0.dr	Static PE information: section name: /45
Source: sensofarx.dll.0.dr	Static PE information: section name: /57
Source: sensofarx.dll.0.dr	Static PE information: section name: /70
Source: sensofarx.dll.0.dr	Static PE information: section name: /81
Source: sensofarx.dll.0.dr	Static PE information: section name: /92
Source: spml.dll.0.dr	Static PE information: section name: .xdata
Source: spml.dll.0.dr	Static PE information: section name: /4
Source: spml.dll.0.dr	Static PE information: section name: /19
Source: spml.dll.0.dr	Static PE information: section name: /31
Source: spml.dll.0.dr	Static PE information: section name: /45
Source: spml.dll.0.dr	Static PE information: section name: /57
Source: spml.dll.0.dr	Static PE information: section name: /70
Source: spml.dll.0.dr	Static PE information: section name: /81
Source: spml.dll.0.dr	Static PE information: section name: /92
Source: spmxfile.dll.0.dr	Static PE information: section name: .xdata
Source: spmxfile.dll.0.dr	Static PE information: section name: /4
Source: spmxfile.dll.0.dr	Static PE information: section name: /19
Source: spmxfile.dll.0.dr	Static PE information: section name: /31
Source: spmxfile.dll.0.dr	Static PE information: section name: /45
Source: spmxfile.dll.0.dr	Static PE information: section name: /57
Source: spmxfile.dll.0.dr	Static PE information: section name: /70
Source: spmxfile.dll.0.dr	Static PE information: section name: /81
Source: spmxfile.dll.0.dr	Static PE information: section name: /92
Source: zonfile.dll.0.dr	Static PE information: section name: .xdata
Source: zonfile.dll.0.dr	Static PE information: section name: /4
Source: zonfile.dll.0.dr	Static PE information: section name: /19
Source: zonfile.dll.0.dr	Static PE information: section name: /31
Source: zonfile.dll.0.dr	Static PE information: section name: /45
Source: zonfile.dll.0.dr	Static PE information: section name: /57
Source: zonfile.dll.0.dr	Static PE information: section name: /70
Source: zonfile.dll.0.dr	Static PE information: section name: /81
Source: zonfile.dll.0.dr	Static PE information: section name: /92
Source: graph.dll.0.dr	Static PE information: section name: .xdata
Source: graph.dll.0.dr	Static PE information: section name: /4
Source: graph.dll.0.dr	Static PE information: section name: /19
Source: graph.dll.0.dr	Static PE information: section name: /31
Source: graph.dll.0.dr	Static PE information: section name: /45
Source: graph.dll.0.dr	Static PE information: section name: /57
Source: graph.dll.0.dr	Static PE information: section name: /70
Source: graph.dll.0.dr	Static PE information: section name: /81
Source: graph.dll.0.dr	Static PE information: section name: /92
Source: libexpat-1.dll.0.dr	Static PE information: section name: .xdata
Source: libexpat-1.dll.0.dr	Static PE information: section name: /4
Source: libffi-6.dll.0.dr	Static PE information: section name: .xdata
Source: libffi-6.dll.0.dr	Static PE information: section name: /4
Source: libfftw3-3.dll.0.dr	Static PE information: section name: .xdata
Source: libfftw3-3.dll.0.dr	Static PE information: section name: /4
Source: libfontconfig-1.dll.0.dr	Static PE information: section name: .xdata
Source: libfontconfig-1.dll.0.dr	Static PE information: section name: /4
Source: libfreetype-6.dll.0.dr	Static PE information: section name: .xdata
Source: libfreetype-6.dll.0.dr	Static PE information: section name: /4
Source: libgailutil-18.dll.0.dr	Static PE information: section name: .xdata
Source: libgailutil-18.dll.0.dr	Static PE information: section name: /4
Source: libgdkglext-win32-1.0-0.dll.0.dr	Static PE information: section name: .xdata
Source: libgdkglext-win32-1.0-0.dll.0.dr	Static PE information: section name: /4
Source: libgdk_pixbuf-2.0-0.dll.0.dr	Static PE information: section name: .xdata
Source: libgdk_pixbuf-2.0-0.dll.0.dr	Static PE information: section name: /4
Source: libgdk-win32-2.0-0.dll.0.dr	Static PE information: section name: .xdata
Source: libgdk-win32-2.0-0.dll.0.dr	Static PE information: section name: /4
Source: libgcc_s_seh-1.dll.0.dr	Static PE information: section name: .xdata
Source: libgcc_s_seh-1.dll.0.dr	Static PE information: section name: /4
Source: libgcc_s_seh-1.dll.0.dr	Static PE information: section name: /19
Source: libgcc_s_seh-1.dll.0.dr	Static PE information: section name: /31
Source: libgcc_s_seh-1.dll.0.dr	Static PE information: section name: /45
Source: libgcc_s_seh-1.dll.0.dr	Static PE information: section name: /57
Source: libgcc_s_seh-1.dll.0.dr	Static PE information: section name: /70
Source: libgcc_s_seh-1.dll.0.dr	Static PE information: section name: /81
Source: libgcc_s_seh-1.dll.0.dr	Static PE information: section name: /92
Source: layer.dll.0.dr	Static PE information: section name: .xdata
Source: layer.dll.0.dr	Static PE information: section name: /4
Source: layer.dll.0.dr	Static PE information: section name: /19
Source: layer.dll.0.dr	Static PE information: section name: /31
Source: layer.dll.0.dr	Static PE information: section name: /45
Source: layer.dll.0.dr	Static PE information: section name: /57
Source: layer.dll.0.dr	Static PE information: section name: /70
Source: layer.dll.0.dr	Static PE information: section name: /81
Source: layer.dll.0.dr	Static PE information: section name: /92
Source: process.dll.0.dr	Static PE information: section name: .xdata
Source: process.dll.0.dr	Static PE information: section name: /4
Source: process.dll.0.dr	Static PE information: section name: /19
Source: process.dll.0.dr	Static PE information: section name: /31
Source: process.dll.0.dr	Static PE information: section name: /45
Source: process.dll.0.dr	Static PE information: section name: /57
Source: process.dll.0.dr	Static PE information: section name: /70
Source: process.dll.0.dr	Static PE information: section name: /81
Source: process.dll.0.dr	Static PE information: section name: /92
Source: tools.dll.0.dr	Static PE information: section name: .xdata
Source: tools.dll.0.dr	Static PE information: section name: /4
Source: tools.dll.0.dr	Static PE information: section name: /19
Source: tools.dll.0.dr	Static PE information: section name: /31
Source: tools.dll.0.dr	Static PE information: section name: /45
Source: tools.dll.0.dr	Static PE information: section name: /57
Source: tools.dll.0.dr	Static PE information: section name: /70
Source: tools.dll.0.dr	Static PE information: section name: /81
Source: tools.dll.0.dr	Static PE information: section name: /92
Source: volume.dll.0.dr	Static PE information: section name: .xdata
Source: volume.dll.0.dr	Static PE information: section name: /4
Source: volume.dll.0.dr	Static PE information: section name: /19
Source: volume.dll.0.dr	Static PE information: section name: /31
Source: volume.dll.0.dr	Static PE information: section name: /45
Source: volume.dll.0.dr	Static PE information: section name: /57
Source: volume.dll.0.dr	Static PE information: section name: /70
Source: volume.dll.0.dr	Static PE information: section name: /81
Source: volume.dll.0.dr	Static PE information: section name: /92
Source: xyz.dll.0.dr	Static PE information: section name: .xdata
Source: xyz.dll.0.dr	Static PE information: section name: /4
Source: xyz.dll.0.dr	Static PE information: section name: /19
Source: xyz.dll.0.dr	Static PE information: section name: /31
Source: xyz.dll.0.dr	Static PE information: section name: /45
Source: xyz.dll.0.dr	Static PE information: section name: /57
Source: xyz.dll.0.dr	Static PE information: section name: /70
Source: xyz.dll.0.dr	Static PE information: section name: /81
Source: xyz.dll.0.dr	Static PE information: section name: /92
Source: libssp-0.dll.0.dr	Static PE information: section name: .xdata
Source: libssp-0.dll.0.dr	Static PE information: section name: /4
Source: libssp-0.dll.0.dr	Static PE information: section name: /19
Source: libssp-0.dll.0.dr	Static PE information: section name: /31
Source: libssp-0.dll.0.dr	Static PE information: section name: /45
Source: libssp-0.dll.0.dr	Static PE information: section name: /57
Source: libssp-0.dll.0.dr	Static PE information: section name: /70
Source: libssp-0.dll.0.dr	Static PE information: section name: /81
Source: libssp-0.dll.0.dr	Static PE information: section name: /92
Source: libgio-2.0-0.dll.0.dr	Static PE information: section name: .xdata
Source: libgio-2.0-0.dll.0.dr	Static PE information: section name: /4
Source: libglib-2.0-0.dll.0.dr	Static PE information: section name: .xdata
Source: libglib-2.0-0.dll.0.dr	Static PE information: section name: /4
Source: libgmodule-2.0-0.dll.0.dr	Static PE information: section name: .xdata
Source: libgmodule-2.0-0.dll.0.dr	Static PE information: section name: /4
Source: libgobject-2.0-0.dll.0.dr	Static PE information: section name: .xdata
Source: libgobject-2.0-0.dll.0.dr	Static PE information: section name: /4
Source: libgomp-1.dll.0.dr	Static PE information: section name: .xdata
Source: libgomp-1.dll.0.dr	Static PE information: section name: /4
Source: libgomp-1.dll.0.dr	Static PE information: section name: /19
Source: libgomp-1.dll.0.dr	Static PE information: section name: /31
Source: libgomp-1.dll.0.dr	Static PE information: section name: /45
Source: libgomp-1.dll.0.dr	Static PE information: section name: /57
Source: libgomp-1.dll.0.dr	Static PE information: section name: /70
Source: libgomp-1.dll.0.dr	Static PE information: section name: /81
Source: libgomp-1.dll.0.dr	Static PE information: section name: /92
Source: libgthread-2.0-0.dll.0.dr	Static PE information: section name: .xdata
Source: libgthread-2.0-0.dll.0.dr	Static PE information: section name: /4
Source: libgtkglext-win32-1.0-0.dll.0.dr	Static PE information: section name: .xdata
Source: libgtkglext-win32-1.0-0.dll.0.dr	Static PE information: section name: /4
Source: libgtk-win32-2.0-0.dll.0.dr	Static PE information: section name: .xdata
Source: libgtk-win32-2.0-0.dll.0.dr	Static PE information: section name: /4
Source: libgtksourceview-2.0-0.dll.0.dr	Static PE information: section name: .xdata
Source: libgtksourceview-2.0-0.dll.0.dr	Static PE information: section name: /4
Source: libharfbuzz-0.dll.0.dr	Static PE information: section name: .xdata
Source: libharfbuzz-0.dll.0.dr	Static PE information: section name: /4
Source: libhdf5-103.dll.0.dr	Static PE information: section name: .xdata
Source: libhdf5-103.dll.0.dr	Static PE information: section name: /4
Source: libhdf5_hl-100.dll.0.dr	Static PE information: section name: .xdata
Source: libhdf5_hl-100.dll.0.dr	Static PE information: section name: /4
Source: libgwyddion2-0.dll.0.dr	Static PE information: section name: .xdata
Source: libgwyddion2-0.dll.0.dr	Static PE information: section name: /4
Source: libgwyddion2-0.dll.0.dr	Static PE information: section name: /19
Source: libgwyddion2-0.dll.0.dr	Static PE information: section name: /31
Source: libgwyddion2-0.dll.0.dr	Static PE information: section name: /45
Source: libgwyddion2-0.dll.0.dr	Static PE information: section name: /57
Source: libgwyddion2-0.dll.0.dr	Static PE information: section name: /70
Source: libgwyddion2-0.dll.0.dr	Static PE information: section name: /81
Source: libgwyddion2-0.dll.0.dr	Static PE information: section name: /92
Source: libgwyprocess2-0.dll.0.dr	Static PE information: section name: .xdata
Source: libgwyprocess2-0.dll.0.dr	Static PE information: section name: /4
Source: libgwyprocess2-0.dll.0.dr	Static PE information: section name: /19
Source: libgwyprocess2-0.dll.0.dr	Static PE information: section name: /31
Source: libgwyprocess2-0.dll.0.dr	Static PE information: section name: /45
Source: libgwyprocess2-0.dll.0.dr	Static PE information: section name: /57
Source: libgwyprocess2-0.dll.0.dr	Static PE information: section name: /70
Source: libgwyprocess2-0.dll.0.dr	Static PE information: section name: /81
Source: libgwyprocess2-0.dll.0.dr	Static PE information: section name: /92
Source: libgwydraw2-0.dll.0.dr	Static PE information: section name: .xdata
Source: libgwydraw2-0.dll.0.dr	Static PE information: section name: /4
Source: libgwydraw2-0.dll.0.dr	Static PE information: section name: /19
Source: libgwydraw2-0.dll.0.dr	Static PE information: section name: /31
Source: libgwydraw2-0.dll.0.dr	Static PE information: section name: /45
Source: libgwydraw2-0.dll.0.dr	Static PE information: section name: /57
Source: libgwydraw2-0.dll.0.dr	Static PE information: section name: /70
Source: libgwydraw2-0.dll.0.dr	Static PE information: section name: /81
Source: libgwydraw2-0.dll.0.dr	Static PE information: section name: /92
Source: libgwydgets2-0.dll.0.dr	Static PE information: section name: .xdata
Source: libgwydgets2-0.dll.0.dr	Static PE information: section name: /4
Source: libgwydgets2-0.dll.0.dr	Static PE information: section name: /19
Source: libgwydgets2-0.dll.0.dr	Static PE information: section name: /31
Source: libgwydgets2-0.dll.0.dr	Static PE information: section name: /45
Source: libgwydgets2-0.dll.0.dr	Static PE information: section name: /57
Source: libgwydgets2-0.dll.0.dr	Static PE information: section name: /70
Source: libgwydgets2-0.dll.0.dr	Static PE information: section name: /81
Source: libgwydgets2-0.dll.0.dr	Static PE information: section name: /92
Source: libgwymodule2-0.dll.0.dr	Static PE information: section name: .xdata
Source: libgwymodule2-0.dll.0.dr	Static PE information: section name: /4
Source: libgwymodule2-0.dll.0.dr	Static PE information: section name: /19
Source: libgwymodule2-0.dll.0.dr	Static PE information: section name: /31
Source: libgwymodule2-0.dll.0.dr	Static PE information: section name: /45
Source: libgwymodule2-0.dll.0.dr	Static PE information: section name: /57
Source: libgwymodule2-0.dll.0.dr	Static PE information: section name: /70
Source: libgwymodule2-0.dll.0.dr	Static PE information: section name: /81
Source: libgwymodule2-0.dll.0.dr	Static PE information: section name: /92
Source: libgwyapp2-0.dll.0.dr	Static PE information: section name: .xdata
Source: libgwyapp2-0.dll.0.dr	Static PE information: section name: /4
Source: libgwyapp2-0.dll.0.dr	Static PE information: section name: /19
Source: libgwyapp2-0.dll.0.dr	Static PE information: section name: /31
Source: libgwyapp2-0.dll.0.dr	Static PE information: section name: /45
Source: libgwyapp2-0.dll.0.dr	Static PE information: section name: /57
Source: libgwyapp2-0.dll.0.dr	Static PE information: section name: /70
Source: libgwyapp2-0.dll.0.dr	Static PE information: section name: /81
Source: libgwyapp2-0.dll.0.dr	Static PE information: section name: /92
Source: libintl-8.dll.0.dr	Static PE information: section name: .xdata
Source: libintl-8.dll.0.dr	Static PE information: section name: /4
Source: libjansson.dll.0.dr	Static PE information: section name: .xdata
Source: libjansson.dll.0.dr	Static PE information: section name: /4
Source: libjasper-4.dll.0.dr	Static PE information: section name: .xdata
Source: libjasper-4.dll.0.dr	Static PE information: section name: /4
Source: libjpeg-62.dll.0.dr	Static PE information: section name: .xdata
Source: libjpeg-62.dll.0.dr	Static PE information: section name: /4

Persistence and Installation Behavior

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\fc-cache.exe			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libpangocairo-1.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libgdk-win32-2.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libxml2-2.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\apedaxfile.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-viqr.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\gsettings.exe			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\createc.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libjansson.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-thai.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\imgexport.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libpng16-16.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\anasys_xml.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\hdf5file.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libjpeg-62.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-inuktitut.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\spmxfile.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libIlmImfUtil-2_5.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-ti-er.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-tga.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\spml.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libgobject-2.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libgtkglext-win32-1.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-jasper.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libexpat-1.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libgwymodule2-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libIlmThread-2_5.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gwyddion\modules\plugin-proxy.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-cyrillic-translit.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libgio-2.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-ti-et.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-icns.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\hdrimage.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-ime.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-am-et.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\rhk-sm4.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libsz.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\fc-list.exe			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libatk-1.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libjasper-4.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\zlib1.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libzip-5.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\nanoscantech.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libstdc++-6.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\oirfile.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\jpkscan.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\matfile.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\file.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gwyddion\modules\layer\layer.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-xpm.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\pixmap.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\opengps.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\gtk-query-immodules-2.0.exe			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libglib-2.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\uninstall.exe			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libcairo-script-interpreter-2.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gwyddion\modules\tool\tools.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libgthread-2.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\nrrdfile.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\engines\libpixmap.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\iconv.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\gspawn-win64-helper.exe			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\gdbus.exe			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\npyfile.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\gwyddion-thumbnailer.exe			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libgdkglext-win32-1.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-pnm.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-qtif.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gwyddion\modules\volume\volume.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gwyddion\modules\graph\graph.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\sensofarx.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gwyddion\modules\cmap\cmap.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libfftw3-3.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libpcre-1.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libpango-1.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libffi-6.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libpixman-1-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libhdf5-103.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libbz2-1.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gwyddion\modules\xyz\xyz.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libgailutil-18.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libfontconfig-1.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\keyence.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libpangoft2-1.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gtk-2.0\modules\libgail.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-ani.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libgwyprocess2-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\gwyddion.exe			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gwyddion\modules\process\process.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\gspawn-win64-helper-console.exe			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libgwydgets2-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libintl-8.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libIexMath-2_5.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libImath-2_5.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libcairo-2.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libharfbuzz-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libgcc_s_seh-1.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libtiff-5.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libwinpthread-1.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\psppt.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libssp-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libpangowin32-1.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libaec.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-multipress.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libhdf5_hl-100.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libdl.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\engines\libwimp.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-cedilla.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libgtk-win32-2.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libgdk_pixbuf-2.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\zonfile.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libgwyddion2-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libgomp-1.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libcairo-gobject-2.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libgwydraw2-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libwebp-7.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libasprintf-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-xbm.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libfreetype-6.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libIex-2_5.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libIlmImf-2_5.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\nanoobserver.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Users\user\AppData\Local\Temp\nsmFD66.tmp\nsDialogs.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libgtksourceview-2.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libgmodule-2.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libgwyapp2-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\gdk-pixbuf-query-loaders.exe			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-ipa.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\bin\libHalf-2_5.dll			Jump to dropped file

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\LICENSE-bzip2.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\LICENSE-HDF5.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\LICENSE-JasPer.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\LICENSE-libffi.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\LICENSE-libpng.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\LICENSE-libzip.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\LICENSE-OpenEXR.txt			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File created: C:\Program Files\Gwyddion\LICENSE-pcre.txt			Jump to behavior

Boot Survival

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe

File created: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gwyddion (64bit).lnk

Jump to behavior

Hooking and other Techniques for Hiding and Protection

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior

Malware Analysis System Evasion

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\fc-cache.exe			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libpangocairo-1.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libgdk-win32-2.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libxml2-2.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\apedaxfile.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-viqr.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\gsettings.exe			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\createc.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libjansson.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libpng16-16.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\imgexport.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-thai.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\hdf5file.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\anasys_xml.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libjpeg-62.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-inuktitut.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libIlmImfUtil-2_5.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\spmxfile.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-ti-er.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\spml.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libgtkglext-win32-1.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-tga.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libgobject-2.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-jasper.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libexpat-1.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libgwymodule2-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libIlmThread-2_5.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-cyrillic-translit.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gwyddion\modules\plugin-proxy.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libgio-2.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-icns.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-ti-et.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\hdrimage.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-ime.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-am-et.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libsz.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\rhk-sm4.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\fc-list.exe			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libatk-1.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libzip-5.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libjasper-4.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\zlib1.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\nanoscantech.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libstdc++-6.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\oirfile.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\jpkscan.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\matfile.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gwyddion\modules\layer\layer.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\file.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-xpm.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\pixmap.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\opengps.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\gtk-query-immodules-2.0.exe			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libglib-2.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libcairo-script-interpreter-2.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gwyddion\modules\tool\tools.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\uninstall.exe			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libgthread-2.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\nrrdfile.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\engines\libpixmap.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\iconv.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\gspawn-win64-helper.exe			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\gdbus.exe			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\npyfile.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\gwyddion-thumbnailer.exe			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libgdkglext-win32-1.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-pnm.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-qtif.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gwyddion\modules\volume\volume.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gwyddion\modules\graph\graph.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\sensofarx.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libfftw3-3.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libpcre-1.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gwyddion\modules\cmap\cmap.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libpango-1.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libpixman-1-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libffi-6.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libhdf5-103.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libbz2-1.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gwyddion\modules\xyz\xyz.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libgailutil-18.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libfontconfig-1.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\keyence.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libpangoft2-1.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gtk-2.0\modules\libgail.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-ani.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libgwyprocess2-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\gwyddion.exe			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gwyddion\modules\process\process.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\gspawn-win64-helper-console.exe			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libgwydgets2-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libintl-8.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libIexMath-2_5.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libImath-2_5.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libharfbuzz-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libcairo-2.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libgcc_s_seh-1.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libtiff-5.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libwinpthread-1.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libssp-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\psppt.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libpangowin32-1.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libaec.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-multipress.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libhdf5_hl-100.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libdl.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\engines\libwimp.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-cedilla.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libgtk-win32-2.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libgdk_pixbuf-2.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\zonfile.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libgwyddion2-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libgomp-1.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libcairo-gobject-2.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libwebp-7.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libgwydraw2-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libasprintf-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-xbm.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libfreetype-6.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libIex-2_5.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libIlmImf-2_5.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gwyddion\modules\file\nanoobserver.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsmFD66.tmp\nsDialogs.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libgtksourceview-2.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libgmodule-2.0-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libgwyapp2-0.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\gdk-pixbuf-query-loaders.exe			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\bin\libHalf-2_5.dll			Jump to dropped file
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Dropped PE file which has not been started: C:\Program Files\Gwyddion\lib\gtk-2.0\2.10.0\immodules\im-ipa.dll			Jump to dropped file

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File Volume queried: C:\Program Files FullSizeInformation			Jump to behavior
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	File Volume queried: C:\Program Files FullSizeInformation			Jump to behavior

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Code function: 0_2_00405D74 CloseHandle,GetTempPathW,DeleteFileW,lstrcatW,lstrcatW,lstrlenW,FindFirstFileW,FindNextFileW,FindClose,		0_2_00405D74
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Code function: 0_2_0040699E FindFirstFileW,FindClose,		0_2_0040699E
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	Code function: 0_2_0040290B FindFirstFileW,		0_2_0040290B

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	API call chain: ExitProcess graph end node
Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe	API call chain: ExitProcess graph end node

Anti Debugging

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe

Code function: 0_2_6E211407 CallWindowProcW,DestroyWindow,GetProcessHeap,RtlFreeHeap,

0_2_6E211407

Language, Device and Operating System Detection

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\Gwyddion-2.65.win64.exe

Code function: 0_2_00403640 EntryPoint,SetErrorMode,GetVersionExW,GetVersionExW,GetVersionExW,lstrlenA,#17,OleInitialize,SHGetFileInfoW,GetCommandLineW,CharNextW,GetTempPathW,GetTempPathW,GetWindowsDirectoryW,lstrcatW,GetTempPathW,lstrcatW,SetEnvironmentVariableW,SetEnvironmentVariableW,SetEnvironmentVariableW,DeleteFileW,lstrcatW,lstrcatW,lstrcatW,lstrcmpiW,SetCurrentDirectoryW,DeleteFileW,CopyFileW,CloseHandle,OleUninitialize,ExitProcess,GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueW,AdjustTokenPrivileges,ExitWindowsEx,ExitProcess,

0_2_00403640